0x0)
socket$netlink(0x10, 0x3, 0x8)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0)
connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x400000000000068, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
sendmmsg(r7, &(0x7f0000007fc0), 0x400000000000068, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r8, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r9, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r9, &(0x7f0000007fc0), 0x400000000000068, 0x0)
ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000180)=[0x5, 0x4])
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x378e6bf91ca6633b)

00:08:24 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000003a00))
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r4 = dup(r1)
timerfd_gettime(r4, &(0x7f00000039c0))
r5 = socket$inet(0x2, 0x2326148c408e4389, 0x81)
setsockopt(r5, 0x100, 0x1ff, &(0x7f0000000140)="978dead32ef91f186812ef6086eb534ec929bc24b871fa257b32b7e68ec7052cb8e65b8f423620f55222c64c7a53fc920fc9ce2710696aad34156884635ea6f8732ff20bfd06261d95fb6448f9a0cd6dd039ceb1fddc53b15da3719688c80f9d6a4f999c10997d1727123f558f188072e3d5acb925a11abb", 0x78)
r6 = syz_open_procfs(0x0, &(0x7f0000000640)='\x00\a\x00\x00\x81z\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xda\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-\x86\xcf\xa5\xed\xc8RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde<Ny\xe2\xcc>\xfa=d\xc5\xf7\x115\xd7\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\xb0v\v\xde\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\xb9\x03v\x8d+\xc7\x90U\xd8\x9aP \x92\xf6/\xe1\xcd\x02 \x0f\xffx5\x92\xb2&\x8e\xf6\xd5\x17\xe4\xf6b\x9aw\xca\xf26\xb0n\xef\xa6\x19\xa7/3s\xf4\xda\xb3\xb5Fl\xdco\xca\x00\x00\x00Mxa\xfcD\xa03\xf7\"?Z\x84\xf9\x9es\x10\xb4\xaa\x10Z\x0f<e5]\x13.\xe7w\xb8\xb6\xb1\xbd\xf2\xe9\x96\xf8')
r7 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r7, &(0x7f0000003980)={&(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f00000038c0)=[{&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f0000002800)=""/163, 0xa3}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x9, &(0x7f00000005c0)=""/114, 0x72}, 0x40000000)
tkill(r0, 0x24)
getdents(r6, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
dup(r1)
sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x115e9005}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r8, @ANYBLOB="000127bd7000fcdbdf25150000003c000100380004001400010002004e24ffffffff00e9ffffff000000200002000a004e2200000007fe880000000000000000000000000001040000000800060043f7f7c9bf36d100ad040002009000050008000100657468004c00020008000400ffffff7f080003009f000000080002000000000008000300dafe00000800030000000000080001001700000008000100020000000800010014000000080004000001000008000100756470000c000200080004000000000008000100696200000c000200080004000400000008000100657468000800010065746800100004000c0001"], 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000)

[  111.922952] binder: BINDER_SET_CONTEXT_MGR already set
[  111.938095] audit: type=1400 audit(1571789304.705:42): avc:  denied  { create } for  pid=4942 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  111.962278] binder: 4938:4940 ioctl 40046207 0 returned -16
00:08:24 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1cada14c4f904a73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  111.975182] audit: type=1400 audit(1571789304.745:43): avc:  denied  { create } for  pid=4942 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  112.009548] binder: BINDER_SET_CONTEXT_MGR already set
[  112.015436] binder: 4954:4955 ioctl 40046207 0 returned -16
00:08:24 executing program 4:
gettid()
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001800)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$KDMKTONE(r0, 0x4b30, 0xffffffffffffffff)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
io_setup(0x5, &(0x7f0000000040)=<r1=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = memfd_create(&(0x7f0000000200)='-selinux\x00\x92\xd9;K\xef\xa4\x1bU*\x85R\xc2J\"4\t\x17\xef\xd6\x98\xe3\xff', 0x0)
pwritev(r4, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806)
sendfile(r2, r4, 0x0, 0x20020102000007)
fstat(r4, 0x0)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001800)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$KDMKTONE(r5, 0x4b30, 0xffffffffffffffff)
pipe(&(0x7f0000000580)={<r6=>0xffffffffffffffff})
getsockopt$inet_mreq(r6, 0x0, 0x27, &(0x7f0000000540)={@multicast1, @remote}, &(0x7f0000001780)=0xffffffffffffff89)
r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001bc0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
dup3(r7, 0xffffffffffffffff, 0x800080000)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x129202, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432})
io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f0000000640), 0x0, 0x1000, 0x0, 0x313c437f9071f468}])
io_setup(0x5, &(0x7f0000000040)=<r9=>0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, 0x0)
socket$packet(0x11, 0x2, 0x300)
io_submit(r9, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x1f, r10, 0x0, 0xda7cc7c58e9af4c2, 0x0, 0x0, 0x1}])
io_submit(0x0, 0x0, &(0x7f00000001c0))
setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0)
ioctl$void(0xffffffffffffffff, 0x5450)
pipe(&(0x7f0000000400)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
write(r12, &(0x7f00000001c0), 0xfffffef3)
read(r11, &(0x7f0000000200)=""/250, 0x50c7e5e2)
r13 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
sendfile(r12, r13, 0x0, 0x80000001)

00:08:24 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1cada14c4f904a73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  112.025110] binder: 4954:4955 transaction failed 29201/-1, size 0-0 line 3022
[  112.049356] binder: undelivered TRANSACTION_ERROR: 29201
[  112.119749] binder: BINDER_SET_CONTEXT_MGR already set
00:08:24 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00')
r3 = socket(0x100000000011, 0x2, 0x0)
bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
dup(r3)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x6, @broadcast}, 0x10)
r5 = socket(0x11, 0x2, 0x0)
bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, <r6=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @local}, 0x10)
dup(r5)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000002c0)={r6, 0x1, 0x6, @broadcast}, 0x10)
r7 = socket(0x100000000011, 0x2, 0x0)
bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @local}, 0x10)
dup(r7)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000002c0)={r8, 0x1, 0x6, @broadcast}, 0x10)
getsockname(r0, &(0x7f0000000180)=@hci={0x1f, <r9=>0x0}, &(0x7f0000000200)=0x80)
r10 = socket(0x100000000011, 0x2, 0x0)
bind(r10, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r10, &(0x7f0000000040)={0x11, 0x0, <r11=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000100)={r11, 0x1, 0x6, @local}, 0x10)
dup(r10)
setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000002c0)={r11, 0x1, 0x6, @broadcast}, 0x10)
r12 = socket(0x100000000011, 0x2, 0x0)
bind(r12, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r12, &(0x7f0000000040)={0x11, 0x0, <r13=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000000100)={r13, 0x1, 0x6, @local}, 0x10)
dup(r12)
setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f00000002c0)={r13, 0x1, 0x6, @broadcast}, 0x10)
r14 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r14}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r14, 0x40046208, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r6, @ANYRES16=r2, @ANYBLOB="0003bc4f38878723724afaf7352dca2525bd", @ANYPTR64, @ANYBLOB="800102004000010024f2a04921756575655f69640000000000000000000000000000000000000000000000000800030003000000080004800600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000004c08000300030000000800040043f7e9203c00010024000100656e61626c65640000000000000000000000000000000000000000080000000008000300060000000400040800060000", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r14, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000080003000600000004000400080006000000503bb0df748b54cdee303ab430da6c8bde94df3244cff1f6cf98d04afa56a0f101c935c138fee0a07f4ca9470420031d1a1a6aed7c185d1c61983e2bcf9fa5f204c27b547c90afd20757c27d4d7d818c3a7e51acb84269ad309473af4eb1ab2a5632f5ff412b98d0b1f9597ec3aaf77166e5720f0731b373f209e7", @ANYRES64=r1, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r9, @ANYBLOB="3c00020038000100390001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000800000008000100", @ANYRES32=r11, @ANYBLOB="7c000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000900000008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040009000000"], 0x13}, 0x1, 0x0, 0x0, 0x4430d3bcf6ab7c}, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000100))
clock_gettime(0x0, &(0x7f0000000540)={<r15=>0x0, <r16=>0x0})
timer_settime(0x0, 0x0, &(0x7f000004a000)={{r15, r16+30000000}}, &(0x7f00000005c0))

[  112.140318] binder: 4964:4966 ioctl 40046207 0 returned -16
[  112.164569] binder: 4964:4966 transaction failed 29201/-1, size 0-0 line 3022
00:08:24 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1cada14c4f904a73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  112.188562] device lo entered promiscuous mode
[  112.194303] binder: undelivered TRANSACTION_ERROR: 29201
00:08:25 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1cada14c4f904a73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  112.241711] binder: BINDER_SET_CONTEXT_MGR already set
[  112.254050] binder: 4973:4974 ioctl 40046207 0 returned -16
00:08:25 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1cada14c4f904a73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  112.319261] binder: BINDER_SET_CONTEXT_MGR already set
[  112.333607] binder: 4976:4977 ioctl 40046207 0 returned -16
[  112.375843] device lo left promiscuous mode
[  112.377219] binder: BINDER_SET_CONTEXT_MGR already set
[  112.377226] binder: 4978:4979 ioctl 40046207 0 returned -16
[  112.426831] device lo entered promiscuous mode
00:08:25 executing program 3:
io_setup(0x5, &(0x7f0000000180)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\xec\xff\xff\xff\x00\x00\t\xf2\x00', 0xd412})
io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}])
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x17105d1d2f013ba9, 0x0)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x84800)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x2})

00:08:25 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1cada14c4f904a73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  112.592975] binder: 4984:4987 transaction failed 29201/-1, size 0-0 line 3022
[  112.595185] device lo left promiscuous mode
[  112.606041] binder: undelivered TRANSACTION_ERROR: 29201
00:08:25 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpuw\x19/syz\xa4\xaa\xb8!\x8f\xab\\LC\x93\xcd)\xcd\x8ep\x9e\x0em\x91L\\\x16\x97F\xc8\xcf2K\x11<\x80\xb0`_\x1b\xb9\x06\xfb\x9cc\x00(\x8b\xde\xdf\'\x04\x89\xfdlT\xc7i\x1b\xfe6V4\x89\x9f[\x8a\x1eT\x9d\xd9\x86\v\xcd\x8aC-\x1c\xcc86cT\r\xc2\xec\xed\xd5q\xa1\x86\xb7\xc4\xe6O\xbc\x8eI\xc3\x80?~50\x97\xd1sw:.Q\xf8\xa6\x1a\xf8A\xea\x960\x03[\xe5\xd6T\xb1\xf0Jt\x92%[\x95\x99\x1a\x15\x1d{\xe8\xe7\xbf,\x05\xbc*\x03', 0x200002, 0x0)
r0 = creat(&(0x7f0000000000)='./bus/file0\x00', 0x2)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff)
fchdir(r0)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r3, &(0x7f0000000280)={0x1}, 0xff7f)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
pipe(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r7 = eventfd2(0x0, 0x0)
close(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
fdatasync(r3)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r8 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r8)
r9 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r10, &(0x7f0000000480), 0x10000000000002a1, 0x0)
write$P9_ROPEN(r10, &(0x7f0000000180)={0x18, 0x71, 0x2, {{0x48, 0x4, 0x7}, 0x5}}, 0x18)
sendfile(r8, r9, 0x0, 0x8000fffffffe)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x200540c0, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3})

00:08:25 executing program 1:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f5, &(0x7f0000000140)='sit0\x00')

00:08:25 executing program 4:
prctl$PR_GET_NAME(0x10, 0x0)
r0 = socket$inet6(0xa, 0x400200000001, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x102, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x35, &(0x7f0000000080)=0x1, 0x3)
setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0)
ftruncate(r3, 0x10099b7)
getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
pipe(0x0)
memfd_create(0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
seccomp(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
pipe(0x0)
close(0xffffffffffffffff)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0)
ioprio_get$pid(0x0, 0x0)
munlockall()
connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e)

00:08:25 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1cada14c4f904a73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:25 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nul\x00\x80', 0x800, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
shutdown(r1, 0x1)
sendto$inet6(r2, 0x0, 0x504, 0x20000006, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)

00:08:25 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x40000006100)
ftruncate(r1, 0x208203)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x2800001, 0x11, r2, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r3}], 0x200000000000017a, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x3, 0x0)
sendfile(r1, r6, 0x0, 0x8000ff000000)
setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000000)={0x7, @multicast1, 0x4e22, 0x0, 'sh\x00', 0x4, 0x1, 0x57}, 0x2c)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r7}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
r8 = fcntl$dupfd(r0, 0x605, r7)
r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14)
clock_gettime(0x0, &(0x7f0000000300)={<r10=>0x0, <r11=>0x0})
ppoll(&(0x7f00000002c0)=[{r4, 0x205}, {r0, 0x608b}, {r8, 0x8}, {r2, 0x400}, {0xffffffffffffffff, 0x8500}, {r3, 0x8}, {r9, 0x2}], 0x7, &(0x7f0000000340)={r10, r11+30000000}, &(0x7f0000000500)={0x3}, 0x8)
openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x10000, 0x0)
r12 = accept4$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14, 0x80000)
accept$packet(r12, &(0x7f00000004c0)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0xfffffffffffffdaf)
ioctl$int_out(r12, 0x5460, &(0x7f0000000100))
bind$packet(r3, &(0x7f0000000280)={0x11, 0xc, r13, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

00:08:25 executing program 3:
open(0x0, 0x0, 0x1c0)
syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x182)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe)
fcntl$getownex(r2, 0x10, 0x0)
ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100))
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0)
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$getflags(0xffffffffffffffff, 0x204)
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0x4)
add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe)
writev(r2, &(0x7f0000000680), 0x0)
socket$inet6(0xa, 0x0, 0x0)
r6 = open(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x480040004000, 0x6)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r7, &(0x7f00000001c0), 0xfffffef3)
fcntl$lock(r7, 0x24, &(0x7f0000000100)={0x1, 0x1, 0xd95, 0x1f})
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f8571")
write$selinux_load(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x209)
sendfile(r2, r5, 0x0, 0xa5cc554)

00:08:25 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1cada14c4f904a73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:25 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1cada14c4f904a73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  112.900202] binder: 4999:5009 transaction failed 29201/-1, size 0-0 line 3022
[  112.909007] binder: undelivered TRANSACTION_ERROR: 29201
00:08:25 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1cada14c4f904a73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:25 executing program 0:
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1cada14c4f904a73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:25 executing program 0:
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1cada14c4f904a73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:25 executing program 0:
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1cada14c4f904a73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:25 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getegid()
setgid(r1)
r2 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r4}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
fcntl$dupfd(r4, 0x0, r5)
write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x8]}, 0x45c)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x4)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)

00:08:26 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000080)={&(0x7f0000001400)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x70bd2b, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfbffffff, 0x0, 0x20000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}, 0x1, 0x2000000000000000}, 0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$sock_ifreq(r3, 0x19bd0, &(0x7f0000000000)={'veth1_to_bridge\x00', @ifru_mtu=0x7})

00:08:26 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1cada14c4f904a73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:26 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x10)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=<r5=>0x0)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000000)='threaded\x00', 0x2f5fa26)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fsetxattr$system_posix_acl(r6, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r7, @ANYBLOB="040080000000000010000700000000002000010000000000"], 0x2c, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000600)=0xc)
r9 = gettid()
ptrace$setopts(0x4206, r9, 0x0, 0x0)
tkill(r9, 0x40)
ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r9, 0x0, 0x0)
r10 = gettid()
ptrace$setopts(0x4206, r10, 0x0, 0x0)
tkill(r10, 0x40)
ptrace$setregs(0xd, r10, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r10, 0x0, 0x0)
r11 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r11, &(0x7f0000000480), 0x10000000000002a1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000640)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000740)=0xe8)
fstat(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
r14 = syz_open_dev$evdev(&(0x7f0000000800)='/dev/input/event#\x00', 0x7, 0x159020)
r15 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r15}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r15, 0x40046208, 0x0)
r16 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r16}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r16, 0x40046208, 0x0)
r17 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r17}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r17, 0x40046208, 0x0)
r18 = openat$null(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/null\x00', 0x4000, 0x0)
r19 = gettid()
ptrace$setopts(0x4206, r19, 0x0, 0x0)
tkill(r19, 0x40)
ptrace$setregs(0xd, r19, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r19, 0x0, 0x0)
r20 = getpgrp(r19)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000f80)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000001080)=0xe8)
r22 = getegid()
r23 = gettid()
ptrace$setopts(0x4206, r23, 0x0, 0x0)
tkill(r23, 0x40)
ptrace$setregs(0xd, r23, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r23, 0x0, 0x0)
r24 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r24, &(0x7f0000000000)='threaded\x00', 0x2f5fa26)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r25=>0x0})
fsetxattr$system_posix_acl(r24, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r25, @ANYBLOB="040080000000000010000700000000002000010000000000"], 0x2c, 0x0)
r26 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r26, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r26, 0x0, 0x0)
r27 = getuid()
sendmmsg(r26, &(0x7f00000092c0), 0x4ff, 0x0)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r28, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
bind$inet(r28, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r28, 0x5452, &(0x7f0000000300)=0x200)
connect$inet(r28, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r28, &(0x7f0000007fc0), 0x800001d, 0x0)
r29 = getgid()
pipe(&(0x7f0000000380)={<r30=>0xffffffffffffffff})
read(r30, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r30, 0x29, 0x20, 0x0, 0xfffffffffffffebd)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r31=>0xffffffffffffffff})
r32 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0)
fcntl$setlease(r32, 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000007c0)="44a434001dffe4f17339deff062fbc01a59a633db9c43af4009b1dcd152b61ec3783901da54644ce9b3e23e0f61fad2fc859202c84d56b196bd3f8aa2fb3f9200e283fcc98db216e0013b078c2688366d51d997b76ddf6675fd1cf6d9a919e9f0af2360674fe3f3204b65e091d57bd7360ac829b482bed863b80ac", 0x7b}, {&(0x7f0000000840)="72d70b46d2b4c16518e2e77e6f811fd1b1b6b0967e4d4a52e03ebad2539d6a2a8da46b61b6d495c73a194b47f25608f72078ca339a8fd13d81ed9273082d71325d89f3f4080700d1378ae3c12086bdc2c36ca478594205c988dbc13182416c7df0ac3254fbbe162580cc8fa08779990c2062b1a351080719dd7e281867debc12cb59e19bdad2228ead9daff40b63fd666878acd33541dc81edab6b461642eb711c3a9028ca141c59af626f78f0f0bbd0a6a4901c63b98692ab75c93e9e9cd18e538d3187f0ab4e706964c280e20f939e3a27a6e459cc0011e9c490", 0xdb}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r28, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r27, @ANYRES32=r29, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r30, @ANYRES32, @ANYRES32=r26, @ANYRES32=r31, @ANYRES32=r32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES64, @ANYBLOB="7879fddaa073bf3c68"], 0x7d, 0x30000010}, 0x24e1)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x40)
ptrace$setregs(0xd, r33, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r33, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000010c0)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r34=>0x0}}}, &(0x7f00000011c0)=0xe8)
r35 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r35, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r35, 0x0, 0x0)
r36 = getuid()
sendmmsg(r35, &(0x7f00000092c0), 0x4ff, 0x0)
r37 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r37, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
bind$inet(r37, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r37, 0x5452, &(0x7f0000000300)=0x200)
connect$inet(r37, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r37, &(0x7f0000007fc0), 0x800001d, 0x0)
r38 = getgid()
pipe(&(0x7f0000000380)={<r39=>0xffffffffffffffff})
read(r39, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r39, 0x29, 0x20, 0x0, 0xfffffffffffffebd)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r40=>0xffffffffffffffff})
r41 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0)
fcntl$setlease(r41, 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000007c0)="44a434001dffe4f17339deff062fbc01a59a633db9c43af4009b1dcd152b61ec3783901da54644ce9b3e23e0f61fad2fc859202c84d56b196bd3f8aa2fb3f9200e283fcc98db216e0013b078c2688366d51d997b76ddf6675fd1cf6d9a919e9f0af2360674fe3f3204b65e091d57bd7360ac829b482bed863b80ac", 0x7b}, {&(0x7f0000000840)="72d70b46d2b4c16518e2e77e6f811fd1b1b6b0967e4d4a52e03ebad2539d6a2a8da46b61b6d495c73a194b47f25608f72078ca339a8fd13d81ed9273082d71325d89f3f4080700d1378ae3c12086bdc2c36ca478594205c988dbc13182416c7df0ac3254fbbe162580cc8fa08779990c2062b1a351080719dd7e281867debc12cb59e19bdad2228ead9daff40b63fd666878acd33541dc81edab6b461642eb711c3a9028ca141c59af626f78f0f0bbd0a6a4901c63b98692ab75c93e9e9cd18e538d3187f0ab4e706964c280e20f939e3a27a6e459cc0011e9c490", 0xdb}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r37, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r36, @ANYRES32=r38, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r39, @ANYRES32, @ANYRES32=r35, @ANYRES32=r40, @ANYRES32=r41, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES64, @ANYBLOB="7879fddaa073bf3c68"], 0x7d, 0x30000010}, 0x24e1)
r42 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r42, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r42, 0x0, 0x0)
r43 = getuid()
sendmmsg(r42, &(0x7f00000092c0), 0x4ff, 0x0)
r44 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r44, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
bind$inet(r44, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r44, 0x5452, &(0x7f0000000300)=0x200)
connect$inet(r44, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r44, &(0x7f0000007fc0), 0x800001d, 0x0)
r45 = getgid()
pipe(&(0x7f0000000380)={<r46=>0xffffffffffffffff})
read(r46, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r46, 0x29, 0x20, 0x0, 0xfffffffffffffebd)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r47=>0xffffffffffffffff})
r48 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0)
fcntl$setlease(r48, 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000007c0)="44a434001dffe4f17339deff062fbc01a59a633db9c43af4009b1dcd152b61ec3783901da54644ce9b3e23e0f61fad2fc859202c84d56b196bd3f8aa2fb3f9200e283fcc98db216e0013b078c2688366d51d997b76ddf6675fd1cf6d9a919e9f0af2360674fe3f3204b65e091d57bd7360ac829b482bed863b80ac", 0x7b}, {&(0x7f0000000840)="72d70b46d2b4c16518e2e77e6f811fd1b1b6b0967e4d4a52e03ebad2539d6a2a8da46b61b6d495c73a194b47f25608f72078ca339a8fd13d81ed9273082d71325d89f3f4080700d1378ae3c12086bdc2c36ca478594205c988dbc13182416c7df0ac3254fbbe162580cc8fa08779990c2062b1a351080719dd7e281867debc12cb59e19bdad2228ead9daff40b63fd666878acd33541dc81edab6b461642eb711c3a9028ca141c59af626f78f0f0bbd0a6a4901c63b98692ab75c93e9e9cd18e538d3187f0ab4e706964c280e20f939e3a27a6e459cc0011e9c490", 0xdb}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r44, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r43, @ANYRES32=r45, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r46, @ANYRES32, @ANYRES32=r42, @ANYRES32=r47, @ANYRES32=r48, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES64, @ANYBLOB="7879fddaa073bf3c68"], 0x7d, 0x30000010}, 0x24e1)
getgroups(0x2, &(0x7f0000001200)=[<r49=>r38, r45])
r50 = gettid()
ptrace$setopts(0x4206, r50, 0x0, 0x0)
tkill(r50, 0x40)
ptrace$setregs(0xd, r50, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r50, 0x0, 0x0)
getresuid(&(0x7f0000001240), &(0x7f0000001280)=<r51=>0x0, &(0x7f00000012c0))
r52 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r52}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r52, 0x40046208, 0x0)
r53 = gettid()
ptrace$setopts(0x4206, r53, 0x0, 0x0)
tkill(r53, 0x40)
ptrace$setregs(0xd, r53, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r53, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002980)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r54=>0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000002a80)=0xe8)
r55 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r55, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r55, 0x0, 0x0)
r56 = getuid()
sendmmsg(r55, &(0x7f00000092c0), 0x4ff, 0x0)
r57 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r57, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
bind$inet(r57, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r57, 0x5452, &(0x7f0000000300)=0x200)
connect$inet(r57, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r57, &(0x7f0000007fc0), 0x800001d, 0x0)
r58 = getgid()
pipe(&(0x7f0000000380)={<r59=>0xffffffffffffffff})
read(r59, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r59, 0x29, 0x20, 0x0, 0xfffffffffffffebd)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r60=>0xffffffffffffffff})
r61 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0)
fcntl$setlease(r61, 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000007c0)="44a434001dffe4f17339deff062fbc01a59a633db9c43af4009b1dcd152b61ec3783901da54644ce9b3e23e0f61fad2fc859202c84d56b196bd3f8aa2fb3f9200e283fcc98db216e0013b078c2688366d51d997b76ddf6675fd1cf6d9a919e9f0af2360674fe3f3204b65e091d57bd7360ac829b482bed863b80ac", 0x7b}, {&(0x7f0000000840)="72d70b46d2b4c16518e2e77e6f811fd1b1b6b0967e4d4a52e03ebad2539d6a2a8da46b61b6d495c73a194b47f25608f72078ca339a8fd13d81ed9273082d71325d89f3f4080700d1378ae3c12086bdc2c36ca478594205c988dbc13182416c7df0ac3254fbbe162580cc8fa08779990c2062b1a351080719dd7e281867debc12cb59e19bdad2228ead9daff40b63fd666878acd33541dc81edab6b461642eb711c3a9028ca141c59af626f78f0f0bbd0a6a4901c63b98692ab75c93e9e9cd18e538d3187f0ab4e706964c280e20f939e3a27a6e459cc0011e9c490", 0xdb}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r57, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r56, @ANYRES32=r58, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r59, @ANYRES32, @ANYRES32=r55, @ANYRES32=r60, @ANYRES32=r61, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES64, @ANYBLOB="7879fddaa073bf3c68"], 0x7d, 0x30000010}, 0x24e1)
r62 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r62}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r62, 0x40046208, 0x0)
r63 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r63}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r63, 0x40046208, 0x0)
r64 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r64}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r64, 0x40046208, 0x0)
r65 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r65}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r65, 0x40046208, 0x0)
r66 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r66}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r66, 0x40046208, 0x0)
r67 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r67}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r67, 0x40046208, 0x0)
r68 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r68}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r68, 0x40046208, 0x0)
r69 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r69, &(0x7f0000000000)='threaded\x00', 0x2f5fa26)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r70=>0x0})
fsetxattr$system_posix_acl(r69, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r70, @ANYBLOB="040080000000000010000700000000002000010000000000"], 0x2c, 0x0)
r71 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r71, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r71, 0x0, 0x0)
r72 = getuid()
sendmmsg(r71, &(0x7f00000092c0), 0x4ff, 0x0)
r73 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r73, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
bind$inet(r73, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r73, 0x5452, &(0x7f0000000300)=0x200)
connect$inet(r73, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r73, &(0x7f0000007fc0), 0x800001d, 0x0)
r74 = getgid()
pipe(&(0x7f0000000380)={<r75=>0xffffffffffffffff})
read(r75, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r75, 0x29, 0x20, 0x0, 0xfffffffffffffebd)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r76=>0xffffffffffffffff})
r77 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0)
fcntl$setlease(r77, 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000007c0)="44a434001dffe4f17339deff062fbc01a59a633db9c43af4009b1dcd152b61ec3783901da54644ce9b3e23e0f61fad2fc859202c84d56b196bd3f8aa2fb3f9200e283fcc98db216e0013b078c2688366d51d997b76ddf6675fd1cf6d9a919e9f0af2360674fe3f3204b65e091d57bd7360ac829b482bed863b80ac", 0x7b}, {&(0x7f0000000840)="72d70b46d2b4c16518e2e77e6f811fd1b1b6b0967e4d4a52e03ebad2539d6a2a8da46b61b6d495c73a194b47f25608f72078ca339a8fd13d81ed9273082d71325d89f3f4080700d1378ae3c12086bdc2c36ca478594205c988dbc13182416c7df0ac3254fbbe162580cc8fa08779990c2062b1a351080719dd7e281867debc12cb59e19bdad2228ead9daff40b63fd666878acd33541dc81edab6b461642eb711c3a9028ca141c59af626f78f0f0bbd0a6a4901c63b98692ab75c93e9e9cd18e538d3187f0ab4e706964c280e20f939e3a27a6e459cc0011e9c490", 0xdb}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r73, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r72, @ANYRES32=r74, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r75, @ANYRES32, @ANYRES32=r71, @ANYRES32=r76, @ANYRES32=r77, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES64, @ANYBLOB="7879fddaa073bf3c68"], 0x7d, 0x30000010}, 0x24e1)
r78 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r78, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r78, 0x0, 0x0)
r79 = getuid()
sendmmsg(r78, &(0x7f00000092c0), 0x4ff, 0x0)
r80 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r80, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
bind$inet(r80, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r80, 0x5452, &(0x7f0000000300)=0x200)
connect$inet(r80, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r80, &(0x7f0000007fc0), 0x800001d, 0x0)
r81 = getgid()
pipe(&(0x7f0000000380)={<r82=>0xffffffffffffffff})
read(r82, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r82, 0x29, 0x20, 0x0, 0xfffffffffffffebd)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r83=>0xffffffffffffffff})
r84 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0)
fcntl$setlease(r84, 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000007c0)="44a434001dffe4f17339deff062fbc01a59a633db9c43af4009b1dcd152b61ec3783901da54644ce9b3e23e0f61fad2fc859202c84d56b196bd3f8aa2fb3f9200e283fcc98db216e0013b078c2688366d51d997b76ddf6675fd1cf6d9a919e9f0af2360674fe3f3204b65e091d57bd7360ac829b482bed863b80ac", 0x7b}, {&(0x7f0000000840)="72d70b46d2b4c16518e2e77e6f811fd1b1b6b0967e4d4a52e03ebad2539d6a2a8da46b61b6d495c73a194b47f25608f72078ca339a8fd13d81ed9273082d71325d89f3f4080700d1378ae3c12086bdc2c36ca478594205c988dbc13182416c7df0ac3254fbbe162580cc8fa08779990c2062b1a351080719dd7e281867debc12cb59e19bdad2228ead9daff40b63fd666878acd33541dc81edab6b461642eb711c3a9028ca141c59af626f78f0f0bbd0a6a4901c63b98692ab75c93e9e9cd18e538d3187f0ab4e706964c280e20f939e3a27a6e459cc0011e9c490", 0xdb}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r80, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r79, @ANYRES32=r81, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r82, @ANYRES32, @ANYRES32=r78, @ANYRES32=r83, @ANYRES32=r84, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES64, @ANYBLOB="7879fddaa073bf3c68"], 0x7d, 0x30000010}, 0x24e1)
r85 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r85, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r85, 0x0, 0x0)
r86 = getuid()
sendmmsg(r85, &(0x7f00000092c0), 0x4ff, 0x0)
r87 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r87, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
bind$inet(r87, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r87, 0x5452, &(0x7f0000000300)=0x200)
connect$inet(r87, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r87, &(0x7f0000007fc0), 0x800001d, 0x0)
r88 = getgid()
pipe(&(0x7f0000000380)={<r89=>0xffffffffffffffff})
read(r89, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r89, 0x29, 0x20, 0x0, 0xfffffffffffffebd)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r90=>0xffffffffffffffff})
r91 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0)
fcntl$setlease(r91, 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000007c0)="44a434001dffe4f17339deff062fbc01a59a633db9c43af4009b1dcd152b61ec3783901da54644ce9b3e23e0f61fad2fc859202c84d56b196bd3f8aa2fb3f9200e283fcc98db216e0013b078c2688366d51d997b76ddf6675fd1cf6d9a919e9f0af2360674fe3f3204b65e091d57bd7360ac829b482bed863b80ac", 0x7b}, {&(0x7f0000000840)="72d70b46d2b4c16518e2e77e6f811fd1b1b6b0967e4d4a52e03ebad2539d6a2a8da46b61b6d495c73a194b47f25608f72078ca339a8fd13d81ed9273082d71325d89f3f4080700d1378ae3c12086bdc2c36ca478594205c988dbc13182416c7df0ac3254fbbe162580cc8fa08779990c2062b1a351080719dd7e281867debc12cb59e19bdad2228ead9daff40b63fd666878acd33541dc81edab6b461642eb711c3a9028ca141c59af626f78f0f0bbd0a6a4901c63b98692ab75c93e9e9cd18e538d3187f0ab4e706964c280e20f939e3a27a6e459cc0011e9c490", 0xdb}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r87, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r86, @ANYRES32=r88, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r89, @ANYRES32, @ANYRES32=r85, @ANYRES32=r90, @ANYRES32=r91, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES64, @ANYBLOB="7879fddaa073bf3c68"], 0x7d, 0x30000010}, 0x24e1)
r92 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r92, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r92, 0x0, 0x0)
r93 = getuid()
sendmmsg(r92, &(0x7f00000092c0), 0x4ff, 0x0)
r94 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r94, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
bind$inet(r94, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r94, 0x5452, &(0x7f0000000300)=0x200)
connect$inet(r94, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r94, &(0x7f0000007fc0), 0x800001d, 0x0)
r95 = getgid()
pipe(&(0x7f0000000380)={<r96=>0xffffffffffffffff})
read(r96, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r96, 0x29, 0x20, 0x0, 0xfffffffffffffebd)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r97=>0xffffffffffffffff})
r98 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0)
fcntl$setlease(r98, 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000007c0)="44a434001dffe4f17339deff062fbc01a59a633db9c43af4009b1dcd152b61ec3783901da54644ce9b3e23e0f61fad2fc859202c84d56b196bd3f8aa2fb3f9200e283fcc98db216e0013b078c2688366d51d997b76ddf6675fd1cf6d9a919e9f0af2360674fe3f3204b65e091d57bd7360ac829b482bed863b80ac", 0x7b}, {&(0x7f0000000840)="72d70b46d2b4c16518e2e77e6f811fd1b1b6b0967e4d4a52e03ebad2539d6a2a8da46b61b6d495c73a194b47f25608f72078ca339a8fd13d81ed9273082d71325d89f3f4080700d1378ae3c12086bdc2c36ca478594205c988dbc13182416c7df0ac3254fbbe162580cc8fa08779990c2062b1a351080719dd7e281867debc12cb59e19bdad2228ead9daff40b63fd666878acd33541dc81edab6b461642eb711c3a9028ca141c59af626f78f0f0bbd0a6a4901c63b98692ab75c93e9e9cd18e538d3187f0ab4e706964c280e20f939e3a27a6e459cc0011e9c490", 0xdb}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r94, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r93, @ANYRES32=r95, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r96, @ANYRES32, @ANYRES32=r92, @ANYRES32=r97, @ANYRES32=r98, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES64, @ANYBLOB="7879fddaa073bf3c68"], 0x7d, 0x30000010}, 0x24e1)
getgroups(0x7, &(0x7f0000004800)=[r74, 0xee00, 0xee00, r81, 0xffffffffffffffff, r88, <r99=>r95])
r100 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r100}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r100, 0x40046208, 0x0)
r101 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r101}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r101, 0x40046208, 0x0)
r102 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r102}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r102, 0x40046208, 0x0)
r103 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000004840)='/selinux/checkreqprot\x00', 0x0, 0x0)
r104 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r104, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r105 = ioctl$TUNGETDEVNETNS(r104, 0x54e3, 0x0)
r106 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r106}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r106, 0x40046208, 0x0)
r107 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r107}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r107, 0x40046208, 0x0)
r108 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r108}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r108, 0x40046208, 0x0)
r109 = accept$packet(0xffffffffffffffff, &(0x7f0000004880), &(0x7f00000048c0)=0x14)
r110 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000004900)='/dev/ptmx\x00', 0x8000, 0x0)
r111 = getpgid(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000004940)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r112=>0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000004a40)=0xe8)
r113 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r113, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r113, 0x0, 0x0)
r114 = getuid()
sendmmsg(r113, &(0x7f00000092c0), 0x4ff, 0x0)
r115 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r115, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
bind$inet(r115, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r115, 0x5452, &(0x7f0000000300)=0x200)
connect$inet(r115, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r115, &(0x7f0000007fc0), 0x800001d, 0x0)
r116 = getgid()
pipe(&(0x7f0000000380)={<r117=>0xffffffffffffffff})
read(r117, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r117, 0x29, 0x20, 0x0, 0xfffffffffffffebd)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r118=>0xffffffffffffffff})
r119 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0)
fcntl$setlease(r119, 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000007c0)="44a434001dffe4f17339deff062fbc01a59a633db9c43af4009b1dcd152b61ec3783901da54644ce9b3e23e0f61fad2fc859202c84d56b196bd3f8aa2fb3f9200e283fcc98db216e0013b078c2688366d51d997b76ddf6675fd1cf6d9a919e9f0af2360674fe3f3204b65e091d57bd7360ac829b482bed863b80ac", 0x7b}, {&(0x7f0000000840)="72d70b46d2b4c16518e2e77e6f811fd1b1b6b0967e4d4a52e03ebad2539d6a2a8da46b61b6d495c73a194b47f25608f72078ca339a8fd13d81ed9273082d71325d89f3f4080700d1378ae3c12086bdc2c36ca478594205c988dbc13182416c7df0ac3254fbbe162580cc8fa08779990c2062b1a351080719dd7e281867debc12cb59e19bdad2228ead9daff40b63fd666878acd33541dc81edab6b461642eb711c3a9028ca141c59af626f78f0f0bbd0a6a4901c63b98692ab75c93e9e9cd18e538d3187f0ab4e706964c280e20f939e3a27a6e459cc0011e9c490", 0xdb}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r115, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r114, @ANYRES32=r116, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r117, @ANYRES32, @ANYRES32=r113, @ANYRES32=r118, @ANYRES32=r119, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES64, @ANYBLOB="7879fddaa073bf3c68"], 0x7d, 0x30000010}, 0x24e1)
r120 = socket$inet_udp(0x2, 0x2, 0x0)
r121 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r121}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r121, 0x40046208, 0x0)
r122 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000005e00)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
r123 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r123}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r123, 0x40046208, 0x0)
r124 = socket$nl_xfrm(0x10, 0x3, 0x6)
r125 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r125}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r125, 0x40046208, 0x0)
r126 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r126}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r126, 0x40046208, 0x0)
r127 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r127}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r127, 0x40046208, 0x0)
r128 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r128}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r128, 0x40046208, 0x0)
r129 = gettid()
ptrace$setopts(0x4206, r129, 0x0, 0x0)
tkill(r129, 0x40)
ptrace$setregs(0xd, r129, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r129, 0x0, 0x0)
stat(&(0x7f0000005e40)='./file0\x00', &(0x7f0000005e80)={0x0, 0x0, 0x0, 0x0, <r130=>0x0})
r131 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r131, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r131, 0x0, 0x0)
r132 = getuid()
sendmmsg(r131, &(0x7f00000092c0), 0x4ff, 0x0)
r133 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r133, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
bind$inet(r133, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r133, 0x5452, &(0x7f0000000300)=0x200)
connect$inet(r133, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r133, &(0x7f0000007fc0), 0x800001d, 0x0)
r134 = getgid()
pipe(&(0x7f0000000380)={<r135=>0xffffffffffffffff})
read(r135, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r135, 0x29, 0x20, 0x0, 0xfffffffffffffebd)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r136=>0xffffffffffffffff})
r137 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0)
fcntl$setlease(r137, 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000007c0)="44a434001dffe4f17339deff062fbc01a59a633db9c43af4009b1dcd152b61ec3783901da54644ce9b3e23e0f61fad2fc859202c84d56b196bd3f8aa2fb3f9200e283fcc98db216e0013b078c2688366d51d997b76ddf6675fd1cf6d9a919e9f0af2360674fe3f3204b65e091d57bd7360ac829b482bed863b80ac", 0x7b}, {&(0x7f0000000840)="72d70b46d2b4c16518e2e77e6f811fd1b1b6b0967e4d4a52e03ebad2539d6a2a8da46b61b6d495c73a194b47f25608f72078ca339a8fd13d81ed9273082d71325d89f3f4080700d1378ae3c12086bdc2c36ca478594205c988dbc13182416c7df0ac3254fbbe162580cc8fa08779990c2062b1a351080719dd7e281867debc12cb59e19bdad2228ead9daff40b63fd666878acd33541dc81edab6b461642eb711c3a9028ca141c59af626f78f0f0bbd0a6a4901c63b98692ab75c93e9e9cd18e538d3187f0ab4e706964c280e20f939e3a27a6e459cc0011e9c490", 0xdb}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r133, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r132, @ANYRES32=r134, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r135, @ANYRES32, @ANYRES32=r131, @ANYRES32=r136, @ANYRES32=r137, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES64, @ANYBLOB="7879fddaa073bf3c68"], 0x7d, 0x30000010}, 0x24e1)
stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000006140)={0x0, 0x0, 0x0, 0x0, 0x0, <r138=>0x0})
sendmmsg$unix(r4, &(0x7f0000005f80)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000280)="5c6c50cd4babd89a3004eec9404222981a6a2b00d664f7074d978c8e6d25e80c7557acaacf4d588231e59b9d88ef5d4f1ad528c097ae1bfc56b81bfba24d5aaebf185e0173712bff54abdb765d555d288f8a0aa370973c54b07ae89cdac9900efecf48dff38805c984253107342b289b03ea35866d44e3131f150d4baf8fcdc6ac4f0b7b1aafeb5f40a57e48109ccd17c940f8ebf8c59c21b7f8c5e1dc1410042c38ec", 0xa3}, {&(0x7f0000000340)="3d946f6a897dfa1ce8b1ecd7b3d1eee54176d56aa13f7092605009fed54cd35600119327aa6d558df39c286a5083095c86fbbdb44b76334bc8a9a0a365484892fc88f2d00970ca0764b7ac7072955e34c1abe6b657df996203acbe80411007d1131516f4943d3f2b00d104ae3cd9aabf2b89173909cb60e0b7084f190cd94c36b1fb12791f6de7b3b8cdd6dd488e5e8ce681ba8f640dfec1b2319bcc4ce863ba4b59", 0xffffffffffffff77}, {&(0x7f0000000400)="7d54a7adfa3f2ca601cb0fca8ae0242cf4fb2a44c32715b60926e48cc29d32c2220a6165d51e47a148aa250dc3e380236b9cb47a84ae2208632d821616b78214740c285bc698b413770335d5636c81a90da9dfa617391fbeec18121c5141a3f8dbc82d92871b8c8a19261eab1acd6284ab18bf0edfd0172b45b211aef8d39abbc6aff4607c17a1", 0x87}, {&(0x7f0000000180)="45e74a52c795d457ea6be2a4ba19148ac1f9a18e5bfa70f0b981c78368202d9dda3a75d8e660e331b029960a9de05e9906e9c6c5a650689bcc39131ccfc41480d55720f0d87fa78801fa379945af4da07cf08487cf87", 0x56}, {&(0x7f00000004c0)="41e4cfe630c5b71021e96ef1dc17717f8e11608800d4df95d46e37e427326d6cf73df4bb721d00ac76620990b22805774a0a668ff9f2ada4aafa8fcfed6d371dc25e2d53168d6d1debda5a29c13048f36dda2dcaf2709602a73fa8", 0x5b}], 0x5, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r138}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}, @rights={{0x1c, 0x1, 0x1, [r14, 0xffffffffffffffff, r15]}}], 0x80, 0x4000000}, {&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000940)}, {&(0x7f0000000980)="e5af1f6ff9407534de3dde5acf8160c65c7e7d0c25b6928456d846556c2d04d8c3bc38c6dbd251582769eec91ef54b51ae6db338b62df3198417312f4684881338cd299226737a4ecafe3d86919b7835c717d314e2f1b58a26fd626b04490aa5c11a", 0x62}, {&(0x7f0000000a00)="5ebb4bfb88d460d1fd041f02f613ff182073a6aa89608a634b7363b06674ce24ae2fadc25f0c64f23f5957723c92dcf88c20185932a7fe5f74032ea5807789786be21f5ac5f37fcb55cf3276415da4ed1e2885acfe382d52c774924b5b40ea48831b8685387d5dce13d87fa35cc3d5", 0x6f}, {&(0x7f0000000a80)="9415b1ffa6d99a7c3d3447a5e62aa5c2648dc82cdd16ced68b94d7c22120091286fb61f01f4d61a80ea4412cd181a47471f3170b1529e7463c0078c70e15884d98573e5dca337c3d65f00adbaeced465410e420cd2704596f88cee868347a21d477075e5ac4de7e57acdb45fed3eaf26f9c29c30fb9d950a834a45a0296ab126ad0559498fee3f1020d39e67466d2a72dff633be54415ea3fcf7f64d4d1ecde8bfc441710e54f34a81d5fa6f16f9d0cb0f095884d25e755de3a19a89f11c77c6fea0289c453359dff9d71a79acf8aecb01cfd5", 0xd3}, {&(0x7f0000000b80)="8a589e573094c4b0c7e0d1094fe69317b808e8cc4538422974be1562e43b074adecafe1574cd96e5824500b508f07752d57e4953ff705978de36b19c97e6", 0x3e}, {&(0x7f0000000bc0)="6e4f0e84e1acf352153d27d64d663f6037f26dafafb4eb73e43a8ea147dbbb7391a6fb9337f8e399d861bc9c58a38d8797c83ff163b9db7ffda28c6c8132e88a99547a008a240ebd75cc8bf633adf6223400083a85eb6fe0594ae9edcd59ef9f691d1b4e9c6e2f711eb5e14cbaeafd7ef7f0326ab4996ae0e504ebe3b419104e066d9f51ab8cfcffaec9b83c892b81463766b82fbc282070260f29b20b8f03a045f9ef88322644ece950263a87ca57e7", 0xb0}], 0x6, 0x0, 0x0, 0x80}, {&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d80), 0x0, 0x0, 0x0, 0x80}, {&(0x7f0000000dc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000e40)="35ac03226c12db59ddafb8901bd70adee04451639d1b689ec36f9e53be427a658a42f1451530085fc16de3b6ac2df186e5db68e699f78fe44496462d9ddf13d0850e5a18d67170031b5619bc0e93ad33ca539cd314f89038c7cf99a23005dd023b7d807bff1f5e993afa27b665073a2503c62fe5af1312548c135bcc65c7ce9c20e7b5c9d0210394b7d3497ccdaec8d7cb5ba6f4816654acd90d1bba97ad0d5f481f1d13a3e211cced62e3d143baf868fa78ca22b7783c4348", 0xb9}], 0x1, &(0x7f0000001300)=[@rights={{0x20, 0x1, 0x1, [r16, r17, r18, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @cred={{0x1c, 0x1, 0x2, {r23, r25, r29}}}, @cred={{0x1c, 0x1, 0x2, {r33, r34, r49}}}, @cred={{0x1c, 0x1, 0x2, {r50, r51}}}], 0xa0, 0x1000c}, {&(0x7f00000013c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000001440)="c3b2fec1eff06d165e7b99bcf2d280089cff92730e2e5767b8f3fb68f03c20e62a71dc6c3b667ae9f8482f474eda2ba578d9526486fd6999b275838f3a6693989089edb65f792ab4f0e3eea373f5e1e9b0ec608a9849bcaf3a840c12900b9a0afac35599e333600587f66a66c4f257d912cdeace63e0bc8e1b2295be7380b52a7c27998d7715449259668b43bbf471e5380f1872959dc03715d027c974e986297e4a60f6ddd62b6a03876341da40aba649af91b1a65ad9d2a4dd72e05c4a6df651da2e766549b223df4060c080655aa31091a5ed425f3ed2b6fa", 0xda}, {&(0x7f0000001540)="a47c27dfa5f6f3d102fd6e1f8a498bf12e13a1fa79a0644b2e2489d1ce", 0x1d}, {&(0x7f0000001580)="9672f012b2e785db1de4928ced40974d166aa95492b811eb64999a004690331ce5609678453095bf678f7bda207f1fa554cf94791b46403a7e444aa66a765f2141401e", 0x43}, {&(0x7f0000001600)}, {&(0x7f0000001640)="5c37f170197f7515b39a8f99959dede794e236e92e8387a7a9519b13623777952f4b0804d09880f3f51f603f89bf7948c16c2d2704a47e5ee3c44f00f835578ac497ae7d9245629765acf72d647ce92621bcf349b785d62938000d920b19f11be233905ca0b26cb7028ecf20bfa949b2da5c7f5d1b01b37553221ecc6b9bd7ed1eee9a1c3b58cf9d0e24c097fb8b174b2c65397f9c20a9dbd11a8fd57f68292cc7751f9c1b10af6ac758367b0ac447f1a110997ef3172cb3c28a2cc2d93e32311766af181e5c2f020bc0", 0xca}, {&(0x7f0000001740)="bc56540dc5cf095e50220957734f4dca373352e4a655f3d29f9f4e227f6cfb0325fd9a9f64ccc2b0cd06a36b8cb5b8d41a347dae1ca4662563940359bb09e309180c198642c506cf84f1c7ef774d8e5a858d5afef35dd0a6205507b046502e867065cffce73f046cc0d4a0da20903cacc426f332bab45c6f537ea9045b9ea1657e32c123760c310ccdabf62ff636e5e4c3f614da129fe2ec2a7ab713e9ed6e1da363adca1db79c6f30bd06c2fd5125baa3dca9b76153e9c4e0f30a4f66ef089ace7c947c39112fdbaed885c88a4c5a2573a05bde85ccc5c257141bc00929a7481505e963dd46466590f9359345a39771e89a", 0xf2}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="3ab80f5c7a2f96dffbaf154345dde99ed9edc4506027beb5569fb09dfb3519a81e4a", 0x22}, {&(0x7f0000002880)="2db12c127c72d5ae1a17", 0xa}], 0x9, &(0x7f0000002ac0)=[@rights={{0x28, 0x1, 0x1, [r2, r3, r3, r52, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r53, r54, r58}}}], 0x48, 0x1}, {&(0x7f0000002b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002bc0)="c88922c32d32f8ddcbebe20b2cac9bd3a73886a25e7efe65c97b522d801f8b0ba184cba646b29a8b1a797ddda0a2c03e54fd98e90acf36aeff1e25d58872553e24e5c0bc101fb83743dfb476871bbdb1b5678f2e24ade84008707953c80cf6897a838625d92f75f74355967696a3f1696e9653ed606e93519ac4a59b980762e1d2dcb6c563ade4384c14442364b3a572988190d5feaab4ad2d0c43a5b84f8aa9be7b2868930ceedca03602", 0xab}, {&(0x7f0000002c80)="e9481169f9f7c1d51bcf54ea0d51aa86c5bf7b645a667edc67008207ba6e4a2b92c84f55161abfe796b3d756a2597a11ac9b558049b155bddb74c68f4da6f4d2ea311d002c907795feb0da27f47f66fd0448c599775eb2785bcbd361f54b0fe900fa6989e5138609abb1aa17394b200b17af9d97576d3d14bbed01f24c54c89489f1eb79c70f7ee92ed01b147381db31197aea31e233ec3b8a00cb843ba2b6542f902cfdd2ad4e", 0xa7}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)="af57ff50efc3a6f589bff30652b94ff7d5d6bcce6a9938a9a8deeff4b0c7ba7273e5dbd52c9347219c136f062ef8ebd4b9d467ab26899a5b99d73a99a667666392f2610fbc36eaa667719c4fceefb7a98919784babbbb5fdcc3b7083e7e7cd4c53892c05743da5", 0x67}, {&(0x7f0000002e00)="6ceb7f6c436df7e210da335baec5034e2e815ea6b484a406cd453e10bbc52b45f9e7720e5165abfac8e2631f35bffdd355031fdac45263a40d31d5c6a2bd78b8db490a2262b13135546f804a60f4cccf0ff116da8d1df65557e35d23604959f983c33544ccf066933365ffb23cf9f58162d9d64e12ba961bc8f8f42f83138eab67fb89d5189cc5173e8576cea79d694dee6e2df771043db613fff8194ec0ffe047d66be8e058935bf3d3f82849495307be59cfce0b7d78f5", 0xb8}, {&(0x7f0000002ec0)="ee64def05b797b0f2945971316a51a2a2a2c312c6c4a1e054d1dc05c2b2aa5d00c49566bb88f71dd851cdcebaeb013c424c519cb145adc573e680a72960f01c52e42dad6fbb068c63c7d43e2f67a95740b90930ff64cbe864311df06ff45f2ad0f127328b13367cd72ead8e858ab3f", 0x6f}, {&(0x7f0000002f40)="90c4d5faa7157e52f61dfa8472a1df489d5309c231a455ddc3b50a8e55433fc09a7f4dd3aa9df42fb35bb7fa13eae5a4c672a8360f731d94fb6721e71f33b33a7b09408f379b8ce7256b773fceba80fced4fb25dd7a0669bb8af6905f915f55c148a24a918d5b1ca9803c31b874a10460550e2a8b9418fecbd1426b60e6981fe6147098bf88083212c789f73a2718f80b78668c3ab5ac11b5f450c7e53b3e9b674", 0xa1}, {&(0x7f0000003000)="4996239dc673443020045b0c5f1d67f74ae98a88bf77b05bbad2cddef6a564588c6f2aeccc34eafe9fd76b194ed9bf1bac96a7363ee12f647a9afed8ebb8c6f0613081aff129bdcca729bb2d2ca67ffc7bb67117cbb36eab6c7b486bab4b634bd9ce34d67dcb4a686775c96608016025c896cc28db0f9546302e56dc14d8c48ca91871a1304ce20f03", 0x89}], 0x8, &(0x7f0000003140)=[@rights={{0x20, 0x1, 0x1, [r62, r63, r0, r3]}}, @rights={{0x18, 0x1, 0x1, [r64, r65]}}, @rights={{0x28, 0x1, 0x1, [r66, r3, r3, r1, r67, r68]}}], 0x60, 0x40}, {&(0x7f00000031c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004780)=[{&(0x7f0000003240)="21bb975690a58e23855f7a74b3c1581f1ba309d6da898cd50abdf8eb103ffdd9151a16ad1222893b852cc6e7335e99508689700f14063369160ad6d68d3a4ed907ad11752c85fec68c4c8a9bcf1f67f021e792c7b26a2473db", 0x59}, {&(0x7f00000032c0)="77234cb5de35c4164cede21e0efaf2447c5d9a5486534d899753b906ced2047ece1b5bed166826f31628310786270b4dfbfdbe71f88e26dc979a98f8f51811ce66ba8955bb2c868adb151b269f6c35fb72e4183664662eef65ccb2eb5dfd2de0105f44fa79881929a8e62381d1162a1e5df40992176410b0c9a648f1cbf6f8cc0e7f4086b596dab43e1abecc2a115bee4db9057f1eeedc52b1f4ffb5407253adc06328b9e032a193e8a8b1910e", 0xad}, {&(0x7f0000003380)="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", 0x1000}, {&(0x7f0000004380)="6f1fb6f44c1b6778657d0e360b68a16a828f798d3ac633798d7e0f4cd8b4a21299a60c83093e7e3de9f8edf6a32a030b7d719057281ca246c4669201a10d490bcce0cad1aba71277055b547928300c4d2c7403b361eebfb44ae4ac6a9507c21dbccdc00d8248eb6a258c9f156c0ca2e8f7c027b8ea349846040ba83f3e49b3f6be2a10d70abf99b0c4a169cd9017488e7d99ee3f60abaee831804fbe470e89688338477d9230d98736d05dbde1fd3602e26e0364351dd4e0e20173b497982690ba520caa708e30fe9f9fd9acb206c367c9f4b446f5fcea7be464e17585bb5a4faa2ce9ed0b8ca43d83b27a8de84b4ca84cfb477e3df7b2", 0xf7}, {&(0x7f0000004480)="c525dc01482950a3eecd49f2bb64a6df3f3efee44c2d272faf7d0e3aaeefcd89edb7cd37976a29e50946b9834139c1645fa18ef3e6", 0x35}, {&(0x7f00000044c0)="4433954e48c1d08077e264d47d76e8ba99867880974ad143791ea285f0aa62da676c8f390b148a6b11d2526342ab3b88885daac7b4eb5cb46d9145dc24ce0bb80fb27e2df32a6a1eb1f67fbe5f06c6c68c713df1297786f81837726b8a0c04633a50ac9588daf789fa3bf909d458fe6d3bee774762ba5f478d018d59e939a4b6335cc6425224778086ddf68bf52ff26b123855", 0x93}, {&(0x7f0000004580)="cffcccb519a5298f64efd595a2ce489184309092cbeb1cc02c103d50946e081b8b1f5aaf459f01437b11df5a4e7952c9ddb4eb3146ec3a13e6cd1e19c7525674355baf86afae339b258ec768feb441989c14f0072fa7ff812b41e7907de7ece3eef6c5e5f6b440edda69acd133ed3b7a3ba7212d86aa9c2c19538413d3e2238fc2acaad06ec633738b5e97f4a0c0c21aa996195523137c5fca18cfb487f6b2709299a11d3af4cdc53bb515c323dd4041696c014645e8efbd75183c18f1fc6add235814542182c9dc77571eb48de038eedd19fab944bb7756ecce", 0xda}, {&(0x7f0000004680)="be0c8d354b02236c065600cd02209ddd37fbad9e0bb222084f76a60665c4b6a4b2ad77b11795f3e99873edef1a23fc6ced0695e6783b0afecd9be7b975c6df543b7f0d33eefd21a913799a5a1b509dfc4256399cdadda2bece07857cc28e718b2700889a3a72cc2f7cee1c81ea3153379c323975a810471ed53eeded313937f72eb2e13776c1a30ef30ec976e088dc8d6863d148cf6c4ba15003eb1ac356b85ed82bbe2db5340978d253e92860d1c20b86f54dc487d287d2b6ef8317792be0e75b2569f9e8d4183a6f41a48f7996deee36e67ffa7f506f55d25ef7aa44fbcf47651602a6c80e903a2c204651b94cd16739bd3b5e9a3a7929", 0xf8}], 0x8, &(0x7f0000004a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r70, r99}}}, @rights={{0x2c, 0x1, 0x1, [r100, r2, r2, r101, 0xffffffffffffffff, r102, r0]}}, @rights={{0x38, 0x1, 0x1, [r103, r105, 0xffffffffffffffff, r106, r107, r108, 0xffffffffffffffff, r0, r109, r110]}}, @cred={{0x1c, 0x1, 0x2, {r111, r112, r116}}}, @rights={{0x20, 0x1, 0x1, [r120, r3, r3, r121]}}], 0xc8, 0x4}, {&(0x7f0000004b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005d80)=[{&(0x7f0000004c00)="f3b1f1bfe89ff2e01433b5ce3466e987dbcd84967b13bd5aae85b1a96afa52e9", 0x20}, {&(0x7f0000004c40)="c980b0c049e55ac4566bf8feb6ce07f20f2352cb1cb29606957834997d0a642cd9eb5ecea09cf7d9b9282c22e65494656ccb61e2c54dc4b298a9241697e3a5acab64676492d65e40f72131ff398b9f5dfdb58fb661de16191e8ed0b687c78109fb092b76f51a01e345293786b4892b8e9179f6720292a320db8194d087c7081b89d8e57c87abca94ce39f936c945106ca3a65f7d3b9edc5c4e75675869ddeeb8d47ea4021b77c0e66c8042249e8a95e9721d222c4d41624270914977148baa677237c7336b14ecbe6b3b403186b045a7423bab2ca53bbd560d78be66be71ecbf4881a6425d4caca29b3b5a706ae79b11ddd35ac071e5b89153b075b5fd6a4c72e2b69aee8ec7da7d6ee0a22408105e4ed5f77ed675e0721185491ed531c911a71769a2fcda1d390e09cc0cf7a623348a8ff5b9ecc8b2ebf8c5311d836a776d08d34977084c21e980f4e52f25e23289a5ffb58257930ce2fccd75f1443091ffd08f09e3278f9716eabe300760baec47fdb0836e0e0984c488ffc8347f2671f74555ba36f9495a3aca4e1bf3d5a35d33e2b6899c2f97fb98a776f90ffa6e5b37ec027c73b7550b4df78f5d7b95cd909fb5aded492b1be70bfbfe64a1d21427249a05a9893ba75e3bb7d98a2b2bd255d6ec5be992d2b1f240aea8c0e74af569a8ad5fba2ae2a955098f3b8b2c7469c0d181390663ca20f787d09ecb0a2c33f681e364a3fb1f2dcdd3dbd7bf0e09a020f69ceb9a9cd7b8a48da442c3494faa58bddcb714c1bb06e56552cdab940f4bcf4652010dccc30669bdad059c172deb5814f3722ee79a01fc67ba2d2c1aa45f37fc0384e707d1b7d2d393ebee37184b46b65225af76cb3ceed13967c673a81337830ef3e1d500d9269eac62f3c9856a1f1920e80f510faa015e7db02ceb1ad3bbd66411b69cfc470e0cd37473328ab84809df461dee2e06f63c8fc9a7f949850eb934a19133d5966c256c855f13025c4e9a9abed9643e451dcb512436eb565c40b5b613fc1b8ccd4a7f17386e5ab3f2da7160c441651a7e7c860fe8a1f7b19006d64b53bf37658185b15805a2e396515778a600dd087e41e1def450e1f0a8b7c9dff30086cf4861900f446d203623944a8869d3b3cd08eca463f9df82f4d000efffff18634067f6c43c73ca8c125381378f8fd4a74f2a10b20b59e85f0c8115866af2c6cdee5880ba8dba6ba2e2170faba9deb91ed59699915042738e134029a9958c4aa386ecacaf005783859ba47224df9b7896deaf1d1334a7796fea70a89fa9a816a1fc1ac196f923afcdb0559241c3aaad88bfe91e318f00b8a39915bd41ee0895c875823be9f20a04baec29da84de483e85b9c36cad56e39c8cbfceefa44b4a1e2de86dc30aa5cb1959b511c753850b714af665e60715ce322c43fe1026bc28ea6170fc161624fd08f79b650cc7f2d8c8c6778d71cf7c41b58037b027f00d2694490824664cdcdd59f1b305d0db63e49d8ac177a79d47e8ce984b08786a37e35266857ffb2c530bb9c7cdea39a89c5fb94345eabd005377fef7007b1353b8c895377170219782aa24f28b40779669ce96c1ec1c265395657a79ab83370548957956f68e3a26369205bddebd99e6864da10c5e8cd21202cd031895e674b876e0a84459e419dbc03944909cd5c8bd931bd6fd3cfd1728512750c9720f8d8e444891b55976bbf1c47beff0bce45c749413b70c94b2700d225ad07863ff615d93d22a138592e90a59b9d766112aee08c4335a6f3d926f218855f7057389cc9db796c10e473d74f2da8a4165b6fb471a050345d89076f253a5eda502402173c5fc946afb9b0ef9963c01a0c88394ffc18bccfff8884d41319e011344481045859277e1b8168fc227b48057294c3ee3eacafb24b78004fb823c3badb0785ef00ff4ef1ff1a8c76f6f58581ae28d52d38cf9b9a59eb6b351ff8cd38b159b430a578a6a54660a4eac35980285b19d3fcebf6e1b48465fe2339d1f1615f98edeac98e59fb0e27455500f85cd5a156b171e04484a88f86f6a972434a8995012b25c32af59e8c556bcb7a4e3bcca32e081ba376dfe66674bf2070b3338090330e58df101deb73ef841617064a5e06b1cd52341f80b6808c3a3a61eb1d229c2d6b9ca97b0dad5568afe2969453722a85b05cb9047651e80f7656e03f3932eda7a743d35229bccbb5acc5fe55daaa7912b1aa5520e3a1a23be07bb507ad88d609772384a0ca9fae7664b58e7fcb75ac9561063ca9003c2d71efc96d8f5e7ac9a275c64a012b55d95b4971a1f7f453348168525e2e8bcb6967e1a96ebb00dd85293b542e0b38e02aec21c002edce5c53f1a6b1f6e3b27f416ddb1ebf41e669bd1ba15aa05a3c082cec55a0f86a9d9dde3e3c78649f89fe2f6cc3155a38784c45b907f6bd7ccdd82fa6991021ace599b25918a48c601451bd5e17c0f4c0a5e3675b6188603cde6555df586193e9e39f6e7c0c9cb143fa2eb16cacb53633e67bd7552918e9a22a150c2ecdc7e6658f663c5989f775db387d81154a1277b90960095b7e9940fd8d91b78f6b356337ee383ebbfd6e9d148daa7616dcad9823f2d220b908c783824384da0b6a712140a523f9f8b857afd7e6619377ad56de13cf4bdce5322ad1b615211091592ef7162374c63966e766aa3578ded0ca7ebc00c2447746a894b227752b751a578b1d2ec51d65be79276ceacb3868bfc044e9e30f02a0d4f5ff1b1e61de00ba5a0d8a074758fe70f9dff7501c87802d2c0dc4bc2568a5641d3d77b3817918bbd3ba0adfca16652ad630c6590727c38adba908eed5a6e37689ce1d33055ab25248eb2a84f900fd3b584d8f51e152db43f28243955b33284c56d62b1b3ef845f6b1adad931987d298d7095d6e5aa9abf2d8401b30ff1477577f4d226b79c4c2fcd0b460b375ac9e1167220010e3f40676bfebe8a6b87e6b3d04cc8eaaf0018a0a2ce3a3e281f993fe0b4cd71438d4111435cc6c4e633141659561d2bd853bda336a43eb2185f9c19d31eb3f58080d2086f8495e3049112c6d7d3a399056f12e7b96c8d486bb4b5728e0fdb595c9176765960c82cab7ab26dcd1fdc8277a69aecd754eb4b568bba801db32a82b4a8f4fe083c78ce872110b644733d122a5e5d2d9aede05b90f59fa0db67b6bf37efae0fa5542750bad4f3f907f044bff393213e54aee96d74b29989a2870a1dfa256c89d71082d10eea61c9e960897cb5a0e4f20e4eafcd123397164b4cb65a5095e65091c1be615df5f40ea8f84762b467a503502f9ed00daa16d800c0bad36cd2722eabdd5850696dd07ffa9d75ede8649c36ed853d5cc3616ea77d9c61078c9a16e26bf63279a6e695ebd16e4ff01293502eedc2c31eba49f9acb5d0b3d1b2b16411445d1fce4919f55402672e8bcf9cf9c9bbc5b714c6887cd19dc1a4ec73add180b293eecc768ebf46ff07480092aa312c1e6c75d27eeb1a3df3481d5ae990de15c14435283f13590da3cbce8cd5c6b20990f8aeda05d384a625bbdee06ab84b69d585adec80d76a092a27892e12ee405388572714a29130da8b7ebef172791e1d43a24c195e9ec0e9e89439f03adb311129b0b0f6479ed17167e8d68b442ea3b7b3eb9a71249c89d8ea23c7ef72e121a48c326eba02c348a172b45dd8d5309f53bee1bd8b2a7ce17f74e193eb2917f896bc5e85a7e078418603d29294031518db5e11be9210f6e53415e04d14f711fa81fd45cf6311230f225c6645349aad537db2ee75d20f01bf70a088f76a6effe0321d8a68572912fb0bc622693dca0f0364c87a50229bad3c4c1e66ab54ec8b4d734fedd116ec0fcda0facd788c8dd3bc7588e4305c06920173941174f5aea73414ba00f74e88dc2c2d2c56c14f0ca8ce218e26dbb36b179a5c7ac854e3507d9f05d562ce18a1364af8190680e6c088659ab35183d28e54fefefa680136970d65f5722feda2a4181ede9c1316ee992fda394ea17e3817575416e5a4fb00e9a15b3ea494462a67c43d6540a1e3fede20f1c6f8b382298ff6bd5092b674506bf66ff401a74f313ec40584077fff8e1195a1d0a63e30949241422ae68d4e4834e808272a0ddfd0c5a70c3180cb3b9eaadd628b43bca62c590532b81ba4c9fa9b40b0a4ac50be827d26dabf315b5c633de02e8c0f75dbd1c5f991f5a93b1052a16645f0e905d714840a54b9e97f6e38ef026eb969816677fd81fb9f0e49bd8b20de01a9374c02eaa6ff3eb74447e227a612b97971d9cf40687d312f955be190eb05718ae7453aa23be7e8371d1eb5c79021fd5198c42e44a6607c49ff61061291f2b58306292301bea892f24717c3ebc77622273aa7582db6fe26c2aa6a9fecb44c396a31fc7b840c9cfe7ad1c38565b8350b30c45280c602d1cd678cc9cff6ed1f747a1e1fc725bbbfd149ce50a7e6ca8914b3974ec1aed0ffadee18406f3a6a42a7ca805735773264b3aa13bc189376d89fbc12c47f046d4f80f75548bbad80cb82efbdb277a9f0a2a7a46d797c9f2b3b936e856adce9fe5fa54ea1c547857b3677eaea951dbb4a067f95c73bcf1468ba42a402a797e70a693f699a3793654ae9846cfe38e5779b0ca45706547e5838735bb398ac1e12ec6570df3f3bb250268745d604da31f8526389f751fe98aca0ef6939053868d64f7734069ec972a153de954c3e69db1a537400771778ee94e54d673e6737852994bf1c2603bb0d7192fb8add2831f6e10ae32b53186cb9ab94836dc7910dafe79ba6f9784325a6d6e2583be193926a22fc4ccae76d0db08f7f52ba27cba1f25679babeccb1d0873ff3307f86e285f065c6eede49012f2e0869447cf56bff8f4dcf877a984e0ebd0234d217445059efe7c8aab4c09838479ace72927aa340dc06a0adf2395be1cae8959b2f9516d49c1aad04e3accda154581b1c061e291a29affd8d306622168304fc70e26cb2e2785c8f179bc035d5d63e43ac75c729a5653f7dcdc4c0fccf4f1a98e8170804572f9c38c625a13b9b9ef0315513554bdfacf6f2e458323362513a12e6df533edc4cece0a4311e860c0161a4c297fecea5e1d89c4f140fc1d4030e72e7f79e8a6a212b29d276606de6e2b4844b74fcb7f7725e5f3b12c0aefafda5b0050d550dcbafebcf84de1697f8ed37f8dfaad3a5c2d611827996ca49741f418134d5c151eea3b0ff0bac05e374bb4eb51658b92e3bb3a763edb088b4a01be355a2afaef1e7839beacd014b5bd47376384003db96d120f1b996124189672f35ba42ecb09a6a6597c671f6c18a02c79472a94ec6e3d7826c1a5af2fcec3ddbbe9bc2e787755f925b13b03744223ba9f9dd9c2df53131e6e6ab0f0ff008f182560ac59c3379a04f55e125723139796e7a552c579d73e0402efbdd14c76782211a27a83ffdea689af6fc7279206d0376b9f5558be2fbd6c457561f0ecb551a724c4b282e9637b41c7de441a71a643f2c3b82ce9b8f4ba97c0d9199b2b69b2036093bc92279d6e8f0c5c1e83364be47a69e941a3f128e75a1fe62048b7ce0099941158d2be93d80dd2a8683f0ad423709058fe9733df8d61837701b31b0c0f1e64e4a40f480eb241cbd8a8f41c9f56e4bb066c26a40bba1cf1f42e346447102aa56ce7321966d01f31d3e837d804e3af7ae87756ab7528cc1df51853da8911142bbc4f130314bd43d495bf8a4f32c1b46450218b7538704ac61e28e498652e03edecbf4e07d4f2019af9160cfa7294f8c50c99c403f7455a6ef03d45ecd120361041684c16d720ffbed32df8ae268bbdb3c362d", 0x1000}, {&(0x7f0000005c40)="141898842dd89c37f1087229d7c23dc47433536ff1df44a0", 0x18}, {&(0x7f0000005c80)="f9c1f0583b9cf39a4aa901a3e9b359c52499d79fe67b45b5d4b63bee513a10675e4e1e6d5882dee2a91a1b66c61082b984746e7eefda6282a294221289e26b3d04ad8cfa8e1f5879799a93b28246457bec8688fda71a01410ae67c9f96a3a66a9abf3cab775e827bf99d4ff0c3f213fcb57318770c6a8c9ea420fadd3c5f3aa2357947c65844137697d54ec7f56e7b78e35d36bba6f53dc0eafd8a211d4c60f8d21cab5e6cfe7ba1370b81589348fe9be8b2c6a93a0b", 0xb6}, {&(0x7f0000005d40)="e4daa55ac656771fcfcf774f6f12d246a3a2590f58844693b54ddaaadaec6d61fa95e9d0da97d3ae644ba445f57c16", 0x2f}], 0x5, &(0x7f0000005f00)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x2c, 0x1, 0x1, [r122, r123, r124, r125, r126, r127, r128]}}, @cred={{0x1c, 0x1, 0x2, {r129, r130, r134}}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x80, 0x40010}], 0x8, 0x4000000)
fsetxattr$security_selinux(r3, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u;object_r:sudo_exec_t:s0\x00', 0x21, 0x4)
fallocate(r2, 0x0, 0x0, 0x110001)

00:08:26 executing program 5:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
pwrite64(r0, &(0x7f0000000000)="206e4b0e4153af835bc25eae3948", 0xe, 0x0)
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)="240000005a0007041dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x1, 0x0, r2})

00:08:26 executing program 3:
pipe(0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
syz_open_procfs(r2, &(0x7f0000000040)='net/snmp6\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$selinux_attr(r4, &(0x7f0000000000)='system_u:object_r:power_device_t:s0\x00', 0x24)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)
tkill(r0, 0x24)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = socket$inet6(0xa, 0x800, 0x7f)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4)
connect(r6, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80)
sendmmsg(r6, &(0x7f00000002c0), 0x4000000000000d7, 0x0)

00:08:26 executing program 2:
flock(0xffffffffffffffff, 0x0)
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in=@local, @in6=@ipv4={[], [], @initdev}}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000640)=0xfffffffffffffe17)
getsockname$netlink(r1, 0x0, &(0x7f0000000400)=0xfffffe12)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000003c0))
sendmsg(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000300)=0x10)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000880)=ANY=[], 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)
r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000040)=""/38)
stat(0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000140)=0x2, 0x4)
connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
pselect6(0x40, &(0x7f0000000080)={0x3, 0x8, 0xa8a5, 0x1f, 0x0, 0xfffffffffffffff7, 0xa7f, 0x1}, &(0x7f00000000c0)={0x0, 0xa9a0, 0x1000, 0x0, 0x0, 0x59e, 0x7, 0x3}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3}, 0x8})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x117}}, 0x0)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)

00:08:26 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='\x00\xf1\x01\x00\x00\x00\x02\x00\xe5\xff\x00\x00\xfb', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x102})
ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'eql\x00', 0x3ed8f24c44c677b2})
dup3(r0, r2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$RTC_PIE_OFF(r5, 0x7006)

00:08:26 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1cada14c4f904a73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:26 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00')
r1 = epoll_create(0x7fb)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x6)
signalfd4(r1, &(0x7f0000000000)={0x4}, 0x8, 0x80000)
fstatfs(r1, &(0x7f0000000400)=""/233)
r3 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/current\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000200))
ppoll(&(0x7f0000a18000)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x200)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000140))
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000a60000)='ramfs\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req={0x0, 0xca83, 0x1, 0x98}, 0x10)
fchmodat(r4, &(0x7f0000000180)='./file0\x00', 0x46)
umount2(&(0x7f0000000240)='.', 0x0)

00:08:26 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1cada14c4f904a73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:26 executing program 3:
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
truncate(&(0x7f0000000240)='./bus\x00', 0x10007ff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000280)="2ecb57190a076c9fcfe7b214330c6346cd282f1405be9914fc0de8263c6812f24988f031055dea2f3dd54bcd37dec34b562f95517ce77cd01e5b9db675d3f11fec46aa21f8a4b77d0d657d610a8d2c7e2b28cdb8ea5d46cbc06bc8841eb848e462b1bd52cb65f7dd9fbfb5e5cb34f7f8a054eabd742a55b60ed1208d3e757cea08415e4c446a5f45a6d97b0a231c02ec6e2add2b5dc375cae76f2c46ad0e53253671d52533d81593216d71fb60022b3182296989b9f9d805e3db07f8141232af6e813248d8061a931f01ababef87896544", 0xd1)
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/87)
r4 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x2)
sendfile(r0, r4, 0x0, 0x8000ffffffff)
write$binfmt_misc(r4, &(0x7f0000000080)={'syz0', "7aaabb051d99b6d9fb54004df6dcf642d76ecda3ec0b8abb4b142ecec601eb88477e909fce965481f3f4219a2d5ad8bce4e1c9157ec060c2f363d913d75ef96ad0e49f170e83be0aab042867cca205b9aa69a2830867b1330f9bb576ef315fe78b2d2cd16371942178cd2ad52ab809dd983f6dff3b460a3e33141875528b516587ac9a5bc2e3acbe4927d12d4785023a1b45663e81d7d998d8df14ddf698e067784c94ae8c3a542c02d2787d53affe076b08a4638cf9d8078791641175cb616345ea63a87f59b6691ba936a36cc02a2ec97f87f9108df6cea4cea299f2e99b88cdf74af94394495fa9511a1fe25a972c4c3ac41b16e36e"}, 0xfb)
setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000180)="6c695bc25d452b9d5df82cc31468b9", 0x8b)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x1f2)

00:08:26 executing program 4:
timer_create(0x2, 0x0, &(0x7f0000000540))
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
timer_gettime(0x0, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
prctl$PR_SET_FPEMU(0xa, 0x3)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xa5776b)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0xfffffdda)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x40)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r4)
r5 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x660fc71ea182d946, 0x0)
ioctl$TIOCGSERIAL(r6, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/232})
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x84000)
write$P9_RCLUNK(r7, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x12900, 0x4)
ioctl$TIOCSSERIAL(r9, 0x541f, &(0x7f00000003c0)={0x4, 0x5, 0x2, 0x7, 0x8, 0x4, 0x8, 0x7ff, 0x1, 0x7, 0x7, 0x0, 0xfffb, 0x7f, &(0x7f0000000380)=""/37, 0x1, 0x4, 0x80000001})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup2(r10, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
connect$inet(r11, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x4)

00:08:26 executing program 1:
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)
getpriority(0x1, r0)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0))
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x8})

00:08:26 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

00:08:26 executing program 4:
seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x4000000006, 0x0, 0x0, 0xfffffffc}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r1, r0)
setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r3)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x200)
syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x117800, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r4, 0x0, 0x2)
sendfile(r4, r6, 0x0, 0x10000)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

00:08:26 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  113.975608] binder: 5088:5090 ioctl c0306201 0 returned -14
00:08:26 executing program 1:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b)
r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0)
ftruncate(r3, 0x2081fc)
write$UHID_INPUT(r1, &(0x7f00000003c0)={0x8, "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", 0x1000}, 0x1006)
fdatasync(r2)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2})
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200102}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0001040000000200000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000)
r4 = open(&(0x7f0000022ff6)='./file1\x00', 0x40, 0x0)
futimesat(r4, 0x0, &(0x7f0000000200)={{0x77359400}, {0x77359400}})
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000001580)={{0x2, 0x4e24, @empty}, {0x6, @local}, 0x40, {0x2, 0x4e24, @broadcast}, 'nr0\x00'})
creat(&(0x7f0000001540)='./file0\x00', 0x10)
fsync(0xffffffffffffffff)
io_setup(0x4, &(0x7f00000000c0))
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/devm\xa8c\x7fl\x00', 0x420402, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0xcf)

[  114.062268] binder: 5098:5100 ioctl c0306201 0 returned -14
[  114.103231] EXT4-fs error (device sda1): mb_free_blocks:1466: group 5, inode 16539: block 166400:freeing already freed block (bit 2560); block bitmap corrupt.
[  114.119695] EXT4-fs error (device sda1): ext4_mb_generate_buddy:756: group 5, block bitmap and bg descriptor inconsistent: 23288 vs 23290 free clusters
[  114.134020] EXT4-fs (sda1): pa ffff8801b9415288: logic 0, phys. 166400, len 512
[  114.141732] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:3814: group 5, free 512, pa_free 510
[  114.183842] EXT4-fs error (device sda1): mb_free_blocks:1466: group 6, inode 16539: block 196608:freeing already freed block (bit 0); block bitmap corrupt.
[  114.199698] EXT4-fs error (device sda1): ext4_mb_generate_buddy:756: group 6, block bitmap and bg descriptor inconsistent: 32766 vs 32768 free clusters
[  114.214161] EXT4-fs (sda1): pa ffff8801b94150d8: logic 0, phys. 196608, len 512
[  114.221669] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:3814: group 6, free 512, pa_free 510
00:08:27 executing program 2:
r0 = socket$unix(0x1, 0x805, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x7)
bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x2)
setgid(0x0)
listen(r0, 0x0)
setresgid(0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'veth0_to_team\x00', 0x4000})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000080)=0x803, 0x4)
getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30)
close(r0)

00:08:27 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x404000, 0x145)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000200)=@fragment, 0x8)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)

00:08:27 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  114.614163] binder: 5113:5116 ioctl c0306201 0 returned -14
00:08:27 executing program 5:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
mmap(&(0x7f000095a000/0x3000)=nil, 0x3000, 0x3, 0x3a, r1, 0x6)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0)
r3 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

00:08:27 executing program 2:
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127f, &(0x7f0000000080))
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0)
socket(0x11, 0x0, 0x0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x0, 0x7, @loopback, 0x8}, {0xa, 0x4e21, 0x0, @remote, 0x3}, 0x0, [0x5, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x3]}, 0x5c)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, &(0x7f0000000300)=0x14)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfb120eb7)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x10001, @local, 0x2}, 0x1c)
socket$inet_udplite(0x2, 0x2, 0x88)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x1d2, 0x0)
setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3})
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000040)={0xc5d9, 0x0, 0x1})
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x40, @empty}, 0x10)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000003c0))
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r4, 0x0)
fdatasync(0xffffffffffffffff)
ioctl$RTC_PIE_OFF(r1, 0x7006)
openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
sendfile(0xffffffffffffffff, r5, 0x0, 0x33fe0)

00:08:27 executing program 1:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x45)
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000080)=0x400)
fstat(r0, &(0x7f0000000680))
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
vmsplice(r3, &(0x7f0000000200)=[{&(0x7f0000000140)="fa34df1e6ac91e0ebf5b7aa4483f39e954a795dbf1ec7f23128f919c76ae1a6eca63371aadfa5f73fd80d08e309efb325f7fcaf5ec03be17a8ee6d9f95785f3376640c29836cccf0c6b48619d4bf66c29d7b880686038dc060e1ff6bac83e9fb3dd50b8636e3682a43cc944d1dcfe71b375be97c346cc62d51bc9ef67430459db7938d63523662ef71b84bd79e9c", 0x8e}, {&(0x7f00000000c0)="e925f0e468f3d417b6df7337043db2c0b6d33be44e02f278a3245ca3b9", 0x1d}], 0x2, 0x5)
write(r1, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r4, &(0x7f0000000700), 0x31f, 0x10400003)

00:08:27 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
read(r1, &(0x7f0000000280)=""/1, 0xfffffece)
ioctl$TIOCEXCL(r1, 0x540c)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0))
syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00')
close(r1)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
close(r0)

00:08:27 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

00:08:27 executing program 3:
prctl$PR_SET_PDEATHSIG(0x1, 0x3f)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'syz_tun\x00'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'syz_tun\x00', 0x200000000000d001})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.upper\x00')
openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x80000000, 0x0, 0xfe, 0x0, 0x20})
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r4}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
fcntl$addseals(r4, 0x409, 0x11)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire={0x40046305, 0x3}], 0x42, 0x0, &(0x7f00000002c0)="a54f83a10bd0b17e113fd94fbf172ef62e20bda2dad0dda9297be558cc0e405e65dcbb299cc8049c63040ded936c8900b893d0669220ba06ee851f21e9051db4ce95"})
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200, 0x0)
ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000100))

00:08:27 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

00:08:27 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

00:08:27 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0})

00:08:27 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x2, 0x145002)
io_setup(0x1, &(0x7f0000000280)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000100)="6b034959bfb6857170e095", 0xb}])
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000400)={@remote, @local, @empty}, &(0x7f0000000440)=0xc)
ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000040)=""/64)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x5ee, 0x20, 0x1, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r4}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000580)={0x3, 0x7ff, [0x36d, 0x8, 0x3, 0x6, 0xfffc], 0x40})
vmsplice(r4, &(0x7f0000000240)=[{&(0x7f00000002c0)="7b2c744839c0cec009b9cc8491ed718000b2051ae7860c8e6dc9b165271ccdeee360ec4777d370cbea78bf2863ce2235bfaa02a6769ddf6491a12e2369e3d3da2789858313e75c856f467a54024825b3df07c939e80fd2a50b0d281aa86a41699d56044d6ebfb1bcb20ad45133967067458d98ce76f5581efb765f53a1430bbfcf0a22943342ad2c6df4f3c0e2a9adbd5ec3a3b729a6dc72091fa197bc28e4d76b35227bd2dd979dd707f18296a41dfc83f3b6d89d4a69ce9f09b3f433253147b0869fe39e9b05478b", 0xc9}, {&(0x7f0000000180)="f366d13b9417d361d2be20d46466a42ceae24a0c952fbdbf926ed5960d04a099a5ab165457738538c98d2f51dff84b3e090b1251c805350ee7c558ea0ddfecaf828deac112b3ad69712563", 0x4b}, {&(0x7f00000004c0)="5712d2b3d8b5dd1beff9fc423ed01534cbc5aee20342c9407088c514378ac191508f15578bf46ff677f2985928b15f3b50e967ae2cb73ef4e9260f0128434896d93318fb1355da26f43e577b3ad091e97551bd887ae1673cecf4405cbc34217417bcb640925e94a1c35bd81b80893852cf8f3eb9e9e1bb46e76c1777585918ab20910edcffcd0c725a82ed671d9f3d0c3ecaa557c257987c018574d735823eb29e3ed705", 0xa4}], 0x3, 0x2)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
fchdir(r5)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)

00:08:27 executing program 4:
syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x182)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
syz_open_dev$mice(0x0, 0x0, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe)
fcntl$getownex(r1, 0x10, 0x0)
inotify_init()
fcntl$setstatus(r1, 0x4, 0x6100)
openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x6a0041, 0x0)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0x4)
add_key(0x0, &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x2)
sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe)
writev(r1, &(0x7f0000000680), 0x0)
socket$inet6(0xa, 0x0, 0x0)
r5 = open(&(0x7f0000000340)='./file0\x00', 0x135b32be45c18969, 0x0)
socket$inet6(0xa, 0x480040004000, 0x6)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r6}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)
fcntl$lock(r6, 0x24, &(0x7f0000000100)={0x1, 0x5, 0xd95})
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
pipe(&(0x7f0000000080))
openat$zero(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/zero\x00', 0x40000, 0x0)
setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0xa5cc554)

00:08:27 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0})

00:08:27 executing program 3:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r4}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
close(r5)
socket(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRESDEC, @ANYRESHEX], 0x4240a5bb)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

00:08:28 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0xedb)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
fstat(r3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101000, 0x0)
getpeername(r5, &(0x7f00000000c0)=@rc, &(0x7f0000000180)=0x80)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup2(r6, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

00:08:28 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0})

00:08:28 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x16, 0x0, 0x7, {[@rr={0x7, 0x7, 0x4, [@empty]}]}}}], 0x18}}], 0x1, 0x0)

00:08:28 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ftruncate(r2, 0x1c08)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup2(r8, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
write$FUSE_LSEEK(r9, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, 0x7, {0x3}}, 0x18)
write$FUSE_LK(r6, &(0x7f0000000040)={0x28}, 0x28)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30}, 0xb0b8)


INIT: Id "1" respawning too fast: disabled for 5 minutes

INIT: Id "4" respawning too fast: disabled for 5 minutes

INIT: Id "3" respawning too fast: disabled for 5 minutes

INIT: Id "5" respawning too fast: disabled for 5 minutes

INIT: Id "2" respawning too fast: disabled for 5 minutes

INIT: Id "6" respawning too fast: disabled for 5 minutes
00:08:28 executing program 2:
r0 = inotify_init()
openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x4100, 0x0)
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe)
open(&(0x7f0000000b80)='./file0\x00', 0x200c2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
creat(&(0x7f0000000000)='./file0\x00', 0x100)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
read(r0, &(0x7f0000000180)=""/88, 0x23a)
open(&(0x7f00000000c0)='./file0\x00', 0x2c0, 0x40)

00:08:28 executing program 1:
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x0, 0x0, 0x0, r0})
write(0xffffffffffffffff, &(0x7f0000000000)="668e473d2c787a677304656847d321ea5a2d4ab2f1a7429272ba7ef2", 0x1c)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_GET_UNALIGN(0x5, &(0x7f00000000c0))
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c014368ca15bccc3567f9f24438657a29e081d516386cff5d39"], 0xc}}, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
r3 = syz_open_pts(r2, 0x10000)
ioctl$TCSBRK(r3, 0x5409, 0x8000)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x4)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

00:08:28 executing program 5:
socket$inet(0x2, 0x4000000000000001, 0x0)
socketpair$unix(0x1, 0xabebda8e6356ecf6, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003040), 0x4000000000003c4, 0x0)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x7ffffffffffffffc, 0x4)
clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket(0x0, 0x80, 0x5)
r2 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r4, &(0x7f0000000740)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffaf)
perf_event_open$cgroup(&(0x7f0000000540)={0x3, 0x70, 0x80, 0x6, 0x0, 0x2, 0x0, 0x6db1, 0x101, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xa0, 0x2, @perf_bp={&(0x7f0000000180), 0xa}, 0x80, 0x0, 0x4, 0x7, 0x3, 0x6, 0x231}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
fcntl$setstatus(r5, 0x4, 0x88400)
pipe(&(0x7f00000007c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r7, &(0x7f00000001c0), 0x526987c9)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000008c0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7\x85k\xb4\x1d\xe9\xa6\xf6\xf8\xa3-5\x97\n\xe4}\xc3\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2<S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x8c)
socket(0x1a, 0x0, 0xfc)
socket(0x10, 0x2, 0xc)
r8 = socket(0x10, 0x2, 0xc)
write(r8, &(0x7f0000000080)="1f0000000102ff05fd4354c007f37ffff20501000800010004000100ffdf00", 0x160)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{0x2000000000040}, {0x6}]}, 0x10)
write(r6, &(0x7f0000000440)="2400000052001f00ff03f5f9002304050a04f55ae52d12caea978902161e0f861108000100020000200800428001000000", 0x31)
read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3)
sendfile(r3, r2, 0x0, 0x80004)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={<r10=>0x0}, &(0x7f00000005c0)=0xc)
r11 = syz_open_procfs(r10, &(0x7f0000000800)='\xaep&\xc4c\xe4S\xb5\xfe\xe0\xc0.\x0f\xf8\xfc=\xa4k\x03b\xf6\xf7\x93\x1cx\xe3\xec\xbfB\xa8\xa2\xae\xb1r\x7f\x1fP;\x8e\xa8Yv#\xfat\xce3\xf3C\xd76\xa3\xa5\xc2\xbe\xf6[\xb0\xd0\x9a\xb53I\xf14\xcb\xbb][M\xc0\xcc..\xa9\xd5\x15 \r\x88i\xc4\xdb/\xfe\x80\xce\xc2\x89G\xec\rkb\xea\xe4\xc0-y\x9a\xedo\x89\xee\xcc\xe5\xeb\x18\xcc\xdb\x00\x00\x00\x00\x00\x00E8e\x03\x9f.c\xfddr\x111\x9a\xf1\xd9')
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@generic={0x1, 0x10001, 0x80000000})
r12 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r12}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r12, 0x40046208, 0x0)
write(r12, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xffffffffffffffd3)
syz_open_procfs(r10, &(0x7f0000000400)='net/ip6_tables_matches\x00')
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/xr\xa7\xd6h\xddh ead-self/a\xe8tr/exec\x00', 0x2, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r11, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x13000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[]}, 0x1, 0x0, 0x0, 0x513b20e4fa06eb2d}, 0x40000)

00:08:28 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0xbef}]}, 0x10)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="733a82111a732b850a8d774d306e1d264eef7cf1fbe30566726c1960037ab7b157facd04a9d5f42a3e8baff7bc1392e3e38925d48b87ab0f1f0cce192c26beb1af7bb71e12c45706114d038179111ad2253b36c5866e9cccd4c25f870c3e6364bf68de3d236047ecb3e402bcbe938685030bf4a08f588b932eb73bce410c0e2f06cc28c678b05a478099ce11a61960aac0c1fb924bbb5fce699e355257315b30ffa91d92d224ad124e3c0005d79ab7bd2800", @ANYRES16=r2, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x800}, 0x40000044)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet6(0xa, 0x2, 0x0)
setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x81, 0x1f}]}, 0xc, 0x1)
connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendto$inet6(r6, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
fallocate(r4, 0x0, 0x7, 0x7)
gettid()
ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000580)=""/32)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0)
r7 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x80000, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000540)={0x7, &(0x7f0000000500)=[{0x3ff, 0x7, 0x0, 0x5}, {0xdf, 0x5, 0x1}, {0x804, 0x0, 0x8, 0x40}, {0x1, 0x3, 0xe2, 0x5}, {0x2f23, 0x5, 0x0, 0x80000000}, {0x0, 0x4, 0x81, 0x101}, {0x9, 0x6, 0x1f, 0x7fff}]}, 0x10)

00:08:28 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:28 executing program 4:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2000000000002, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'ip_v\xcbi0\x00', 0x20000005001})
write$P9_RLERRORu(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="148120024700000700256606000000000000002262f2ae1eb8a0aaf8fa9079d4a822b01100e8d4b4f986b6516e51daf522b689bf6a53ee363d77870ea2e93d7570dc0742f94b72a41c9c39b3ace612fa6c08e0e79c9c7050862f0e39897f4e869c0b974fdec24f863e30a0dae9400a06646a8f694f738bee24f50fdf73bc86aa6df019f19eecee7787561e593c0b9f23ed99870de07e702951454c4d38e7b1b7d80b8a26ea3063479ef88e4f9fa0094f535f10b4b600735b318c1ada07"], 0xfffffcb7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r5, 0x0, r5)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r8}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0)
linkat(r0, &(0x7f0000000500)='./file0\x00', r6, &(0x7f0000000540)='./file0\x00', 0x1000)
fstatfs(r8, &(0x7f0000000400)=""/231)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r9 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r9, &(0x7f0000000480), 0x10000000000002a1, 0x0)
accept4$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000380)=0x10, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_buf(r10, 0x1, 0x1f, &(0x7f00000002c0)=""/171, &(0x7f0000000100)=0xab)

00:08:28 executing program 2:
setrlimit(0x7, &(0x7f0000000180))
clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d68b2e4dc14aa5fa8b3d94c22")
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21c0c40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000490}, 0x8001080)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)

[  115.816339] audit_printk_skb: 51 callbacks suppressed
[  115.825644] audit: type=1400 audit(1571789308.585:61): avc:  denied  { create } for  pid=5197 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
00:08:28 executing program 4:
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
connect$unix(r4, &(0x7f00000001c0)=@file={0xbd5a69377caea091, './file0\x00'}, 0x6e)
r5 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xb8)
bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0xff52)
fsync(0xffffffffffffffff)
write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100)

00:08:28 executing program 1:
r0 = socket(0xa, 0x80000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000040)={0x1, 0x1, 0x1000, 0x85, &(0x7f0000000100)="2bb1efc9bfccacc742843dee318ad74b00d8dcb4e816e45ecc15853492ff0f168a58995c3187392d0157937afe0447f3199f3144df20810c06d44f5a4d48bde056f480784bf7485dce0825029faac3e9883650bf74af435faa4ddafdeb67b05782a23317269e06a229d64f063212182e1e49e9c86169f23b339d05af9e2e2d0633d45dc47c", 0xb9, 0x0, &(0x7f00000001c0)="fa0da5f4c55310e98d05599e4a4f57e26391ccb8937de3fdc0fa2f2b6437dde71d965c37f013a2040fb062c28bbe100f186d8832714d93836f3f208d0f0f1d580b45e7bf731837b8aeb1bc923f1e8ddcd35b7645b299532c24afdc1b57b999546724b1e1c3cc0a3e69ef03681544e5f9810688954bb72b595c81e95e8383746e48987beab0e26f3bdfe1bed996508aa500916c75c6a3daf894f3835f46225bddd0a320b9da046d9795804a641d5a5a9ebbcb6fcab1df7b293a"})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write(r0, &(0x7f00000000c0)="240000001a005f0014f9f407000904000a00000000000000000000000800100000000000", 0x24)

[  115.854803] audit: type=1400 audit(1571789308.625:62): avc:  denied  { call } for  pid=5200 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
00:08:28 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0)
dup2(r3, r0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r2)
r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4040, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x1)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000000)="0d5735f76a22b3ba6e5ccfce1973b9bd", 0x10)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x2b, @dev={0xac, 0x14, 0x14, 0xe}, 0x4e22, 0x2, 'sed\x00', 0x1, 0x7ff, 0x19}, 0x2c)

[  115.921235] binder: 5200:5206 transaction failed 29201/-1, size 0-0 line 3022
[  115.947887] binder: undelivered TRANSACTION_ERROR: 29201
00:08:28 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0063404000000c000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000002d3d24e522e166cb0f201118dc7a1b4585524ce6cc1ed0d0ede72a6475260c7065391012d43e1f87563e1da767006d920d19965d81bbda42f1ba1ef88490824b0549f9cd"], 0x0, 0x0, 0x0})

[  115.982376] audit: type=1400 audit(1571789308.745:63): avc:  denied  { create } for  pid=5216 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  115.999952] audit: type=1400 audit(1571789308.745:64): avc:  denied  { call } for  pid=5232 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  116.000008] binder: 5232:5234 transaction failed 29201/-1, size 0-0 line 3022
[  116.003297] binder: undelivered TRANSACTION_ERROR: 29201
[  116.006476] audit: type=1400 audit(1571789308.745:65): avc:  denied  { call } for  pid=5232 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
00:08:28 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x9c}, {0x80000006}]}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f000000ac80), 0x400000000000254, 0x0)

[  116.006535] binder: 5232:5235 transaction failed 29201/-1, size 0-0 line 3022
[  116.008609] binder: undelivered TRANSACTION_ERROR: 29201
[  116.013763] audit: type=1400 audit(1571789308.785:66): avc:  denied  { create } for  pid=5196 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0
[  116.021184] audit: type=1400 audit(1571789308.785:67): avc:  denied  { create } for  pid=5196 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0
[  116.062661] binder: 5238:5239 got transaction to invalid handle
[  116.062670] binder: 5238:5239 transaction failed 29201/-22, size 0-1638400 line 3014
[  116.063227] binder: undelivered TRANSACTION_ERROR: 29201
00:08:28 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
readahead(r1, 0x9, 0x8000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  116.087245] audit: type=1400 audit(1571789308.855:68): avc:  denied  { create } for  pid=5196 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  116.219270] audit: type=1400 audit(1571789308.985:69): avc:  denied  { call } for  pid=5249 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  116.266454] binder: 5249:5250 transaction failed 29201/-1, size 0-0 line 3022
[  116.288857] binder: undelivered TRANSACTION_ERROR: 29201
[  116.297475] audit: type=1400 audit(1571789309.065:70): avc:  denied  { call } for  pid=5249 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  116.320425] binder: 5249:5252 transaction failed 29201/-1, size 0-0 line 3022
[  116.328656] binder: undelivered TRANSACTION_ERROR: 29201
00:08:29 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1})
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x3f, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet(r0, &(0x7f000000c7c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)={0x2, 0x4e24, @rand_addr=0xffe}, 0x10, 0x0}}], 0x2, 0x0)

00:08:29 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0)
set_robust_list(&(0x7f0000000200)={&(0x7f0000000080)={&(0x7f0000000040)}, 0xb4b, &(0x7f0000000180)={&(0x7f00000000c0)}}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00', 0xd102})
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x200011b9}], 0x1, 0x0)
dup2(r1, r2)
r3 = gettid()
tkill(r3, 0x1000000000016)

00:08:29 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
socketpair(0xf87a514574b56c8f, 0x800, 0x2d, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'gretap0\x00', <r4=>0x0})
r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000300)={<r6=>0x0, @remote, @empty}, &(0x7f0000000340)=0xc)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={<r7=>0x0, @multicast1, @initdev}, &(0x7f00000003c0)=0xc)
r8 = socket(0x100000000011, 0x2, 0x0)
bind(r8, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, <r9=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @local}, 0x10)
dup(r8)
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000002c0)={r9, 0x1, 0x6, @broadcast}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000840)=0xe8)
r12 = socket(0x100000000011, 0x2, 0x0)
bind(r12, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r12, &(0x7f0000000040)={0x11, 0x0, <r13=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000000100)={r13, 0x1, 0x6, @local}, 0x10)
dup(r12)
setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f00000002c0)={r13, 0x1, 0x6, @broadcast}, 0x10)
r14 = socket(0x100000000011, 0x2, 0x0)
bind(r14, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r14, &(0x7f0000000040)={0x11, 0x0, <r15=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r14, 0x107, 0x1, &(0x7f0000000100)={r15, 0x1, 0x6, @local}, 0x10)
dup(r14)
setsockopt$packet_add_memb(r14, 0x107, 0x1, &(0x7f00000002c0)={r15, 0x1, 0x6, @broadcast}, 0x10)
r16 = socket(0x100000000011, 0x2, 0x0)
bind(r16, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r16, &(0x7f0000000040)={0x11, 0x0, <r17=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r16, 0x107, 0x1, &(0x7f0000000100)={r17, 0x1, 0x6, @local}, 0x10)
r18 = dup(r16)
setsockopt$packet_add_memb(r16, 0x107, 0x1, &(0x7f00000002c0)={r17, 0x1, 0x6, @broadcast}, 0x10)
accept4$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14, 0x80000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r20=>0xffffffffffffffff})
r21 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r21, r20)
ioctl$ifreq_SIOCGIFINDEX_team(r21, 0x8933, &(0x7f0000000ac0)={'team0\x00', <r22=>0x0})
r23 = socket(0x100000000011, 0x2, 0x0)
bind(r23, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r23, &(0x7f0000000040)={0x11, 0x0, <r24=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r23, 0x107, 0x1, &(0x7f0000000100)={r24, 0x1, 0x6, @local}, 0x10)
dup(r23)
setsockopt$packet_add_memb(r23, 0x107, 0x1, &(0x7f00000002c0)={r24, 0x1, 0x6, @broadcast}, 0x10)
r25 = socket(0x100000000011, 0x2, 0x0)
bind(r25, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r25, &(0x7f0000000040)={0x11, 0x0, <r26=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r25, 0x107, 0x1, &(0x7f0000000240)={r17, 0x1, 0x6, @dev={[], 0x16}}, 0x10)
dup(r25)
setsockopt$packet_add_memb(r25, 0x107, 0x1, &(0x7f00000002c0)={r26, 0x1, 0x6, @broadcast}, 0x10)
r27 = socket(0x100000000011, 0x2, 0x0)
bind(r27, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r27, &(0x7f0000000040)={0x11, 0x0, <r28=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r27, 0x107, 0x1, &(0x7f0000000100)={r28, 0x1, 0x6, @local}, 0x10)
dup(r27)
setsockopt$packet_add_memb(r27, 0x107, 0x1, &(0x7f00000002c0)={r28, 0x1, 0x6, @broadcast}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000b00)={0x11, 0x0, <r29=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b40)=0x14)
r30 = socket(0x100000000011, 0x2, 0x0)
bind(r30, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r30, &(0x7f0000000040)={0x11, 0x0, <r31=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r30, 0x107, 0x1, &(0x7f0000000100)={r31, 0x1, 0x6, @local}, 0x10)
dup(r30)
setsockopt$packet_add_memb(r30, 0x107, 0x1, &(0x7f00000002c0)={r31, 0x1, 0x6, @broadcast}, 0x10)
r32 = socket(0x100000000011, 0x2, 0x0)
bind(r32, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r32, &(0x7f0000000040)={0x11, 0x0, <r33=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r32, 0x107, 0x1, &(0x7f0000000100)={r33, 0x1, 0x6, @local}, 0x10)
dup(r32)
setsockopt$packet_add_memb(r32, 0x107, 0x1, &(0x7f00000002c0)={r33, 0x1, 0x6, @broadcast}, 0x10)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001440)=ANY=[@ANYBLOB=' \b\x00\x00', @ANYRES16=r2, @ANYBLOB="200027bd7000fddbdf250000000008000100", @ANYRES32=r3, @ANYBLOB="bc00020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000010008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400cc3b000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400e1000000080007000000000008000100", @ANYRES32=r6, @ANYRES16=r18, @ANYRES32=r7, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e6365003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400ff01201fff7f0000010081090000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r10, @ANYRESHEX=r1, @ANYRES32=r11, @ANYBLOB="0400020008000100", @ANYRES32=r13, @ANYBLOB="8800020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400000000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r15, @ANYBLOB="d0010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000900000008000600", @ANYRES32=r17, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400ffffff7f08000600", @ANYRES32=r19, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400040000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d00004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f6164636173740000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c00040008003903070000000700070500000000fdff81ff0e00000008000100", @ANYRES32=r22, @ANYBLOB="7c0102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000800000008000600", @ANYRES32=r26, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="b400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000300000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r29, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ff7f000008000100", @ANYRES32=r31, @ANYBLOB="cc0002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400060000000800070000000000"], 0x27}, 0x1, 0x0, 0x0, 0x2600c80e}, 0x4090)

00:08:29 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0)
ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00')
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x200000, 0x0)
ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000080)={0x3, 0xfd4, 0x80000001, 0x8, 0x4, 0x7})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

00:08:29 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x6}]})

00:08:29 executing program 2:
setrlimit(0x7, &(0x7f0000000180))
clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d68b2e4dc14aa5fa8b3d94c22")
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21c0c40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000490}, 0x8001080)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)

00:08:29 executing program 4:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
keyctl$set_reqkey_keyring(0xe, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x6, 0x5, 0xe1, &(0x7f0000000100)="d4f682e62556a5aa71e86cffe89ef84cf96e5988eadb5408f4b231c883e75c86a188d007af0d9df38b42d228d82c022ea195bdb707988fdaaad9446aff9ec68641e7672e216e8ef06b477908a8618a2e057ef16df0482dbe7a9b17d7b98ee352683089e2c9d72baf543e734d0b13bbfedd11e33e88e7266485eca4bb6e485c5c30ea60d626a78e8a02424e6d32bd39f3904740d1588efc28b5286a5748011360455543a0213fc1891fab0bd9818a5e8627bf44d75a14445c9fcdad7a1d8aa6557a61709f957134370d7e28100c894e6cb954bed218c197001acc4b5e4befb44c77"})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1c8}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0)

[  116.687179] binder: 5259:5261 transaction failed 29201/-1, size 0-0 line 3022
[  116.710314] input: syz1 as /devices/virtual/input/input12
[  116.725280] device lo entered promiscuous mode
00:08:29 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='|\x81\x00\x00\x00\x00\x19\x16\x10[=#\"\xc8\x01\x14\xdc\xfa`\xc1\xdd`\xd7\xff\xdeEx\xd2\x12\xe5a\x8bg-\xb2oRS\v\xd0zG\xb0\x82m\x95 \x81\xb2\xfd\x85f?\xa7\x82\xc8\xac\x842\xb3\x1b\x8d/\xdfwJ\xb1\xff\fM\x9e\x0f\x06\'\x11~j\x1a\x9d\xd3\x19S\xe84tK\xda\x99;\x04\xe5\x93l\xd3\xeaU\xb0\x0f\xe3')
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00')
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x210000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
r6 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$packet_buf(r6, 0x107, 0x5, &(0x7f0000000100)="f55f60e6c9daa35f4077af64847a7064e9f0075eb5ec09aec2ff8ca38a7f01d1d6df5cb1f5efa1d3097adf57d5b6d3c6b1", 0x31)
fsetxattr$security_smack_transmute(r2, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x2)
exit(0x0)
sendfile(r1, r0, 0x0, 0xfff)

[  116.788939] binder: undelivered TRANSACTION_ERROR: 29201
00:08:29 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="2400000026007f000004000000007701006006ff0100000000000400180000000000ff10", 0x24)

00:08:29 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x102})
ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})
read(r2, &(0x7f0000000380)=""/24, 0xfffffd64)
fchdir(r0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0xc32f, &(0x7f0000000440)=<r4=>0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x400, 0x91)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r5, 0x0)
ftruncate(r3, 0x48280)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x4e21, @multicast1}, {0x306, @remote}, 0x7a, {0x2, 0x4e23, @empty}, 'nlmon0\x00'})
poll(&(0x7f00000003c0)=[{r7}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r8})
r9 = openat$cgroup_int(r8, &(0x7f0000000000)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r9, 0xc0046686, &(0x7f0000000580)={0x1, 0xea, "03d109648fbfa6d44abc30169c60d573216ce9d31d57b615591cf0a419ff67e443dc7cddfe113e7a08cc9c187b5fc8ad5330b6eb788899b74516234dfe31aee70b61c401f077b5c6fdb7d22a28185d9d90dca1417a4668d0b776028f96882749f2e1a70d37ca3871c86c6684a22543a167213e12d84c8b9059be10e2c08d637ebf852f0b2e3e142fd001e4466b447d386a435af53421c523adc857352fdda7a9cfd0a109a80fa52dccb0a6833eb6a5a46accc32c01e98dc37b2083f289092d7ebdae6a1261ba615f332c2e1c8373befd5d03946b725eb6f7fbb21faf98f63e646bc6cf178cf1741bf4f9"})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uhid\x00', 0x802, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r10 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r10, &(0x7f0000000080)={0x14}, 0xfffffff4)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  116.880195] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28193 sclass=netlink_xfrm_socket
00:08:29 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
io_setup(0x1000, &(0x7f0000000080)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000040)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x9}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}])
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x101000, 0x0)
write$P9_RMKDIR(r3, &(0x7f0000000100)={0x14, 0x49, 0x1, {0xaa78acbee436eaac, 0x4, 0x2}}, 0x14)

00:08:29 executing program 5:
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
clone(0x400000080400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

00:08:29 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
epoll_create(0x1)
pipe(&(0x7f00000002c0))
pipe(&(0x7f0000000040))
syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00')
pipe(&(0x7f0000000280))
openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$packet(0x11, 0x20000000000003, 0x300)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0)
socket(0x100000000011, 0xa, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000240))
creat(&(0x7f00000004c0)='./bus\x00', 0x0)
epoll_create1(0x0)
socket$key(0xf, 0x3, 0x2)
pipe2(&(0x7f0000000000), 0x0)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c6ecd80"], 0x4}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3b)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[  117.064529] syz-executor.1 (5294) used greatest stack depth: 23296 bytes left
[  117.086032] device lo left promiscuous mode
[  117.136210] binder: 5259:5310 transaction failed 29201/-1, size 0-0 line 3022
[  117.152167] device lo entered promiscuous mode
[  117.163753] binder: undelivered TRANSACTION_ERROR: 29201
00:08:30 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x4)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:30 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x6}]})
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x40000)
fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = getuid()
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x3, "b4b476fd10bdfda0"})
setresuid(r2, r3, r4)
socket$inet_udp(0x2, 0x2, 0x0)

[  117.424989] device lo left promiscuous mode
00:08:30 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0})
r1 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x80000)
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000000c0)={{0x2, @local, 0x4e22, 0x1, 'ovf\x00', 0x8, 0x1f, 0x1f}, {@multicast1, 0x4e23, 0x3, 0x4, 0x40, 0x5d35}}, 0x44)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  117.479574] binder: 5317:5318 transaction failed 29201/-1, size 0-0 line 3022
[  117.487826] binder: undelivered TRANSACTION_ERROR: 29201
[  117.508645] binder: 5320:5321 transaction failed 29201/-1, size 0-0 line 3022
[  117.517466] binder: undelivered TRANSACTION_ERROR: 29201
00:08:30 executing program 0:
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x6, 0x7fffffff}]}, 0xc, 0x0)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x40000, 0x0)
fchdir(r0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180), 0x4)
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:30 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$netlink(r3, 0x10e, 0x8, &(0x7f0000000000)=""/131, &(0x7f0000000140)=0x83)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
pipe(&(0x7f0000000180))
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000002c0)}, 0xfffffed6)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, 0x0, 0xffffffc0}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446)

[  117.525003] binder: 5320:5322 transaction failed 29201/-1, size 0-0 line 3022
[  117.532614] binder: undelivered TRANSACTION_ERROR: 29201
[  117.560436] binder: 5325:5326 transaction failed 29201/-1, size 0-0 line 3022
00:08:30 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x58c4}, 0x8)
r4 = getpgrp(0xffffffffffffffff)
capset(&(0x7f0000000580)={0x99314a5, r4}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9, 0x9, 0x119})
writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1)

[  117.579143] binder: undelivered TRANSACTION_ERROR: 29201
00:08:30 executing program 3:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x3, 0x4)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98fa], [0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x0)
r2 = dup(r0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x4a)
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
accept$packet(0xffffffffffffffff, 0x0, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
llistxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)=""/166, 0xa6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @ipv4={[], [], @rand_addr=0x7}, 0x1000}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

00:08:30 executing program 0:
syz_open_dev$binderN(&(0x7f0000000000)='/\b\x00\x00\x15\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0))
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x1, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0x85, 0x0, 0x0, "a2308ab82df2ec61e4555f770df4a53e", "9e8d1f6cdcc7b72c72f79954db783da5b55aa0ad8e1807728cf1ab0787cc2b4c194649e6c28c080d816c349355d2ceb92446f9714c77f8259d387668bf591234d9226748122daf4048e82fb2997df474dcdcafda7fb81ff94a42fc6c40b1596b795b8294993e29152f1d1b995ca1ec2ac19e37969ffd3b33717bc310bd23525bf2b6e738cd8567e9755b02beb87a66d955a02377ef2d6ceb62e15083f697f0d23e0de6fa359bfe279c5b1d9d5d72c2acff2f984fb9e634b88cf7626340f08949a1c82e92f23934b8645165af766c39ee5729d7107443c9f6a1affae0abd2bbcdd61bc1df8d8be71c4473252b61222957ae59dec2223069b8c4"}, 0x265, 0x5)
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r2 = getpgid(0xffffffffffffffff)
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$TIOCCONS(r6, 0x541d)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:30 executing program 4:
pipe(&(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000400)=<r3=>0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000800)='n\x00p\xb3o\xf0\x89k\x018\xc7ute\x00x\x9d\xa9K\xda\x9e\xc7\x15\xe4\x81\x81V\xb7o\t$u\xef\xd2=-!*\x94,\xe3\xaf->\xd1c\x84O\xec\x8b\xa9]PY`\x87\xb9\xb1\xde\xda\x00\x98\xb2\xcb\xb4\xab\x83\xc9\x9e\x00F\xfe;\xc9\xa9\xbe\xaa\x12\x83}H\t\xa7l\x9dz\x17\xe9\xdb\x11\xa6\xe81B\xd4\xe4\tZ\xe4\xe3\xd4$\xb5\x8f\x18 S\xbd\xa8\xe2\xf8\xdd2w\'\x95\xdbz+\xc2\xd6j\xeb\xadC\xadO\x85\xa7P4W\xb8\xa2\x17\x85\x1e\xd1\xed\xb0\x0f\xe0e\xfe\r\xc67<\xcd\xfd8WT\xc8\xa3xS2C\x90xSV\xd9\x95\xd8\xb7T!\a\xd0\xa1j\xba\xc2\x84\xf8\xfd\xdf(>\x06\x96\xaea\xff|\nu\xa9\xbc\x10q_\xdc\xc9\x12i\x04\x8ef\xb42\xd8\xe4\xf1y\xc4\xbf\xcb\"*\xfe\x19\xb5\xc1\x04B')
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
socket$packet(0x11, 0x2000000003, 0x300)
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
fsetxattr$security_smack_transmute(r1, &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000680)='TRUE', 0x4, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
clone(0x81000000, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0x20000000000002c, &(0x7f0000f59ffc)=0x5, 0x4)
r6 = socket$inet6(0xa, 0x82, 0xfffffffffffffffe)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000300)=0x8000006, 0xfffffdee)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r8, 0x0)
fstat(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000580)={0xa0, 0x0, 0x7, {{0x2, 0x2, 0x3, 0xe4, 0x7, 0x8, {0x0, 0x8, 0x100000001, 0x44, 0xdf2, 0xffff, 0x7fffffff, 0x101, 0x2, 0x1, 0xfffffffffffffff8, r7, r9, 0x9762, 0x4}}, {0x0, 0x5}}}, 0xa0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c)
getpid()
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0x1)
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
sendto$inet(r5, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x1fa)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10)
sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0)
shutdown(r5, 0x1)

00:08:30 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000240)="3172ec8e0d3318dcd807f71041eebf705d4f05ccd20af32d2ddedd0c634cf3f8ad9b5c76d33099acb2e93d357e7d34487bf8a1d448fac638de53293c5e7aea168240c045df55bcfa7cfe72c10d081e2c0eeb61223024bc2de7948e667180eb8bf5237759ed4077044e085b14858d8ff2489929184acd886445225ecf0f85e3be9ca659d4b1ac0427c954f4ad7ee808b76e9aeb122ed4f93ca89ad9f006582fdf2e2cc1c51f0f1f047ca6aaabdca59584336f27580238c43f1e44c3fb6392b6a8f5c6083733ffdded8b8f2fd2ae9a16d2eb48")

00:08:30 executing program 1:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x0, 0x0)
socketpair(0x0, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40020001}, 0x24000000)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0)
open(0x0, 0x475100, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe)
fcntl$setstatus(r2, 0x4, 0x6100)
pipe(&(0x7f0000000540))
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e6b2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r4, 0x0, 0x8000fffffffe)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
memfd_create(&(0x7f0000000040)='u', 0x0)
sendfile(r2, r4, 0x0, 0xa5cc554)

[  117.662753] input: syz1 as /devices/virtual/input/input14
[  117.692677] binder: 5342:5345 transaction failed 29201/-1, size 0-0 line 3022
[  117.728135] binder: undelivered TRANSACTION_ERROR: 29201
[  117.811553] input: syz1 as /devices/virtual/input/input15
00:08:32 executing program 5:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
ftruncate(0xffffffffffffffff, 0x0)
exit_group(0x6812)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000000)={0x4, 0x8, 0x3f, 0x4, 0x6, 0x69b})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

00:08:32 executing program 0:
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:32 executing program 2:
sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80", 0x396, 0x0, 0x0, 0xb3)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00')
preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0x11}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'veth1\x00', 0x5})
fchdir(r1)
quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0))

00:08:32 executing program 3:
pipe(&(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000400)=<r3=>0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000800)='n\x00p\xb3o\xf0\x89k\x018\xc7ute\x00x\x9d\xa9K\xda\x9e\xc7\x15\xe4\x81\x81V\xb7o\t$u\xef\xd2=-!*\x94,\xe3\xaf->\xd1c\x84O\xec\x8b\xa9]PY`\x87\xb9\xb1\xde\xda\x00\x98\xb2\xcb\xb4\xab\x83\xc9\x9e\x00F\xfe;\xc9\xa9\xbe\xaa\x12\x83}H\t\xa7l\x9dz\x17\xe9\xdb\x11\xa6\xe81B\xd4\xe4\tZ\xe4\xe3\xd4$\xb5\x8f\x18 S\xbd\xa8\xe2\xf8\xdd2w\'\x95\xdbz+\xc2\xd6j\xeb\xadC\xadO\x85\xa7P4W\xb8\xa2\x17\x85\x1e\xd1\xed\xb0\x0f\xe0e\xfe\r\xc67<\xcd\xfd8WT\xc8\xa3xS2C\x90xSV\xd9\x95\xd8\xb7T!\a\xd0\xa1j\xba\xc2\x84\xf8\xfd\xdf(>\x06\x96\xaea\xff|\nu\xa9\xbc\x10q_\xdc\xc9\x12i\x04\x8ef\xb42\xd8\xe4\xf1y\xc4\xbf\xcb\"*\xfe\x19\xb5\xc1\x04B')
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
socket$packet(0x11, 0x2000000003, 0x300)
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
fsetxattr$security_smack_transmute(r1, &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000680)='TRUE', 0x4, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
clone(0x81000000, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0x20000000000002c, &(0x7f0000f59ffc)=0x5, 0x4)
r6 = socket$inet6(0xa, 0x82, 0xfffffffffffffffe)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000300)=0x8000006, 0xfffffdee)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r8, 0x0)
fstat(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000580)={0xa0, 0x0, 0x7, {{0x2, 0x2, 0x3, 0xe4, 0x7, 0x8, {0x0, 0x8, 0x100000001, 0x44, 0xdf2, 0xffff, 0x7fffffff, 0x101, 0x2, 0x1, 0xfffffffffffffff8, r7, r9, 0x9762, 0x4}}, {0x0, 0x5}}}, 0xa0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c)
getpid()
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0x1)
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
sendto$inet(r5, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x1fa)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10)
sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0)
shutdown(r5, 0x1)

00:08:32 executing program 1:
clone(0x40000000200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000800)='./file0\x00', 0x27e, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4)

00:08:32 executing program 4:
pipe(&(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000400)=<r3=>0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000800)='n\x00p\xb3o\xf0\x89k\x018\xc7ute\x00x\x9d\xa9K\xda\x9e\xc7\x15\xe4\x81\x81V\xb7o\t$u\xef\xd2=-!*\x94,\xe3\xaf->\xd1c\x84O\xec\x8b\xa9]PY`\x87\xb9\xb1\xde\xda\x00\x98\xb2\xcb\xb4\xab\x83\xc9\x9e\x00F\xfe;\xc9\xa9\xbe\xaa\x12\x83}H\t\xa7l\x9dz\x17\xe9\xdb\x11\xa6\xe81B\xd4\xe4\tZ\xe4\xe3\xd4$\xb5\x8f\x18 S\xbd\xa8\xe2\xf8\xdd2w\'\x95\xdbz+\xc2\xd6j\xeb\xadC\xadO\x85\xa7P4W\xb8\xa2\x17\x85\x1e\xd1\xed\xb0\x0f\xe0e\xfe\r\xc67<\xcd\xfd8WT\xc8\xa3xS2C\x90xSV\xd9\x95\xd8\xb7T!\a\xd0\xa1j\xba\xc2\x84\xf8\xfd\xdf(>\x06\x96\xaea\xff|\nu\xa9\xbc\x10q_\xdc\xc9\x12i\x04\x8ef\xb42\xd8\xe4\xf1y\xc4\xbf\xcb\"*\xfe\x19\xb5\xc1\x04B')
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
socket$packet(0x11, 0x2000000003, 0x300)
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
fsetxattr$security_smack_transmute(r1, &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000680)='TRUE', 0x4, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
clone(0x81000000, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0x20000000000002c, &(0x7f0000f59ffc)=0x5, 0x4)
r6 = socket$inet6(0xa, 0x82, 0xfffffffffffffffe)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000300)=0x8000006, 0xfffffdee)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r8, 0x0)
fstat(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000580)={0xa0, 0x0, 0x7, {{0x2, 0x2, 0x3, 0xe4, 0x7, 0x8, {0x0, 0x8, 0x100000001, 0x44, 0xdf2, 0xffff, 0x7fffffff, 0x101, 0x2, 0x1, 0xfffffffffffffff8, r7, r9, 0x9762, 0x4}}, {0x0, 0x5}}}, 0xa0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c)
getpid()
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0x1)
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
sendto$inet(r5, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x1fa)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10)
sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0)
shutdown(r5, 0x1)

00:08:33 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  120.200773] binder: 5367:5376 transaction failed 29201/-1, size 0-0 line 3022
[  120.213792] binder: undelivered TRANSACTION_ERROR: 29201
[  120.215880] binder: 5367:5381 transaction failed 29201/-1, size 0-0 line 3022
[  120.237549] binder: 5383:5385 transaction failed 29201/-1, size 0-0 line 3022
[  120.243247] binder: undelivered TRANSACTION_ERROR: 29201
00:08:33 executing program 2:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
personality(0x4100001)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_to_bridge\x00'})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x8000, 0x0)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00')
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xcee452d6d328fcc3, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @broadcast}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323)
r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000040))
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="000000000000010000000000000000000000001e0000000000000000", @ANYRES32=r4, @ANYBLOB="000000000500"/28])
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, &(0x7f00000001c0)=0x7fff, 0x4)
bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
setsockopt$inet6_opts(r7, 0x29, 0x3f, &(0x7f0000000200)=@fragment={0x0, 0x0, 0x4, 0x4, 0x0, 0xbe14, 0x64}, 0x8)
write(r7, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
clock_gettime(0x0, &(0x7f00000005c0)={<r8=>0x0, <r9=>0x0})
pselect6(0x40, &(0x7f0000000180)={0x7f, 0xdc, 0x0, 0xbe7, 0x5, 0x1f, 0x10001, 0xfffffffffffffff9}, &(0x7f00000003c0)={0x101, 0x3, 0x0, 0x0, 0xd4, 0x2, 0x40000000000000, 0x8000}, &(0x7f0000000400)={0x101, 0x80000000, 0x7, 0x6d1, 0xa9d, 0x100, 0x80, 0x8}, &(0x7f0000000600)={r8, r9+10000000}, &(0x7f0000000680)={&(0x7f0000000640)={0x1}, 0x8})
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
sendto(r7, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0)
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0102fff87d7ce34471831e9c34d1b24faa77b9cf223e0f79b58b2ce4570357851d1849e5c66fe3d9cf8a9c16403d5a1d72b9e820624a2572c210b61bc4705f9251e363760d6af2a7a84d8eaa4f8a269e76bcbfd7748343c6c93d5ab866d89f652c034deedde9c994289df63f47cc46a0ef7df0c1c8373a6e"], 0x1)
recvmmsg(r7, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
sendfile(r3, r6, &(0x7f0000000140), 0x8fff)

00:08:33 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20)
r2 = socket(0x1f, 0x40002, 0x1)
r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={0x1}, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07513abbe3b197fcb9634040020000000000000040000000000000000000000020004b0000000000001800"/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000050000000000000001000000000000003900000000000000852a646600000000", @ANYRES32=r3, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"]], 0x4c, 0x0, &(0x7f0000000340)="235aaffc3992c84d049dfb6dc16d047115a219b90b8a8a6a01b7b32b9247c58b7aa9b7a91f77f66c4073acb26bcddeb0cf9a7c3b7f6c22b912c7a02a7152b01d55a213b07b89337cff6dd412"})
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0x3ff)

[  120.254515] binder: undelivered TRANSACTION_ERROR: 29201
00:08:33 executing program 1:
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x40)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/ip_mr_cache\x00')
write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfffffffffffffd7e)
rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='./file1\x00')
lseek(r0, 0x0, 0x1)

00:08:33 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
r3 = epoll_create1(0xc0000)
tee(r2, r3, 0x1, 0x8)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000200)={0xe0400000, 0x8, 0x200001f, 0x40008, 0x8})
r6 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
rmdir(&(0x7f0000000100)='./file0\x00')
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0)
pipe2(&(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r8})
ioctl$TIOCEXCL(r7, 0x540c)
ioctl$PERF_EVENT_IOC_ID(r8, 0x80082407, &(0x7f0000000000))
r9 = dup3(r1, r4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)

[  120.339062] binder: 5397:5399 transaction failed 29201/-1, size 0-0 line 3022
00:08:33 executing program 1:
clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x36)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0xfffffffffffffe54, &(0x7f00000000c0)=[{0x0, 0xfffffffffffffce2}, {0x0, 0x15e}, {0x0, 0x3ff}, {&(0x7f0000000000)=ANY=[], 0x9c}], 0x1000000000000063, 0x0, 0xfffffffffffffe82}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
memfd_create(0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0)
tkill(r0, 0x17)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
fsetxattr$security_evm(r3, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0233db6bf7d4c6c3bc799df222a748844f02c97573373c76efd146373f2aaf296fc06065478d7a084c6ff8dabad01b9c9aa773ae810086b919d22cbfbc6d277b888b4d86d7839a5956537934dc76551921d0a46dcd996ca1406ad49d7f3d3066e90c4c8c418f5f31ba6df7fc6fc1c754648275fd0d0ad080b28e"], 0x1, 0x2)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0)
read(r1, &(0x7f0000000200)=""/250, 0xfffffe8a)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x9, 0x100000001, 0x10001, 0x8, 0x2, 0x3, 0x4, 0x1f4, 0x40, 0x14c, 0x0, 0x5, 0x38, 0x1, 0x80, 0x2, 0x7}, [{0x2, 0xfff, 0x7ff, 0x3, 0x2, 0x7, 0x911, 0x80000000}], "be5d0b7aafba3908eabaa1818d8d6a", [[], []]}, 0x287)
inotify_init()
clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x2, 0xc)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000000c0)=0x1)

00:08:33 executing program 4:
open(0x0, 0x4400, 0x1c0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000380)='./bus\x00', 0x100)
ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0)
fcntl$setstatus(r1, 0x4, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x282a41, 0x0)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4)
add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e20, @rand_addr=0x5}, 0x10)
write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="7f"], 0x1)
sendto$inet(r5, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac60bded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x9, 0x0, 0x27)
sendfile(r5, r4, &(0x7f0000000040), 0x8000fffffffe)
writev(r1, &(0x7f0000000680), 0x0)
socket$inet6(0xa, 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0)
socket$inet6(0xa, 0x0, 0x6)
pipe(0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=0x6, 0x4)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000040)=0x6, 0x4)
write$selinux_load(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7abafa13aed9acf84b8d16232f363947d603e06455778662875f3b089907bb8e50c1b7cda93ff3fdcb7477999316e676190436309524a871c827e7ca659435c4f2e43e2f8e1dd46eebe904efdaefd90290a36cb3bf08efed7c2e54c86dbced10dfaedcdeb57dbafbd8b1dccb61936790b04c2240006acf5b0d1ceba81dc977b9717ab1e89c995f45fa"], 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0)

00:08:33 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0063404000000000000507cdc6ffffff0000000c000000000000000000000000000014000000000000000000000000000000000000000000000000000000000000000000b6597e38491f963e84e903af29fb4484f22820aeab8a6b6e8f2c31e791ade9464914c038a634b1740e422afee4285bf3ca578e1fa51a33585e3e801cab7dfa7abfadd05cb791a404efe3e20f857432eb13327e9e574a55922e78693ac8b67431c0f419332222389bd31fba10"], 0x0, 0x0, 0x0})

[  120.406056] binder: 5397:5405 unknown command -1153806073
[  120.412353] binder: 5397:5405 ioctl c0306201 20000180 returned -22
[  120.433717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28265 sclass=netlink_route_socket
00:08:33 executing program 3:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r0, 0x88001)
write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7)
r1 = socket(0x11, 0x3, 0x0)
setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="1f06bfb8", 0x4)
bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140)=0x102, 0x4)
sendfile(r1, r2, 0x0, 0x4e68d5f8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400201)

00:08:33 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00c@D\x00'/68], 0x0, 0x0, 0x0})

[  120.476547] binder: 5415:5416 transaction failed 29201/-1, size 0-0 line 3022
[  120.507469] binder: undelivered TRANSACTION_ERROR: 29201
[  120.511491] binder: 5415:5424 transaction failed 29201/-1, size 0-0 line 3022
[  120.531876] binder: 5425:5426 unknown command 1145070336
[  120.550471] binder: undelivered TRANSACTION_ERROR: 29201
[  120.556543] binder: 5425:5426 ioctl c0306201 20000140 returned -22
00:08:33 executing program 4:
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000000)='\x00', 0x1, 0xfffffffffffffffd)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
pipe(&(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
keyctl$revoke(0x3, r0)
add_key$keyring(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000100)='syz', 0x0)

[  120.597323] binder: 5425:5431 unknown command 1145070336
00:08:33 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000004f0000c0000000000000000000000000000000000000100000000000000000"], 0x0, 0x0, 0x0})

[  120.640037] binder: 5425:5431 ioctl c0306201 20000140 returned -22
00:08:33 executing program 4:
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x1300, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@mcast2, 0x0, 0x0, 0x3, 0x100000000000009}, 0x20)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x9, @mcast2, 0x1}, 0x1c)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400400)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_open_dev$loop(0x0, 0x0, 0x182)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r6)
r7 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe)
fcntl$getownex(r7, 0x10, 0x0)
inotify_init()
fcntl$setstatus(r7, 0x4, 0x6100)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)

[  120.724028] binder: 5439:5440 transaction failed 29201/-1, size 824633741056-0 line 3022
[  120.784758] binder: undelivered TRANSACTION_ERROR: 29201
[  120.793370] binder: 5439:5444 transaction failed 29201/-1, size 824633741056-0 line 3022
[  120.834510] binder: undelivered TRANSACTION_ERROR: 29201
[  120.984379] audit_printk_skb: 87 callbacks suppressed
[  121.008779] audit: type=1400 audit(1571789313.745:100): avc:  denied  { create } for  pid=5411 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0
[  121.690115] audit: type=1400 audit(1571789314.455:101): avc:  denied  { create } for  pid=5392 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  121.820803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28265 sclass=netlink_route_socket
00:08:35 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x3f, 0x1}, 0x1c)
r4 = dup2(r2, r3)
write$P9_RVERSION(r4, 0x0, 0x0)
ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000000)={0x30, 0x2b, 0x8, 0x1f, 0x6, 0x0, 0x0, 0x43, 0xffffffffffffffff})

00:08:35 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='\x05\x00\x00\a\x00\x00\x01\x00\xb0', 0x2000, 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
accept$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x1000)
write$P9_RREAD(r2, &(0x7f0000000180)={0x7c, 0x75, 0x1, {0x71, "234f8b1249a2dc08e7059baa23fb213dad6e3cb1ec0a3a265d63f15a88c654fc1dfef4b4ac8067a138b0145eca5a7dc68f248820f6dcf3d2ac6caf1f375ae0ad2bd008d608ad5c470c90343b63fb4109e8a54d75766e5fa9e373cece82b3ce75d0b17afcd890e2a76dcbf068e8fd03c11a"}}, 0x7c)
close(r0)

00:08:35 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x9})
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r2], 0x0, 0x0, 0x0})

00:08:35 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x40)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff)
syz_open_pts(r3, 0x300)
ptrace$cont(0x7, r1, 0x0, 0x0)
syz_open_procfs(r1, &(0x7f0000000000)='net/snmp6\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r5 = syz_open_pts(r4, 0x101000)
ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000080)={0x1000, 0x2, 0x4, 0x2, 0xa, 0x8, 0x20, 0x7f, 0x8, 0xd7})
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r6 = timerfd_create(0x0, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r8}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0)
dup(r8)
poll(&(0x7f00000003c0)=[{r7}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000040))
readv(r6, &(0x7f0000000440)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

00:08:35 executing program 1:
clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x36)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0xfffffffffffffe54, &(0x7f00000000c0)=[{0x0, 0xfffffffffffffce2}, {0x0, 0x15e}, {0x0, 0x3ff}, {&(0x7f0000000000)=ANY=[], 0x9c}], 0x1000000000000063, 0x0, 0xfffffffffffffe82}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
memfd_create(0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0)
tkill(r0, 0x17)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
fsetxattr$security_evm(r3, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0233db6bf7d4c6c3bc799df222a748844f02c97573373c76efd146373f2aaf296fc06065478d7a084c6ff8dabad01b9c9aa773ae810086b919d22cbfbc6d277b888b4d86d7839a5956537934dc76551921d0a46dcd996ca1406ad49d7f3d3066e90c4c8c418f5f31ba6df7fc6fc1c754648275fd0d0ad080b28e"], 0x1, 0x2)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0)
read(r1, &(0x7f0000000200)=""/250, 0xfffffe8a)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x9, 0x100000001, 0x10001, 0x8, 0x2, 0x3, 0x4, 0x1f4, 0x40, 0x14c, 0x0, 0x5, 0x38, 0x1, 0x80, 0x2, 0x7}, [{0x2, 0xfff, 0x7ff, 0x3, 0x2, 0x7, 0x911, 0x80000000}], "be5d0b7aafba3908eabaa1818d8d6a", [[], []]}, 0x287)
inotify_init()
clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x2, 0xc)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000000c0)=0x1)

00:08:35 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x51, 0x0, 0x0, {0x9, 0x100000000000001}, {0x52, 0x2}, @cond=[{0x1, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x2}]})
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000040)={0x34})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x742ab6b783f3fcd, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={<r3=>0x0, <r4=>0x0})
write$evdev(r2, &(0x7f0000000340)=[{{}, 0x4, 0x0, 0x662}, {{0x0, 0x7530}, 0x17, 0x6, 0xfffff801}, {{0x0, 0x7530}, 0x0, 0x2, 0x524}, {{}, 0x1, 0x6, 0xfffffffc}, {{0x77359400}, 0x14, 0xff, 0x6}, {{0x77359400}, 0x15, 0xfff8, 0x5}, {{0x77359400}, 0x1, 0x1000, 0x5}, {{r3, r4/1000+30000}, 0x14, 0x5, 0x800080}, {{}, 0x16, 0x2387, 0xf93}], 0xfffffffffffffe17)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000061c0)=""/4096)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup2(r6, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3b95080891430697}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x30, r8, 0x10, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x5, @bearer=@l2={'ib', 0x3a, 'ip6tnl0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xe6115a54a8be08a5}, 0x2400880c)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140))

00:08:35 executing program 4:
pipe(&(0x7f0000000840)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_GET_FP_MODE(0x2e)
write(r1, &(0x7f00000001c0), 0xfffffef3)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r2 = creat(0x0, 0x657c64248c03a1c0)
fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1, 0x0, 0x0, 0x8})
getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14)
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000740)={@mcast2, 0x5f})
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000c80)={0x8, "5f5539ae7383df635d7eb9f00cde999ef4e1d4fbae589edcbcd64ae9781d89f20a7c347bd734db9d80a3e9ee0d0f04fe5305dacf9e656dc623d0d8abb05b81ebf7fa83533ebfe364612ee7d5571be6e3af5eccf0e26370ff66a26e95f4b7b1206b9d9a70fe612b356ec5074716b0e71eb9f60ac1c5e653c9a7de0de9a5f8c8047f77ece27201fc36e2ca04338864356e123b3b96be97afa5d6698e6f08a657f7ad07b42df05dfca83247581434b575e2d4419e52f1103e9e3ddc440a98f9caeace71f8affb3cfc62e4b428403787ff063d2923a50c0410f191c7923b77c51fea54cc7f2b8adcd2a5e1f53495c168736a160f28435b70f6e40df8523c2deaef8b70f13bc408d1d6eb05dbcae35f0c12cb00b8d589c0dda912acf9315852e1cbb85857f9421cd623fc5046448db22eec3c07358c4778c73a2495bf3452b18d8e904ed88ae250a99edb20b78fc923ccc841847a4f6d514320309afe2f0a075e50096c7a8cd4da2d88791d01a10cea10a97d32e8bb05a5e2bf52be5fffa3fb26953a0fadac598644cf0297d01d5c1ed9f2123ba789fa650b0d140a478903cc23a5b5c2a2a52f19bdd40039ac0291f648f1f991e272c52669f7843e73b3be22103fe0a88d5d405b9ecea5d602be0b5466d18d8a971b69a8e80e48621103a6bc6ee3a7b70b199005241779f22fa2cc159988eaf2d53c858ec06ab56acc232b587ffee3a5cb29f5641b2189fb1617d1a652e42511fe2e447a2636f18ceabc261126200193eb9f309f80aa204a93883bf6fb247ade866685f300295f8735e18d1d81365dbd2bddfa1779c59effed803bbe0a68302b1ab0f0d00892138ad24d52d653d92897bd28c2f031a77eae54ef3ce9a1fc44ea41763b2d780a454f68ea1a297302b4fa6664923a818040f5a74e0db3ff24e940e97d4abff40af2d36f7bceb8a0c5e90dbefbc8ba496f6e42f11ce11fb20655138f9387938abc3aa3a742f749a8695d972c537127519f654945bac96f0a2ef9d6b24f2226ae677684e3eb63041d6b5105777a8e6aa41ff11366448c0af1ddf5e3f2a1d828b4c9ede3809eab736c9035f2a7032ce38b699dfdc3e158e1ce62d325441e1b05a3ba5f663f20b0cb703cb2960aad298177881aa6b52bf4ae112c5d2bb691ac34b0723be7ddcfff0015e578475db1f062c5a50b54bbcba2f591eb4d6de66f386b0d5dd3975229ad25ae95d82266dfb9c1a6f497ef54b6ac5ee81edae16c47e89f9a435377dfac411db459559ce483921251745b8b94f69d4815b009ea86aedc5a75a516ff2afaff9a418f73c2cacbcdf45dd02ba962399f9b81e149635c2b4c0bda790a6d72fc243f6fbc73d0a0636db51c03d93b44b42c07f2269b465231f953e6a45dc549e9b5ef05443da7820cd667f5b0ff47a13f0a3df630a6f98f72e09978b829389d6a11afb0a7a0988822bb95fcb50399e51295f464662118646d2996da0fa710b082036820ae0a60828479bad4489061244b74179cfec74ab273551190c0eb2ca95be86391b8e469454796d04b29646b8aaae49889ffd84e83e33fb0cd7b10d778e72422f474911897dbd4548d9658e9af23cfff0ad4a7d750ab59e0f8988082ab7ac8d27eeab1c5809de6694aba8ee6ff1ba23d422f38dc026a77933cb0fc916d22131f7f736e35c881c5551f13a5037f65b9090372bb8e73bb9cd686715afef6b40ff275a978078c1e1c7db358285e5caee5c53cb4a7b446db91e5c0615342265edd9f09a72002aae56c7ad4269a0513569db514ee852724cdcccb72e8836fc270f7aa03e03e65f4572c2909e6fb1b557e89c3b505ba2f2b10b545513758abdbdc5b3e5ec1fe4d6bd5947b354058eccb79f10e971a85bdafa5aa27224acc734d884f9282ed033fc540defa3181d451713565d940879cd70a1d704b9a390de509351d5129bff18051b0c7ca196a78d3b8d0c8f384c79ad637b2e1770fecfc980960ef403cbc6bb284792cd169133f35aea028d9ffdc1668572dd197db86a26cb6fe1bb822bb76968ef2cd3c384704b75d0f17a50bcce054a400edd3b2f2abf72d2d8a679fdc94216d2d7d43ca1e60aeb5a313f8104f8ae54e75beb6c106cf080b9ecc9a1f91508b37d9ede25a1bede738c3a7f3501391a7b1863fe120ea26c4ff13f1de4588b150f3f2c12a9b9d92e6a8610c788c4d449a91416307a313536e1779bef88028d65a9398c5d1492b729d5f08e34e64fa07507f64297a1f9305a2d68169f653d5c107c9860ca0d822916eb357c646c229e792b1a5da56b35ab971bb82e41581e11f24f9c6b26c019dd2f2f89f2a82b74bd856ed7b46a2d9c07b2856bc39e9a28f271c5bb06db5bfa04d21e37e778b3e03071d25da8bbc91543fe8909603ba92e3455cb0edfe1dc040f12c169a97a5b8fb09f97acda29ab8491e7c9f81320b1a9de5773078557a6a0bdc5a1bfd2d953c47b3e5ccc70d76dc4ba10c297d7591e2c2150b8235de09714fedcf23aedb0ec9586e52f6af6c299256ad5a0a4ce22666be48592977dc5ff5c5eea529b81df4510016240b8fc8489bf59c899bb75481220554d0b9aebf1660cb72b01dfc3ffaac27dc1d36247e86339c6d99fc3ca8edf585fdb236ecdffda1b99819f873367ee5d8fde5d596517f895c9154deab01ca26008edbeadecfe33cae750ff044469a1b3b104b35af0c04a35a48aecf54dd8844b598432b81f67ce232ad46a247cad103274cd7c206d890008b149aaa3310f9794243cc5e04d4bd3e66a5b01ef67044412eba507a20399856cd26fb6233ebc064aa7b5ba94198bc05301dd74d6875b6d3b4731c2a11f0656767a3e6ba0a3d6951a7f9385ff99876891b8150ac5257756ef92a6c3854ccba8f13bca3cd3e66fdc93feefc44c3eba570970e0a6921f1eef24713ed5a174b8e52a0bc1bd3b420bdd0e521835289d29267fca4512caeaf64d1adeba2457864801d30d37e4eea965f8cfdb314f62307d8a12084a65da330f800862cae3876cdffe8c77d982ce9527b069628f0d796c0ec1c1b423ab6eb248e176a9b201d4de572f7901d8d88ae3dc6c3f196a4e3fb81552f16f7a7b7b3a242824b0618a855fc150fe8d484c80b3e1ea6c42f165dcfa7b0b292f9c7f27179d32260d4f472385a8818f7d76133030cf1256153b4162c8c3a3629c01e9b8cb5a30b3d0068d7f0e3727d8159739386511746fad1cfcc98c7af05b489876432957c6d59c51f12ebb62acac90311e6b00cea58b355db5a36718dfb8140d23e64e41ef9d33969cae75ea3ef8f14ad8c9b2d0c8bd7bf4366b091b5992ffbd71800495c0484cbee4b5fffaede0808cdcfa2409227e6b96dd82481d6d00bfff72c29f860b7fa4fa9c3634d9a2e4f7a8ef240c997b749e0562514d5c2c5d66da75149dea37b1cbb347fa0df5be2b9a5ddf20a6d47936b3b55cedc64453e69413a89c8a9eaeda00fccc96281b4f29db0f3e45fa098c77ffe3c0488529ecfa801cdf7fe8a23f6a3aa04acaf4e300c44e6d873f43b9fd4b13cbed2411c97378e07c7a6799d272d36ac8964233130947ed88f727915fa58a4812ceacd6cc6a52bc7fcba5e57543e93d293d5a428c73b194f33ba752b0ebeb0262423e7a8f490707a220857f44e191304cffb93cfc75b217ca306292549c8742fe3aa62a464d40c666115015201c0fef3e9555615f91c3d15b6e1556a9b04febc2ae7e3d689ca5f58b51f2717ae8c5153f2c2a4df11ea8cafcc369327c2a0a6f7946daf09be323d59e4b0e42ebcdeca373a6d70a3286382f1405b7107af899da00dbd52324657870bd18ca26f3ef47e0e81cd335c827512e88f24202836e7a1b505f0d03a23d577430d971458a11ff42e36b2d2883b664d402eb7497a90ba1f94829b6d9c6b4c4f7e9dc49882520a6fd2590cb8b41328541b9076e43f6019c3da9084e57960478c268f4215bb98455fbd2981e7e37caf7aaf9008f87cfe196da930637c55da5a34e142a433494e6f92a5985d7e6fc0ec68d2ad25144919af6dc81afc88cd05f01b401730bccc3086c9dd06d38ed522e52e7ffae7671898fb91cec0821c061aaea6c47ae877d2d7f5ca1ecf159e0ea152ce713f652c116f62e12cad293331db922a5fed311ab22096d90fc17ccc53f84d46eae680def0b9949e0d9debff263d575e590941a5ce0b33548beb6dbc01104f6054da73cc349625adece6a54e092d8d740915b91d81df30374a78693d6b69724f05354d61ac0febff4a544b88954d11d3f4927895edf6ad755313227ac87f24f12d70a831df16bd45c4a03570fdf27d698fa5581fce2d002890a3f2059a6bfdf77f0aeee3ad8318449bc1b2d486b225b148a78e921c73a2c37256dfb1ad611e410d5436e0d31d00ab5177da7915a74ef3307927c23c764f5cf62c3e2db86284c9abb39045b625d507f5c8d440557b4dad2a39593fbb572cce25a364aae44134fdd97ef0148690881bee42b6bd929f12cdf07996597a2a8366b12841f8fb8dfc0ece651756637b95c6bdb92320302805b4a700e7d3dfb0b8878862f400f8437a6c153b5fab40d30af07e73cf4345cb6fa81574018a7bc0e8789fae8b8560f4b93d413fa8e0e0218527ccb82873fc9da6cc34b6197c1d8bd9223ab7c4efb1f8cf021450037f4576934d83116655c120062fc3b912176fd395ccc792d492f2730465f8b4c68155b6ceb52e80742d2970e24004171f4685cd78467a4e943a0fecff66dffff10922d69236460dc37c1df9b19dded1ecb932dd8dd2045d2f8e8d3dfb6a83a65d6623553a2aed7a12b78effeeaa58eec84cdefc84923177afb7bd04f6fc3d3332d63ed5c5d6fe8820b9853e7615407eb23962f5232db44bc0267e7f07e47b158de0732a974b80aeb00ffeeca83d26fe21e487ea4472cd9048f942155784af8f68006cdb4286480a7ffa1ba6e93fe7fdb33283359d28bf9311dee59899e0e77aa113fadda21526c8e2bd60f21e182b735a5b0177fb95e948857c6c4ae391b2b4950a35b129e7bf25b7eb2c0857290c55f5d28b78ca1f39f0cd676610805b0a378647ae958182b26de1ddbf80e80d7ab1d2476086ed192e98bee0969bc0e8765278cb5570ccc29ac6d7298821bff4f85895deffcf4ce54a69878cfb41eade0d8703cbcff02352733ace2d800ba68b0fdcc52b94247ecacddf80ad228cf76eb547d276d0f6402054e34c3569e2b53ea3cbc54e49e099372cde3acd1ba47f836a765f855763a175a58ec4d6cecc72375da2d8c956c2868e77bfdb697182b554f0b743d7095cf13a3ba1d19e7590c281bd09ce235898a9682aacb5633b4fa4c3bdd71139c20c518b6a7651a47df7658a5a7ed41b3e7e43543d68c1dd4a5d01ec7e42cabdd6963db84f0d69b5a471ff8b929a8774baee39b14ab325af2ea7756c656c0135a59568499208341333d6b896cf0cc10108970e20313df241d179bd2a4d2392b269e6aeb9d2570bba7e3c67f49e90cf95562f93077a5fb588225724d444fcd8da55921dcff7b0be49ac0171ae98209e729f65bcebe447ccc0a185719f3fd55d1ae263daac4a420da91d05cdfc85d48e5743483dbb6fe81e5c216948953d95d5e725db17df44f05a57c6cc425e55572f9163e536a6d2d51d5213c937f6ddba08fc1f90ec73088a766a685f2c0d43b80422d48eef23b2ea588ea26b8dffb4f0df0cf91d6ea8f14a663ba2b165e4427010742fe63905d62b9dcf2385dce09fe75e4746d5c9c402ee77bfc9f39a28eb9f2751a81b090a499706accafbf5ae1afa9af350fd7481bb", 0x1000}, 0x1006)
getpid()
sendfile(r3, r3, &(0x7f0000000240), 0x2008000fffffffe)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3)
ioctl$RTC_VL_READ(r1, 0x80047013, 0x0)
ptrace(0xffffffffffffffff, 0x0)
ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, 0x769, 0x5, 0x0, 0x80, 0xb093})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
socketpair(0x1, 0x0, 0x0, 0x0)
prctl$PR_GET_UNALIGN(0x5, &(0x7f00000000c0))
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0)
stat(0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000600)={0xa0, 0x0, 0x8, {{0x0, 0x0, 0xc08a, 0x5, 0x0, 0x20ddbcfd, {0x0, 0x0, 0x0, 0x0, 0x8, 0x88, 0x0, 0x0, 0xffffffff, 0xfff, 0xfffffffffffeffff, 0x0, r4, 0x10001, 0x2}}, {0x0, 0x8}}}, 0xa0)
creat(&(0x7f0000000100)='./file0\x00', 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r6, r5)
setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000140)=@srh={0xff, 0x2, 0x4, 0x1, 0x81, 0x18, 0x6b, [@dev={0xfe, 0x80, [], 0x20}]}, 0x18)
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f00000004c0)=0xb59)

00:08:35 executing program 3:
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80000, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
flistxattr(r1, &(0x7f0000000580)=""/233, 0xe9)
socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$unix(r0, &(0x7f00000001c0)=""/22, 0x16, 0x0, &(0x7f0000000280)=@abs={0x2, 0x0, 0x4e24}, 0x6e)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0x2, 0x7, 0x101, 0x6, 0x7ff, 0x7, 0x5}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x86)
r3 = syz_open_procfs(0x0, &(0x7f0000000440)='\x00\x00\x00\x00\x00\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe5\xcc`\xa0\xce\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xc9\x82)\xc8]\xbeqAq\xdfi\x9f\xa7_b\xe0\xa6u.\x1c\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93<s\x18\xb7\xbc\xc3\xc5o\xd7\x0fu4(c\xa4\xd6u\xe8/\xaaO\xa4\xff\xea\xb1\x96\xdbIW\x9c\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00X93Ng\x8d\xdd\b1a\x19\xe5:\x03\xaa\xb6<\x0f_\xe9\x05J\xdf\x88nv\x00\xc2\x9d+\x04NKy\xcb\x1a\xf2R_{\x12at\xa9\xb6\x88\xba\x97@A5\xf9\x9a\xa2\xcc\x00'/288)
r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)
truncate(&(0x7f0000000240)='./file0\x00', 0x2)
fsetxattr$security_evm(r2, &(0x7f0000000300)='security.evm\x00', &(0x7f0000000340)=@sha1={0x1, "ad5aaca8748b5e4884267712cfb96532bdb02751"}, 0x15, 0x1)
connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x3, @mcast2, 0x9}, 0x1c)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0xfba, 0xff, 0x5, 0x6}, 0x10)
fcntl$lock(r4, 0x6, &(0x7f0000000040)={0x2, 0x5, 0x7, 0x2})

00:08:35 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:35 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L+', 0x9}, 0x28, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080), 0x4)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil)
mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f000000a000/0x1000)=nil)

[  122.552047] audit: type=1400 audit(1571789315.315:102): avc:  denied  { create } for  pid=5461 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  122.580012] binder: 5458:5479 unknown command 6
[  122.586565] binder: 5458:5479 ioctl c0306201 20000140 returned -22
00:08:35 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, 0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x9, 0x20, 0x56a})
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4)

00:08:35 executing program 5:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0xc)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="1f000000020319", 0x7}], 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000080))
r6 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000000000)={0x18, 0x2, 0x0, {0x401, 0x2, 0x9}}, 0xfffffffffffffe6b)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r7}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
pread64(r7, &(0x7f0000000100)=""/49, 0x31, 0x0)
write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
dup(r8)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r9})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = dup2(r11, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r13=>0xffffffffffffffff})
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
r15 = dup2(r14, r13)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r16=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r16})
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x100000000000007)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  122.725764] audit: type=1400 audit(1571789315.485:103): avc:  denied  { call } for  pid=5494 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  122.761424] audit: type=1400 audit(1571789315.525:104): avc:  denied  { create } for  pid=5501 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0
[  122.803001] audit: type=1400 audit(1571789315.565:105): avc:  denied  { create } for  pid=5459 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0
[  122.844147] binder: 5494:5500 transaction failed 29201/-1, size 0-0 line 3022
00:08:35 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dav/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40801, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x4, 0x4, 0x2, 0x6, 0x40, 0x1000}, 0x20)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x8000001})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006140400000000000000000000000008a2900986156fdbe15000000000000000000000000000000000000000000000000040000000000000000000000000000a273f9"], 0x0, 0x0, 0x0})

[  122.880449] binder: undelivered TRANSACTION_ERROR: 29201
00:08:35 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000d, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mprotect(&(0x7f00008fa000/0x11000)=nil, 0x11000, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x0, 0x401, 0xff, 0x4, 0x19, 0x3, 0xe9, 0x2, 0x512, 0x7, 0x0, 0xe1c})

00:08:35 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340736f27a4475329794000000000000000000000000000000000000072750eeca3bf1d890000000464a03223405f0000000000000000000000000000000000000000000000680dbf4900001d00"/91], 0x0, 0x0, 0x0})
socket$inet6(0xa, 0x4, 0x38)

[  123.029500] binder: 5515:5516 unknown command 1933599488
[  123.041190] binder: 5515:5516 ioctl c0306201 20000140 returned -22
00:08:35 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0})
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1})
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000022c0)={0x2, r2})
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000100)={0x400, 0x1, 0x2, 0x7}, 0x10)
sendmsg$inet6(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="74e71bdd159097ddadfadd30ad77482821f59c4af90096f41ea5fc0f009b0025eb512800e80af98418146e01ef48279327f05e41e1a3dcebe142393a414c80b3cb3dd4a97e5b3cee1623da85806107931dfecc80dc8ed0f073cb2d5ec16e9fb9e82c279e296d9d6feadbe860219a3bcfe7f776ed7293ae182acb88fe837e481437d7117a3315be255ffda4c1202ddd78cf70e78780d41dadefc3c2d4ca5844d312d70a2c4362fd938e2cb9aea5c587e1b30500b7704ef81e72fb0d30aedf6a4fa070e15bafe17c4e5aae12427709c9e8ac6ef933559bd7201f2b9d4d63a9d7e09db89b58e185502149", 0xe9}], 0x2, &(0x7f0000001280)=[@dstopts_2292={{0x1028, 0x29, 0x4, {0x10e, 0x201, [], [@pad1, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x3f}, @generic={0x5, 0x1000, "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"}]}}}], 0x1028}, 0x0)

[  123.120136] binder: 5515:5519 unknown command 1933599488
[  123.132697] binder: 5515:5519 ioctl c0306201 20000140 returned -22
00:08:38 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
prctl$PR_SET_PDEATHSIG(0x1, 0x13)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r1 = creat(&(0x7f0000000680)='./bus\x00', 0x40)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000004c0))
r4 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup2(r6, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000880))
read(r0, &(0x7f0000000740)=""/236, 0xec)
mknodat(r2, &(0x7f0000000440)='./bus\x00', 0xa100, 0x401)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r8})
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e23, 0x9f, @dev={0xfe, 0x80, [], 0xe}, 0x8002}, 0x1c)
r9 = getpgid(0xffffffffffffffff)
r10 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r10, &(0x7f0000000480), 0x10000000000002a1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r11=>0xffffffffffffffff})
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r12, r11)
getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8)
setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000006c0)={r9, r13}, 0xc)
r14 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/checkreqprot\x00', 0x200100, 0x0)
ioctl$VT_RESIZEX(r14, 0x560a, &(0x7f0000000840)={0x8, 0x3748, 0x2, 0x4, 0xd1, 0x1f})
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @local}, 0x1c)
socket$inet_udp(0x2, 0x2, 0x0)
poll(&(0x7f00000003c0)=[{}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
r15 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r15}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r15, 0x40046208, 0x0)
splice(r4, &(0x7f0000000180), r15, &(0x7f0000000380), 0x5, 0x51320729f15c29ff)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f0000000300)=0xc)
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0), &(0x7f0000000340)=0x14)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast1, @multicast2}, 0xc)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000003c0)=0xc5)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0)

00:08:38 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x800)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00634040000000000000000000000000001937b119c425934b02518f5ccc0000000000000000000000000000000000000000000000000000000018000000454e48481c3f53f8634bb113172700000000008fa50000000000000000443bb60292b0dd8da1cb3cddd5262316ef227709dfc3d35110c07733095590a3c6952388f352d57008693def4e56eb7df043e2626cb7fb287ddd2bcd0b2e7673115fa78179eed2010fcec4ffef6b52bf1a669cc06ee6324324ee227002c3c3b45109d3bc71565eef6426f015bfaa"], 0x0, 0x0, 0x0})

00:08:38 executing program 2:
clone(0x1000000000011, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001240))
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
ptrace$setregs(0xb29659295b0501bc, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
waitid(0x2, r2, &(0x7f0000000000), 0x5, 0x0)

00:08:38 executing program 5:
r0 = socket$inet6(0xa, 0x4, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x42a202, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400203)
setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000100), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg(r0, &(0x7f000000ac80), 0x38c, 0x0)

00:08:38 executing program 4:
getresuid(&(0x7f0000002bc0)=<r0=>0x0, &(0x7f0000002c00), &(0x7f0000002c40)=<r1=>0x0)
capset(&(0x7f0000000580)={0x19980330}, &(0x7f0000000000))
sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r1], 0x1c}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
select(0x40, &(0x7f0000000080)={0x9, 0x100, 0x9, 0xe50f, 0x9, 0x1, 0x0, 0x8001}, &(0x7f00000000c0)={0x455e, 0x0, 0xfffffffffffff9e7, 0x1, 0x1000, 0x8, 0x9, 0x8000}, &(0x7f0000000100)={0x1, 0x0, 0xffffffff, 0x100, 0x5, 0x7fff, 0x9, 0x1}, &(0x7f0000000140)={0x0, 0x2710})
sendmmsg(r2, &(0x7f0000003040), 0x4000000000003c4, 0x0)

00:08:38 executing program 3:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat, @fda, @fda}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12)

00:08:38 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x80)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
fcntl$setstatus(r0, 0x4, 0x2000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x17, 0x31, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0)
openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0)
mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdb)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, <r2=>0x0}, &(0x7f0000000080)=0xc)
r3 = getgid()
chown(&(0x7f0000000000)='./file0\x00', r2, r3)
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[  125.553745] binder: 5534:5538 transaction failed 29189/-22, size 88-24 line 3014
[  125.569249] audit: type=1400 audit(1571789318.335:106): avc:  denied  { call } for  pid=5530 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  125.594605] binder: undelivered TRANSACTION_ERROR: 29189
00:08:38 executing program 2:
socket$nl_xfrm(0x10, 0x3, 0x6)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00w\x06S*6\xee\xa8?\xbd\xc1\b\x10s\xe3\xc76\x87\x7f\xb9\x1e-\xcex\x18k\xb9h\x9f\xe6\xe5g\xc0Q\xc8\xc5\xcb\xe7\x05\xd1A\xde\xa5\n\xcc\xfb\xa4-\xde\xa6v\xac\x9aw\x89P\xc7,\x1e\xf7\xfa\x1f\xa5\ak\xb8\xd6@n,H\x06E\xd3\fm\xe3\v\xadD\xe5\xe7\xaf\x85T\x85\x9a\xce\xcb\x8a\x01T,]\xbe\x06C|\xe8\xba\xfe5\xdaJ8\xb9[\xbbW\x9ei}Y\xfb\xb5\xc7\x97y\xf3>\x05+\t\x1f\x1bM\xdcM\xd2\x95\xd2F\xb6\xe6&\xa8\x84J\xe6\x15\x7ft\x9a\xe3\xcfB\x84\xa2o)\x92\xfa\xe1\x8bR6Sq\x01\x93\x8cV\xf2#!\xb2 \xdf\x00!S\x9f\xef\xf0\x05\xc6\xf9\x04\x88\\\x05\x93\x99}\x95\xde\x94f\xa6G\\\v:\xee\x80)\x87\xb9\xe0\x87}(a\x8a^e(\xe0\xfcl\xbb~\x03\x1fq\xd2\xfeD\x8a\x13\x92e\xe6\xf9\xae:&H\xa6\xd8\x8arT\x84\xa5XN4\xf2\xf9\xad\x9f\xdf\xbf<\xd7\xf6', 0x200002, 0x0)
fchdir(r0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x3f, 0x12)
socket(0xa, 0x800, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
pipe(&(0x7f0000000500)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/policy\x00', 0x0, 0x0)
ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000640)="06c5f4fe84a1a8f02c7043aa4f00", 0x10)
socket(0x18, 0x0, 0xffffffffffffffff)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@ipv4={[], [], @rand_addr=0x4}}, 0xffffffffffffff40)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = getpgid(0xffffffffffffffff)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8)
setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000006c0)={r6, r7}, 0xc)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="900100001400000429bd7000fddbdf257f0000010000000000000000000000007f0000010000000000000000000000004e24ffc14e210101020080b000000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="ffffffff4f000000400103006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a8070000064d63a690f12f5c4578fbe90c614a204dab8a0ecd3983cc109492a021b47835b923377517db10373472e53fe8979dd1b76158ccd36ed115711a9c0e2b4cd07fb1babf080f253802f7f66d4487628343fea938f9178096fcf0cfdf716de5cee477c1a6289bddfcd829fb05df0da28ffd2121d6cbc127f8ce0f2df074ab897ad4d79d4d2108a7bc0700eee1cb18b3ac3b9f67c936d0ee732655bf1bfd71cb2384f4351c895aa678993b6c14b1ceee09094f603d679257a29daa0142ff7ef239a35bb6bce35d33d04f1dac7986eee2640a87a2b49aa2cca8f9985974b824ee3ee9dd5cea9bce59292a3e06f3d9e8af8b070d522c000000"], 0x4}, 0x1, 0x0, 0x0, 0x4800}, 0x20044)
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r8 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r9 = open(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="cc409948dbe75120e7a70f706b49c43425710203eec48efbd7ffb0755b8f95b76ba9c4284179f9"], 0x1}}, 0x1)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYPTR], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x4000413)
write$cgroup_type(r8, &(0x7f0000000340)='threaded\x00', 0xffffffc5)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c)
r10 = open(0x0, 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r10, &(0x7f00000000c0)='./file0\x00')
mkdirat(r10, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r10, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)

00:08:38 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6900)
ftruncate(r1, 0x800)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x0, 0x0, &(0x7f0000000000)=0x3bc)
r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r4, 0x0)
keyctl$describe(0x6, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000000)='threaded\x00', 0x2f5fa26)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fsetxattr$system_posix_acl(r5, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400", @ANYRES32=r6, @ANYBLOB="040080000000000010000700000000002000010000000000"], 0x2c, 0x0)
stat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
keyctl$chown(0x4, r4, r6, r7)
sendfile(r1, r2, 0x0, 0x8400fffffffa)
sendfile(r1, r2, 0x0, 0xffffffff)
unlinkat(r1, 0x0, 0x0)
open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)

[  125.611832] binder: 5534:5552 transaction failed 29189/-22, size 88-24 line 3014
[  125.624153] binder: undelivered TRANSACTION_ERROR: 29189
00:08:38 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$cgroup_int(r3, &(0x7f0000000080)=0x80000001, 0x12)
fchdir(r0)
r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r5 = eventfd2(0x0, 0x0)
ioctl$FIGETBSZ(r5, 0x2, 0x0)
r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r6, &(0x7f0000000280), 0x1033b)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x0, [], [{0x400, 0x8, 0x0, 0x0, 0x3}, {0x0, 0x6, 0x3, 0x0, 0x0, 0x80000001}], [[], [], [], [], [], []]})
r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$smack_current(r8, &(0x7f0000000040)='./cgroup\x00', 0xfffffeda)
fadvise64(r8, 0x0, 0x0, 0x4)
fdatasync(r6)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r6})

[  125.654771] binder: 5530:5543 transaction failed 29201/-1, size 0-0 line 3022
00:08:38 executing program 5:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
prctl$PR_MCE_KILL(0x35, 0x0, 0x8)
set_thread_area(0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/184, 0xb8}], 0x1)
sendto$inet6(r0, &(0x7f00000008c0)="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", 0x579, 0x28084, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="5f0fda52", 0x4}], 0x1}}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$RTC_UIE_ON(r4, 0x7003)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000000)={{0x1, 0x0, @reserved="d9f2a467a8dde9c0d409894b77e31e49b35fdb06c44ef91f9e3b0e9dc7166cce"}})
clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))

00:08:38 executing program 1:
open(0x0, 0x4400, 0x1c0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000380)='./bus\x00', 0x100)
ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0)
fcntl$setstatus(r1, 0x4, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x282a41, 0x0)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4)
add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[@ANYBLOB='{'], 0x1)
sendto$inet(r5, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac60bded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x9, 0x0, 0x27)
sendfile(r5, r4, &(0x7f0000000040), 0x8000fffffffe)
writev(r1, &(0x7f0000000680), 0x0)
socket$inet6(0xa, 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0)
socket$inet6(0xa, 0x0, 0x6)
pipe(0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=0x6, 0x4)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000040)=0x6, 0x4)
write$selinux_load(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7abafa13aed9acf84b8d16232f363947d603e06455778662875f3b089907bb8e50c1b7cda93ff3fdcb7477999316e676190436309524a871c827e7ca659435c4f2e43e2f8e1dd46eebe904efdaefd90290a36cb3bf08efed7c2e54c86dbced10dfaedcdeb57dbafbd8b1dccb61936790b04c2240006acf5b0d1ceba81dc977b9717ab1e89c995f45fa"], 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0)

[  125.708284] binder: undelivered TRANSACTION_ERROR: 29201
[  125.721808] audit: type=1400 audit(1571789318.485:107): avc:  denied  { call } for  pid=5530 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
00:08:38 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000080)={0xc, 0x6, {0xa2, 0x200, 0xff, {0x4, 0xc42}, {0x400}, @ramp={0x200, 0x7, {0x9, 0x200, 0xfffd, 0x7f}}}, {0x56, 0x4, 0xda, {0x6, 0x2}, {0x4, 0xfff8}, @period={0x5a, 0x4, 0x80, 0x8, 0x8001, {0x9, 0x3, 0xfc00, 0x2}, 0x3, &(0x7f0000000040)=[0x4, 0x92c, 0x0]}}})
setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000006ffc)=0x4000000000000200, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x24040814, &(0x7f00000008c0)={0x2, 0x4e23}, 0x10)

[  125.776958] binder: 5530:5569 transaction failed 29201/-1, size 0-0 line 3022
[  125.797650] binder: undelivered TRANSACTION_ERROR: 29201
00:08:38 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x2)
getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
gettid()
r2 = socket$inet6(0xa, 0x0, 0xfc)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000240)={0x6, {{0xa, 0x4e24, 0x20, @mcast2, 0xa09}}}, 0x88)
syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r4 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0)
pipe(&(0x7f0000000340)={<r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r7, &(0x7f0000007fc0), 0x400000000000068, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x400000000000068, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r9, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r9, &(0x7f0000007fc0), 0x400000000000068, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r10, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r11, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r11, &(0x7f0000007fc0), 0x400000000000068, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000480)=ANY=[@ANYPTR, @ANYPTR, @ANYRES32=0x0, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESDEC=r5, @ANYRES16], @ANYRESHEX, @ANYRESDEC=r6, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRESOCT=r8, @ANYRES32=r9, @ANYRES64=r10, @ANYRESHEX=r11], @ANYRES16=0x0, @ANYRESOCT=r5, @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYRES32=r7, @ANYRES64, @ANYRES64=0x0, @ANYPTR, @ANYPTR64], @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRESDEC=0x0, @ANYRES16]], @ANYRESDEC, @ANYRESHEX], 0x2e)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8014a2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r6, 0x0, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xd, 0x6, @l2={'eth', 0x3a, 'teql0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)

00:08:38 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ftruncate(r2, 0x208200)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7})
r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
listxattr(&(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x0)
write$P9_RREMOVE(r4, &(0x7f0000000280)={0x7}, 0x7)
fdatasync(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4})
r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="0009000000100004000c00010073797a3000000000000000000000000000c79ed39a9c3814526c4feb56e3934a6b78f8af50b0fed9c1019bb5de622dbdca9af3567d81d0cedefb3b38796f556dce2a2b006943b27272ff54f903f3607689d063f763b89a6132d1c09fa3b7956ae46b09ac76898b6c9ec2f377742e59718b06731fd5278f74c68912620be2adf5d1c9ab78cc8444e39a466966dfb17afe"], 0x3}, 0x1, 0x0, 0x0, 0x76de17f1d04e1ec9}, 0x20000004)
sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0xc0, r8, 0x208, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x62a08518}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x686}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd3cc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20044100}, 0x4000010)
write$UHID_INPUT(r7, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)

[  125.944870] audit: type=1400 audit(1571789318.705:108): avc:  denied  { create } for  pid=5557 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  125.972524] audit: type=1400 audit(1571789318.735:109): avc:  denied  { call } for  pid=5590 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  126.152485] binder: 5590:5592 transaction failed 29201/-1, size 0-0 line 3022
00:08:39 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000080)=0x400000000002127, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @mcast1, 0xffffffff}, 0x1c)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2400, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0)=0x10001, 0x4)

00:08:39 executing program 4:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000009})
io_setup(0x86c3, &(0x7f00000000c0)=<r2=>0x0)
io_cancel(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000100)="ded67df128e78ea3d16e41dcfbde0e1a65a0e408bff20daf91113de431e433fa02a8a0301b27b19f4b08ffc600347fdffb94324bafe3fe0aec237f171c96ccd36033606aebc318029450314af2a25d8e72c00a8e20db441e43f7e240cebdfdbc5b0995298f90fe26d101a178b5e0296a8dd7c6746ddf107f2992830b9ffdeb2e0ce65d05f2d68d4e829022fa9b429de043c180c5647b1b18f39d9db950d4a4fec4617511c7a29dbaa8f2d844810e045150bbc1361c", 0xb5, 0x6, 0x0, 0x1}, &(0x7f0000000200))
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000280)={0x2, 0xec, "10cc9bef403034b2d3772cc92e0e80ffb3e5a92c52861e9776ea1bf4b164e6dbf2619a3e9b9b657a2e5282d5b32bb23b86e71f7cab9bcc40000f79e0f80efc7938f6143a47c98507663a07b7213e4f6370a4a07a67ea134f9e851ddeb7ffe765c737c981aef21672b4393b123e613d39d5c5424c6b5574f82d34356d95743eb0b820e1e1c715180ee4045953935292d93d5ecde0a410c167f21b4852c3c4fb7ed67e50028de03c3af180c0aacfe5e7c1e4110b39cb33074554066ca6b994915fac31ce89995bd15f3445bb20ca29e3cdc3beef04d4940269babe90f888414ad25253d14b1bdff8d22f9657cb"})
sendmsg$nl_netfilter(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x3ae82aa4f057350f}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x10c, 0x9, 0x8, 0x2, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x5}, [@generic="1f50d770359769f8de84c64a1f394876b7f8607d85d4b95c9fa84862b5ea8392496f6179819949c44dc98a4000a911285fbbbd4a4baed1a404b9a936102fbd88311eaac2013652e12c1863d0ecefa66222a0e232ab7bb1c1205a86ba15dc35f4277a440650ed9d52c514c217c1ae151f8004329e9bd8035f015f840b559a3eca2b51ceb11ffeed9be7cf61406f9a5b6b83c3d27a37f32e03ad965aa5c74fe32748ebd8d88842ec008c8756b6daf55ed44b1ef1fae46f3b74cf2d3e22da2f2f2b6f08076adc555ef2ce364aecdf3035892e59ae8231ad20525a95973714b76a090350482245bd6d97f7c4e3591f7cef63d07e7c42914cccab"]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20)
r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$ASHMEM_GET_NAME(r4, 0x81007702, &(0x7f00000005c0)=""/139)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = getpgid(0xffffffffffffffff)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0xf, 0x6, 0x1, 0x70bd27, 0x25dfdbfe, {0xc}, [@nested={0x14, 0x22, [@typed={0x8, 0x83, @fd=r5}, @typed={0x8, 0x55, @pid=r6}]}, @typed={0x8, 0x28, @ipv4=@broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8db4077994bba2c6)
accept4$unix(r0, &(0x7f0000000780), &(0x7f0000000800)=0x6e, 0x80000)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/enforce\x00', 0x410200, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0))
socket$unix(0x1, 0x5, 0x0)
fdatasync(r0)
syz_open_dev$mice(&(0x7f0000000940)='/dev/input/mice\x00', 0x0, 0x109200)
r8 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000980), 0x800)
ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f00000009c0)={'ip_vti0\x00', {0x2, 0x4e21, @local}})
pread64(r4, &(0x7f0000000a00)=""/55, 0x37, 0x0)
write$FUSE_LSEEK(r0, &(0x7f0000000a40)={0x18, 0x0, 0x5, {0xffffffff7fffffff}}, 0x18)
r9 = syz_open_pts(0xffffffffffffffff, 0x100)
write$binfmt_script(r9, &(0x7f0000000a80)={'#! ', './file0', [{0x20, '[wlan0%self\xac'}, {0x20, 'vmnet1bdevsecurityself*'}, {0x20, '/selinux/avc/cache_threshold\x00'}, {0x20, '/selinux/avc/cache_threshold\x00'}, {0x20, 'mime_typevmnet0!)GPL'}, {0x20, 'ip_vti0\x00'}, {0x20, 'em1'}, {0x20, 'security'}, {}, {}], 0xa, "231589fe09a044e0e47e37702283036764e93a2ced3a6aca38f488acaad1c49b0af70e8c17ac8701bf57d4f5be212f08f0abcb01c37b752efbe9e38ab96114b0ffcfb79a3c4da33ba13e7b9cec444153bfa3d3bce524842ef68d2fe2f0e21f38cc73a42a8f7864944667f07832642c6f426dfc9b706aeabc78187f88097037ed39822e1ff445b942c40cfdbe49b6e3"}, 0x128)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000bc0)='security.capability\x00', &(0x7f0000000c00)=@v2={0x2000000, [{0xffffff03, 0x80}]}, 0x14, 0x1)
r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/self/net/pfkey\x00', 0x101000, 0x0)
setsockopt$inet_buf(r10, 0x0, 0x30, &(0x7f0000000c80)="7a3495533a47cd20dcf0ca248554a3d38cad610e5b2a9891ae42fd6818a7e7f2ab91b84987129a3e2ab63747eb89c3f3cd0f6d60edbd0a99d39b38478cc110cc9f60e412496a7a83c5bb07d19cdfdc090fb1cf7e4f199e803fb2a19c3c5cb5bb068aa9103617204562aad04022302c13fbbb7945851edde142c002c2770595787c54375cca7d408f0b304b8d1db9682aee70961ff96f41cd0bf05e7b4b9e3f6715b6e58bf4a67658a437df769a0fb66afccb0560b0bffe2a272301140d8a40ba1feda550869fa120e0ea2c88f65edcedeb655eab5aabc1c0a03d4b209c6d687900", 0xe1)

00:08:39 executing program 2:
open(0x0, 0x0, 0x1c0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe)
fcntl$getownex(r2, 0x10, &(0x7f0000000400))
ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000380))
inotify_init()
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$getflags(0xffffffffffffffff, 0x0)
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080), 0x4)
fcntl$getflags(r0, 0x3)
add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000500)="f9a9734cd8616596869ee2b8a981073c8315c416824520725812a07c5ce88a6dc688b08c9a83a90a1cee59654dac1fc2638887c83a03222f6483690a7d2b14c95a3fa6dc1e7c2060716c2a14e1113b6c2bca063d885db1f24bb1ef39dd72d7e8aa57ecd504ebb68dd6f7d0ba931c726219dd827b97b4", 0x10f, 0xfffffffffffffffa)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x101)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe)
writev(r2, &(0x7f0000000680), 0x0)
socket$inet6(0xa, 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0)
r7 = socket$inet6(0xa, 0x480040004000, 0x6)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendfile(r8, 0xffffffffffffffff, 0x0, 0x0)
write(r8, &(0x7f00000001c0), 0xfffffef3)
fcntl$lock(r8, 0x24, &(0x7f0000000100)={0x0, 0x1, 0xd95, 0x20})
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8)
setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r9}, 0x14)
setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r9, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc807")
write$selinux_load(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x2ce)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0)
sendfile(r2, r5, 0x0, 0xa5cc554)

00:08:39 executing program 1:
open(0x0, 0x4400, 0x1c0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000380)='./bus\x00', 0x100)
ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0)
fcntl$setstatus(r1, 0x4, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x282a41, 0x0)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4)
add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[@ANYBLOB='{'], 0x1)
sendto$inet(r5, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac60bded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x9, 0x0, 0x27)
sendfile(r5, r4, &(0x7f0000000040), 0x8000fffffffe)
writev(r1, &(0x7f0000000680), 0x0)
socket$inet6(0xa, 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0)
socket$inet6(0xa, 0x0, 0x6)
pipe(0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=0x6, 0x4)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000040)=0x6, 0x4)
write$selinux_load(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7abafa13aed9acf84b8d16232f363947d603e06455778662875f3b089907bb8e50c1b7cda93ff3fdcb7477999316e676190436309524a871c827e7ca659435c4f2e43e2f8e1dd46eebe904efdaefd90290a36cb3bf08efed7c2e54c86dbced10dfaedcdeb57dbafbd8b1dccb61936790b04c2240006acf5b0d1ceba81dc977b9717ab1e89c995f45fa"], 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0)

00:08:39 executing program 4:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
write(r1, &(0x7f0000000080), 0xffffffffffffff17)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e)
mount(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='jfs\x00', 0x0, &(0x7f0000000380)='./cgroup.cpu\x00')
mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x2)
syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00')
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x60, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[], @ANYPTR, @ANYRESOCT], 0x27)
fcntl$setstatus(r3, 0x4, 0x6100)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00<s\x8c\')tU\x19\x9a)S\xa7b\xce\xd8\xde\x95\xf6\xc3\\n\xc1\xa2)o\xee\x97\xdf\xe9\xf3\xfdJ\xe8`7iY\x86~\xd8\xecy\xc00.\x90\xfc\xac\xa0\xb8\x1d\x1a\x7f\xec\xea\np\xb4\xd5l\xb5\xc3\xc7w%\x16a~]P\x04\xc7 \xf7\x92\x8b\x8f\x9d&\\\xf9\xa3\x96G<\xd4\x80\x16/\x81\xe7(\x8b\xde9]\xaf\xbc\xb0\r}Ne\xfaX\xb0\x8a\xbd\x1d\xfc\xd4\x91\x95\x00\v\x14a0_\xd9\x1f\xc7\xb5\xc3FS\x16\x03~\xbbc*\xa3\xab`\x06\xf0\xbc\xacJY\xe7\xb2\x8cw\xa4U.\xa4\xe2u\x1d!jVL}#O\t\xb2`\x0e\xe9\xc6*\xf7\xf8Uh\x8e\x01\xf1b\xf5;\x8a\x17\x9a\x0fq\x01\x91pSR\x82-H\n\x1fP\xb6*\xc9\xfd\x89\xb5\x7f\x87m\"\xaa\xce\xed\a\xf2\xfd<\x10\xb8\xcf\xfac\xcc\x0f\xd2\xdd\xcd#8\"\x8b\xf2\xccA\v\xdf\xf5\x8d\xa5-\x02\xaa|\xdd\xd0az\xc8,)\xedf\x89x>\a\x13', 0x275a, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r6}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r7}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r8}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0)
writev(r8, &(0x7f00000001c0)=[{&(0x7f00000005c0)="f5d1bcf39253f34d6f6ea4b000bfd967d64e007953de74e129853c5a8eb652a30203ca2f24d1d3a6f15bab29560c8a20bac3d964c33c8be920b23aa9401b8af2c877cab5662ed30484a9d281d4a5b7c76ccb5e790134588fa5549ccaf9681e2c3840367a99ad42ae6cd47e8a1ecca5ceecb587dd81bfb1"}, {&(0x7f0000000900)="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"}], 0x100000dc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
read(r10, 0x0, 0x0)
r11 = openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendfile(0xffffffffffffffff, r11, &(0x7f0000000000), 0x17be80)

[  126.743654] binder: undelivered TRANSACTION_ERROR: 29201
[  126.792690] audit_printk_skb: 12 callbacks suppressed
[  126.798469] audit: type=1400 audit(1571789319.555:114): avc:  denied  { create } for  pid=5590 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  126.838746] audit: type=1400 audit(1571789319.605:115): avc:  denied  { create } for  pid=5590 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
00:08:39 executing program 3:

00:08:39 executing program 3:

00:08:39 executing program 3:

00:08:39 executing program 3:

00:08:39 executing program 3:

00:08:40 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x25, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/53, 0x35, 0x2, 0x3a}, @flat=@handle}, &(0x7f0000000040)={0x0, 0x18, 0x40}}, 0x40}], 0x0, 0x0, 0x0})

00:08:40 executing program 4:

00:08:40 executing program 3:

00:08:40 executing program 5:

[  127.354864] binder: 5673:5676 got transaction to invalid handle
[  127.362207] binder: 5673:5676 transaction failed 29201/-22, size 88-24 line 3014
[  127.378604] binder: undelivered TRANSACTION_ERROR: 29201
00:08:40 executing program 2:

00:08:40 executing program 1:

00:08:40 executing program 5:

00:08:40 executing program 3:

00:08:40 executing program 4:

00:08:40 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)

00:08:40 executing program 2:

00:08:40 executing program 5:

00:08:40 executing program 4:

00:08:40 executing program 2:

00:08:40 executing program 3:

00:08:40 executing program 5:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
write(r1, &(0x7f0000000080), 0xffffffffffffff17)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e)
mount(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='jfs\x00', 0x0, &(0x7f0000000380)='./cgroup.cpu\x00')
mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x2)
syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00')
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x60, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[], @ANYPTR, @ANYRESOCT], 0x27)
fcntl$setstatus(r3, 0x4, 0x6100)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00<s\x8c\')tU\x19\x9a)S\xa7b\xce\xd8\xde\x95\xf6\xc3\\n\xc1\xa2)o\xee\x97\xdf\xe9\xf3\xfdJ\xe8`7iY\x86~\xd8\xecy\xc00.\x90\xfc\xac\xa0\xb8\x1d\x1a\x7f\xec\xea\np\xb4\xd5l\xb5\xc3\xc7w%\x16a~]P\x04\xc7 \xf7\x92\x8b\x8f\x9d&\\\xf9\xa3\x96G<\xd4\x80\x16/\x81\xe7(\x8b\xde9]\xaf\xbc\xb0\r}Ne\xfaX\xb0\x8a\xbd\x1d\xfc\xd4\x91\x95\x00\v\x14a0_\xd9\x1f\xc7\xb5\xc3FS\x16\x03~\xbbc*\xa3\xab`\x06\xf0\xbc\xacJY\xe7\xb2\x8cw\xa4U.\xa4\xe2u\x1d!jVL}#O\t\xb2`\x0e\xe9\xc6*\xf7\xf8Uh\x8e\x01\xf1b\xf5;\x8a\x17\x9a\x0fq\x01\x91pSR\x82-H\n\x1fP\xb6*\xc9\xfd\x89\xb5\x7f\x87m\"\xaa\xce\xed\a\xf2\xfd<\x10\xb8\xcf\xfac\xcc\x0f\xd2\xdd\xcd#8\"\x8b\xf2\xccA\v\xdf\xf5\x8d\xa5-\x02\xaa|\xdd\xd0az\xc8,)\xedf\x89x>\a\x13', 0x275a, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r6}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r7}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r8}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0)
writev(r8, &(0x7f00000001c0)=[{&(0x7f00000005c0)="f5d1bcf39253f34d6f6ea4b000bfd967d64e007953de74e129853c5a8eb652a30203ca2f24d1d3a6f15bab29560c8a20bac3d964c33c8be920b23aa9401b8af2c877cab5662ed30484a9d281d4a5b7c76ccb5e790134588fa5549ccaf9681e2c3840367a99ad42ae6cd47e8a1ecca5ceecb587dd81bfb1"}, {&(0x7f0000000900)="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"}], 0x100000dc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
read(r10, 0x0, 0x0)
r11 = openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendfile(0xffffffffffffffff, r11, &(0x7f0000000000), 0x17be80)

[  127.675492] audit: type=1400 audit(1571789320.445:116): avc:  denied  { call } for  pid=5685 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
00:08:40 executing program 4:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2000000000002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000004021})
write$P9_RLERRORu(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xfffffcb7)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

00:08:40 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r6 = creat(0x0, 0x0)
fdatasync(r6)
write$UHID_CREATE(r5, &(0x7f0000000400)={0x0, 'syz0\x00\x00\x00\x00\x00n\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000300)=""/146, 0x92, 0x0, 0x9, 0x7, 0x8, 0x10000}, 0xffffffffffffff36)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7})
ftruncate(r3, 0x2081fd)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
fcntl$setstatus(r1, 0x4, 0x44800)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0)
mknod$loop(&(0x7f0000000080)='./bus\x00', 0x100, 0x1)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])

00:08:40 executing program 2:
keyctl$assume_authority(0x10, 0x0)
keyctl$assume_authority(0x10, 0x0)
r0 = add_key(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x87, r0)
pipe(0x0)
read(0xffffffffffffffff, &(0x7f00000003c0)=""/260, 0xfffffcd0)
pipe(0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1})
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
pipe(&(0x7f0000000540)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in6=@initdev}}, {{@in6=@local}, 0x0, @in=@broadcast}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000023c0)={'sit0\x00'})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000000), 0x4)
dup2(0xffffffffffffffff, r4)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000005c0))
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00a\xa4\x00\x00\xff\xeb\xf9\x00\x00\x00\x00\x02\x00', 0x9d01})
pipe(&(0x7f0000000380)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f00000001c0), 0xfffffef3)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/413], 0x19d)
read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3)
clone(0x2102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)

00:08:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x404000, 0x0)
sendmmsg$inet(r0, &(0x7f0000002800)=[{{&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0xfffffffffffffd67, &(0x7f00000013c0), 0x20}}], 0x1, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x6)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x40)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
tgkill(r2, r3, 0x37)
timer_create(0x7, &(0x7f0000000000)={0x0, 0x18, 0x4, @thr={&(0x7f0000000080)="5e0727b5259ed7f4d281db3bd6da6d37f79ac74980b81a5dbbebc74c8ebd63f5d63bd4c6d42888ab136650b2e07800611376836e57de57ad58a796d55e743cf34ba678fc55aca41d118461af04e94196bdc8af2d65d58af623d9c4908b57304751fc232717bbda56992faf", &(0x7f0000000100)="7d64aacc78f22e20e08c207d1ec49468c7ba5a07a8737e4c8f8fe56bd71f3882acf8de26112afbfcdbb71f8ac4724db8152ae985863448caaeddd48f6e9abe7b2f38db32da26cab88dbbc5bd7bddd38b23efed82421bdfc897f458d5391dbcc30d564e0531ee03eef4b8067b1b1f47380128ea1febbb28d76dcf"}}, &(0x7f0000000180)=<r4=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x1000, 0x0)
r8 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000002580)='/selinux/relabel\x00', 0x2, 0x0)
r9 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r9}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r9, 0x40046208, 0x0)
r10 = openat$random(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/urandom\x00', 0x20000, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = openat$cgroup_int(r11, &(0x7f0000002600)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
r13 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r13}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r13, 0x40046208, 0x0)
r14 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r14}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r14, 0x40046208, 0x0)
r15 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r15}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r15, 0x40046208, 0x0)
r16 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r16}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r16, 0x40046208, 0x0)
r17 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r17, &(0x7f0000000000)='threaded\x00', 0x2f5fa26)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r18=>0x0})
fsetxattr$system_posix_acl(r17, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r18, @ANYBLOB="040080000000000010000700000000002000010000000000"], 0x2c, 0x0)
r19 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r19, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r19, 0x0, 0x0)
r20 = getuid()
sendmmsg(r19, &(0x7f00000092c0), 0x4ff, 0x0)
r21 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r21, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
bind$inet(r21, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r21, 0x5452, &(0x7f0000000300)=0x200)
connect$inet(r21, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r21, &(0x7f0000007fc0), 0x800001d, 0x0)
r22 = getgid()
pipe(&(0x7f0000000380)={<r23=>0xffffffffffffffff})
read(r23, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r23, 0x29, 0x20, 0x0, 0xfffffffffffffebd)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
r25 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0)
fcntl$setlease(r25, 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000007c0)="44a434001dffe4f17339deff062fbc01a59a633db9c43af4009b1dcd152b61ec3783901da54644ce9b3e23e0f61fad2fc859202c84d56b196bd3f8aa2fb3f9200e283fcc98db216e0013b078c2688366d51d997b76ddf6675fd1cf6d9a919e9f0af2360674fe3f3204b65e091d57bd7360ac829b482bed863b80ac", 0x7b}, {&(0x7f0000000840)="72d70b46d2b4c16518e2e77e6f811fd1b1b6b0967e4d4a52e03ebad2539d6a2a8da46b61b6d495c73a194b47f25608f72078ca339a8fd13d81ed9273082d71325d89f3f4080700d1378ae3c12086bdc2c36ca478594205c988dbc13182416c7df0ac3254fbbe162580cc8fa08779990c2062b1a351080719dd7e281867debc12cb59e19bdad2228ead9daff40b63fd666878acd33541dc81edab6b461642eb711c3a9028ca141c59af626f78f0f0bbd0a6a4901c63b98692ab75c93e9e9cd18e538d3187f0ab4e706964c280e20f939e3a27a6e459cc0011e9c490", 0xdb}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r21, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r20, @ANYRES32=r22, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r23, @ANYRES32, @ANYRES32=r19, @ANYRES32=r24, @ANYRES32=r25, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES64, @ANYBLOB="7879fddaa073bf3c68"], 0x7d, 0x30000010}, 0x24e1)
r26 = gettid()
ptrace$setopts(0x4206, r26, 0x0, 0x0)
tkill(r26, 0x40)
ptrace$setregs(0xd, r26, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r26, 0x0, 0x0)
r27 = geteuid()
r28 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r28, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r28, 0x0, 0x0)
r29 = getuid()
sendmmsg(r28, &(0x7f00000092c0), 0x4ff, 0x0)
r30 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r30, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
bind$inet(r30, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r30, 0x5452, &(0x7f0000000300)=0x200)
connect$inet(r30, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r30, &(0x7f0000007fc0), 0x800001d, 0x0)
r31 = getgid()
pipe(&(0x7f0000000380)={<r32=>0xffffffffffffffff})
read(r32, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r32, 0x29, 0x20, 0x0, 0xfffffffffffffebd)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r33=>0xffffffffffffffff})
r34 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0)
fcntl$setlease(r34, 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000007c0)="44a434001dffe4f17339deff062fbc01a59a633db9c43af4009b1dcd152b61ec3783901da54644ce9b3e23e0f61fad2fc859202c84d56b196bd3f8aa2fb3f9200e283fcc98db216e0013b078c2688366d51d997b76ddf6675fd1cf6d9a919e9f0af2360674fe3f3204b65e091d57bd7360ac829b482bed863b80ac", 0x7b}, {&(0x7f0000000840)="72d70b46d2b4c16518e2e77e6f811fd1b1b6b0967e4d4a52e03ebad2539d6a2a8da46b61b6d495c73a194b47f25608f72078ca339a8fd13d81ed9273082d71325d89f3f4080700d1378ae3c12086bdc2c36ca478594205c988dbc13182416c7df0ac3254fbbe162580cc8fa08779990c2062b1a351080719dd7e281867debc12cb59e19bdad2228ead9daff40b63fd666878acd33541dc81edab6b461642eb711c3a9028ca141c59af626f78f0f0bbd0a6a4901c63b98692ab75c93e9e9cd18e538d3187f0ab4e706964c280e20f939e3a27a6e459cc0011e9c490", 0xdb}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r30, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r29, @ANYRES32=r31, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r32, @ANYRES32, @ANYRES32=r28, @ANYRES32=r33, @ANYRES32=r34, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES64, @ANYBLOB="7879fddaa073bf3c68"], 0x7d, 0x30000010}, 0x24e1)
r35 = syz_open_dev$rtc(&(0x7f0000002640)='/dev/rtc#\x00', 0x6, 0x80280)
r36 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r36}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r36, 0x40046208, 0x0)
r37 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r37}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r37, 0x40046208, 0x0)
r38 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r38}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r38, 0x40046208, 0x0)
r39 = socket$packet(0x11, 0x2, 0x300)
r40 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r40}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r40, 0x40046208, 0x0)
r41 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r41}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r41, 0x40046208, 0x0)
r42 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r42}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r42, 0x40046208, 0x0)
sendmsg$unix(r7, &(0x7f0000002780)={&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000000400)="e0a1c252ca79a367b58647940a726f", 0xf}, {&(0x7f0000000440)="7232fc8cee7822eb520e1a94e59c87ffc8d27f8e2822fbf21b4e3fe64783bd59c69259eb3c8eff0588a16b108c50de95432eebf9f65e5e83f80035016e05a95958436130229feb8cc576c4463006998b5b9b848f9e23ea97e36007c8b7078cb4da96b22dc4775f596d5098cb3202aced8fb356031fc396a21e30525aa72bf965d8858f92ffd47fab230a26dc4a4b68ed796d52294378667203bc9dfab7eccd57e6b82932b46433932fc68810de784d88e8a7815162a3907e290bcaf22954613f8982e6fa5f8bad776b54e04b31b90c659859ea028112162b0b95584183d3e6a0d19aed001107c3862d1d7669174e6a9020b74d2268d2579ba0a35e8ec15afa3b5e95652d022a217883768e557780fcf160824fb67ebedcd73a6eb90fe9d27972cd322d38219900129d34da0c95682c8a49c118ebc9bec0b0384e69d6ec06097c5eed5e115ad61339d977b67b229dfc3d1b2f028fa2dd7dc9a237a6722635332a6ae506042da2fc066c605593ff997e0db42c379e21fb940ab206a44f968812e2b4b45103968e7cacf437ccafa58f795e3d9fc892dd9c07fe1b28151a0d5dc9d9b95fe0902e98be57e906b6a819a0e741469ef3c483ac9cf745b4f2666bbde3322667f8f0711d8230bb75e5096fff6048f4f9770d835f4980abacd1db94a92849eba558b1646c5d61584a1e691ecfb91667f39fa73aabec0b6f42579ebf05704e83197d97f254a746a77c78ad4993b246d59cb4bfc9ade14190176f68ec07877ab51ed2acd12f8a59cb41510df3707d92b5976aa631e60cd922f26e468c0da12b90f773332d25be25ff117db1e6cda7cccf29670178105d5acde4ea2648de336f7017bbf007c5c9d0d7bccc8c0fad35fbfce9742e2728951755ab469d16bdf2459f0e18742d21011cac1d1630a0751d56109fad4862f51275ad29383ab54ee8d1a19fcfea32c929cd75e06f4521a7e925753eee7eb41930a1b8f1cf6eafa655c1d8f8ccb73be3050948dd80246818ab72e67c6a18b308c0a0610dcf8d35686439ce838b76e1030a6c8ad2881b27fd97a1b73dcf9c29cadf601ef544d656eb279fcf9125540c6e3f1cd1f75236160d8e59f6046adf3a83d2d151716ea102abd23cc8bc97144b76254c967062a122f86c20d49f2154bee85a95ef2383d4e0d9104e2da2977caef56d3af7985b8594f79ec1e2de19db0585c15fc95d9f3e0ce00806623456692c9a88e0d15c3a61a744d093f1bfcd39afe49c043e91cbb65e8920022d2a2295c7273b324c30b8dc0643473c06b7f9e132eed1396b15f40337a9f27c436eb0071e762eecec64a55bd7b28c0301a32e72c8b092cb041c52957b54d1530b7b421b21b01f9d010e84cf072eb309ed0f97eeb3d0edb710ec2d16ac7afa5f26378001a730b5b4d72dbd741caec6a2d896166913e9022595a0ed9678f0d7510097cefd34e722c867d59d5e773d2d6d3ec255a900a86584d1c45dbef3fa40b5c0eff4dcfdbdb48e46377bdda162f4c73540c91b7394f6d0f9684cf74a4a4258c52c5085c01b49b2e00e8da1a49af07841cc4ad2289b01dc7c4e371b8b044622db5f760b2faccb69db420be9d1be27dea316f41f170edc19f741c526682fbf85b2c46c9f68393d6746909ebe26db1bd69a98d1547bd3005e24ba7644eaa76ed83379eb2607f114d14be8c7dbd0de76c1a5aa7028177bd0fbd0d68aee390b21fc1bbc94363791806a87d1a86243b050ce3d7faa6944b6c8754848ab9b8cf97453170584c40fb5ed99d5271dcd8ccad10afed47fe2f6b9a562de106872c3057f6841a88149323cb6780504e50e3e62154c8fef1683166589dab936434d04ccfe05660a7a918c06b2ad6251e8c6d69e6d26312b07a8e4bd5d159c15c4b046059bc24ac0b7ab1e7e0081a2828373f4e2ecfa9694c87a509f7c68a825e4e38dcb39bf096721574067b7d2d3cf844e291a5d3c26463fb18e027d1ddb4ae30d94a4faf09a3a2a3f963c5b728959e2e71fd54f9325d3182a87c3cf2d8bc9657e97372a487832157f49e80df8f6803f0a3c886950b64d54f0acc950dd2fea26d3bcd9e4d8f6fb149dc2a05ba2580a3731320a9e13bce8f6441bd495befb528706eb64b37ef95f14729080e815a50024b2ded3367a0a10e7b6b3e1ef58aeca2a54777e471479afdc9e5824a592c6846b40254f08800c701b49f9c507bb94589a616310b520c8d20b373336028ae83e054a7bb8d5ec15fef82e6279bec2998f679541d0fe945eb22caed99a723543598ae15e0ca77459612aca9421a496218f18fc63cc33ec926492fd627368e33d46835b21ba3978825f1122ffa5ec8896318d784869cf1e2b1b223c6e4390c45556288470896b2f3064559ed38c0d54dbd6502d31622d15c07559d945d176af3b186a0a1888b06c15c3043d1b4ac48a462e9bcb0f82aa44b02d58849d77322c1f3ad4f791e3b887efea1b2bac9eb952e31d30a060f18f51d728885e7d593bdb4f9911aee2063a4d17cab38f4691de0dcf1b450e594cac6af4f537eea7c7b33a4076a5fb32ed40ecbfe9d7f419292075695172a54b464c233da1a752db79308e8c3cbade11b4def39f723b4feefcab4bd294da9144f00bedf299c308e34f1393eab75cf35f12dbfd68de9523687ffc5146abcc4de6de75e91ddbaa5c064a99a99a079e565e7918c3dca8e7a862eb4e221a8193882820bfa082fcf19d28b2534ed97ff86317b590014933c307facb582cda1a076e8a0b4bb6f0e70f741cd40eafd65e49450f1d5cc4aa89f0aa78c2391ed420fcf7d65247bad4371a44a5d21d9859cb7cc4e56cbed18bf0dee7861b950d760348699b8bd453c21a2ab167071143acc5044f75af85b424f05310224c86c7a5b518a9e60d4fb37f2d4afd78548ad58d0f268297c39d62b749e6e4b8f8a5e225674961d517c536e8d3879a9475cc787fa082a5afea5a080c33e5c22671382ce11443a642c532d752b4e5ccd0d611514cf747b9657b6a16fed94f76ead3a7c25e150bd372a72754ac447ced480d11c2d5b2ebf19def5f81593825a3220e052d0235680166149ae195e7e01bdf6475376120cc0f40fd0dd49e7b2b5317e675ecde411439341549eeb376e19da16c019c8665fb657b3280a5171ab1a495c06a2f3fef5bad11420aee283c86521de1a67765587b1db110cac91ae5591aea925bb3cae643c42eb48aeaecae2d4c2a17dfeb639f88b8f207bb04b717b8fd3e745cec19fdf236b1a3c5452a7ec999e198fcc2df0fbf313196796576836b65483dded00329da350442084e9010cd835cea25c51cf95fda458d9fb42104ff33394ec7b096af41e3973f3b31319592631b624d87c5f3c226ad7c134aa206432b5eaee4e06c9205a00611e65f0c36c8f73e9d0de83803103ec0b293e63e8338961769827a1448573738e9139d22008b001c539d926abd137ab545073a54d136cf188bb048cc3cb210ff4bebff6d61840fa22b7a5fa43a35744c1012b2cd489a491c9ebd474752b3e244f01c9d80c277b8ee2e6a0536de45ba272a06e79710e5e93d6c04c0f8f8e0a33e71b04dc60b8282cc3de03433c24a5a7abeb6d41db0b627178344ba056a0d13c33ebdacebc78cd5d24c24334b634302540e676fcf1a28425b1bb7d1e2db07958478514d9c90c8113765d6379c7feebfa2c313933e6ef7549ff1f79cc86463fb6619e161ce4bb5673a4a9174759affb7931cf3602284a5b4b0a229f23cde9ca833fc2f9277ec03bc7fe88471f093149d63a4749da8f21a80f0e37f33508165e65686e97cb9c61dcd0be4e1021b96ed072192f21fd008c3b171557f7ea6ad63563fe81d5aee399d07a529dcfc3f13f5178c6a62e9d9bdd86ee24aedd874af0ea71b7365bef64936e2572e6193f9334450d1a47175d5a5659ac6f45c6d3b9fe0accec10c9bce782cc44eb2a365e0c40821a14b454fc9f25f9a69422abe7647fc7f70c3ad694afe4d5794181fca1f00d0884643e4d5c79d6b21953d7c6422a71055455ffd90ab556c462401921c295ef9b9a64f426b32f6aab2a39319a01ee0441c742cad00416bba226b7edc5b3b511c5602221e98798649f3db9737ab7268d1b05b58621edfeb1d864cac640902fc10cd3fac62a616e3514cf95eb9879acac818df6cf204ae7676766a15a89c2caf5cab74f53a0a80b8f9571bd39478b15c7a84465dc424b5626bde14bfdc457168d310d25232bf603265fbb58a0a498e45b3fc2972c96e20a2b5160cf03325dc85eecf5aaf59a3422fe04e4bdaa975db506b7d3ae441947660a682ed6386c62a4e1995f1d6fb606c0547444ffefa6fa293d5086c8d4ab3b14d0102c5e3a1cef9acbc488f83757ab2e5486af65260671dd2e3157962e164973f565a500043b2436861377f4b4695a1903fa9b228c18b150a02372a569c0977b57877f083c74c62693bbeda2b01cab0f793d2a6af38e2c54964e094bfce0a5f055c1c4000cb830eb56b25bec2c73138072e79a1037e47e40992944690fafe37dff489b2d0965507888a6adbf3ff3173a6cb156862b1710090aac3c555560956361f34a2ad470a12b1140da13abee7a85a161b813eb119230e11060d02e5aaab64eee5e439fbfbdca2e217a09e1072603a22a5fa8c2383a7426c4455432b136960fdeb322ddcc50cc9588c102c04119c391218d86ce22d738ea4597e0f30ea9a0a0ced6e2bfa398297ab6272cf77247189bce44db3bc167e0854d7bcf4416cc4e9c79f9857e6599b6223b4b9ebd8b60afdd91d4eac6d7e52231530f88ce6140dcd558d5c568ea2501d2ba48270a665fbd650e1b91a423e945fe8ab8287944cc9fe4f28ebc57a58e296d1aa24789596a7cb27f159bc65ee2a1f0bb085bc537387a54e527a341fa8a6ddc238e389fc2df5e192971ccc70b4354ba5ff9788f3419c2dc8369444bdedc31de6ace5e3edd090a029fbcbd959ba73e4616f6604599dd2c6e163c8e647b31634db50b370a9fc8efdb0e8439dc196c5a4bbc28392a3bee9d7b08dbba228503304ede03a904eaccb63b719bec7a58e22864e9fead550ba74071827d7b5b25495479e77abb1ce901cff05c2777974887f3693d4d43c3d97c626a0c8d480d9999c6dd7ae871598839ca437127a42ccc2aa06df5d99fb7f4e17b180c780d57397cd6bb80706f4ec531a5512a48b57c5303526259831cd2357b2fdd815c55be83cea50a7782ef70147311168467a4b2d972ac6ac4b0d05dd2cd5fe2577f19c6fa8568c568afccb51f503c64f017a3cbf34b2a814ed8f809373e36d59821be419d31d71097f2a9853a43830006ee6cd26833627fe7b6cb4ed4dd5ecbc6afc975c676fde0a20322d3591a500408366462d2cbda8c822e1ae6fe0db828762b8d9f2c81f4f0f96b583c31664b4ec18ef6d1429e0ddc7b2359099a4e2eb9759c606d1b83f3694f0d9a8bcf9148b229a6689ced562a74eac7a915c7af40be4eafc7374512b614e3373e4ae9ed1e9cc9a54f70480db08b12df1b22902e3998f6a405607d98b0292ef899e0d1c882aca58346302e72572c4371637df865d264381d0869148c7e1889867a9f194e16fe126c9827167443e28636d7064c630f8b1019d60a5c8f94d7a6636e5bce82aaf1b74245f1bc1cc6cbc4f17e2e05fc35954ab5708df0f52de4d975d35e58e4a334f139c5d22ad32061c8b07bee41ca28858eb346125091a08d222f3024a9518fcdd1526628587867a8e8fdc85a1bd37f353bab786eed30a7fe0acacdedb64c26d19a42e298e2814c44ea71fa9c460", 0x1000}, {&(0x7f0000001440)="805dad5ad746c78aad9623612a440ce763321fc0449ca1a5faf433458fc0f6eeea80ae3de50a3ef8011c238dea77a5f42887bd0939f6e624d2c616a298758276873d7d483785c9e8ebbe3f5ff5659bb24e31e5e4295fdaa27dc4da598123a151a10de6b7982ec4ea70e8e4c8fb8663e9bbfa450f107f5bb55cd4a440b7bb8137b5a6a21b0ed41cecaf7905f4016a680b2b446a234fced9aa1461b534d49aaa779c4a98f6e92c8573c3440336fab4d5fee0031d38153678767e64808d988b2349156e85990dfed97e4b830906152d0bced33662f850cfc653df28d12e20933e74cfb2950bdc13dd058a5b2e", 0xeb}, {&(0x7f0000001540)="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", 0x1000}], 0x4, &(0x7f0000002680)=[@rights={{0x20, 0x1, 0x1, [r1, r8, r9, r6]}}, @rights={{0x30, 0x1, 0x1, [r10, r12, r13, r6, r14, r15, r16, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r18, r22}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r31}}}, @rights={{0x28, 0x1, 0x1, [r35, r36, r37, r38, r39, r40]}}, @rights={{0x1c, 0x1, 0x1, [r41, r5, r42]}}], 0xd8, 0x2400c020}, 0x1)
r43 = gettid()
ptrace$setopts(0x4206, r43, 0x0, 0x0)
tkill(r43, 0x40)
ptrace$setregs(0xd, r43, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r43, 0x0, 0x0)
ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000300)={[], 0x7, 0x400, 0x4, 0xff, 0x5, r43})
dup2(r6, r5)
ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f00000002c0))
timer_settime(r4, 0x1, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200))

00:08:40 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:40 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1e1415ebb4bbbe2b, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @timestamp, @timestamp, @sack_perm, @mss={0x2, 0x5}, @timestamp, @mss={0x2, 0x7ffe}, @sack_perm, @timestamp, @sack_perm], 0xa)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup3(r4, r5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)

[  127.804617] binder: 5685:5689 transaction failed 29201/-1, size 0-0 line 3022
[  127.827632] binder: undelivered TRANSACTION_ERROR: 29201
00:08:40 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f0000000000), 0x0, 0xfffffffd)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = dup(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x3e, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000092df3b9298f8bd00"/62], 0x0, 0x0, 0x0})

00:08:40 executing program 3:
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000003)

00:08:40 executing program 3:
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket(0x11, 0x800000003, 0x8)
setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4)
bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x78)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x0)
setsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f0000000000)=@srh={0x16, 0x8, 0x4, 0x4, 0x79, 0xc, 0x1, [@mcast2, @mcast1, @mcast1, @empty]}, 0x48)
r7 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="070100009200000e0000000000000000000000000000000008000000000000000529"], 0x22)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000140)=0x146)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

00:08:40 executing program 5:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
write(r1, &(0x7f0000000080), 0xffffffffffffff17)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e)
mount(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='jfs\x00', 0x0, &(0x7f0000000380)='./cgroup.cpu\x00')
mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x2)
syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00')
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x60, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[], @ANYPTR, @ANYRESOCT], 0x27)
fcntl$setstatus(r3, 0x4, 0x6100)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00<s\x8c\')tU\x19\x9a)S\xa7b\xce\xd8\xde\x95\xf6\xc3\\n\xc1\xa2)o\xee\x97\xdf\xe9\xf3\xfdJ\xe8`7iY\x86~\xd8\xecy\xc00.\x90\xfc\xac\xa0\xb8\x1d\x1a\x7f\xec\xea\np\xb4\xd5l\xb5\xc3\xc7w%\x16a~]P\x04\xc7 \xf7\x92\x8b\x8f\x9d&\\\xf9\xa3\x96G<\xd4\x80\x16/\x81\xe7(\x8b\xde9]\xaf\xbc\xb0\r}Ne\xfaX\xb0\x8a\xbd\x1d\xfc\xd4\x91\x95\x00\v\x14a0_\xd9\x1f\xc7\xb5\xc3FS\x16\x03~\xbbc*\xa3\xab`\x06\xf0\xbc\xacJY\xe7\xb2\x8cw\xa4U.\xa4\xe2u\x1d!jVL}#O\t\xb2`\x0e\xe9\xc6*\xf7\xf8Uh\x8e\x01\xf1b\xf5;\x8a\x17\x9a\x0fq\x01\x91pSR\x82-H\n\x1fP\xb6*\xc9\xfd\x89\xb5\x7f\x87m\"\xaa\xce\xed\a\xf2\xfd<\x10\xb8\xcf\xfac\xcc\x0f\xd2\xdd\xcd#8\"\x8b\xf2\xccA\v\xdf\xf5\x8d\xa5-\x02\xaa|\xdd\xd0az\xc8,)\xedf\x89x>\a\x13', 0x275a, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r6}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r7}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r8}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0)
writev(r8, &(0x7f00000001c0)=[{&(0x7f00000005c0)="f5d1bcf39253f34d6f6ea4b000bfd967d64e007953de74e129853c5a8eb652a30203ca2f24d1d3a6f15bab29560c8a20bac3d964c33c8be920b23aa9401b8af2c877cab5662ed30484a9d281d4a5b7c76ccb5e790134588fa5549ccaf9681e2c3840367a99ad42ae6cd47e8a1ecca5ceecb587dd81bfb1"}, {&(0x7f0000000900)="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"}], 0x100000dc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
read(r10, 0x0, 0x0)
r11 = openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendfile(0xffffffffffffffff, r11, &(0x7f0000000000), 0x17be80)

[  127.985594] audit: type=1400 audit(1571789320.755:117): avc:  denied  { call } for  pid=5722 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  128.081933] binder: 5722:5729 transaction failed 29201/-1, size 4314327496741879808-3187185810 line 3022
00:08:41 executing program 5:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
write(r1, &(0x7f0000000080), 0xffffffffffffff17)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e)
mount(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='jfs\x00', 0x0, &(0x7f0000000380)='./cgroup.cpu\x00')
mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x2)
syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00')
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x60, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[], @ANYPTR, @ANYRESOCT], 0x27)
fcntl$setstatus(r3, 0x4, 0x6100)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00<s\x8c\')tU\x19\x9a)S\xa7b\xce\xd8\xde\x95\xf6\xc3\\n\xc1\xa2)o\xee\x97\xdf\xe9\xf3\xfdJ\xe8`7iY\x86~\xd8\xecy\xc00.\x90\xfc\xac\xa0\xb8\x1d\x1a\x7f\xec\xea\np\xb4\xd5l\xb5\xc3\xc7w%\x16a~]P\x04\xc7 \xf7\x92\x8b\x8f\x9d&\\\xf9\xa3\x96G<\xd4\x80\x16/\x81\xe7(\x8b\xde9]\xaf\xbc\xb0\r}Ne\xfaX\xb0\x8a\xbd\x1d\xfc\xd4\x91\x95\x00\v\x14a0_\xd9\x1f\xc7\xb5\xc3FS\x16\x03~\xbbc*\xa3\xab`\x06\xf0\xbc\xacJY\xe7\xb2\x8cw\xa4U.\xa4\xe2u\x1d!jVL}#O\t\xb2`\x0e\xe9\xc6*\xf7\xf8Uh\x8e\x01\xf1b\xf5;\x8a\x17\x9a\x0fq\x01\x91pSR\x82-H\n\x1fP\xb6*\xc9\xfd\x89\xb5\x7f\x87m\"\xaa\xce\xed\a\xf2\xfd<\x10\xb8\xcf\xfac\xcc\x0f\xd2\xdd\xcd#8\"\x8b\xf2\xccA\v\xdf\xf5\x8d\xa5-\x02\xaa|\xdd\xd0az\xc8,)\xedf\x89x>\a\x13', 0x275a, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r6}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r7}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r8}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0)
writev(r8, &(0x7f00000001c0)=[{&(0x7f00000005c0)="f5d1bcf39253f34d6f6ea4b000bfd967d64e007953de74e129853c5a8eb652a30203ca2f24d1d3a6f15bab29560c8a20bac3d964c33c8be920b23aa9401b8af2c877cab5662ed30484a9d281d4a5b7c76ccb5e790134588fa5549ccaf9681e2c3840367a99ad42ae6cd47e8a1ecca5ceecb587dd81bfb1"}, {&(0x7f0000000900)="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"}], 0x100000dc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
read(r10, 0x0, 0x0)
r11 = openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendfile(0xffffffffffffffff, r11, &(0x7f0000000000), 0x17be80)

00:08:41 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x3, 0x0, "d82bf8028272edcd34643f8125a5387a65624ae46652afa62a1bfff7720a808815eae4920de25d986881337557fb659624eed6b864671999a20bfd8fe4a75dda01c737aea83026205ff3ed70169b55c7"}, 0xd8)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
fsetxattr$security_ima(r3, &(0x7f0000000000), &(0x7f0000000100)=@ng={0x4, 0x14, "5a32d2068420053253eeae7cf909d4767d"}, 0x13, 0x1)
fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634060000000000000000000000000000000000000000000000000000000000000000058000000000000001800000000000000", @ANYPTR64=&(0x7f00000004c0)=ANY=[], @ANYPTR64=&(0x7f0000000180)=ANY=[]], 0x0, 0x0, 0x0})

[  128.445352] audit: type=1400 audit(1571789321.215:118): avc:  denied  { set_context_mgr } for  pid=5748 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  128.470300] binder: 5748:5749 ioctl 40046207 0 returned -13
[  128.525311] binder: 5748:5749 unknown command 1614832384
[  128.530817] binder: 5748:5749 ioctl c0306201 20000140 returned -22
[  128.538957] audit: type=1400 audit(1571789321.305:119): avc:  denied  { set_context_mgr } for  pid=5748 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  128.563348] binder: 5748:5750 ioctl 40046207 0 returned -13
00:08:41 executing program 5:
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r0)
r1 = socket$netlink(0x10, 0x3, 0xa)
r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0)
eventfd2(0x0, 0x1)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
fstat(r3, &(0x7f0000000440))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000680)="e0775f276ccfd2676079306c4094fc8e97bd05506fdae41ad3bdfb3319c866a3149ed3cf2e5361f336bc6770d096802d594693b522aa5cf036404c143cf50361f8e98efb2e5d2578b3945bf878473e332094b1f0f22e94fd4864544c6889932e2a4e1905cf8c9f338c252275e62aed3d67007aa0c6343378be7bad7432367e4a1e7b7e7faa4f64aa3e5e7b21d286db633ad1bdbbd507eb875c72f0cfbd0050fb109d5cd7561d068ddd71de33612bc507c661523fbdd63b05414e716435e99dfd7f87f6ce79286d3704ced8dbe716a38264af2f2f28bc0f6290c797d75c5e0d96a1eff74e9eaa9a")
r4 = syz_open_procfs(0x0, &(0x7f0000000580)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a\xc9n;v<\xd6h\xb0\x15\xaf;x\xb5;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK(\x0f\xadG\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa9<s\x18\xb7\xbc\xc3\xc5o\xd7\x0fu4(c\xcd\xd6u\xa4\xff\xea\xb1\x96\xdbI\xb72\xb4\xcfahW\x9c\xcc\x00\x00\x00\x00\x84OE')
getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000080)={@multicast2, @broadcast}, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000300)=0x4)
syncfs(0xffffffffffffffff)
r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='mem\x00\x01y\x04\"waS\xbbb\x85\x17\x89\xc95\x86B<\r\xe8\xea\xc7\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;', 0x0, 0x0)
preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c)
r6 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0)
setitimer(0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x7530}}, &(0x7f00000002c0))
ftruncate(r6, 0x200004)
sendfile(r1, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r7, &(0x7f0000000480), 0x10000000000002a1, 0x0)
readlinkat(r7, &(0x7f0000000240)='./file1\x00', &(0x7f0000000780)=""/224, 0xe0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'sit0\x00'})

00:08:41 executing program 4:
clone(0x600, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  128.570474] binder: 5748:5750 unknown command 1614832384
[  128.576061] binder: 5748:5750 ioctl c0306201 20000140 returned -22
[  128.650645] audit: type=1400 audit(1571789321.415:120): avc:  denied  { create } for  pid=5753 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  128.692505] audit: type=1400 audit(1571789321.455:121): avc:  denied  { create } for  pid=5753 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0
[  128.723324] binder: undelivered TRANSACTION_ERROR: 29201
00:08:41 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x2f5fa26)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000017f00000000000002000400", @ANYRES32=r2, @ANYBLOB="040080000000000010000700000000002000010000000000"], 0x2c, 0x0)
setuid(r2)
syslog(0x4, &(0x7f0000000240)=""/4096, 0x1000)
fchdir(r0)
unlink(&(0x7f0000000200)='./bus\x00')
clone(0x20000000, &(0x7f0000000080)="d116f61edb99a987b37738c8488ecb1dda7cd67938e5495758af0dd9b2ada821c5167567bf433c2ab58529726699e9e952f6592bc9c8051c73e3af16134f11c282fdc047cdcae263e13b5e73cbe3abb5dcbbee13f5dcc91e54725311", &(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0)="bf3965c4459c67b3d441c0bc02a1893066cbb5e7d6c37013747828614afb7e128970974771d9dca7bba1e71fa05d125d2894c7c6faddf578acfc0386b6b475b5909af42ba901eb3310f3cf27fbce187b46b1dc61055e51752845374b0b05dc9274454c128af8e423c44045782fe5171703b193312f54515a6991a81550c817ad20a7cbe39e574b5b6ffc066caa340e299d66ec54a9ab7c90d4f99cca2987988d10a3020a5040ac7a1d3d1737ac7059b95b157eb1b73c9fa0a7f77aaca588232b4ed3a7d01149df3c085ed7d2770d19b231d60cfc5291")
link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./bus\x00')

00:08:41 executing program 4:
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005500)=[{{&(0x7f0000000540)=@nl=@unspec, 0x80, &(0x7f0000001940)=[{&(0x7f00000005c0)=""/207, 0xcf}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/69, 0x45}, {&(0x7f0000000740)=""/179, 0xb3}, {&(0x7f0000000800)=""/255, 0xff}], 0x5}, 0x80000001}, {{&(0x7f00000019c0)=@ax25={{0x3, @null}, [@netrom, @bcast, @netrom, @bcast, @default, @rose, @netrom, @bcast]}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/54, 0x36}, {&(0x7f0000001a80)=""/89, 0x59}, {&(0x7f0000001b00)=""/60, 0x3c}, {&(0x7f0000001b40)=""/13, 0xd}, {&(0x7f0000001b80)=""/93, 0x5d}, {&(0x7f0000001c00)=""/146, 0x92}, {&(0x7f0000001cc0)=""/31, 0x1f}, {&(0x7f0000001d00)=""/198, 0xc6}, {&(0x7f0000001e00)=""/110, 0x6e}], 0x9, &(0x7f0000001f40)=""/135, 0x87}, 0x7}, {{&(0x7f0000002000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002080), 0x0, &(0x7f00000020c0)=""/66, 0x42}, 0xfffffffe}, {{&(0x7f0000002140)=@ax25={{0x3, @netrom}, [@remote, @bcast, @default, @bcast, @default, @null, @netrom, @bcast]}, 0x80, &(0x7f0000002240)=[{&(0x7f00000021c0)=""/81, 0x51}], 0x1, &(0x7f0000002280)=""/49, 0x31}, 0x1}, {{&(0x7f00000022c0)=@sco, 0x80, &(0x7f00000026c0)}, 0x7}, {{&(0x7f0000002740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000027c0)=""/105, 0x69}, {&(0x7f0000002840)=""/56, 0x38}, {&(0x7f0000002880)=""/109, 0x6d}, {&(0x7f0000002900)=""/84, 0x54}, {&(0x7f0000002980)=""/126, 0x7e}], 0x5}, 0x800}, {{&(0x7f0000002a80)=@pppol2tp={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002b00)=""/110, 0x6e}, {&(0x7f0000002b80)=""/62, 0x3e}, {&(0x7f0000002bc0)=""/53, 0x35}], 0x3, &(0x7f0000002c40)=""/132, 0x84}, 0x4}, {{&(0x7f0000005780)=@sco, 0x80, &(0x7f00000041c0)=[{&(0x7f0000002d80)=""/202, 0xca}, {&(0x7f0000002e80)=""/33, 0x21}, {&(0x7f0000002ec0)=""/138, 0x8a}, {&(0x7f0000002f80)=""/90, 0x5a}, {&(0x7f0000003000)=""/204, 0xcc}, {&(0x7f0000003100)=""/136, 0x88}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x7, &(0x7f0000004240)=""/40, 0x28}, 0x81}, {{&(0x7f0000004280)=@x25={0x9, @remote}, 0x80, &(0x7f0000005480)=[{&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f0000005300)=""/187, 0xbb}, {&(0x7f00000053c0)=""/151, 0x97}], 0x3, &(0x7f00000054c0)=""/59, 0x3b}, 0x8}], 0x9, 0x20, &(0x7f0000005740))
recvmmsg(r0, 0x0, 0x0, 0x40008000, 0x0)
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x8000)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
execveat(r4, 0x0, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
write(r3, &(0x7f00000001c0), 0xfffffef3)
writev(0xffffffffffffffff, 0x0, 0x0)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x83)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000325f23)=""/221, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x400000000000068, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0)
connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r7, &(0x7f0000007fc0), 0x400000000000068, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r8, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x400000000000068, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r9, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r10, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r10, &(0x7f0000007fc0), 0x400000000000068, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000480)=ANY=[@ANYPTR, @ANYPTR, @ANYRES32=0x0, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRES16], @ANYRESHEX, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRESOCT=r7, @ANYRES32=r8, @ANYRES64=r9, @ANYRESHEX=r10], @ANYRES16=0x0, @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYRES32=r6, @ANYRES64, @ANYRES64=0x0, @ANYPTR, @ANYPTR64], @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRESDEC=0x0, @ANYRES16]], @ANYRESDEC, @ANYRESHEX], 0x2e)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r11 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r11, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
socketpair(0x3, 0xa054b98f838cc548, 0x7f, &(0x7f0000000180))

00:08:41 executing program 1:
pipe(0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000480)={0x100000000, 0x6, 0x100000000, 0x80000000, 0x6ee4, 0x0, 0x9, 0x0, 0x9, 0x8, 0x75, 0x8})
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
pipe(&(0x7f00000005c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x0)
write(r4, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000300)=0x1)
fchdir(r0)
creat(&(0x7f0000000340)='./bus\x00', 0x0)
r5 = openat$keychord(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/keychord\x00', 0x200000, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r6, 0x6, 0x8, &(0x7f0000bfcffc), &(0x7f0000000200)=0x4)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r7, 0x6, 0x8, &(0x7f0000bfcffc), &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r9, 0x6, 0x8, &(0x7f0000bfcffc), &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r11, 0x6, 0x8, &(0x7f0000bfcffc), &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
r14 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r14, 0x6, 0x8, &(0x7f0000bfcffc), &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
write$P9_RREAD(r5, &(0x7f00000011c0)=ANY=[@ANYRESDEC=r15, @ANYRESDEC=0x0, @ANYPTR=&(0x7f00000009c0)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRESDEC=r6, @ANYRES32=r7, @ANYRESDEC, @ANYPTR64=&(0x7f0000001240)=ANY=[]], @ANYRESDEC, @ANYRESOCT], 0x5b)
syz_open_procfs(0x0, &(0x7f0000000380)='net/ptype\x00')
write$P9_RCLUNK(r4, &(0x7f0000000040)={0x7, 0x79, 0x1}, 0x7)
write$P9_RWALK(r4, &(0x7f0000000780)=ANY=[], 0x0)
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000140))
r16 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r16, 0x6, 0x8, &(0x7f0000bfcffc), &(0x7f0000000200)=0x4)
r17 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r17, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000000301ffff20000000000000000000000025253f8edbda4b90de3466db1165ddd4d324760145a534e68650fb0bb4c3f04cd22ce77757f992eafbc20c85c6a334fc5d4d19a08f40948c5b0875f6644fd2457d531873bde1c12b821b68e024e1f65c295781c9fb4a960b2b61bb057f6a98434ee40819c5d829cd2b1bfd28bdeb345a08c4526a896bb2f4bf999d04b896899dff3426b4a422891c8aee4944d94db4e81c0e454c9399dc31543cab2f2c88bfe5faf7fe02b4ea6f830bc1509a6d82871cbbb0db00"/212], 0x14}}, 0x0)

00:08:41 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040))
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$KDSKBLED(r2, 0x4b65, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xffffff7d, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0})

00:08:41 executing program 3:
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r0, r1)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000280)={0x1})
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x200000, 0x0)
ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000300)={0x400, 0x5, 0x2d4, 0x1, 0x263, 0x1, 0x4})
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000340))
socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000003c0)={0x2, 0x70, 0x1, 0x4, 0xff, 0x8e, 0x0, 0x120, 0x800, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x2, @perf_config_ext={0xb67, 0xff}, 0x8200, 0x9, 0x8, 0x7, 0x8, 0x84f6, 0x5})
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/status\x00', 0x0, 0x0)
ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f0000000480))
lseek(r4, 0x0, 0x1)
setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f00000004c0)=0xfffff000, 0x4)
ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000000500)={0x80, 0x71})
r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/policy\x00', 0x0, 0x0)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000580)={<r7=>0x0, @multicast1, @empty}, &(0x7f00000005c0)=0xc)
bind$packet(r6, &(0x7f0000000600)={0x11, 0x7, r7, 0x1, 0x65, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x206440, 0x0)
fsync(r8)
r9 = request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=':%[]md5sum]/!]\x00', 0xfffffffffffffff8)
r10 = request_key(&(0x7f0000000d00)='.request_key_auth\x00', &(0x7f0000000d40)={'syz', 0x3}, &(0x7f0000000d80)='(self,em0\'vboxnet1]^ppp1security#nodev$\x00', 0xfffffffffffffffc)
keyctl$instantiate_iov(0x14, r9, &(0x7f0000000c80)=[{&(0x7f0000000740)="6495a99d93a2748d462178dff6fde37cd6bd192652372f99e6eece80d6acb638242c7aac155daecf2a6f1a314a020ee174a513707ceded978ca540e562eb4efa502d640c3923dc03b25740817ee1367a67dceab562eb52ceb3401fab52ed9c6b93bef2abb5060dd566ba6de2998b82c3948653b39f0e41254726d4526c41114a292b304fbdb54cf668bb29067c052529caf1863812e4dc2e400b5c65042d6894c7839f3d8ee49558a160d3fa00e7d0c7045f0650b03eaad1e7b0be4f3f7b70898960a4", 0xc3}, {&(0x7f0000000840)="e9615f3cea2652a8d7710782e2de1348d598c09d26a774f4ac037c240961b36dd8ee7a7c2531a51063dee0fb40effa46710ef643544d5e8f9ecf9e26a3e21ec7d01d7f337cb01e05308f8f6282a26df247d695c544bf9e738de8b6250f602abb0f81e64bbd54005222f0f88843b7484bd8431141c0b7a1f6a90b3bec19cc34a80f4a43ff074d35a0fde95c05f6a63c00ae950a425fecd2822f707cb523f5ba2f639d12a070408d2b47d55f672147eb223e4a7d4f6f", 0xb5}, {&(0x7f0000000900)="6de57cf4fd91e48e252f88a4de5ef5a4ef42542d86a5631205ded8f7534ccb4a0e7951f9a750bdadda715c4f8c7cc16f6b40697fe43b62f18a10a6f968e87d80428f003624bf2b14e338391215e32a47510b6e0261e0d6a5570dc60fa104c6738a", 0x61}, {&(0x7f0000000980)="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", 0xfb}, {&(0x7f0000000a80)="369f521f96229cbfc8f0151d0aeb9d55fe91342b65394972acc46d19a3092d05e65aec5588d417aa809aad66990c8f578a10e6547ffebc35fb67549e1548665f7db5ed7ccb96ee594706ca53eecd15741a56c372bcd9c9e56a7aa46a7a572f92207614323c83142aa130a69dadbc32875cca4dc568c66c824e09", 0x7a}, {&(0x7f0000000b00)="2ad2c821bb7f434d7cf91c4bf497bf722760f4c301a8117c908723b9fb42c0c8779eb52b3df606303c6cb095493521990f345cf344915c837ddd02aa795022b0f4607ecea35c99228e1c69b0dc16bfe1472efb45665f76bf76d620fb94054c545c72412b793169399eac8f2f21bc880bb1333a6520a316bc80ba44403a5c2263e0e5c0cb13e6ce51f29cc2cf3d6c5926147ee6a8bd44b5329c0175b71b3ce0681865ee4ea6e2f1d840aaa6c239412f890f499684ca964f4713e4bda3e8822be6db9b908dafcf126863", 0xc9}, {&(0x7f0000000c00)="114a7fe66653d562de96c32223a3b468e80b90c779da207033d6208cef7932ee7ff14503b7baea42e71b52f245a3dbdd07e1e16400e73d1d000ca1b0b6111687ada2d6259f47e4", 0x47}], 0x7, r10)
keyctl$assume_authority(0x10, r10)
r11 = request_key(&(0x7f0000000f40)='.request_key_auth\x00', &(0x7f0000000f80)={'syz', 0x3}, &(0x7f0000000fc0)='bdev\x00', 0xfffffffffffffffb)
add_key(&(0x7f0000000dc0)='cifs.idmap\x00', &(0x7f0000000e00)={'syz', 0x3}, &(0x7f0000000e40)="ef025362a0d607ee5e5303e838704f67a9cc6f1c3514795848b0ade973ddc1f5a876a6c26f50308e65a077a4718a5a7eb69ec554ed9fe27c0cf64854368e31ec6ae32d8dbb2bfdaf1d0055ce5c22be19aa8d640d48f2ae64d8bf0e05afd17feaf52b2ab2b1e577739d7fa28e9604ab936fbb78e18a74b4fe2de6bee36ca57d06157c65ced8b2a45f3b5ad66226f75b99954e30bda0452e3da4260af023758b6d7aeef357724d04548c9f6ceb0d7ddc4cb71e8bffc49a08309dc2bfa0cf1b8aa0285a7854db2a9c9432840b87c756c419fc451b7192827cdd4924410b03a7ca29934aa7c8cd880783cf", 0xe9, r11)
r12 = openat$cgroup_ro(r6, &(0x7f0000001000)='cpuacct.usage_percpu\x00', 0x0, 0x0)
sendmsg$unix(r12, &(0x7f0000001240)={&(0x7f0000001040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001200)=[{&(0x7f00000010c0)="cc", 0x1}, {&(0x7f0000001100)="d5dbc58db094ed2de4a69cd6259013adc9b1f3bce1554da0195ffdccc09a53ff593b83cd684fcb937d40c7556fb8345c66e9bcade4fd7ddf47245cc19f736895c42059795246ea2ea14dd610eb7ec5cb45c4901c645ed47105ba843a5e8a47b96a30c9e8339a87e15d6e2de1541c7f9495377c057c255f388b22a498c7416bdc7e85b70bc8930bf7b654568a84e5211d16bdefd662321fc85c321e726161a331cc52c0667408", 0xa6}, {&(0x7f00000011c0)="68a23498c40f00bc2122fe3e764748091cb4ff06b37a9dced08f", 0x1a}], 0x3, 0x0, 0x0, 0x48440}, 0x8000)
r13 = accept(0xffffffffffffffff, 0x0, &(0x7f0000001280))
connect$inet6(r13, &(0x7f00000012c0)={0xa, 0x4e20, 0xff, @rand_addr="37eb6d3a00fc36d80a6733e5402abf87", 0x959}, 0x1c)

[  128.879547] audit: type=1400 audit(1571789321.645:122): avc:  denied  { create } for  pid=5753 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  128.905266] audit: type=1400 audit(1571789321.675:123): avc:  denied  { create } for  pid=5753 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0
00:08:41 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0207000902000000a8a9897bbb7326995843d0a4e465b3e59667ec913ec131d4c7bb5b6701d33a056b8b960d48727603678f7bb6614ab91a5f2d0ac99d04462e3bb243bbfd89522d3c1ef59e021645000000005cfc58fd0000"], 0x10}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x32}, 0x0, @in6}}, 0xe8)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c)

[  128.995148] binder: 5770:5776 ioctl 40106614 20000040 returned -22
[  129.003662] binder: 5770:5776 unknown command 808482864
[  129.034355] binder: 5770:5776 ioctl c0306201 20000140 returned -22
00:08:41 executing program 3:
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x200)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xffffffffffffff87)
ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"])
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
dup(0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

00:08:41 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeff00000000"], 0x0, 0x0, 0x0})

[  129.063542] binder: 5770:5793 unknown command 808482864
[  129.085118] binder: 5770:5793 ioctl c0306201 20000140 returned -22
[  129.176270] binder: 5804:5806 transaction failed 29201/-1, size 0-0 line 3022
[  129.220143] binder: undelivered TRANSACTION_ERROR: 29201
[  129.237832] binder: 5804:5811 transaction failed 29201/-1, size 0-0 line 3022
00:08:42 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lapb0\x00', 0x1}, 0x18)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  129.278251] binder: undelivered TRANSACTION_ERROR: 29201
00:08:42 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="4ee716a727cb5b0ebe920353da6f0063404000000000000000000000000000000000000000000000000000000100"/82], 0x0, 0x0, 0x0})

00:08:42 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1/../file0\x00')

[  129.438779] binder: 5823:5824 unknown command -1491671218
[  129.460765] binder: 5823:5824 ioctl c0306201 20000140 returned -22
00:08:42 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5)
sendto$inet(r0, 0x0, 0x0, 0x4008000, &(0x7f0000001000)={0x2, 0x4e22, @broadcast}, 0x10)
setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000)="3d0e69e7ec4e53d3ba50bb528e461c0c3595de09ff5f1966ca1cc90f8362c0e93f7eb461a4e80d16af37ecfd976e69bb27d609449ffdbc5a8f080ad8b9a6e3485a906901759ba3c82e0826a895c416595722b390abe18e9c6098a85b55a66ceb02fbb6fab2be28a9ed2f17024202634167d5bd614d2883818bdb44ce91b709c5718ef9105ba173f7767cd2d40d41ab11e1d69eb942f4d9971f776e9659ea1b11bb5c1eeeac7701a84d07d1996cb069b2268b7017276247908e46bd74f750440cbe0db01604fade5b9d1389b4ffe71e79fe6dab4337731d106d217a141f1731eaf67bdfb5cd41db3e92f484000d4b1ec2fb8ad9f62f035528", 0xf8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000680)=0xe8)
sendmmsg$inet(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0xffffff89}}, {{&(0x7f0000000880)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10, 0x0, 0xfffffffffffffdaa, &(0x7f00000006c0)=[@ip_pktinfo={{0x0, 0x0, 0x8, {r4, @broadcast, @dev={0xac, 0x14, 0x14, 0x16}}}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr={0x83, 0x0, 0x7, [@remote, @local, @multicast1, @multicast1]}, @lsrr={0x83, 0x0, 0x80, [@multicast2, @loopback, @multicast1, @multicast1, @loopback, @remote, @rand_addr=0x7fff, @local, @local, @rand_addr=0x401]}]}}}], 0x1a7}}], 0x400027e, 0x0)

[  129.506713] binder: 5823:5830 unknown command -1491671218
[  129.546731] binder: 5823:5830 ioctl c0306201 20000140 returned -22
00:08:42 executing program 1:
r0 = socket$inet6(0xa, 0x201000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000140)={0xa, 0x45, 0x0, @mcast1}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
read$char_usb(r2, &(0x7f0000000080)=""/107, 0x6b)
r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0)
setsockopt$inet_tcp_buf(r4, 0x6, 0x1c, &(0x7f0000000040)="b67d6d7b0436c7e33a3085558c88", 0xe)
write$P9_RSYMLINK(r3, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x2, 0x3, 0x4}}, 0x14)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)={0x200, 0x0, 0x0, [{}, {{}, {0x0, 0x0, 0x13, 0x0, 'user+selfppp1em1\\}]'}}, {{}, {0x0, 0x0, 0xd, 0x0, 'md5summd5sum-'}}]}, 0x200)

[  129.649365] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead.
00:08:42 executing program 4:
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005500)=[{{&(0x7f0000000540)=@nl=@unspec, 0x80, &(0x7f0000001940)=[{&(0x7f00000005c0)=""/207, 0xcf}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/69, 0x45}, {&(0x7f0000000740)=""/179, 0xb3}, {&(0x7f0000000800)=""/255, 0xff}], 0x5}, 0x80000001}, {{&(0x7f00000019c0)=@ax25={{0x3, @null}, [@netrom, @bcast, @netrom, @bcast, @default, @rose, @netrom, @bcast]}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/54, 0x36}, {&(0x7f0000001a80)=""/89, 0x59}, {&(0x7f0000001b00)=""/60, 0x3c}, {&(0x7f0000001b40)=""/13, 0xd}, {&(0x7f0000001b80)=""/93, 0x5d}, {&(0x7f0000001c00)=""/146, 0x92}, {&(0x7f0000001cc0)=""/31, 0x1f}, {&(0x7f0000001d00)=""/198, 0xc6}, {&(0x7f0000001e00)=""/110, 0x6e}], 0x9, &(0x7f0000001f40)=""/135, 0x87}, 0x7}, {{&(0x7f0000002000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002080), 0x0, &(0x7f00000020c0)=""/66, 0x42}, 0xfffffffe}, {{&(0x7f0000002140)=@ax25={{0x3, @netrom}, [@remote, @bcast, @default, @bcast, @default, @null, @netrom, @bcast]}, 0x80, &(0x7f0000002240)=[{&(0x7f00000021c0)=""/81, 0x51}], 0x1, &(0x7f0000002280)=""/49, 0x31}, 0x1}, {{&(0x7f00000022c0)=@sco, 0x80, &(0x7f00000026c0)}, 0x7}, {{&(0x7f0000002740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000027c0)=""/105, 0x69}, {&(0x7f0000002840)=""/56, 0x38}, {&(0x7f0000002880)=""/109, 0x6d}, {&(0x7f0000002900)=""/84, 0x54}, {&(0x7f0000002980)=""/126, 0x7e}], 0x5}, 0x800}, {{&(0x7f0000002a80)=@pppol2tp={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002b00)=""/110, 0x6e}, {&(0x7f0000002b80)=""/62, 0x3e}, {&(0x7f0000002bc0)=""/53, 0x35}], 0x3, &(0x7f0000002c40)=""/132, 0x84}, 0x4}, {{&(0x7f0000005780)=@sco, 0x80, &(0x7f00000041c0)=[{&(0x7f0000002d80)=""/202, 0xca}, {&(0x7f0000002e80)=""/33, 0x21}, {&(0x7f0000002ec0)=""/138, 0x8a}, {&(0x7f0000002f80)=""/90, 0x5a}, {&(0x7f0000003000)=""/204, 0xcc}, {&(0x7f0000003100)=""/136, 0x88}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x7, &(0x7f0000004240)=""/40, 0x28}, 0x81}, {{&(0x7f0000004280)=@x25={0x9, @remote}, 0x80, &(0x7f0000005480)=[{&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f0000005300)=""/187, 0xbb}, {&(0x7f00000053c0)=""/151, 0x97}], 0x3, &(0x7f00000054c0)=""/59, 0x3b}, 0x8}], 0x9, 0x20, &(0x7f0000005740))
recvmmsg(r0, 0x0, 0x0, 0x40008000, 0x0)
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x8000)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
execveat(r4, 0x0, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
write(r3, &(0x7f00000001c0), 0xfffffef3)
writev(0xffffffffffffffff, 0x0, 0x0)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x83)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000325f23)=""/221, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x400000000000068, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0)
connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r7, &(0x7f0000007fc0), 0x400000000000068, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r8, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x400000000000068, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r9, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r10, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r10, &(0x7f0000007fc0), 0x400000000000068, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000480)=ANY=[@ANYPTR, @ANYPTR, @ANYRES32=0x0, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRES16], @ANYRESHEX, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRESOCT=r7, @ANYRES32=r8, @ANYRES64=r9, @ANYRESHEX=r10], @ANYRES16=0x0, @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYRES32=r6, @ANYRES64, @ANYRES64=0x0, @ANYPTR, @ANYPTR64], @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRESDEC=0x0, @ANYRES16]], @ANYRESDEC, @ANYRESHEX], 0x2e)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r11 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r11, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
socketpair(0x3, 0xa054b98f838cc548, 0x7f, &(0x7f0000000180))

00:08:42 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
mlockall(0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x93, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="006340400000000000000000000000630000000000000000000001000000170800005e5f7b7ddfb8ff8a0d8d8d0000000000000000000000000000000000000000000000000000000000002f7946dd89438854384616944cdb5bc35909f4b2d746037ddd2acb2cc43904afd101ed66aae9d205debe7922e6b881494cc9db3294ab8f54"], 0xe8, 0x0, 0x0})
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100, 0x3})

00:08:42 executing program 2:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10)
write$UHID_INPUT(r1, &(0x7f0000001a40)={0x8, "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", 0x1000}, 0x1006)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
nanosleep(&(0x7f00000000c0)={0x77359400}, &(0x7f0000000100))
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

00:08:42 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
gettid()
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
fchdir(r3)
r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6000)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
socket$netlink(0x10, 0x3, 0x9)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0xffffffffffffff1c}])
fallocate(r5, 0x4000000000000010, 0x0, 0x7fff)
r8 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r4, r8, 0x0, 0x8400fffffff6)
creat(0x0, 0x0)

00:08:42 executing program 5:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
getsockname$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f0000000080)=0x6e)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x37, &(0x7f0000001080)="bfe13f8edd50399e24d56ffd760d40d0fa4dd6193f95c0d7d701650a69c2c1d67965beebeef41a9009bfb5d98510566d878ef9ea6c4fc9", 0x0, 0x0, 0x0})
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x800000204000, @remote}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0xfffffffffffffeb4)
setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4)
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x81)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0))
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
dup(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/205})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'veth1\x1c\x00', 0x2}, 0xfffffe95)

[  129.981784] binder: 5907:5911 transaction failed 29201/-1, size -8282811308741526149-141 line 3022
[  130.065424] binder: 5907:5911 ioctl c0306201 20000140 returned -14
[  130.073247] binder: undelivered TRANSACTION_ERROR: 29201
[  130.078967] binder: 5907:5911 transaction failed 29201/-1, size -8282811308741526149-141 line 3022
[  130.089590] binder: 5907:5911 ioctl c0306201 20000140 returned -14
[  130.105161] binder: undelivered TRANSACTION_ERROR: 29201
00:08:43 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r2, r1)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x40)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=r3)
sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@rthdrdstopts={{0x18}}, @hopopts={{0x18}}], 0x30}, 0x0)

00:08:43 executing program 5:
recvmmsg(0xffffffffffffffff, 0x0, 0xff74, 0x140, 0x0)
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0)
pipe(&(0x7f0000000840))
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
r1 = open(&(0x7f00000008c0)='\x00', 0x7d3beeb4a3686d92, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000280)={0x0, r1, 0x91, 0x0, 0x0, 0x5})
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000240), 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="23042dbd0000000000000000000000000000000000000000050000000000"], 0x3}, 0x1, 0x0, 0x0, 0x76de17f1d04e1ec9}, 0x20000004)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2598d004e526c8ae", @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
syz_open_procfs(0x0, 0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="39000000130003006900000000000000ab008048060000004600010707000014190001401000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c)
mknodat(r5, 0x0, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="940000000a18cf44af010600a387d9116eb6efb1d0dcb433595d953fbfb1745de06729eab0ae08f3a1e288edcd0805fb8db2ad7f5f00381fb08202167fd5a40148bbd2ec40be938417f7a14fa74bdf427fdd00be9d1356ef3a8810628138185c8f6a7b676b02e0694cfc984a4bd3b8c1a82ecda84f10b104201c09000000dd76b37f53d6ec5af798149c9f06a4835eef6e69dfa6fb7826aa5ea527fa774b4538a3827cd147bad3119f94b50e11c4000000000000000000000000265048e81b710000000000000000000292033139c366d536ad1eb58d0d40af9a431d2c46906daded718b952857d41fff6e7280909f356cb972a820c77f7a6acdd4b01a1b6fdb3ca83e89fef3045a5e7d9f24d6e6ea60eee631d01edb5af0d0410e802fee71bbec44e0ecf9a068b27776ac76eb295c6eab9e0ede0eacf4f70307b057428cf6724f37e04a4ba9aa7d49", @ANYRES64=r6], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14c606038e6d3c26", @ANYRES16=r6, @ANYBLOB="00032abd7000ffdbdf250f0000005000010014000300e00000020000000000000000000000000c000700500000001700000008000b0073697000080005000400000008000b0073697000080001000a0000000c000700210000000200000008000400020000000800040000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x40)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x14)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r8 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0x1}]}, 0x10)
sendto$inet6(r8, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0)
socketpair(0x3, 0xa054b98f838cc548, 0x7f, &(0x7f0000000180))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000500), 0xa198)
faccessat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x1600)

00:08:43 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
syz_open_pts(r1, 0x10281)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:43 executing program 1:
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r1)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x1407, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000180)={'syz0\x00', {0x100, 0x7, 0xe4, 0x8965}, 0x4d, [0xfffffff8, 0x1000, 0x9, 0x8000, 0xe63f, 0x4, 0x9, 0x3, 0x5, 0xffffff16, 0x10000, 0x10001, 0x401, 0xf832, 0x9, 0x5, 0x3f, 0x40, 0x0, 0x2, 0x3, 0x4, 0xfffffffd, 0x3, 0x80000000, 0x3, 0x8001, 0x588, 0x76, 0x1, 0x9, 0x1, 0xfffffffe, 0x15a, 0x5, 0x100, 0x0, 0x0, 0xce8b, 0xffffffff, 0x3f, 0x2, 0x8, 0x83bf, 0x0, 0x7a6af7eb, 0x4, 0x401, 0x1, 0x3, 0x4, 0x9, 0xffffffff, 0x691c, 0x20, 0x2, 0x20, 0x800000, 0x57d, 0x1f, 0xcf1, 0x0, 0x80000000, 0x1f], [0x4, 0x5, 0x67496bcc, 0x401, 0x7, 0x401, 0xffffffff, 0x7beaee22, 0xffff8000, 0x6, 0x3, 0xc7, 0x80, 0x5, 0x7, 0x1000000, 0x10000, 0x1, 0x5, 0xdb0, 0x7ff, 0xffffffff, 0x2000, 0x0, 0xfffffff7, 0x200, 0x6, 0x7, 0x800, 0x5, 0x8, 0x40, 0x6, 0x4, 0xfffffffb, 0x7, 0x4, 0xb69, 0x7, 0x800, 0x6e7, 0x9, 0xefab, 0x8001, 0x4, 0x7ff, 0x1cbc00, 0x13, 0xffffffff, 0x5, 0xcce0, 0x1ff, 0x8, 0x0, 0x5, 0x2, 0xfffffff7, 0x40, 0x1, 0x6, 0x3, 0xe0e2a5d, 0x8, 0x43186cd7], [0xfffff801, 0x4, 0x5, 0xfffffff8, 0xffffffff, 0x4804, 0x7fff, 0x2, 0x80, 0x1, 0x1, 0x3f, 0x54f, 0x0, 0x400, 0x0, 0xf6, 0x82, 0x8000, 0x1, 0x1, 0x1f, 0x5, 0x4, 0x80000001, 0x1f, 0x101, 0x9, 0x7, 0x5, 0x6d6, 0x3, 0x10000, 0x800, 0x7fffffff, 0x18c8, 0x3, 0x2, 0x5, 0xa2ac, 0x81, 0x998, 0x9, 0x2, 0x6, 0xe3, 0x8, 0x7, 0x4, 0x7ff, 0x6, 0x10000, 0x0, 0x4, 0x7, 0x7f, 0x1, 0x1, 0x5, 0x6, 0xcc5, 0x6, 0x3], [0x5, 0x4, 0x0, 0x5, 0x1, 0x400, 0x2, 0x5, 0x2d9b8e64, 0x8, 0x4, 0x3ff, 0x6, 0x9, 0x1f, 0x0, 0x800, 0xfffffff8, 0x400, 0xffffffff, 0x8f04, 0x80000001, 0x8, 0x0, 0xfff, 0x20, 0xdb00, 0x7, 0xcc, 0xff, 0x0, 0x2447, 0xffffffff, 0xfffff800, 0x2429, 0x7fffffff, 0xe416, 0xffffffff, 0xffffffff, 0x20, 0x0, 0x4, 0x200, 0x9, 0x4, 0x7, 0xffffffff, 0x3f, 0x6, 0xffff, 0x81, 0x0, 0x8, 0x80000001, 0x80, 0x0, 0x3ff, 0x48, 0x100, 0x4, 0x0, 0x2, 0x800, 0xd3]}, 0x45c)
ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000600))
write$FUSE_STATFS(r3, &(0x7f0000000640)={0x60, 0x0, 0x5, {{0x3, 0x20, 0x9, 0x4, 0x2, 0x2, 0x3, 0x9}}}, 0x60)
setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@rand_addr="6608ac0e3499518de0e87d94efcf2812", @in=@multicast1, 0x4e21, 0x9, 0x4e22, 0x0, 0x5, 0x20, 0x0, 0x33, 0x0, r0}, {0x7, 0x3, 0x249bf3f0, 0x0, 0x3, 0x5, 0x5, 0x7}, {0x1, 0xa, 0x9, 0x7f}, 0x80, 0x6e6bba, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d2, 0x3a}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3504, 0x3, 0x3, 0x80, 0xfff, 0x8, 0x3f}}, 0xe8)
setreuid(r0, r0)
r4 = creat(&(0x7f00000007c0)='./file0\x00', 0xb4)
ioctl$void(r4, 0x5450)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4020000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x25, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40002)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/ppp\x00', 0x200a00, 0x0)
fsetxattr$security_smack_entry(r6, &(0x7f0000000980)='security.SMACK64MMAP\x00', &(0x7f00000009c0)='TIPC\x00', 0x5, 0x1)
r7 = timerfd_create(0x6, 0x100c00)
fstat(r7, &(0x7f0000000a00))
umount2(&(0x7f0000000a80)='./file0\x00', 0x1)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/ptmx\x00', 0x400000, 0x0)
ioctl$KDGETLED(r8, 0x4b31, &(0x7f0000000b00))
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup/syz0\x00', 0x200002, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r9)
write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000b80)={0x18, 0x1, 0x0, {0x4}}, 0x18)
r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000bc0)='/selinux/policy\x00', 0x0, 0x0)
getdents64(r10, &(0x7f0000000c00)=""/235, 0xeb)
flistxattr(r4, &(0x7f0000000d00)=""/205, 0xcd)
r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000e00)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r11, 0x5457, &(0x7f0000000e40))
r12 = accept$packet(0xffffffffffffffff, &(0x7f0000000e80), &(0x7f0000000ec0)=0x14)
sendfile(r12, r11, &(0x7f0000000f00), 0x2)

[  130.396999] binder: 5946:5952 transaction failed 29201/-1, size 0-0 line 3022
[  130.418607] binder: undelivered TRANSACTION_ERROR: 29201
[  130.431235] binder: 5946:5954 transaction failed 29201/-1, size 0-0 line 3022
00:08:43 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0})

00:08:43 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8)
sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0)

00:08:43 executing program 1:
r0 = memfd_create(&(0x7f0000000000)='{$-$keyring.wlan1,\x00', 0x5)
ftruncate(r0, 0x40000)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240)=0x5, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x2e1)
sendfile(0xffffffffffffffff, r0, 0x0, 0xffe4)
r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0x2c9, 0x800, 0x401})
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={r2, 0x0, 0x8, 0x80000001, 0x163})

[  130.462657] binder: undelivered TRANSACTION_ERROR: 29201
[  130.465240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28046 sclass=netlink_route_socket
[  130.560636] binder: 5963:5967 unknown command 808464432
[  130.589428] binder: 5963:5967 ioctl c0306201 20000140 returned -22
00:08:43 executing program 4:
clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0)
ptrace$cont(0x7, r0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x2)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$keychord(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x2)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x40)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
getpgrp(r0)
ioprio_set$pid(0x2, 0x0, 0x0)

00:08:43 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x8002})
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_map={0x1ff}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$TIOCEXCL(r5, 0x540c)

[  130.625439] binder: 5963:5970 unknown command 808464432
[  130.652905] binder: 5963:5970 ioctl c0306201 20000140 returned -22
00:08:43 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1<i\x9a:\xdd\v*;\x86\x0e\xa1\xe6\x0f\xbcHe\xc4\xcf\x9e\"\x01%o\xf6\x92\xbc\xe2\x13\xc6~\x10\xab\x80|:\xb7\xe2`E\xb9\xd4\xe6\xfe&I\xbb)\xe8\xbc: N\x86\a\x14\xd6z\x1c(\xb9\xf9\xc9JO6\"\xb0\xdc]\xdf)@u\xc6\xf72\x95y\xf7\xbd\xc3\x9e\xb0\xb7\xf7\x8c\x88\xc1\x94\x00\xaa\x1a\xb7kF\xde&^\x15&0\xbd\r\xe8\x92WR\xcc\xcc\x18\xd9\xa6A>T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x3f, 0x7fff)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @local}, &(0x7f0000000180)=0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x800006, 0x11, r3, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r7})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0xffff, 0x80, 0x3f, 0xffffba35}, {0x1, 0x0, 0x3}, {0x1379, 0xe0, 0x40, 0x8}, {0x0, 0x6, 0x2, 0x1000}]}, 0x10)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x9a})
symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0)
r8 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
sendfile(r1, r8, 0x0, 0x8000fffffffa)

00:08:43 executing program 0:
request_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)='/dev/binder#\x00', 0xfffffffffffffff9)
add_key(&(0x7f0000000240)='lo8_\xcco0O\x9b\xbf\xb2\xa9\x00A$\vMgon\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)="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", 0x15a, 0xfffffffffffffffa)
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x100000, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000800)={0x78, 0x0, &(0x7f0000000400)=[@release={0x40046306, 0x3}, @exit_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/211, 0xd3, 0x2, 0x1e}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @acquire={0x40046305, 0x2}, @exit_looper, @dead_binder_done, @clear_death={0x400c630f, 0x1}], 0xd7, 0x0, &(0x7f0000000700)="b134cbae6d4bffa55b0d9f94562676f6423050db4329b81de435a11887aa509eb1fad460f8404bdf68243faac80b35d295ab3e7df3d979cd07092e388f362b4fe3de50563b071b023a6e73fdca79b85ab88f73a76992c90d79a2eb33b976f304c73d880f49cba6b500ee457db43286da0314e86c670d5db0ca588b9038c5c609dffc0583e55c69d1fda41507816d5c2cf782a1ec5c01dacaf9afddff0b54861f7e6463024d72da8182a1b2151444fde8754f6457e58121610f9d5ce675f1ceabf8730ed4029f03f7c3ee4f6f8a3d092d847c311eed34eb"})
poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f0000000280)='GPL\x1d\x00', 0x5, 0x2)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x396, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:43 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffe57, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="38010000100013070000000000ce0000e00000020000000000000000000000000000000000000000000100000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000a0002013a0000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x8010)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x26}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x9, 0x9, 0x4, 0x5]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x20}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0xfffffffb]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffffff81]}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x80}}, 0x94800)
accept4$packet(r1, 0x0, &(0x7f00000001c0), 0x80000)

00:08:43 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x70, 0x0, &(0x7f0000000340)=[@dead_binder_done, @register_looper, @exit_looper, @clear_death, @increfs, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x1, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/233, 0xe9, 0x1, 0xe}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}], 0xd1, 0x0, &(0x7f00000003c0)="4db733d1daee5fc8f65e79773281432f972d9ffb102575e287ea22242d426053e8c27b2c90d10f6c488d1a18965fd2c97a6f5b2deb6fae685c95d2fe31e6a21b174546b14b4aa7fd8f7489a469afd669605e072206981cc626651d857a6a7b8e1424f12968178d2b0ae264ee94ca30123c8ee8fd7143f2b6cfbab9337de321cb31e0208ccd94da0311ab9182a93eaa22a88161baee512831ee617752478be990e7304f4048623e2d597b9fb2d76fec6d71bb01ef5eb0b5960f0f87bcbe2034e578d52be742879b526655a0e9b198ba5f7b"})

[  130.948746] binder: 5992:5997 transaction failed 29201/-1, size 0-0 line 3022
[  130.965906] binder: 5992:5997 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  130.981860] binder: 5992:5997 ERROR: BC_REGISTER_LOOPER called without request
[  130.999037] binder: 5992:5997 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  131.014606] binder: 5992:5997 got transaction to invalid handle
[  131.028823] binder: 5992:5997 transaction failed 29201/-22, size 96-24 line 3014
[  131.047607] binder: undelivered TRANSACTION_ERROR: 29201
[  131.059576] binder: 5992:5998 transaction failed 29201/-1, size 0-0 line 3022
[  131.075429] binder: undelivered TRANSACTION_ERROR: 29201
[  131.277784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28046 sclass=netlink_route_socket
00:08:44 executing program 5:
recvmmsg(0xffffffffffffffff, 0x0, 0xff74, 0x140, 0x0)
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0)
pipe(&(0x7f0000000840))
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
r1 = open(&(0x7f00000008c0)='\x00', 0x7d3beeb4a3686d92, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "5f5539ae7383df635d7eb9f00cde999ef4e1d4fbae589edcbcd64ae9781d89f20a7c347bd734db9d80a3e9ee0d0f04fe5305dacf9e656dc623d0d8abb05b81ebf7fa83533ebfe364612ee7d5571be6e3af5eccf0e26370ff66a26e95f4b7b1206b9d9a70fe612b356ec5074716b0e71eb9f60ac1c5e653c9a7de0de9a5f8c8047f77ece27201fc36e2ca04338864356e123b3b96be97afa5d6698e6f08a657f7ad07b42df05dfca83247581434b575e2d4419e52f1103e9e3ddc440a98f9caeace71f8affb3cfc62e4b428403787ff063d2923a50c0410f191c7923b77c51fea54cc7f2b8adcd2a5e1f53495c168736a160f28435b70f6e40df8523c2deaef8b70f13bc408d1d6eb05dbcae35f0c12cb00b8d589c0dda912acf9315852e1cbb85857f9421cd623fc5046448db22eec3c07358c4778c73a2495bf3452b18d8e904ed88ae250a99edb20b78fc923ccc841847a4f6d514320309afe2f0a075e50096c7a8cd4da2d88791d01a10cea10a97d32e8bb05a5e2bf52be5fffa3fb26953a0fadac598644cf0297d01d5c1ed9f2123ba789fa650b0d140a478903cc23a5b5c2a2a52f19bdd40039ac0291f648f1f991e272c52669f7843e73b3be22103fe0a88d5d405b9ecea5d602be0b5466d18d8a971b69a8e80e48621103a6bc6ee3a7b70b199005241779f22fa2cc159988eaf2d53c858ec06ab56acc232b587ffee3a5cb29f5641b2189fb1617d1a652e42511fe2e447a2636f18ceabc261126200193eb9f309f80aa204a93883bf6fb247ade866685f300295f8735e18d1d81365dbd2bddfa1779c59effed803bbe0a68302b1ab0f0d00892138ad24d52d653d92897bd28c2f031a77eae54ef3ce9a1fc44ea41763b2d780a454f68ea1a297302b4fa6664923a818040f5a74e0db3ff24e940e97d4abff40af2d36f7bceb8a0c5e90dbefbc8ba496f6e42f11ce11fb20655138f9387938abc3aa3a742f749a8695d972c537127519f654945bac96f0a2ef9d6b24f2226ae677684e3eb63041d6b5105777a8e6aa41ff11366448c0af1ddf5e3f2a1d828b4c9ede3809eab736c9035f2a7032ce38b699dfdc3e158e1ce62d325441e1b05a3ba5f663f20b0cb703cb2960aad298177881aa6b52bf4ae112c5d2bb691ac34b0723be7ddcfff0015e578475db1f062c5a50b54bbcba2f591eb4d6de66f386b0d5dd3975229ad25ae95d82266dfb9c1a6f497ef54b6ac5ee81edae16c47e89f9a435377dfac411db459559ce483921251745b8b94f69d4815b009ea86aedc5a75a516ff2afaff9a418f73c2cacbcdf45dd02ba962399f9b81e149635c2b4c0bda790a6d72fc243f6fbc73d0a0636db51c03d93b44b42c07f2269b465231f953e6a45dc549e9b5ef05443da7820cd667f5b0ff47a13f0a3df630a6f98f72e09978b829389d6a11afb0a7a0988822bb95fcb50399e51295f464662118646d2996da0fa710b082036820ae0a60828479bad4489061244b74179cfec74ab273551190c0eb2ca95be86391b8e469454796d04b29646b8aaae49889ffd84e83e33fb0cd7b10d778e72422f474911897dbd4548d9658e9af23cfff0ad4a7d750ab59e0f8988082ab7ac8d27eeab1c5809de6694aba8ee6ff1ba23d422f38dc026a77933cb0fc916d22131f7f736e35c881c5551f13a5037f65b9090372bb8e73bb9cd686715afef6b40ff275a978078c1e1c7db358285e5caee5c53cb4a7b446db91e5c0615342265edd9f09a72002aae56c7ad4269a0513569db514ee852724cdcccb72e8836fc270f7aa03e03e65f4572c2909e6fb1b557e89c3b505ba2f2b10b545513758abdbdc5b3e5ec1fe4d6bd5947b354058eccb79f10e971a85bdafa5aa27224acc734d884f9282ed033fc540defa3181d451713565d940879cd70a1d704b9a390de509351d5129bff18051b0c7ca196a78d3b8d0c8f384c79ad637b2e1770fecfc980960ef403cbc6bb284792cd169133f35aea028d9ffdc1668572dd197db86a26cb6fe1bb822bb76968ef2cd3c384704b75d0f17a50bcce054a400edd3b2f2abf72d2d8a679fdc94216d2d7d43ca1e60aeb5a313f8104f8ae54e75beb6c106cf080b9ecc9a1f91508b37d9ede25a1bede738c3a7f3501391a7b1863fe120ea26c4ff13f1de4588b150f3f2c12a9b9d92e6a8610c788c4d449a91416307a313536e1779bef88028d65a9398c5d1492b729d5f08e34e64fa07507f64297a1f9305a2d68169f653d5c107c9860ca0d822916eb357c646c229e792b1a5da56b35ab971bb82e41581e11f24f9c6b26c019dd2f2f89f2a82b74bd856ed7b46a2d9c07b2856bc39e9a28f271c5bb06db5bfa04d21e37e778b3e03071d25da8bbc91543fe8909603ba92e3455cb0edfe1dc040f12c169a97a5b8fb09f97acda29ab8491e7c9f81320b1a9de5773078557a6a0bdc5a1bfd2d953c47b3e5ccc70d76dc4ba10c297d7591e2c2150b8235de09714fedcf23aedb0ec9586e52f6af6c299256ad5a0a4ce22666be48592977dc5ff5c5eea529b81df4510016240b8fc8489bf59c899bb75481220554d0b9aebf1660cb72b01dfc3ffaac27dc1d36247e86339c6d99fc3ca8edf585fdb236ecdffda1b99819f873367ee5d8fde5d596517f895c9154deab01ca26008edbeadecfe33cae750ff044469a1b3b104b35af0c04a35a48aecf54dd8844b598432b81f67ce232ad46a247cad103274cd7c206d890008b149aaa3310f9794243cc5e04d4bd3e66a5b01ef67044412eba507a20399856cd26fb6233ebc064aa7b5ba94198bc05301dd74d6875b6d3b4731c2a11f0656767a3e6ba0a3d6951a7f9385ff99876891b8150ac5257756ef92a6c3854ccba8f13bca3cd3e66fdc93feefc44c3eba570970e0a6921f1eef24713ed5a174b8e52a0bc1bd3b420bdd0e521835289d29267fca4512caeaf64d1adeba2457864801d30d37e4eea965f8cfdb314f62307d8a12084a65da330f800862cae3876cdffe8c77d982ce9527b069628f0d796c0ec1c1b423ab6eb248e176a9b201d4de572f7901d8d88ae3dc6c3f196a4e3fb81552f16f7a7b7b3a242824b0618a855fc150fe8d484c80b3e1ea6c42f165dcfa7b0b292f9c7f27179d32260d4f472385a8818f7d76133030cf1256153b4162c8c3a3629c01e9b8cb5a30b3d0068d7f0e3727d8159739386511746fad1cfcc98c7af05b489876432957c6d59c51f12ebb62acac90311e6b00cea58b355db5a36718dfb8140d23e64e41ef9d33969cae75ea3ef8f14ad8c9b2d0c8bd7bf4366b091b5992ffbd71800495c0484cbee4b5fffaede0808cdcfa2409227e6b96dd82481d6d00bfff72c29f860b7fa4fa9c3634d9a2e4f7a8ef240c997b749e0562514d5c2c5d66da75149dea37b1cbb347fa0df5be2b9a5ddf20a6d47936b3b55cedc64453e69413a89c8a9eaeda00fccc96281b4f29db0f3e45fa098c77ffe3c0488529ecfa801cdf7fe8a23f6a3aa04acaf4e300c44e6d873f43b9fd4b13cbed2411c97378e07c7a6799d272d36ac8964233130947ed88f727915fa58a4812ceacd6cc6a52bc7fcba5e57543e93d293d5a428c73b194f33ba752b0ebeb0262423e7a8f490707a220857f44e191304cffb93cfc75b217ca306292549c8742fe3aa62a464d40c666115015201c0fef3e9555615f91c3d15b6e1556a9b04febc2ae7e3d689ca5f58b51f2717ae8c5153f2c2a4df11ea8cafcc369327c2a0a6f7946daf09be323d59e4b0e42ebcdeca373a6d70a3286382f1405b7107af899da00dbd52324657870bd18ca26f3ef47e0e81cd335c827512e88f24202836e7a1b505f0d03a23d577430d971458a11ff42e36b2d2883b664d402eb7497a90ba1f94829b6d9c6b4c4f7e9dc49882520a6fd2590cb8b41328541b9076e43f6019c3da9084e57960478c268f4215bb98455fbd2981e7e37caf7aaf9008f87cfe196da930637c55da5a34e142a433494e6f92a5985d7e6fc0ec68d2ad25144919af6dc81afc88cd05f01b401730bccc3086c9dd06d38ed522e52e7ffae7671898fb91cec0821c061aaea6c47ae877d2d7f5ca1ecf159e0ea152ce713f652c116f62e12cad293331db922a5fed311ab22096d90fc17ccc53f84d46eae680def0b9949e0d9debff263d575e590941a5ce0b33548beb6dbc01104f6054da73cc349625adece6a54e092d8d740915b91d81df30374a78693d6b69724f05354d61ac0febff4a544b88954d11d3f4927895edf6ad755313227ac87f24f12d70a831df16bd45c4a03570fdf27d698fa5581fce2d002890a3f2059a6bfdf77f0aeee3ad8318449bc1b2d486b225b148a78e921c73a2c37256dfb1ad611e410d5436e0d31d00ab5177da7915a74ef3307927c23c764f5cf62c3e2db86284c9abb39045b625d507f5c8d440557b4dad2a39593fbb572cce25a364aae44134fdd97ef0148690881bee42b6bd929f12cdf07996597a2a8366b12841f8fb8dfc0ece651756637b95c6bdb92320302805b4a700e7d3dfb0b8878862f400f8437a6c153b5fab40d30af07e73cf4345cb6fa81574018a7bc0e8789fae8b8560f4b93d413fa8e0e0218527ccb82873fc9da6cc34b6197c1d8bd9223ab7c4efb1f8cf021450037f4576934d83116655c120062fc3b912176fd395ccc792d492f2730465f8b4c68155b6ceb52e80742d2970e24004171f4685cd78467a4e943a0fecff66dffff10922d69236460dc37c1df9b19dded1ecb932dd8dd2045d2f8e8d3dfb6a83a65d6623553a2aed7a12b78effeeaa58eec84cdefc84923177afb7bd04f6fc3d3332d63ed5c5d6fe8820b9853e7615407eb23962f5232db44bc0267e7f07e47b158de0732a974b80aeb00ffeeca83d26fe21e487ea4472cd9048f942155784af8f68006cdb4286480a7ffa1ba6e93fe7fdb33283359d28bf9311dee59899e0e77aa113fadda21526c8e2bd60f21e182b735a5b0177fb95e948857c6c4ae391b2b4950a35b129e7bf25b7eb2c0857290c55f5d28b78ca1f39f0cd676610805b0a378647ae958182b26de1ddbf80e80d7ab1d2476086ed192e98bee0969bc0e8765278cb5570ccc29ac6d7298821bff4f85895deffcf4ce54a69878cfb41eade0d8703cbcff02352733ace2d800ba68b0fdcc52b94247ecacddf80ad228cf76eb547d276d0f6402054e34c3569e2b53ea3cbc54e49e099372cde3acd1ba47f836a765f855763a175a58ec4d6cecc72375da2d8c956c2868e77bfdb697182b554f0b743d7095cf13a3ba1d19e7590c281bd09ce235898a9682aacb5633b4fa4c3bdd71139c20c518b6a7651a47df7658a5a7ed41b3e7e43543d68c1dd4a5d01ec7e42cabdd6963db84f0d69b5a471ff8b929a8774baee39b14ab325af2ea7756c656c0135a59568499208341333d6b896cf0cc10108970e20313df241d179bd2a4d2392b269e6aeb9d2570bba7e3c67f49e90cf95562f93077a5fb588225724d444fcd8da55921dcff7b0be49ac0171ae98209e729f65bcebe447ccc0a185719f3fd55d1ae263daac4a420da91d05cdfc85d48e5743483dbb6fe81e5c216948953d95d5e725db17df44f05a57c6cc425e55572f9163e536a6d2d51d5213c937f6ddba08fc1f90ec73088a766a685f2c0d43b80422d48eef23b2ea588ea26b8dffb4f0df0cf91d6ea8f14a663ba2b165e4427010742fe63905d62b9dcf2385dce09fe75e4746d5c9c402ee77bfc9f39a28eb9f2751a81b090a499706accafbf5ae1afa9af350fd7481bb", 0x1000}, 0x1006)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000280)={0x0, r1, 0x91, 0x0, 0x0, 0x5})
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000240), 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="23042dbd0000000000000000000000000000000000000000050000000000"], 0x3}, 0x1, 0x0, 0x0, 0x76de17f1d04e1ec9}, 0x20000004)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2598d004e526c8ae", @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
syz_open_procfs(0x0, 0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="39000000130003006900000000000000ab008048060000004600010707000014190001401000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c)
mknodat(r5, 0x0, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES64=r6], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14c606038e6d3c26", @ANYRES16=r6, @ANYBLOB="00032abd7000ffdbdf250f0000005000010014000300e00000020000000000000000000000000c000700500000001700000008000b0073697000080005000400000008000b0073697000080001000a0000000c000700210000000200000008000400020000000800040000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x40)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x14)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r8 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0x1}]}, 0x10)
sendto$inet6(r8, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0)
socketpair(0x3, 0xa054b98f838cc548, 0x7f, &(0x7f0000000180))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000500), 0xa198)
faccessat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x1600)

00:08:44 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fchdir(0xffffffffffffffff)
prctl$PR_SET_PDEATHSIG(0x1, 0x13)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000004c0))
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000500))
mknodat(0xffffffffffffffff, &(0x7f0000000440)='./bus\x00', 0x0, 0x401)
ioctl$KDDISABIO(r1, 0x4b37)
getpgid(0xffffffffffffffff)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040)=0x7f, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in6=@ipv4={[], [], @initdev}}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8)
getgroups(0x2, &(0x7f0000000680)=[0xee00, 0x0])
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
socket$inet_udp(0x2, 0x2, 0x0)
splice(r2, &(0x7f0000000180), r1, 0x0, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f0000000300)=0xc)
getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f0000000340))
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000a)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000003c0))
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0)

00:08:44 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00Y_u:\xc9\xe2\x81C\xfd-f\f\xc3\xbd\xfb\xd4\xea\xce\xf3V\xcd\xe4J(ck\xe4\xef\x9f.\xac\xeeZI\xcd\x92E\xec6\x85Z\xc4\x92\x12\x95\xc1\x1c\xc9S\x828\x00\x00\x16\x8d\v5}JUy]\xad\xc2\x80\x8d\t\xc4\xa7\xe2\xa0\xfa\xd3\xf2\x86~\x7f\x8b\x16\xbe\xb5\xbe\f\x1a\x10r\x01t\x85\x83\xd8\bu/\n\x1e\xad\x1e\x1dW$9\xe3\xb6\xbfH\xe8\xcb\xc2\xbe\x90]4\xbd$v\x98\xa8\x04\xe6\xe1\xf9\xd3\xbeVB\xa4\xbb\x87N\xd7\x99\xdc\fa\xc5\x85\x1f\t\xefgb\x8c\x86\x92\xd7c\xb88\x99\xd5\x86\x84\xd4\xf83\x1a\x05\xedH\x9b\xfe}\x8dVG\x1e\xa79\xad7Z\xc9V\x03', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000200)='./file0\x00', 0x10)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0))

00:08:44 executing program 4:
eventfd2(0x1f, 0x0)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x20000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000001c0)=""/10)
ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0))
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000580)=0x6)
write(r3, &(0x7f0000000140), 0xffffff0b)
setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000003c0)=0x5, 0x4)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r4 = socket$inet(0x2, 0x5, 0x3)
setsockopt(r4, 0x0, 0x40, &(0x7f0000000000), 0x18)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@ipv4={[], [], @remote}, @in6}}, {{@in=@empty}, 0x0, @in=@multicast1}}, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x6)
pipe(&(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup2(r7, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r9, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r10, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r11 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r11, &(0x7f0000000480), 0x10000000000002a1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xfffffffffffffed5)
ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000400))
sendmmsg(r2, &(0x7f0000004180)=[{{&(0x7f0000003bc0)=@ax25, 0x80, 0x0}, 0x10001}], 0x1, 0x0)
fstat(0xffffffffffffffff, 0x0)
socketpair(0x9, 0x30a111755642ce77, 0x2, &(0x7f0000000140))
setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, 0x0)
r12 = dup(r5)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4)
r13 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="280bf3e40000000000d4876e9ea656de605b44f90176258380d0ce1e19007aa9262663149a011267612d5f974985ae7e744e9464fd5dbc2100000370cb73d5b1be5e3b72a8b1c5f083aa75146fd0b1adda28a93d18df082dd18742b898ae71ef0ad82f70b4fe74492e9ae506f54ecb68f2fe524c0561581d514b4ded9eb88b4061ede2be2790f80b06d14c1fc88395a40f36dc5fcc4ba6ecae1a5801000000470bb064f41530c29a8ab666019c5d18b4672c31e6578dcea7207e5f1e5b1606009612386529e591d0a4ef0c1e5b72a9aa93897b92b1a1f39cee04df91d014675632dc70404ff660202b2961a00000000000008db0b6126beb4fff0de1bd4c9b03d93629443e4a8cf49a7720fd46cdf76692fc3fe7fd41ee881099f379089ab2d11dc48f3372b10f559706983944ad5ec40419a86132a35b728a13fddd7885ad1fbe44cc2036df76962f90bd45df75b1dd5478915792935e29df4400000000000000000000e6e9e7ff0f6dc1063461de6bd92233e3f75bddfb05025fd818419cecac147c63c3a051e3b3bfede70e3fdd8f39a92a26767d43aed241b576ec9e068ccfbb471cf992a6401938f1fb7ccae699775dd59a8f4198a55508460c65bc2ba49c0cf9b15a0ca0b4c645fcbce6be8a3eb82e69d7f6713dd389ed7b65c3824138939bb37d1dc8b96ad0f9357dfd5cd69b1802676fb321e92a881f90e7f91b3c7ee5c1a0db41d4fbf725de82c75a1b84ff403612176784bfd433f0a3c8"]}}, 0x0)
setsockopt$inet6_tcp_int(r12, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, 0x0, 0x5d2, 0x20000008, &(0x7f0000000100)={0xa, 0x4e24, 0x800daf9, @loopback, 0x1}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10)
r14 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0)
ftruncate(r14, 0x2007fff)
sendfile(r12, r14, 0x0, 0x8000fffffffe)

[  131.493120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28046 sclass=netlink_route_socket
00:08:45 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80000, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0x2, 0x7, 0x101, 0x6, 0x7ff, 0x7, 0x5}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x86)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='\x00\x00\x00\x00\x00\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe5\xcc`\xa0\xce\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xc9\x82)\xc8]\xbeqAq\xdfi\x9f\xa7_b\xe0\xa6u.\x1c\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93<s\x18\xb7\xbc\xc3\xc5o\xd7\x0fu4(c\xa4\xd6u\xe8/\xaaO\xa4\xff\xea\xb1\x96\xdbIW\x9c\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00X93Ng\x8d\xdd\b1a\x19\xe5:\x03\xaa\xb6<\x0f_\xe9\x05J\xdf\x88nv\x00\xc2\x9d+\x04NKy\xcb\x1a\xf2R_{\x12at\xa9\xb6\x88\xba\x97@A5\xf9\x9a\xa2\xcc\x00'/288)
r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
truncate(&(0x7f0000000240)='./file0\x00', 0x2)
connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x3, @mcast2, 0x9}, 0x1c)
bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @remote, 0x100}, 0x1c)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4})
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000280))
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0xfba, 0xff, 0x5, 0x6}, 0x10)
fcntl$lock(r3, 0x6, &(0x7f0000000040)={0x2, 0x5, 0x7, 0x2})

00:08:45 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KDDISABIO(r3, 0x4b37)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:45 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x70, 0x0, &(0x7f0000000340)=[@dead_binder_done, @register_looper, @exit_looper, @clear_death, @increfs, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x1, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/233, 0xe9, 0x1, 0xe}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}], 0xd1, 0x0, &(0x7f00000003c0)="4db733d1daee5fc8f65e79773281432f972d9ffb102575e287ea22242d426053e8c27b2c90d10f6c488d1a18965fd2c97a6f5b2deb6fae685c95d2fe31e6a21b174546b14b4aa7fd8f7489a469afd669605e072206981cc626651d857a6a7b8e1424f12968178d2b0ae264ee94ca30123c8ee8fd7143f2b6cfbab9337de321cb31e0208ccd94da0311ab9182a93eaa22a88161baee512831ee617752478be990e7304f4048623e2d597b9fb2d76fec6d71bb01ef5eb0b5960f0f87bcbe2034e578d52be742879b526655a0e9b198ba5f7b"})

00:08:45 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6900)
ftruncate(r1, 0x800)
r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xffffffff)
r3 = open(&(0x7f000000fffa)='./bus\x00', 0x103846, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r3, &(0x7f00000003c0)={0x28}, 0x28)
getcwd(&(0x7f00000000c0)=""/188, 0xbc)

00:08:45 executing program 2:
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
sendmmsg(r0, &(0x7f0000004500)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "b230e5683748cea8643a095f21964a4476354857776372f7c31b1a187ec0fff198846f398d8807d9753bf28501a95a0cf6da4d0ab5b98a3cbff26e2f279fe7"}, 0x80, 0x0}}, {{&(0x7f00000005c0)=@l2={0x1f, 0x0, {}, 0xfffa}, 0x80, 0x0}}], 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
write$P9_RREADLINK(r1, &(0x7f00000001c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:08:45 executing program 5:
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0)
fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x0, 0x4, 0x8, 0x2})
r3 = getuid()
r4 = getgid()
mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x1002000, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xde3b07e745cbb8c7}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x667}}, {@max_read={'max_read'}}, {@allow_other='allow_other'}], [{@hash='hash'}]}})
r5 = creat(&(0x7f0000000280)='./file0\x00', 0x12)
ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000002c0))
sync()
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x20000, 0x0)
write$P9_RSYMLINK(r6, &(0x7f0000000340)={0x14, 0x11, 0x2, {0x9, 0x4, 0x8}}, 0x14)
r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{0x9, 0x8, 0x40, 0x4}, {0x7, 0xff, 0xa4, 0x3}, {0x0, 0xff, 0x0, 0x1}]})
setxattr$security_smack_entry(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPOUT\x00', &(0x7f00000004c0)='\x00', 0x1, 0x2)
select(0x40, &(0x7f0000000500)={0xf05, 0x2, 0x0, 0x400, 0x7, 0x80000000, 0xfff, 0x6}, &(0x7f0000000540)={0x7fff, 0x0, 0x1, 0x101, 0x1, 0xdfe4, 0x7e, 0x6}, &(0x7f0000000580)={0x7ff, 0x9, 0x800, 0x1, 0x7, 0x5, 0xfffffffffffff800, 0x7}, &(0x7f00000005c0)={0x77359400})
r8 = syz_open_procfs(0x0, &(0x7f00000006c0)='oom_score_adj\x00')
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r9, 0x20, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x80)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000840)=0x2, 0x4)
ioctl$sock_SIOCADDDLCI(r8, 0x8980, &(0x7f0000000880)={'veth1_to_hsr\x00', 0xc})
setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f00000008c0)="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", 0xfa)
ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f00000009c0)={0x0, r0, 0xc209, 0x8000, 0x28, 0x100})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80000000)
open$dir(&(0x7f0000000a00)='./file0\x00', 0x200000, 0x90)
pipe2$9p(&(0x7f0000000a40), 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/self/net/pfkey\x00', 0x100, 0x0)
fcntl$setsig(r0, 0xa, 0x1a)

[  132.471520] audit_printk_skb: 66 callbacks suppressed
[  132.483039] binder: 6034:6041 transaction failed 29189/-22, size 0-0 line 3014
[  132.521513] audit: type=1400 audit(1571789325.235:146): avc:  denied  { call } for  pid=6033 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  132.528265] binder: 6034:6047 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  132.528272] binder: 6034:6047 ERROR: BC_REGISTER_LOOPER called without request
[  132.528283] binder: 6034:6047 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  132.528294] binder: 6034:6047 IncRefs 0 refcount change on invalid ref 0 ret -22
[  132.528301] binder: 6034:6047 got transaction to invalid handle
[  132.528311] binder: 6034:6047 transaction failed 29201/-22, size 96-24 line 3014
[  132.592439] audit: type=1400 audit(1571789325.355:147): avc:  denied  { create } for  pid=6046 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
00:08:45 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454da, 0x400006)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
r3 = dup(r2)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$void(r4, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'yam\x00\x00\x10\x00', 0x2})
sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000160007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)

00:08:45 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1})
ioctl$TCGETA(r1, 0x5405, &(0x7f0000000140))
setsockopt$inet_buf(r1, 0x0, 0x2a, &(0x7f00000000c0)="13dd1bcf23b79d078358f556edbb263d8746f5eac2e92708689b693300e07ed62ba8f02251da9c874ed6757a9bbfe1e68e50b31617b67a19db8ab13f2f180e114209a59eda48d59ee561bdb66dad5a2449ddbafe608ecc671aa6943bfa1f6521f45da7c3fe0d3d16c3e47c0258e88e93a879031e90f26b48254a58", 0x7b)
write(r0, &(0x7f0000000000)="1f000000010141e20c050054a8c984ca029b189f1b882de4e41a0e982de47a", 0x1f)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x14, 0x800)
accept4$packet(r2, 0x0, &(0x7f0000000200), 0x800)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0xffffffffffffffab)

[  132.606327] binder: undelivered TRANSACTION_ERROR: 29189
00:08:45 executing program 2:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
writev(0xffffffffffffffff, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a", 0x11}], 0x1)
write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000800000000000a3f96f655cb527e29be3b681ffd2b316a43a6b0f16d48098743d768634cb88277ba59285c33ecebcc61f4decb911559164a4717240364660535e56f9c0b6cc319b926172d7cd9b451878f2743dbb854660e6e527313814c9eecacde8164d7545adb92949badd188ac14fce457368a6957d26ea03390c211a1b43c95168245864b29bedfe5339d757b37c018c00"/163], 0xa3)
close(r4)
socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1)
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0)

00:08:45 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
prctl$PR_SET_TSC(0x1a, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x38, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/56], 0x0, 0x0, 0x0})

[  132.657973] binder: 6033:6039 transaction failed 29201/-1, size 0-0 line 3022
[  132.669778] binder: undelivered TRANSACTION_ERROR: 29201
[  132.696720] audit: type=1400 audit(1571789325.465:148): avc:  denied  { create } for  pid=6057 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0
[  132.739075] audit: type=1400 audit(1571789325.505:149): avc:  denied  { call } for  pid=6059 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  132.772334] audit: type=1400 audit(1571789325.535:150): avc:  denied  { create } for  pid=6057 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  132.783477] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket
00:08:45 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000))

[  132.785052] binder: 6059:6061 transaction failed 29201/-1, size 0-0 line 3022
[  132.787159] binder: undelivered TRANSACTION_ERROR: 29201
[  132.848095] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket
[  132.862782] audit: type=1400 audit(1571789325.625:151): avc:  denied  { call } for  pid=6069 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  132.873304] audit: type=1400 audit(1571789325.635:152): avc:  denied  { create } for  pid=6057 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0
00:08:45 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  132.874436] audit: type=1400 audit(1571789325.635:153): avc:  denied  { create } for  pid=6057 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  132.953128] binder: 6069:6070 transaction failed 29201/-1, size 0-0 line 3022
[  132.971678] binder: undelivered TRANSACTION_ERROR: 29201
[  132.972105] audit: type=1400 audit(1571789325.735:154): avc:  denied  { call } for  pid=6069 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  132.972159] binder: 6069:6073 transaction failed 29201/-1, size 0-0 line 3022
[  132.996770] audit: type=1400 audit(1571789325.755:155): avc:  denied  { create } for  pid=6046 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  133.052907] binder: undelivered TRANSACTION_ERROR: 29201
00:08:46 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000018007f5300fe01b2a4a2809302060000ffa84308910000003900080008000c00010000000000156f757284366a660006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000", 0x55}], 0x1}, 0x0)
personality(0xc)

00:08:46 executing program 1:
pipe(0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000480)={0x100000000, 0x6, 0x100000000, 0x80000000, 0x6ee4, 0x0, 0x9, 0x0, 0x9, 0x8, 0x75, 0x8})
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$inet6(0xa, 0x2, 0x0)
dup2(r4, r3)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000003c0), 0x4)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x6, 0x846, 0xcde5, 0x5, 0x6})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1053, 0x0)
ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000300)=0x1)
fchdir(r0)
creat(&(0x7f00000004c0)='./bus\x00', 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r6, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0)

00:08:46 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0963103c020000000000000000000000000000000463044000000000"], 0x0, 0x0, 0x0})
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4a4000, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)

00:08:46 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x40003, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x7}]}, 0x20}}, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
fchdir(r1)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
fcntl$setstatus(r2, 0x4, 0x400)

00:08:46 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0xc4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x7, 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000100)=0x1b, 0x4)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040), 0xfffffffffffffe3f, 0x20000001, 0x0, 0x0)

00:08:46 executing program 4:
r0 = socket$packet(0x11, 0x2000100000000a, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0xb1}, {0x80000006}]}, 0x10)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
dup(0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
setsockopt$inet6_int(r5, 0x29, 0x3e, &(0x7f0000000000)=0x1c, 0x4)
fcntl$setpipe(r1, 0x407, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6})
bind$inet(r6, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x8000}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r7}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0xb)

00:08:46 executing program 3:
clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x8000000000000200)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r0, &(0x7f0000000500)="00abe6d29e6101cb8b41eea5cf2e67fea541e9b7b65fe42e517d5f81d2919e1b2f4cf7f77a16fc3e961a0847916c7c2d9b77cd3160567341263cf19b3b2c6177e7065dda850c756c06aede12e9da8118bb5464ad07fa6146f6903ee57345cbd7551f547bdbe947b4f9a0b28cf29a28eda534fc6e2c9bf2c36c87da9ad79e6e7090", 0x4202692d7f740df1, 0x4000801, 0x0, 0xfffffffffffffeda)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'})
recvfrom$inet(r0, &(0x7f0000000440)=""/98, 0x7cd97198ffceeca1, 0x0, 0x0, 0xffffffffffffffae)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000080)=[0x6, 0x1000])
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
write$selinux_context(r4, &(0x7f0000000180)='system_u:object_r:tetex_data_t:s0\x00', 0x22)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0)
dup(r5)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101})
read(r0, &(0x7f00000001c0)=""/244, 0xffffff52)

00:08:46 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='ez\x00', 0x604242, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000280))
set_robust_list(&(0x7f0000000180)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x2, &(0x7f0000000100)={&(0x7f00000000c0)}}, 0x18)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x218600, 0x0)
r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r2, 0x0)
keyctl$describe(0x6, r2, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000340)={r3, 0x54, 0x8a}, &(0x7f0000000540)={'enc=', 'pkcs1', ' hash=', {'tgr128\x00'}}, &(0x7f0000000400)="eb59c97e22b4bcfc203190c2bd1b7d7869a0be6cdf5f6f0886d53b46a1185fa0fa63d8bc3459dd26c7502f4661ab2c4a8372b28ff610af519c5a39390dd95792d427ec4fd15322d64180d311a6df1d2f61b36947", &(0x7f0000000480)=""/138)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0})

00:08:46 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@exit_looper, @dead_binder_done], 0xad, 0x0, &(0x7f0000000240)="07615ad5f5e8c2f85262a3a4404afc3e74611fcee8d1ef37aa3d23b000655101e86d8f8000fbf5a4bcca5aec8a8ac50ebf7efae21e63ec2f98679cb599b490708e14ab87b9f8c1483c2c8f8a10ecb059fc46788ed024177c07dc99ef8a7bb61f931703d40614c35a419410fef145e4d05858b733a00f06588f07a34d003b8e934d1de73c3e04b88a900fd6c613a8779aff1e1e6f860241149a3c61908ee4adb4e5cd8edbb37eda5c950d317ba3"})
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  133.705639] binder: 6087:6089 unknown command 1007706889
[  133.711444] binder: 6087:6089 ioctl c0306201 20000140 returned -22
00:08:46 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getsockname$inet6(r4, &(0x7f0000000080), &(0x7f00000000c0)=0x1c)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r5, 0x208200)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getsockopt$inet_int(r5, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)=0x4)
ftruncate(0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r7}], 0x1, 0x0)
r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/enforce\x00', 0x206242, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000580)=0x10)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
fsetxattr$security_selinux(r7, &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:power_device_t:s0\x00', 0x24, 0x2)
r9 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
r10 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r10}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r10, 0x40046208, 0x0)
r11 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r11}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r11, 0x40046208, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000400)={0x40, 0x7, 0x6, 0x0, 0x0, [{r7, 0x0, 0x64}, {r10, 0x0, 0x7fffffff}, {r2, 0x0, 0x1}, {r11}, {0xffffffffffffffff, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x3e0000000}]})
preadv(r9, &(0x7f0000000480), 0x10000000000002a1, 0x0)
getsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x8)

00:08:46 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup\x00\x8a@\xd2e\xb4W\xab\x99\xac\xb4\x9a\a\xea\x1c\xc5\xf9\xfd(2+mTS\xbc\xd0F\x88\x10\xd2\x11\xdc\x81q_\xc0Q\x1bE\x970Wv\xbeKN\tV\xb0\x01\x15\x18\x9c\x8b\xea\xe9 \x19\x0e\xfc8M\xb1 \x05\x82\xccW \x06\xe2\x06\xd5\xb3\aTbK\xd9\xa1DY\xbeZ5\x85\x04!\x90_\xfb\xa5\xfaX\xe8R\xe1\r\x1b\xa1\xb6\xd2)\x8bM\xe2\xb6\xac^\xe5\x84\xa9\x8fE{o\xb8\b\xb6\xd7P\xa3\x1a\x01\x8b{\x10J o\xeb\xb2|\x1d\xdb\xf2n@\x83\xeae\xbf\x9b\xcb\xbdj\x02\x8e\xa09\xbfo;\xce\x85\xea%\xe8\x84\xd8\xc6\xdfI\xe6\xa8\xf1\x00\x19kN\xce', 0x200002, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$TIOCCONS(0xffffffffffffffff, 0x541d)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4})
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000000)='threaded\x00', 0x2f5fa26)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fsetxattr$system_posix_acl(r5, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r6, @ANYBLOB="040080000000000010000700000000002000010000000000"], 0x2c, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000180)=0xc)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000200)={0xa0, 0x0, 0x4, {{0x4, 0x1, 0x6, 0x1, 0x8000, 0x3, {0x6, 0x81, 0xb7, 0x20, 0x3, 0x1, 0x80000000, 0x9, 0x100, 0x0, 0xffffffff, r6, r7, 0x0, 0xc22}}, {0x0, 0x16}}}, 0xa0)
r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r9 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$eventfd(r9, &(0x7f00000001c0), 0xffffff7f)
write$P9_RFLUSH(r8, 0x0, 0x0)
getegid()
close(r8)
ioctl$VT_RELDISP(r8, 0x5605)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r10})
ioctl$PERF_EVENT_IOC_RESET(r10, 0x2403, 0x3ff)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r11 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r11}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r11, 0x40046208, 0x0)
fsetxattr$trusted_overlay_origin(r11, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0)

00:08:46 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$TIOCSSERIAL(r1, 0x541f, &(0x7f0000000000)={0x6, 0x9, 0x399, 0x7, 0x200, 0xfff, 0x5, 0x0, 0x2, 0x5, 0x8, 0x4, 0x33, 0x1, &(0x7f0000000240)=""/157, 0x7fff, 0x6, 0x1})
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe3287f400"/72], 0x0, 0x0, 0x0})

[  133.752294] binder: 6112:6113 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  133.762558] binder: 6112:6113 ioctl c0306201 20000140 returned -14
[  133.777332] binder: 6112:6115 ioctl c0306201 20000040 returned -14
[  133.793397] binder: 6112:6115 ioctl c0306201 20000140 returned -14
00:08:46 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000000))
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
ppoll(&(0x7f0000000040)=[{r1, 0x82}, {r2, 0x108}], 0x2, &(0x7f00000000c0), &(0x7f0000000100)={0xffffffffffffffe2}, 0x8)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063408f448d4140000000000000000000000000000000000000df00000000000000000000000000000000000000000000f0ffffff000000000000008000000000000000"], 0x0, 0x0, 0x0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2)

[  133.839811] binder: 6123:6124 transaction failed 29201/-1, size 0-268861513269248 line 3022
[  133.849953] binder: undelivered TRANSACTION_ERROR: 29201
[  133.897011] device lo entered promiscuous mode
[  133.935963] binder: 6126:6127 unknown command -1891605760
[  133.941703] binder: 6126:6127 ioctl c0306201 20000140 returned -22
[  133.960747] binder: 6126:6127 unknown command -1891605760
[  133.967577] binder: 6126:6127 ioctl c0306201 20000140 returned -22
[  134.261012] device lo left promiscuous mode
[  134.301230] device lo entered promiscuous mode
00:08:47 executing program 1:
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x36)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000140)="7550b50b96acb2ca52ac1b09931af352c8e62496feab75a01f8a515147085c6a69373200b52398c4b69317a4f2")
socket$packet(0x11, 0x3, 0x300)
memfd_create(0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0233db6bf7d4c6c3bc799df222a748844f02c97573373c76efd846373f2aaf296fc0606547f8dabad01b9c9aa773ae810086d7839a5956537934dc76551921d0a46dcd996ca1406ad49d7f3d3066e90c4c8c418f5f31ba6df7fc6fc1c754648275fd0d0ad080b28efc0076619e3d2995fb0000000000000000006880a9b7e0879548aeb38a8d9c28209b33e88b61dbff40172cf7e1e84c515ab41364acc03fa3d106da0f7fa71d31b9858535f82b105ef292803399e8ff0f0000ca652ea6fbd4066054f124cf47f4acf339323df640a5fd48f636e36f2681"], 0x1, 0x2)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0)
read(r1, &(0x7f0000000200)=""/250, 0xfffffe8a)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/627], 0x273)
inotify_init()
clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x2, 0x0)

00:08:47 executing program 2:
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0)
fchdir(r0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x3f, 0x12)
getpgid(0x0)
write$FUSE_LK(r1, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@remote, 0x9, 0x0, 0x2, 0x8, 0x0, 0x1}, &(0x7f0000000180)=0x20)
socket(0xa, 0x800, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3)
fadvise64(r2, 0x0, 0x200, 0x7)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r6 = open(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000940)=ANY=[@ANYBLOB="cc409948dbe75120e7c0c9a652c357177effff00000000c10a8f3a6980710203eec48efbd7ffb0755b8f95b76ba95f284179f985740fdceff20dea464666e0648e9ae02514690636d083b161c24e68fc8a9b9112d40000", @ANYBLOB="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"], 0x2}}, 0x1)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="b45e68fab0b41dbb040025ce70000a0cd0166c29dfed919c9aee269ebcf55b26d3d82c2df7232e5af5845401eb8af060c22d05a3a54f6d5ace54bbe0ed31c8844f0d5addb250ee490a4edfbfb94a8ce8e0f781bc139440ebc85b7538c7301d31599c0200000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x4000413)
write$cgroup_type(r5, &(0x7f0000000340)='threaded\x00', 0xffffffc5)
r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r7, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000000380))
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c)
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f00000000c0)='./file0\x00')
mkdirat(r8, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r8, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)

00:08:47 executing program 4:
socket$inet6(0xa, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
prctl$PR_CAPBSET_DROP(0x18, 0x12)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00'})
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, r1, 0x0)

00:08:47 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24, 0x100008, @mcast1}, 0x1c)
recvmmsg(r0, &(0x7f0000000200), 0x2ab, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000))

00:08:47 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x4b, 0x2}, 0x7)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
r3 = dup2(r2, r0)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x2)
write$FUSE_IOCTL(r4, &(0x7f0000000340)={0x20, 0xfffffffffffffffe, 0x8, {0xa6, 0x0, 0x1}}, 0xffffffffffffffd1)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd700057dd6ed601000941000000140018000000006574683a627269646765300025af6678e5351d304a84d781667cc93f45d8e8694705bba118d687c21fcd6dc8060000000000000041902fc27db87bd79dab63249f378549e22e7656e0c98e78b7010080514cd797fff6b9202166ab20313364402d29d425f698621dfba05ee8113635d2065ee7ca551db48bc409016ad038bf3062fb8e3833da09797ae83bc004c6113d8c4dc675"], 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup2(r6, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$EVIOCGUNIQ(r7, 0x80404508, &(0x7f0000000400)=""/235)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001540)={<r8=>0x0, @empty, @initdev}, &(0x7f0000001580)=0xc)
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000015c0)={@remote, r8}, 0x14)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000097ec3860e74a6df92ed000"], 0x0, 0x0, 0x0})

00:08:47 executing program 3:
r0 = socket(0xa, 0x802, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
r1 = socket(0xa, 0x802, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c)
r2 = socket(0xa, 0x802, 0x88)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
r3 = socket(0xa, 0x802, 0x88)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
r4 = socket(0xa, 0x802, 0x88)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
r5 = socket(0xa, 0x802, 0x88)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c)
r6 = socket(0xa, 0x802, 0x88)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
r7 = socket(0xa, 0x802, 0x88)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
r8 = socket(0xa, 0x802, 0x88)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
r9 = socket(0xa, 0x802, 0x88)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0xfffd, 0x800, @ipv4={[], [], @multicast2}}, 0x1c)
r10 = socket(0xa, 0x802, 0x88)
connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c)
r11 = socket(0xa, 0x802, 0x88)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
r12 = socket(0xa, 0x802, 0x88)
connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
r13 = socket(0xa, 0x802, 0x88)
connect$inet6(r13, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r14 = socket(0xa, 0x802, 0x88)
connect$inet6(r14, &(0x7f00000000c0)={0xa, 0x40, 0x0, @ipv4={[], [], @remote}}, 0x1c)
r15 = socket(0xa, 0x802, 0x88)
connect$inet6(r15, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="52eba4b7b9f0bfddc7e54f999dd600"}, 0x1c)
r16 = socket(0xa, 0x802, 0x88)
connect$inet6(r16, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x13}}, 0x1c)
r17 = socket(0xa, 0x802, 0x88)
connect$inet6(r17, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
r18 = socket(0xa, 0x802, 0x88)
connect$inet6(r18, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c)
r19 = socket(0xa, 0x802, 0x88)
connect$inet6(r19, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
r20 = socket(0xa, 0x802, 0x88)
connect$inet6(r20, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
r21 = socket$netlink(0x10, 0x3, 0x4)
writev(r21, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1)

00:08:47 executing program 3:
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x400000, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000280)="e3e05c80d930f5d5cf1c3a81b73e9f6dd574574e8bacd285106f4c80aecce54fb4b14fb83b569def00ac906693d193c227b88c84aafc072984201f8e047b38a7bb7b61eba85baddf168b10460f5960346c364846a4e4f067c753627058dde1fb46a72d36b7437270b062c57db33de7610fe2112dff8646e18b5c34af3b6df8de4190771677baf6c25368ed8e0b4224bcad0d34064f8dd4ddfe579335f6893cf153")
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000500)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
dup2(r2, r2)
setsockopt$inet6_int(r2, 0x29, 0x6, &(0x7f00000000c0), 0xfdcc)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8)
setsockopt$inet6_mreq(r2, 0x29, 0x1, &(0x7f00000000c0)={@empty, r3}, 0x14)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r4 = getpid()
r5 = getpid()
rt_tgsigqueueinfo(r5, r4, 0x16, &(0x7f0000000000))
ptrace(0x10, r4)
ptrace$setregs(0xf, r4, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x2010, r2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000})

00:08:47 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = gettid()
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@empty}}, {{@in=@loopback}}}, 0xe8)
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x10010000000036)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000240)={0xdf})
wait4(0x0, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x368, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd60}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x612}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x65}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9089}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbc38}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xd4, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffbd6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80000001, @mcast1, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x8}}}}]}, @TIPC_NLA_LINK={0x168, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeda}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x561}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x701}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x35b1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x20040000}, 0x800)

00:08:47 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
syz_open_pts(r1, 0x80)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:47 executing program 5:
unshare(0x20020000)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
poll(0x0, 0x0, 0x400007f)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r2)
ioctl$sock_proto_private(r3, 0x89ee, &(0x7f0000000240)="5f6c31cb125485774cc833dfa7c0b8253b626b82fa5ceed21656f83878a8d7c1cb8586f3a8bfa78dc7da1ecbf7a2753761c5")
mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x10000, 0x0)
ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000002c0))
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000400)='y\x00', 0x2, 0x2)
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat(r6, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000003c0)='./file0\x00')

[  134.647292] binder: 6149:6155 transaction failed 29201/-1, size 0-0 line 3022
[  134.659384] binder: undelivered TRANSACTION_ERROR: 29201
[  134.730106] binder: 6177:6185 transaction failed 29201/-1, size 0-0 line 3022
00:08:47 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4})
ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_WRITE(r3, &(0x7f0000000000)={0x18, 0x0, 0x5, {0x3f}}, 0x18)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  134.775527] binder: undelivered TRANSACTION_ERROR: 29201
[  134.788555] binder: 6177:6185 transaction failed 29201/-1, size 0-0 line 3022
[  134.800769] binder: undelivered TRANSACTION_ERROR: 29201
00:08:47 executing program 4:
socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket$unix(0x1, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='bond_slave_1\x00'})
ppoll(&(0x7f0000000300)=[{r1}, {r2}, {r3, 0x410c}], 0x3, 0x0, 0x0, 0x0)

00:08:50 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r2, 0x11, 0x20000100000000a, &(0x7f0000000200), 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x8000008800, &(0x7f0000000000)={0xa, 0x200000000004e23, 0x0, @mcast1}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r3, 0x0)
keyctl$describe(0x6, r3, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r4, 0x0)
keyctl$describe(0x6, r4, 0x0, 0x0)
keyctl$instantiate(0xc, r3, &(0x7f0000000040)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', '-em0+'}, 0x1b, r4)

00:08:50 executing program 5:
r0 = memfd_create(&(0x7f0000000040)='comm\x00\xf5\'\xd5\x1eZ[E\x9bH\xe7]\\C\x12\xf6\"t`\x16\xed6\xeb\x0e\xdc\x1b\xdf\x93\xed\xff\x81\"\x98\x89\x14\xb1\xfc\xfa\x02\xbe\xf7)\xf2\xffI\x91\x0e\xf7_J\x9a}XF)\x1d:\x87>t=\xf6\xf1\xfd\x8e\x06\xd6\xd6L\xc4\x87\xfe\xab\x7f\xc8(S\x8c:\x06\x00\x00\x00\x00\x00\x00\x00\x8c\x8a\x02V\x033\xf0\x89\xd8N+\x151J\x96\xdf&\xe0>\xadu\x15\xed\x94\xec%5\x80\xa7~\xbc\x9c3\x90\x97\x1d\xd8j\x0e]P\x0f\xa9*a2\x89Y\xcc$=\xb7\x0f\xd1\x807 T\xec\xb2\xfd\x88M\x99\xa9\xf9\x10t\r\xea\xabv\x1dn\f\x88[\x18\xa6\xcfE\"\x9c\xc1\xdbYW\xac&\xc5\x11c\x85#;\xf9\x9a\x9f9\xd7&\t\x99\xfd\x010\x98/\x13\xe1\xf3\x81\xb3m\xaf\x11\xb3\x9e\xd1\xd7\xc6\x92m\xdd\xba\x01\xbc\xed\x9dl:\x1e\xf8o\x190\xf9\xb2\x1e~\x1fHQ', 0x0)
r1 = memfd_create(0x0, 0x3)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000), &(0x7f00000003c0)=0xff50)
write$smack_current(r3, &(0x7f0000000040)='syz0\x00', 0x5)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, <r4=>0x0})
r5 = inotify_init()
fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x1, r4})
inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0xfe)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000440)=""/65, 0x41, 0x9, 0xfffffffffffffffd, 0x33fa, 0x9, 0x7}, 0x120)
r6 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x14)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
sendfile(r6, r6, &(0x7f00000001c0), 0xa198)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vga_arbiter\x00', 0x2000, 0x0)
flock(r1, 0x1)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x7)
r7 = getpid()
fsetxattr$security_capability(r1, &(0x7f00000005c0)='security.capability\x00', &(0x7f0000000600)=@v2={0x2000000, [{0x5a, 0x1ff}, {0x5, 0xffff0000}]}, 0x14, 0x1)
r8 = syz_open_procfs(r7, &(0x7f0000000140)='comm\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200c004}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)={0x15c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfa2b}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4114}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20040004}, 0x10)
fchmod(r8, 0xffffffffffffffff)
dup2(r8, r0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

00:08:50 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340400000ff0700000000000000000000000000b0ae00000000000600"/52], 0x0, 0x0, 0x0})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x301000, 0x0)
fadvise64(r1, 0x0, 0x7f, 0x0)

00:08:50 executing program 4:
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x100}, 0x10)
sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37)

00:08:50 executing program 2:
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0)
fchdir(r0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x3f, 0x12)
getpgid(0x0)
write$FUSE_LK(r1, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@remote, 0x9, 0x0, 0x2, 0x8, 0x0, 0x1}, &(0x7f0000000180)=0x20)
socket(0xa, 0x800, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r2)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3)
fadvise64(r2, 0x0, 0x200, 0x7)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r6 = open(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000940)=ANY=[@ANYBLOB="cc409948dbe75120e7c0c9a652c357177effff00000000c10a8f3a6980710203eec48efbd7ffb0755b8f95b76ba95f284179f985740fdceff20dea464666e0648e9ae02514690636d083b161c24e68fc8a9b9112d40000", @ANYBLOB="2036c7ae852840b72e41020dcbf7545660f1680041636526ec9ee86edb16558064d1083fb034ea1c8286def836203c549c4a9840dd61bb952ea542c67806ce5183594a30f6c491e3900419f8f4f4a1da05807c12d8b8480c15dd9d9836f27501015973f9fca39f5d5133f5b50028cf2b7c1fe63948c442059526e333a06b12876c7be49361c7a81f92ad51c723b764f684a8ceedeaacf7015fef7b6c7c95c035f26a509c2cb6d47a270ca4d994da6cd594dac5850a85a44ff58a54444c85c1c7f8e0659863fcf7f4049e5bb4194be6626cf17b48ad3f80f7c3a8689ddda9a31100000000000000000000000000e225b34d50f2b077cd5f48d5405549297ebd70433e077af97560ce66fb14c3002062d4d96266a9ea91fbccb9a3299fbd4dbebb65e511b8dfd992bf12437ac5c74a7ca4115ec1b80803260dd23749fef390981ffcac5905f756e11838630c9db342cc92c1f38488be3007b25386df8a1fdf137ff02c731876b822f0259a44165471b57ac750"], 0x2}}, 0x1)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="b45e68fab0b41dbb040025ce70000a0cd0166c29dfed919c9aee269ebcf55b26d3d82c2df7232e5af5845401eb8af060c22d05a3a54f6d5ace54bbe0ed31c8844f0d5addb250ee490a4edfbfb94a8ce8e0f781bc139440ebc85b7538c7301d31599c0200000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x4000413)
write$cgroup_type(r5, &(0x7f0000000340)='threaded\x00', 0xffffffc5)
r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r7, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000000380))
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c)
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f00000000c0)='./file0\x00')
mkdirat(r8, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r8, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)

00:08:50 executing program 3:
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffe, &(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)='net/igmp6\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000100)={'sit0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0x1}]}, 0x10)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4})
r5 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0x10000, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000240)={0x5}, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup2(r7, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r9, &(0x7f0000000480), 0x10000000000002a1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = dup2(r11, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000280)=@req3={0x4, 0x9, 0x200, 0x20, 0x7, 0x7, 0xcf}, 0x1c)
pipe2(&(0x7f0000000380)={0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x80800)
ioctl$ASHMEM_GET_NAME(r13, 0x81007702, &(0x7f0000000300)=""/64)
sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0)

00:08:50 executing program 1:
r0 = socket$inet6(0xa, 0x4, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00\x10\xd5&\xcb\x12\xedBkN\x91\x95D\xe30?\xe0,S\x8f\xab\xeb\xb8\xa9\xdd\xc9\x8c\xa3\xb4?\x06?z\xba)\xef*/1\x05\x01u\x82\xbb&\xaf\xf1\xaa?T\x86jpE\x03\xabn\xc5\x80\xcf\xb6\xeb\x13\x1cp\xd0\x9e\a#\xcf~\x02\x86B\xddqN0K\x18\xe0$#\xb5x\xe8\xaa\x06\xd5)\xe2_,)#\xb6\x8a,\xca\xd2\xe42\xcc\xd0\xa8\xda\xdfe\x81\xcc\x17\x80\x80g\x14\xd4`1(0w\xd6\x9a\x0f\v\x06N\x18\xb7\xb5\xd5\x01\x00\x8d\x1a&koI\xe8\"\xd4)\x02\xd1=J&\xfb\xe15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\xf8\xda\xb0\xaa\n\x16A\x1bl\x81\va\xb1\xfd\\\"\xc0\x8f\b\xedX\x1c\xd8NHY\xf2\xe4DF\xda\t\xc0y\xd6U\xfeh\xce\x83\xec\xbb\xfc\xd42BHj<2\x19E//\xfe\x90\x92\xb6N\x03\xba\xfb\xcd\x99[\x84\x1d\xe60\xc0s\xa8\xb6Az\x96\xb3\xb6\xa1\x9c\xdf\xf3\xfb\xd98\xd8\xc5e\xd1\xd5s\xea\xf08\x8c\xa7\xee\xc7\xc3\xa1\x9c\x96w\x8fm\xd5\xe09\xf3\xdd\xa8\xbe\n\x9f\xec\x83k\n\xcd\xab\x9b\xc2Q.\"\x8fb\x19/\xc1t|\xf0\xf4\aM\xba\xeb\x1b\x177\xeae\x9a3\xa6c1\xd9\xc7\xc7S\xe8\xca\xbeN\xcc\b\x90{\x86\xe7d\xfcm\x10\xda\x05{\xc55\x1b_.X\xb5(\f\x00'/360)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r0, r1, 0x0, 0xa808)

[  137.591505] binder: 6214:6218 got transaction to invalid handle
[  137.605064] binder: 6214:6218 transaction failed 29201/-22, size 0-0 line 3014
[  137.623205] binder: undelivered TRANSACTION_ERROR: 29201
[  137.635648] binder: 6214:6227 got transaction to invalid handle
00:08:50 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r4}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x36, 0x0, &(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYBLOB="bac3cf205ad9e50c2f2ff2b6b22d6b43f2cc8a61bb026b345dfee2f8ee47ecd94bd93d104a16b1eb2a1430a1f21c41799d7250dfee7327e5f093e7dd6160f513b62bfa5ed92b124155068226a9899a89c8c1c86e15d65e3bc2fc8f6e4efc48575b45dc9e3841270c944e", @ANYRESOCT=0x0, @ANYRESHEX=r1, @ANYRESDEC=r2], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESDEC=r3, @ANYRESHEX, @ANYRES32=r0], @ANYRESDEC, @ANYRESHEX=r4], 0x0, 0x0, 0x0})

[  137.656401] binder: 6214:6227 transaction failed 29201/-22, size 0-0 line 3014
[  137.665195] binder: undelivered TRANSACTION_ERROR: 29201
00:08:50 executing program 1:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$smack_current(r1, &(0x7f0000000040)='./cgroup\x00', 0xfffffeda)
r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x1, 0x0)
openat$cgroup(r2, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0)
fadvise64(r1, 0x0, 0x0, 0x1)
write$smack_current(r0, &(0x7f0000000040)='./cgroup\x00', 0xfffffeda)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r7})
r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r8)

[  137.805981] audit_printk_skb: 21 callbacks suppressed
[  137.825680] audit: type=1400 audit(1571789330.585:164): avc:  denied  { setattr } for  pid=6212 comm="syz-executor.5" name="comm" dev="proc" ino=21717 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=0
[  137.858525] audit: type=1400 audit(1571789330.575:163): avc:  denied  { create } for  pid=6215 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  137.884972] binder: 6236:6251 unknown command 536871296
[  137.924743] binder: 6236:6251 ioctl c0306201 20000140 returned -22
[  137.946089] binder: 6236:6251 unknown command 536871296
[  137.951503] binder: 6236:6251 ioctl c0306201 20000140 returned -22
00:08:50 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ustat(0x3, &(0x7f0000000000))

[  138.050556] audit: type=1400 audit(1571789330.815:165): avc:  denied  { call } for  pid=6255 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
00:08:51 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0)
recvfrom$unix(r3, &(0x7f00000000c0)=""/18, 0x12, 0x10040, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000040))
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:51 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', 0x0, 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r4}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r6}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x94, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040ee7900000000b6ff72d6a9912addb48b06000000000f000000580000000000000018006694000000000000000000000000000000006b5a369200000000b7d1da1baca4e939f0a35d89601657eeb43b7283b81138ab1084a3649cb406cb59bc5ad5360f2ff84ccacb797232338157eec92da178b179e3f8e27f615d7c5892895c930d00a813c50612839584f8b177ad51ab256b421551df8fa565b3369fc0e8cd169c4641b73b27b054e1e8", @ANYPTR64=&(0x7f00000004c0)=ANY=[], @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES64=r3, @ANYRESOCT=r4], @ANYRESHEX=r5, @ANYRESDEC=r6]]], 0x0, 0x0, 0x0})

[  138.166248] binder: 6255:6256 transaction failed 29201/-1, size 0-0 line 3022
[  138.196769] binder: undelivered TRANSACTION_ERROR: 29201
00:08:51 executing program 1:
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0})
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000180), &(0x7f00000001c0))
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x2f5fa26)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r3, @ANYBLOB="040080000000000010000700000000002000010000000000"], 0x2c, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000240)={0x60, 0x7d, 0x1, {{0x0, 0x49, 0x74, 0x0, {0x0, 0x3, 0x1}, 0x410000, 0x1f, 0x0, 0x80000001, 0x2, '(\'', 0x13, '#posix_acl_access]&', 0x1, '#'}, 0x2, '{#', 0xffffffffffffffff, r1, r3}}, 0x60)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000100)="39000000130003006900000000000000ab008048060000004600010707000014190001401000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1)
setsockopt$inet_int(r4, 0x0, 0x14, 0x0, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r7}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000000))

[  138.292607] audit: type=1400 audit(1571789331.055:166): avc:  denied  { set_context_mgr } for  pid=6261 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  138.376804] binder: 6261:6264 ioctl 40046207 0 returned -13
[  138.399494] audit: type=1400 audit(1571789331.165:167): avc:  denied  { set_context_mgr } for  pid=6261 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  138.440057] audit: type=1400 audit(1571789331.205:168): avc:  denied  { setattr } for  pid=6212 comm="syz-executor.5" name="comm" dev="proc" ino=21717 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=0
00:08:51 executing program 5:
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ftruncate(r1, 0x10001)
write(r0, &(0x7f0000000080)="260000001000f5680300c10100000016c455ca3801000000200000000000f13a050003006a4f", 0xfe67)

00:08:51 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340400086aa83f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000800000000000000000"], 0x0, 0x0, 0x0})

00:08:51 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a747000000000d28c7a8d000000000000000000000000000000a6a9000000000000000000000000000000852a7470", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/239], @ANYBLOB="ef0000000000000002000000000000003d000000d70000008561646600000000000000000000000000000000000000000300000000000000"], @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000028000000000000005000000000000000d6651e227ad99847804f7977794095c07f31857058a070050c7e7da4e4a6a823c22ed1d9d0b1acd441a07837aec66f99364b706852c567222c322a211e5030ec77eab76de1cbbca5ab338aa76842d55a5e9e808fd95bc6922a8e742d1a4f8f3592e2fa90566ed8531474a14ba843fa53781380d313d16e6b081ae459178df90bedab7134c64a5bd95d879a67c9f277686a3db2c16dad633619a3258a70c8c479dac70dd5"]], 0x0, 0x0, 0x0})

[  138.512124] binder: 6261:6267 ioctl 40046207 0 returned -13
00:08:51 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x01\x00', 0x1132})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x20, 0xfdfff038}, {0x6}]})

[  138.590492] binder: 6282:6285 got transaction to invalid handle
[  138.599429] audit: type=1400 audit(1571789331.375:169): avc:  denied  { set_context_mgr } for  pid=6283 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  138.644077] binder: 6282:6285 transaction failed 29201/-22, size 0-0 line 3014
[  138.692689] binder: undelivered TRANSACTION_ERROR: 29201
[  138.709186] binder: 6282:6295 got transaction to invalid handle
[  138.744120] binder: 6282:6295 transaction failed 29201/-22, size 0-0 line 3014
[  138.783105] binder: 6283:6286 ioctl 40046207 0 returned -13
[  138.795402] binder: undelivered TRANSACTION_ERROR: 29201
00:08:51 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0xc0000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f00000000c0))
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
splice(r0, &(0x7f0000000000), r5, &(0x7f0000000040), 0x1, 0x8)

00:08:51 executing program 4:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x800000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
socket$key(0xf, 0x3, 0x2)
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=<r2=>0x0)
syz_open_procfs(r2, &(0x7f0000000080)='net/igmp6\x00')
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000280)='/dev/ashmem\x00')
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)

00:08:51 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:51 executing program 1:
recvmsg(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/68, 0x44}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x80000000000003}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000000)={0xa, 0x200000004e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c)
sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
r3 = fcntl$dupfd(r1, 0xe9db31c882bbeaaf, r2)
ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000180)=0xb5b)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)

00:08:51 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r2, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
accept(r5, &(0x7f0000000000)=@hci={0x1f, <r7=>0x0}, &(0x7f00000000c0)=0x80)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r8}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0)
fcntl$setsig(r8, 0xa, 0x2c)
r9 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r9}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r9, 0x40046208, 0x0)
fcntl$notify(r9, 0x402, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', r7})
ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags})

00:08:51 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r2, r1)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@remote, 0x3, 0xb5e1b0ecb9de070e, 0xff, 0x8, 0x4, 0x101}, &(0x7f0000000200)=0x20)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x5d1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, r7)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r8}], 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r10, r9)
ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000280)=<r11=>0x0)
accept(0xffffffffffffffff, &(0x7f00000002c0)=@isdn, &(0x7f0000000340)=0x80)
ptrace$cont(0x7, r11, 0x4, 0x200)
ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0)
ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f0000000040)="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")
recvmmsg(r0, &(0x7f0000008880), 0x75d, 0x44000122, 0x0)
syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x400002)

[  139.179292] audit: type=1400 audit(1571789331.945:170): avc:  denied  { create } for  pid=6304 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
00:08:52 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@getsadinfo={0x14, 0x23, 0x1}, 0x14}}, 0x0)
prctl$PR_CAPBSET_READ(0x17, 0x1a)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
r2 = fcntl$dupfd(0xffffffffffffffff, 0x203, 0xffffffffffffffff)
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0x9fe3, 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r4 = getpgid(0x0)
write$FUSE_LK(r3, &(0x7f0000000140)={0x28, 0x0, 0x8, {{0x844, 0xa, 0x2, r4}}}, 0x28)
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r7, r6)
getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000003780)={@loopback, <r8=>0x0}, &(0x7f00000037c0)=0x14)
bind$packet(r5, &(0x7f0000003800)={0x11, 0x1, r8, 0x1, 0xa0, 0x6, @remote}, 0x14)
ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000000)=""/20)

[  139.216640] audit: type=1400 audit(1571789331.985:171): avc:  denied  { call } for  pid=6302 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
00:08:52 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r2 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @dev}, &(0x7f0000000100)=0x80)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'\x06\x00', {0x2, 0x0, @local}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r4, r3)
r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000002900)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000002a00)=0xe8)
sendmmsg$inet(r3, &(0x7f0000003700)=[{{&(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000340)="649ac8be956bb221f68bcc545e72fe3efe5598402c54608167987d224f909090c934c8574a11066bd0f53271fa84716e8dedba8b07abf802a3564a84677aa831ef1882660c26318ea89631f9c5278ee15ec4154aab5f663220a3b18e90bec036bc872c8092750c7200b407a283db6b1dfcb20a6fb94dd0bc308b25168f9838e80847cec2d363ed8baea010916a94363f224ad48f69a948be97d4955d74b2920ea9c94b8968eaa05534a6fa84a97070b436b6fa7ce8f6a0f2cd50eaa7aa59f5d8c3ea79957b840a8a8bc91444b590c39cefa907f54db28bdc2fe256a9fc88b3e45932d0feaeb8659803f180f19b43cef38fe00546404cd6638e06e5a3125f22f94aa247c15a77b274a8d26ed6764f8827eff4090f3e4abc9a2dfc2c7006042b6525bfedbad11a9c850ecaf75f48bca0f18c91b445ea8b289333aa6c04325deec957f34158fe059945ee13188bcaf4603c1b9b151f79164b594a65996156ba9a301702f62963268605d5fe209e55919199a463d66d09ff8e789f053c45db0b8ffe043ce6f2b6555c9bb2d2039cfc05a4cc12e88f2452ce8a2ef7e1c995f9958d590ea8e10fd8fedfc3eb831d0ce6fd2fb3be61453655cf2f9fa947598824de316c38326d92ce295edae66f99fa63edfa21b2dae2462da8d8102ecb6159c4561ad3224a71178284b4a5055c9f67b07befd3fc1d98dd6b977726fa1ceba48e2cef668bf5416a6a99657bf484b4d41cb3a79f6a681605ac24820c02181c7e7c60ad3af9f504d985935b912d5aa9c0efacdc9f0d61d6b2503c37c9ebf7bbd12fd4521ef4ed220a8b5e83862f90846a6ff2b7741a495500dd96664ceb6c8031d8d0abc4d6e35aab8a2c3841e416b9f7d455f99885b043237ec3a7ee9e52206f2fe6215ace6dbb217f106b5e6dd27737c94c7a1cebbec7ed9eaf5700f2fd576b17a43794e4944e9b4b835d33c529db8ebd8777ec1d23f38c6e3e30ff679d11aecaa733ec3bebe1d8ab62412f54b1eadc638ffc2e1f42a127e09fe58f650c8628939bd60368809cb6a91b3387b03f5dcceefb963d1ef7dadac0cb434c7a9aba141a438a999c47a700c80cecabccf5a19514fee1261c867229610a8c32cbdf2b5f2d118c6b89e4fd9289b7ae0ed5175cd20e3ffc9de400eb528b11708a738303a649a39136d2de5f856bb6d43bba6be95615fdc7e2fff934635662c2118c143397c991ec0116610baf77900b0f1e5a43f78061f89ab9e0f399f547c7663e1087c0fcffba1f58736b143e1b48b6b995b1692ccfd7aeec83b2a5aca8a49e08dad7a994b816d1102c17c6f337f446130a89215f78e0522ffab4c8b297dca7985e8b324957b78fee144d56b3f54405fd873c673f5b41d74f1158ebd73adae13490f6c5e8f38e006a0535587c3d3a986268a9822e3867e8ecf7a5ee85344a2b6979d556617b54a4e6ff07b3d99f8e2fcf98a6a01249f749fae27dfdd0f7ac96f3257dc574466b19588a184053c0e573a164d98f4c28323f456b2a2b3a62c7dcd93770202829131ee755186ed640b675e713ebb42139768d536abccb1de2dccf58a60f7782056353d840649efcbcddb69641e84f4b7130576a2d67b8d4fa9c0d273bd8bf572e9cf290bdb9782c50d8f4c0e7d1766cd89ec8802f25bb5075e434ae7467e13d7fedcb9c0e8d3e042f2ed32e8d44469c4b2c301a662df55d5a84e0b2943c61f20a3db6368aa63ef5ebd9c1be52565f8743f03d3f3237cb195be3e3581ef76b4d61b60f440a32d8fc429848b3abc7c012621079be32f3d308d43d2c95b9d4c02665cd4c7d3a93f172e2670f54450892ddd96871c8d98c76f2099ff5cce147714845353234dcba295f11260047dd02e15570748a5cfab1f8e038504a7f278d6d2a222b9ac0e221d4466eea781c36035f1bbe673116c230d9391a8c310fa12806f7acd213d4fb6b85d7098ea8c4f93c2476642b80d94a69c6a989efa895c1a01661d8ddb93c67bff16f82087225840de7fe53cb80f37c0f458a9ddb4c78c48d1a19fd0f71a7e0b4907125b19f9f98ca7cdf0462ecc5d071e4a0c741bbe861250ed7884d43922615a5856869a33af58bbcc2eaa5f69629239b86bc5217d24612525e426248b1aa4675e662119c780a87233b2510a292f6b0df80a0e0a1228a555b78283321a6d5f8e60bfc1a50371fdb333807b8fd47310346884f8aff6edf7752ea95685686152f406b370f9d7d094886cd891d85448cc791643af25b913da3ead5e371df9091522d351ad1b2b328aabba6920b179266d1a708919954f2f18c65da70634d311d750978c7495bc9b6423a4feef5cdf552f93b7c849f81cd42beb16be17d830bf18bbc878efc910d6f50ec3e931823256692fa53375fe1a996a436101172b3d60beae6854012c2606379af53908b63db63abd1734df40946af0f4d8242573a2d2a6f6ea17e7dd7fcd1b1707f08e0b770f9deea9f227690de12b5e2eb5edc36b350a250ec5eb113ffa3bc7e2bfd0ae277d66697ebcb96c010dfebc4a329f0acb12034b50eae740f2e67d1f1a7a5594e87d3cb55408fddcde57480cd3e75beee87ed70f83261104951c53fff95dbd3a889bee1489b4e1a68bb747596e88499618f7664c3d4fc82a60658feb64ce55d2f1183655a017247676c87e9d12173df8952265743896fa0ee99fb846a3e43e12b26bd93681318bd163c10278a7f852029a9af7c584da384e75fcf231422e06cd97dbce96bf5d7d97cb99add7b0f692ed805473bd9683eb07b18acf5c0f47743887506e4230011712264886a705b26a3605e47e883db02f5b90383d485b1adc3308497f018f7902713999de712495cc21c1f30ea4d6ca7949b15ecfab336b6dfcfb2c3952cedc8ab29d88cbed67c3a6fb1c22c67d7bd9d6b3658da5ccac90515b67c2204d57c4f695c715375a87af5e8eb749d7950bda93217c2713043b7e36c5418aa89f7b58479e28f64189d41f7238453cf34c8abadea92724298b0bbf8272c584055e564b59ea5315bb477df80060305096970571cc37f8647bb21d8d97027ba566ce093136f0fcd104d6f00a799684156feff9f23b53b1f8597f5139d0a64b67141e09240fe162503baf8f893bffc6bd0ea1f86c78a8ca46356830e1a81c13fd7ee436a0292a26da512d03058c574a6eb105deb4a6d3bd9a6c3b95e50f398b3578265077b84c3fbc2343f672e31ce22105477a7f4213483ea8925a6617fe782b22b3e85cb893e31b9220ac5a869b5da9caa1b6d008a0b8d513c1266079d4b156dfddb24b2a7b2e56828df0d213f43e0eb90a653f927662d22c4f5b15aad59e552871872333a112a78531ca2931920a5bafb7656669878854ce2439b4cd99b5bb9671f94416dfb725e073bd9aca4d84c8df56493d8c4cd0c024d5c1c39cf8dd7d05faa0034e9a9f30714f99796c8f7142b4e9e41a35cc0d50c10e34ad44f2326239e994db98b71af941c8079adfe9adb1b3416dd15e6056f23ba07de55c3d07fd02bec91cd2ef6148e3477f6eea3d4e7971b77b30bf02b9df11050131283eb323a532375a960aa4b0030433e7f7a9c482fb0d0088c62e3931fd6571fd308af8b0b7b494f8070dbcf6066998fd53a852fbe8b947c3547a1eb267a17820831dfbcbfc0aa2ddf22ee94f7c198380968fc92fef1d9dd1a6baa35b9edd98dd152c4dad10488367a0dc10315350d527376cc8acfa0f3c007ce4ffe242b89d28163cce33be7e83e018f700544225f7e0bfe9cc7c39024bd0077c6d6cf29d141ef6221fa516271b4fd34352182abc7520525432a51211d54334cac1a244acbdd03ebe0a29e220423ba85eb24edaa51da6e58a2f25aec4a46384cfdb34845d778a0d957da310098cb7cba1861239a9a87e559c9dae9418308554db43dcfb00d5167155e2a5377ae8b221bbe3ceb6010f7ad7ac5413039f3472be4802fe3f644e049e4300d8a10431007a287e74d18ceebdecf7380752a0110d90d153e25e475b31196795c1e02f6960ed7b447fdf6ab70477dd7cbcc1cabf59a1afb9458b120e92ba21b541563f85461dd676c6af95508be9f74d42e49ab7c58af90ab8d3bdb6ed25bf87fb50d25bf4a450009212ff1323c363e688d5654e8c80d1dc2415689671c56140ac59eb5d664b25d2efeae36f28032430d8bf7b66bdc636258e5775c21ff5f0a96b26a94508e4577246e40ec5ff723909a9d14786abc320b370730469eb409b45c5a7a808bb433be5bbb831f841d7825e4d09693709049c71aae80b7d35773319a3a9441b8f1fe41bc52c947a31a5e2a8a79f2b851e8e3f0cb4cceabe447d0a0e9e0ca87acd29c94154b636ff1dfe3c04b42a0ee58f70c11aba254f724aeaf4f43ac61bccf3fcf21a3739ddb6357e57d107796b502873975a5574d09bdf433af121ff09254554466fcc59bf0a063c8ea4a04e56b85b745708743c11828116e2a805078982cec337ef11226cbb0a9578ab70b4a895a06eb31268438b2f9631bf2fd283883330bb7a21484da8e93cf18e912fb9f7ccf420fe7171cd83c0845450c1511132e30799d66788df3c9cf97cce9d936a52a9b1fdd439b50f8136dc3c307cc8186527afa2d37505a67af519d50d177ec7f3780037a098e858cc50ee73e737747414a91a5c56a49c675d2bdf89a9e82bb57e875049d1965071ea64b8ffa01c8ad7d1673d7d308dd759ea8193de9c2fbd52a11bff8d050dc5a23db10cb36bef24bdb6c6a130f6d35453cdcdc7d788a39842f69121df40df15381ef4279b50fd1872521d81d457660066745b638b975e04c1237bd39d57349f20a7b398493d5755b48f673283f2dbd9f11acf7f884efa0ab528871390172a4d687d9dc4722b4a8b901e09832ba322e1d2fa9fa763be7bf1ad42d1e4e074cfac6a4c3ba35eb6cfe75f4f4deacaa7b511071e0faa7b91a3b5ebd8f86df0949f3b369619b2b904b9fe75c6474e120e764cb412a4fa4012b9523d66f1a8817ef79a6e4cecba8b15a9716a2569b3360a8083dbb7f46412b4bfe6ffdad27f4081e4fc12296d11d033150ec4fa877ba7bc187a6f37e9d6f20959edc26e7d2a5e30b100ebc3c5d23f1451d7556b6c5f3b72c0b6079a7f989f01b8e88df4bfcb3da2a1bb5fd10334fae12c4cdc6e85a115eb05fba9b2409a1a33f88c4407709bb0d10c22eb14c8c87d9a256aad3be0a59ceeabfac62fc5a1c45df181549a1ed7f39eacf1297365ba647c89b016821c8415aa4e641b1eb30c1c5332b3e6e0368d2a8608a7c27ed9d2d264d06afac288362b4041195b6452682203671e4e179ab241d31be13299af169d23a6ab3f6e97bba5efb5b197e1a0bf3b64756e971b76b6012466b9d7d3a8e6b96ff54cda70a7bd22a2c735334779ee391c35637937198ab1a78c5e079c3c48b4e405d119d2e26c45b80ab428af22d9e06dd68f517ebc854fe171180b961416076ec17242ea0e2ffdd336677bd0edaaef469329cacd7ba40fd46b19825888f37fd6862d0d370f1c21d23f09188ba09ceed31cd1bb63cecf82ac4b77d60e6b403a26bed05dab34eddc3ea8660d7ca8a764ad47881bb93b7daa9ab45e28873c790db372bf382b4b4fcec6f2f0cee73b3d331814dcb6b7a3fbc4e4cf86730f364e6d197bb51604720ad480866f1c2de2556a3079918e7696259d6fef71c11efcaba579591b9da54a1ea51dbd1d0bf2092765873e5bc3c68237d2d02d1e3f35b612da75e0057ca0aea259341649a4678b1c952551928fbc558821e25f21816eeac89508f394a2b711e42266c8836c1746b7ea589", 0x1000}, {&(0x7f0000001340)="240e300e4f3415a4261ebee9a6c4c45a8bcde83c62e353aa0905438c0b0fed944929f9ef56da4a4689b68b088c7fd4f2480a1be905836c186bc9ba83fbd7607dfb65fae06de413285ad80cff3d1d1dc42df668bab26aabfbfe56d499404813edad5932e9d4f9429d34ed7cbc6749ce3881866f06b50bbe8a81fcb8ab69c00b3f7f678f2608252d1c21c262e5f54e13b3c68c9d6dae06938c399408265a5bfcc96a", 0xa1}, {&(0x7f0000001400)="0b37173e4f65fff9f9b16cd7f1c3314396ab59186b0c0f9a70abdb5bc8d4dbd521ed68061bc7da3ef4744ede04aa7e22134382ce241c2761d39d6f5b32dc92851dbd8b88e3a5d8175905c5517e280d8730baa95d3d71ccbfc1741bc3d7953b74e57fb1d1b3dd3eb9103c95051cde6c2b6a69b22faf19d405408f367bc5ebe02fa700618d39759c42e0d9b6f80f1b532662aa0fc1e56c474f5ec312468bf32493aee6fd30ddf717fae00d748ea3c0c17a8cb06f0655f8dee9673335088c82", 0xbe}, {&(0x7f00000014c0)="32240d3d5fccc1b06577b4cfad37664f4bb75077e2e2e5ef03f6a5f2c183b5b74e31461ab9f9200e39947c304185b2179aade826efb094b311044fa0beb761252c677a403d3773135f36af1847c619456b0ee2c8c6afd3727b6dff8fcc6ddc897933cce0fce747c5632d8f0fc4c04a042edbdbbaeef85b8bbfe0c91dc1f9ca1a7b7476330aeebe1d24feb67ce0259aec0f8069ae3a49dfb072ed2fb3d7fe0c7e4ccb9927f8c962517b4f6f65c2e71746b63fd2632936b19fcc78fe28990c6efd4d5c0e91ddc13306985a4066", 0xcc}, {&(0x7f00000002c0)="934246d93f02c7f25b09d47c50913978197bc1fd6e6fbdd788a9ee8464ce1a901b", 0x21}], 0x5}}, {{&(0x7f0000001640)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002680)=[{&(0x7f0000001680)="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", 0x1000}], 0x1, &(0x7f00000026c0)=[@ip_retopts={{0x30, 0x0, 0x7, {[@cipso={0x86, 0x1d, 0x5, [{0x2, 0x11, "3e4d9ef4ec17aa0d26dcb844cd3c47"}, {0x2, 0x6, "5ae1ec5d"}]}, @noop]}}}], 0x30}}, {{&(0x7f0000002700)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000028c0)=[{&(0x7f0000002740)="97251fb95e0c0d", 0x7}, {&(0x7f0000002780)="f102f969b81ec0c14a6fa665b5383e92b296fd97ea51bb9598f18561dd0ceedd30ba39b07e3e1bd3a3be3b44089715f1a6d47916e30e0d6ce3b38c75070b1f3ca7bbdb3a6b7d30d8f7eedd3d50431df518d7a6be023541f399470c12cf44944034ab1fa4ee078b3ae60dce0df55136023eb7cffb45a236de5667e7660bcfb9a85b4cd095bfc3f07c551dfe6765f48d94972202bfe4498b2fce5ac2d4f33ed3930b3275654a9396640232387158265df2c24b3213", 0xb4}, {&(0x7f0000002840)="41643a4571464ab7ef15ea9d6404c6fc6b82009a0a40418250903689b9bcf72dedd7c116d8a1745ba4be3d3191efb26a1a56a3b968d143f8f538897717dac45bf2e29a3ee4ece7ad46137729e2fe67962618bd9ae1876714696ba702403e851be7567f1b8bba2ffe", 0x68}], 0x3, &(0x7f0000002a40)=ANY=[@ANYBLOB="4cda97de00"/16, @ANYRES32=r6, @ANYBLOB="ffffffffac1e010100000000480000000000000000000000070000000107173be0000001ac1414bbac141426ac1414aa00000002940680000001940600000007861400000001050e49fa868f15f9687cc9c9b7ec1400000000000000000000000100000005000000000000006c000000000000000000000007000000940600000003890b00e0000002ffffffc0442c01600000000600000005ac1414bb49ed20c7000007ff7f000001ffff0de5e00000010000040000000009891f03e0000001ac1414aaac141419ac14141f00000000ac141419e00000020000000011000000000000000000000001000000030000000000000024000000000000000000000007000000000100107c6d17a9c5394fc902addab4bb7a000000000000140000000000000000000000010000002000000000000000"], 0x148}}, {{&(0x7f0000002bc0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000003140)=[{&(0x7f0000002c00)="57972941c36397f7e4fab344d70b91db09f8bf98fdce9fda142f2a0886ae4026c4e5f73ebee227bb1eb027b835d25586ef3ad4a3362e9ee6779f5b3d1c34684275809fb754469d74d0dfeb26c90d680fd18f4c419398bc369a3a987c693cf5e7be366a802b73a49a28a8b558b149fc552ea6088d08688a2731ce33192cf6a6b8f0b09717901f3ce83e887cab0258f0ea522959c3c3fd574722f08ff4c513385c21928c40cb20eed452d2dfeaf246d05929beec41d7bbc4d9a0b62a06bd5213bb19ea9583e046a0a34c74faee238190958abc815b43a9398200233d46ac", 0xdd}, {&(0x7f0000002d00)="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", 0xfd}, {&(0x7f0000002e00)="a122670ddb31bc3d3f808ebe42f08c9502381baf08f1e8db533a4fc1a67cbd5f88dd7978e6d37e56e4e8357392aa9505eff9903107c01da78b7efb1ac9a62ace06c1b0b171bdef7c56d8ed907f827d5e3f052ff26295416843819b9836fe96af5496e1ce54662fc26affb52cc2be9001036981a10c6854463a64cbf73c47a8344daa29c1b9f7661a0e334e56b0f7ad7fc5b08bda205bf99caad2597ae1", 0x9d}, {&(0x7f0000002ec0)="b839402a6100e63fa18081042e8b712892f2def5a8833d1d896f1676af3644ec195fe1d9c5ae31dade7f105333f55a2406c6a9b65bfcc36148cba833eda621c27a01ac07d64ca08363f3f2df60e6c0241e58e67bb508eab415fb81ca3682d3b295cc95a35ea10ef57024c2f2333ca0aec6fbe52a0a3278de2dce7454d17a4dae288e78e6d0f7c53aad3225420776d6e61e741f5033aaac1e0d0feef2c6a565aeef847d7177", 0xa5}, {&(0x7f0000002f80)="1b856c1f9c5a3cb58b871df35baa40f0a0931f990ab88092c2e1cb23e92c5c5d0a704af2a0c012b8fc839316f23fee54690d3a53ce68f3090c5814294160518bf11ff42dba0831fe704576f9cb6b896b209e72ca73a181b0ec2cdf10a01c88d17209b98f0ee2550ccb", 0x69}, {&(0x7f0000003000)="33dda0a6b5a6207fc0dbef17634d73bf463253333585348d418cebc6d418b54048fac1b1e45e247526a9c14b17e3", 0x2e}, {&(0x7f0000003040)="e3786bb23cfe4436ce7863c4e6808532f63df94c324f29ca993dde5fded2ccd15bf3fe8d6f764ecbad1b94dc1a4ba75f69a1a2dff94b4f3d86b41a16e8bd25b7d140ac0bf87f258ed5bee3d904f020ec2cb203d5db490eacfcef264091c19d14b6f27485ab4fca0e888a992c02c4e1962e8e0c800c60b8d5f8f7ded7f294f82517e87f702f52628a964e82cadd91d415d108af985931f06f5d1f9a9575fb79ea7096d23c9e80cdfd636de3029d8a1be95e08dc0aed3abed4e5d737bf21f6e8b7bbe8df440d2ff24cf1ffc0b61b1f42a5e185cb520d", 0xd5}], 0x7, &(0x7f00000031c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x30}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003200)="51ddf281e4ee80279a798e98007d71d5eac03870fdd96f37ae15cfe433b4d56dd42886fca3be38c1cf7f223d0cb6df206074309c0410e2861936df7ace37", 0x3e}, {&(0x7f0000003240)="c2d0d03ed37b4f0e797d6ea4e52585109a35f3bdf4115590448021ef4c7e4598aabbe1bf9f18227a338978b32b6dcbb09838e5850bc76d8daf16f7c8", 0x3c}, {&(0x7f0000003280)}], 0x3, &(0x7f0000003300)=[@ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x6, 0x1}, @rr={0x7, 0xb, 0x0, [@remote, @multicast1]}]}}}], 0x28}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003340)="a423fe3043fe93f576a6bdd9bd1c9f2a9ef6164ee58323ddd744771042c362cbdb0bb5e1bd9c396745443d0eb5c62f24968fa3e12b91477362115d687f0e01c34ec82462770dd718109b62bedc155192f7ab887364a739abcc83c1a2823f086e023f8f3c9c0042b0a05d8e2d36c3cde482b70818e0bea14b315ae94b950d2fe179266b", 0x83}, {&(0x7f0000003400)="387907e8317ee7f7a5dbc119356e57fe2876ee8415b3dbb45e5449a0f22bf79cc5c2766c3f3ded3243c026c0eb85", 0x2e}, {&(0x7f0000003440)="5aa453251d44fd19aea342af02a23226b271d66e4da9fd3c0c174228de4665732806e4c29ef92575fc9ae6e5c576f8623b44135c1e660a3dbeab87fc4946f18544324b81ec52f3ded298fdf776e55641336876173ab169048c244603f87c933c19aa91bca697e3d4716a4a010ece0a12f99bbb1d7b0163b08e7edee1902bcb4836566b84cecf52dae5160a144e30f59fcffefc3e5f2d61a42f525a4930c330e2cf10ef735453d53a697b771cb7c5c631cff94f4e9f335654d976b2d7e96e8d6f9fd03bf30429afad3e7b54f3a798aebb04b9155d86d5b1f78ee9563159e94b031d503ea75374cfae60c3a15e429d4a4a1975af3a30d31d59", 0xf8}, {&(0x7f0000003540)="f300cde82a6a54200fec1893c7a65f316556587d8c", 0x15}, {&(0x7f0000003580)="d40a0bc525b42831dab08014071173aa476b271935ea21e7275c921bd247518de0655c32e7447cbd24f27c5619c3af75af602f489057f48a01ca80c5a6c106021cbfbfce42ed4c156c9b5c0bdb51ce9e6ad42ec3bf95d0a468f245fbd8d4c465727c46af054fa4f3c3b5393bd6c292d4a0a286c8d03d3d94d6a94bd6c1b65765ebabdc46f8da4f1d7a1cc4b642810a1e62000450e549", 0x96}], 0x5, &(0x7f00000036c0)=[@ip_retopts={{0x10}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x40}}], 0x6, 0x20000000)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r7})
ioctl$RTC_VL_READ(r7, 0x80047013, &(0x7f0000000000))
pipe2(&(0x7f0000000180)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80400)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r8})
ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000080)={{0x2, 0x4e21, @rand_addr=0x5}, {0x306, @link_local}, 0x0, {0x2, 0x4e22, @rand_addr=0xe7}, 'ipddp0\x00'})
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000240)={'syz_tun\x00\x00\x00\x00\x00\x00\x00\x00\t', {0x2, 0x0, @loopback}})

00:08:52 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
socket$netlink(0x10, 0x3, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
epoll_create(0x401)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r1, 0x0, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
dup(r4)
socket$inet6_tcp(0xa, 0x1, 0x0)
creat(&(0x7f00000004c0)='./bus\x00', 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup2(r7, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$PPPIOCSNPMODE(r8, 0x4008744b, &(0x7f0000000200)={0x80fd, 0x1})
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r9 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffff12, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="6828c76e7bb11017873735d518a396a7cd800014000a3d2618a30b80067077649442b4fce44f0ff281a6e0e3beee14a966a1a8f6bc95398333fb45d0990a7d8329ba2b3f1ce41767302bb6a77b07973f1e8c8360a08408cdc439724bc13dbc41617fd8d9fa5fafc2d39adbf5344a8973eab1c1c1bd817a1679e4b161011c24a42601f43f2a31855eed3c92c2b8cc540e0cbb7d96bae9d50462504b5db2ebf8a34c17bd85c1350f001e22b2d0d7e1f8215a8841e6f7e174"], 0xc}}, 0x0)
ptrace$setopts(0x4206, r9, 0x0, 0x0)
tkill(r9, 0x4)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r9, 0x0, 0x0)

00:08:52 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0)
fchdir(r0)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000240)={0x9, 0x20})
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x16c, r1, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc98e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe34}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x1e}, 0x56b}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0)
setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcp_etc_t:s0\x00', 0x20, 0x1)
r3 = socket(0x100000000011, 0x2, 0x0)
bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
dup(r3)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000280)={r4, 0x1, 0x6, @remote}, 0x10)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008})
r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
write$FUSE_LK(r5, &(0x7f0000000040)={0x28}, 0x28)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30}, 0xb0b8)

[  139.295615] binder: 6302:6310 transaction failed 29201/-1, size 0-0 line 3022
[  139.331913] binder: undelivered TRANSACTION_ERROR: 29201
00:08:52 executing program 5:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
poll(0x0, 0x0, 0x9845)
ptrace(0x10, r0)
r1 = gettid()
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0)
ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000040))
ptrace$setopts(0x4206, r1, 0x0, 0x48)
tkill(r1, 0x1a)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
ioprio_get$pid(0x1, r1)
ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8})

[  139.349620] audit: type=1400 audit(1571789332.115:172): avc:  denied  { call } for  pid=6302 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
00:08:52 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
r0 = getpgid(0x0)
write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x1, {{0x0, 0x3f, 0x0, r0}}}, 0x28)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000003c0)=0x401)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0xfa)
fchdir(r1)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4)
fadvise64(0xffffffffffffffff, 0x0, 0x200, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000340)='thrHaded\x00', 0x27)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r6}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)
r7 = dup3(r5, r6, 0x8e5d2de714dc1738)
ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f0000000380))
r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
r9 = socket(0x8, 0x2, 0x0)
bind(r9, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r10})
getsockname$packet(r8, &(0x7f00000005c0)={0x11, 0x0, <r11=>0x0}, &(0x7f00000001c0)=0xfffffffffffffdeb)
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r11, 0x1, 0x6, @local}, 0x10)
dup(r9)
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000002c0)={r11, 0x1, 0x6, @broadcast}, 0x10)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, <r12=>0x0}, &(0x7f0000000140)=0xc)
setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x29}, @in6=@mcast1, 0x4e21, 0x4, 0x4e23, 0x48eb, 0xa, 0x60, 0x80, 0x8, r11, r12}, {0x2, 0x9, 0x5, 0x136c, 0x5, 0x3, 0x1000, 0xa68}, {0x9b0d, 0x1, 0x0, 0xfffffffffffffffd}, 0x2, 0x6e6bb3, 0x0, 0x1, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d5, 0xff}, 0xa, @in=@remote, 0x3500, 0x6, 0x1, 0x61, 0x1ff, 0x2, 0x200}}, 0xe8)
syz_open_dev$mice(0x0, 0x0, 0x1)

00:08:52 executing program 1:
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0))
socket(0x10, 0x802, 0x0)

[  139.449015] binder: 6302:6327 transaction failed 29201/-1, size 0-0 line 3022
[  139.477359] binder: undelivered TRANSACTION_ERROR: 29201
00:08:52 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000180)=""/225)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7000000000000000000000000000066d58ef26e208603b00941106cc383a32bcb0fd32948cbfbaadc4ae306f719f425f875c507d5f20564163b94f3159f7de5a8bc83e99ec2f7095313d35ccd"], 0x0, 0x0, 0x0})

[  139.532586] device lo entered promiscuous mode
00:08:52 executing program 2:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:52 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
r1 = dup2(r0, r0)
r2 = open(0x0, 0x7d3beeb4a3686d92, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000280)={0x0, r2, 0x91, 0x0, 0x0, 0x5})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000340)={0x50002018})
fcntl$setsig(r1, 0xa, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$P9_RREMOVE(r3, &(0x7f0000000200)={0x10}, 0xffffff9a)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$P9_RREMOVE(r4, &(0x7f0000000200)={0x10}, 0xffffff9a)
ioctl$TCSETXF(r4, 0x5434, 0x0)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x80)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
write(r6, &(0x7f0000000380), 0xfffffffe)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400000, 0x0)
recvfrom$inet6(r6, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff})
r8 = accept4(r5, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000080)={<r9=>0xffffffffffffffff}, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6)
socket(0x1, 0x2, 0x0)
sendmmsg(r10, &(0x7f0000005040)=[{{&(0x7f0000000180)=@xdp, 0x80, 0x0}}], 0x300, 0x0)
sendmsg$FOU_CMD_DEL(r9, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000cab540a6faed33dadda6d9b2194aa2b8e3bbf27dd631fb72d6e2a4e5e78a87021872edff55ca1580c87ccb59293e26feff01c9469afc811bccbcb391b4658a79bdf0476936915806eff8da148563720a907ff40cf1686b5850798ce487781b9d5d022eceb16ab963cfc9f8cebfbfacf418af3876ef696b488218d7", @ANYRES16, @ANYBLOB="000129bd7000ffdbdf250200000008e800004e23000014000700fe8000000000000000000000000000bb0400050008000800000000000000000000000108000b00"/78, @ANYRES32, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

00:08:52 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = socket(0x489a132929078eff, 0x3, 0x1f)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x1000, "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"}, &(0x7f0000000000)=0x1024)

00:08:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
fsync(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x6, 0x0)
sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000220007031dfffd946f610900000000000543000000000000421ba3a20400ff7e280000001100ff561d3b5b783fd920460000000020000000000000eff24d8238cfa40180f7efbf54", 0x4c}], 0x1}, 0x0)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/seminux/avc/hash_sta\xbfs\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r4, 0x8008700d, &(0x7f0000000080))
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000100)={0x9f, 0xff, 0x1f, 0x7f, 0x7})
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)={0x5, &(0x7f0000000140)=[{0x1f, 0x0, 0x8, 0x7}, {0x1, 0x1, 0x2}, {0xebd4, 0x40, 0xf8, 0x7ff}, {0xf59a, 0x2, 0x7f, 0x272}, {0x3646, 0x3, 0xfa, 0xb9}]})

[  139.611938] binder: 6350:6354 transaction failed 29189/-22, size 0-0 line 3014
[  139.628310] binder: undelivered TRANSACTION_ERROR: 29189
[  139.632710] binder: 6355:6356 transaction failed 29201/-1, size 0-0 line 3022
[  139.647885] device lo left promiscuous mode
00:08:52 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0})

[  139.661083] binder: undelivered TRANSACTION_ERROR: 29201
[  139.661784] binder: 6355:6358 transaction failed 29201/-1, size 0-0 line 3022
[  139.682148] device lo entered promiscuous mode
00:08:52 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0020404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000402dfcecb8b85fdb71d2cbfd5ae8ead578b8123e2e1616fd60f67aff89fdce4de837f55e012a41b37f6448b3b9cd47873025839e6dca2e97ed77045782b7d6d8ae9e595a3c777a359a314ee57698533a51f943b5f0040a784aec5ee18a3464a34cc59aaa1d0071222a1c450fac968d22c9672bba870fa4a108d21d56cba6a3ee10f86941416d4580"], 0x0, 0x0, 0x0})

[  139.731123] binder: undelivered TRANSACTION_ERROR: 29201
[  139.742857] device lo left promiscuous mode
[  139.759066] binder: 6369:6370 unknown command 1077944320
[  139.771283] binder: 6369:6370 ioctl c0306201 20000140 returned -22
[  139.788030] binder: 6369:6372 unknown command 1077944320
[  139.795423] binder: 6369:6372 ioctl c0306201 20000140 returned -22
00:08:55 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = dup2(r0, r0)
r2 = open(0x0, 0x7d3beeb4a3686d92, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000280)={0x0, r2, 0x91, 0x0, 0x0, 0x5})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000340)={0x50002018})
fcntl$setsig(r1, 0xa, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$P9_RREMOVE(r3, &(0x7f0000000200)={0x10}, 0xffffff9a)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$P9_RREMOVE(r4, &(0x7f0000000200)={0x10}, 0xffffff9a)
ioctl$TCSETXF(r4, 0x5434, 0x0)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x80)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
write(r6, &(0x7f0000000380), 0xfffffffe)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400000, 0x0)
recvfrom$inet6(r6, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff})
r8 = accept4(r5, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000080)={<r9=>0xffffffffffffffff}, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6)
socket(0x1, 0x2, 0x0)
sendmmsg(r10, &(0x7f0000005040)=[{{&(0x7f0000000180)=@xdp, 0x80, 0x0}}], 0x300, 0x0)
sendmsg$FOU_CMD_DEL(r9, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000cab540a6faed33dadda6d9b2194aa2b8e3bbf27dd631fb72d6e2a4e5e78a87021872edff55ca1580c87ccb59293e26feff01c9469afc811bccbcb391b4658a79bdf0476936915806eff8da148563720a907ff40cf1686b5850798ce487781b9d5d022eceb16ab963cfc9f8cebfbfacf418af3876ef696b488218d7", @ANYRES16, @ANYBLOB="000129bd7000ffdbdf250200000008e800004e23000014000700fe8000000000000000000000000000bb0400050008000800000000000000000000000108000b00"/78, @ANYRES32, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

00:08:55 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0)
fchdir(r0)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000240)={0x9, 0x20})
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x16c, r1, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc98e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe34}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x1e}, 0x56b}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0)
setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcp_etc_t:s0\x00', 0x20, 0x1)
r3 = socket(0x100000000011, 0x2, 0x0)
bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
dup(r3)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000280)={r4, 0x1, 0x6, @remote}, 0x10)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008})
r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
write$FUSE_LK(r5, &(0x7f0000000040)={0x28}, 0x28)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30}, 0xb0b8)

00:08:55 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r1, 0x0, 0x6, 0x7f, 0x9})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd43721f0405eaa24e3d88ecfabfa9590fdc431228565003e9486ce41869bc1d55729b4b2175ba1353cb263a7b8b36ec1917a15d3133d9508541498d3fc71a1e41d7568716be710db9d03b03028acee82d166e4f6acc68a644c6e8f7f36e695137863e6a0d735d11901005a0c5e7c7d5d5ebae0aac07a8ec5556169945329489d8a8d64f3404c0861175c209e3f7edbf60e64dd70037e87980f3bcacdd"], 0x0, 0x0, 0x0})
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4800)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000000c0)={{0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'ovf\x00', 0x4, 0x99, 0x73}, {@empty, 0x4e24, 0x1, 0x8, 0x5, 0xa03}}, 0x44)

00:08:55 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0)
fchdir(r0)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000240)={0x9, 0x20})
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x16c, r1, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc98e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe34}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x1e}, 0x56b}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0)
setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcp_etc_t:s0\x00', 0x20, 0x1)
r3 = socket(0x100000000011, 0x2, 0x0)
bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
dup(r3)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000280)={r4, 0x1, 0x6, @remote}, 0x10)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008})
r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
write$FUSE_LK(r5, &(0x7f0000000040)={0x28}, 0x28)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30}, 0xb0b8)

00:08:55 executing program 2:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = socket(0x489a132929078eff, 0x3, 0x1f)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x1000, "5e8324198d115fc1b83518b022191fb656089604842c2ac5dc00e64f32122586639c87749fac20a47321b22105e7cf17e008daf873fed404ed0f43058086a4ff2bc7b59e44b197434668cd6a7b96148152f9189ab27fbde0dc425c3e15a49a3dd52399a9c787a69c7f0b70ff15500fae2d5a487c1e3245981e4fd865909ea2e7241d3f56a10ac1e884431bfa0c48feb4ecd4de178fdd113f059302ce4e68168078f17244217ef161562414a58292b7c0d051f0d703fe1e664e67ae598aada2d18ea1de465189bc6641ebfdc49b44ef3c2491e8a5db71181f3973a41f92b2e5da81cadec1a8418fb6a6b5d5049e998a7b1269b2d23900e8661058441babd7ce540e45c94a35c0e23a953d1229c473bc8b8565667c925b1fae825a0c87ed36ba1da17ff8f19c9967a3bbdb53e541c23c7f4b02614ce7d5bf3b93bda46daf0810831e254dd1c0e0659e8d09c8b25e4fabc1b2c4cebbce32944c422f9f0cbf26ce8fa4d8fa2a4deb2f1c61f2ed8b8083965193211867f93680b05f110db5390f5bca7887de5516699d0ee9a37e855e898849dfdcdc44095f46eaffd5dcef480f6ef49e6f2cbdbf8c130946f13f50f219b93e7845cfc0b2db505b4caa111aa7529ebd82ebc6763508df1e18195a150c175a53ce697c3f13314fb2f0ae3771cf96e00d9cbb05e032d8152ba4beb664f3e1e2a1a6bb761cb74e0211f76402875c6eb393c4927b6e030d9549dddb87b7824ecf85f8313426f9e22c75f5392f8404b79ede8b48ba1b70643d7776315eeb24d8ce9d70646308a8c70ef9a7b7dbd7db226b6d5250de22e845ae9015155d10cd663166eb7f79bbf6d13d272dbfae6dc8847e0a45d7dd5bcc2df34d825bdfc126dedd25983bdd7f5678b00c1d47421f9ea60af9ee1a96b71419dbf4d21133139d09273bd253805154ea6d8b1d2ca9ff0b0389b311957b21f6a0a38c52cc3f57855c91c1eeb70adf3d7d6cef4ba32f54f48c578e6112ee97485877d066bcaa276ab700cc18cb68e5a97ba0fe6df17febb4affe7e700dbf1d4ad519d3f60ba943b9ce4acde27bd295be43181abea68c04cc09615b9319ff989aa8af58360c0a851a132f84e5b5697f6c2274e4b18b35126424205d26d67886b0b6486e60f2fdcac8f4f3c27074ee958d888376eb1a51f09d09b24f684e250c49387eb4ae7dbb7a71659e7dd704221823d1abbee9593009e89bba40abb5c9ae7cd80bd26440e973e08410036fab536fb6ecdc75a88ee2cdf7e0fc7fa5912c7919be1b6ce7702d83e1db2655fb50677d8cd3556fb1767fe21cae8d456120254032b989fa95e6de074eb7c43c77df5049538bede5bcf1d9ff7e54ec3699e9e158cb6c99cee2382eb0d88bdeeab07979e7cec808d7e27472e336c6827953f7207e4e478989a2ec76dd743df8de5a4c52c87c91bf19a9d2fbf15328c2e93d0f389121d14c5e0bfef77e1e8648daa063d9b174eb04fb024826b1d8b8d1b170ab2b9e874c408cfd0ba14129be78eec6a2168bb7ff68381d9864cc61a902907d7655206ea2b42734a17f44d280ab590adf6bdc5a4b4a7518b10418e825f9620f53722625b81a889a7110b257b720b271e0dcc391a84d000b94c4ed2a7e639c4b2ac7c4d3f36352a7067906a6c67e6ce30999d54127b7c223c34808a64c4878a5da7350c23b646a840f874c494e1479c5dadb1b126fe1b6ba4353a78cccc10913553a1d7746d86f419cb3ffde5b7a8571766838d07c78b6162558cd56e285cc0547318e00a9bcdae8158810ed5e0155cdd4487469bcd2a7b54beb82e0fdf10973d56d49681f1e12e5e92a804ee4e9b0a047ee750e8ec097023b53ec0a7515a9ec8efa210aecbb6bb8ad6f9169d884e97cd890d41a284aad7d7cf655f1283ce8fc86c06160d1d35f44c6dc1d9aac76e40b500b136386bc73cec1a64c4e33db3e720a7806850aa3808122361e2c17a9de1778d2df48999dcb14cf8375d777154789e9668c7ad916aef3085f8de21e41d31039bf544c576a4e6cf8f717105916e6bb0815e30ebfdb6540df3dba6e44ca207dc8f296216efa4ec3b5186fe7048ec02f8e8957f31d4145f6a3b6342c9ccf31b566c5f10953bc80fe246aaae0dada1f179ef081f6ece8602743a939a87d38811d6dc4be6256196e5168f8a4be7aa46375f2157b2ef2b6678d94523a3aa53a69e9c41fc1d45605da03bfe9a8d53b1a839981a0bae2a85da3d030eb2b77e960c6236675c8ea13c39edf2b90a657ec52d8e09d57de1ba3b1ec9af45a6b92e90797354e4e3cf320ea7d313fb82f465d95b3f344e12de4b0e5c871c53fc5d2960e7ca14cbcecf18a05a6c8a8d40ed7fdc9198943175a2b88269ad7b511ac335066dbeaa0751e8ce312334657d5c036e4aebe4965592ef6017e9ff0ec3dca97bcb221c527e56f2e5834f41744f725df67a6da73f0ee184f3cf794bfd4686f2708b6ffa00b521b00411e4cdabb91e1b28f381b5b7c2a99e46ca66487782b10715e47be28b07331a8adae0c23704b4f86f1f5dd5c90bd87f9c7c09e7dd9b442f2d2f3693e510d27ea0fa971aae13cde07fcae4dbe24e19608acc54777b6bfc7044fc08cfa02b971365b5f73c828fe420dfdb6660d55f57672a7edacb4683b7e04594120ad2911c19aee4a673886773b6983f37b6da397b75c1132d0665bc00614300e35fbe2baf0bba548e703c4b24a3be840fa0a9c6dc6d8adf5be5337393ee75be746f2191831827636a417ce0a02d570396261aa01d5ef604256fa23756f6dadc8ba0e5478bdb5b3744d6096388cfd73fa252b3d2d6b79d2d8b6174d63243d8945be5346cf36b2ec080b63424940e73c4f40e90798ccf416ef1255394873fff46349541bd077f04fba135d7f8f3c6a874503c63d9381f18413efeb602ab993511172a64f26dff5f316845396499c46819322f8c7a901452b559f156115687bd72d63b38415eaeac52dc46be1619fa1df6ed72aeb83af5d1fbb87b67262a6bf467ed3d3d11357cc8c153f14ac0cf9f8a9bcb712c2a43fb45155d8fc8bc0b1e0a3ecdd3f8c646c0d62ec368f4f0495412fb4a8b79c9c9d9918481818efef2a339baf6460806558d99c4bd5eae4de912a3a34c8e349f834d53463d09972399decdc086eb1b0e7f5f6dadd7496b253bccd0361bcfef0815d6d9b7be5139f5c0b230cef9c71e82a1ff57f79a15fec5c3a2206a3ce026aa1fbbed887dfc175ef7d904d183ae05e2525af074a36692af97f58aeb2acafae4ac7786feeaaff9b4927f81ca90a2aacadc2da26782a34e3850a213a2b85629467761ced88d558bc0570a4fd81332e4ae2a94264782f5aa643c8f8b4f289dfde1efa569029b43c96f2d3fee99d97889e1d2c5d0c2bdef702c1e998b523db6491590c1f8d2a9318c8eeffcceb12fa0820ea8f4f5dc200b93869c7ae8ef0ab0121236d18d3a963ec4e1708e502bbaeaa710dd3f8f98c11411631fd27ea02bcb955f6d8ffc748ff3d2562e2ea6c5ae1f2f40b9322209c9b5610ada221e05775124967430628aa44d056b867ecdb385d9eb9e13d02b6837fa9c5ea97f46406fa38dfae03cceb3ecdd8982a4396094c95e81a9c2471f47c9eadcc77c4edc9af7ae4e2341585f25d4459de99672d2168c101286bff7aecbc4f413827479bf241d54858182695b2dd90789807c39366f97ecc32ca196224f8ec18a1fcedadf43d6a3bc617d7c03176cd68a31a42bc5bfd47a5b0550e4911a48633ccd25c5a43ec64d51c200eb070fb173f22bc553aaa28c92a8b714e0035117d29616434805f0e0ac2b2212fbba5fdd861cea0e59fdcf2a430160b0e32459714454eeeb9e854dae5992e206af3b3804283a3bdf043a6bdd68eccadc36415065cac491f5b8ca6246da49634bfe577f8982616c28e450ebd970277b575a5f25e3a94d4ecfa96a184f0f93b567a564bce9b6e98ef1d33a3c8677a9d37889f18c028b2b62a557dcad12fdfe14e7259d5c51511e76963a1f538602accd82aef6266f4f6ac9a676a8edd67b18385d99bf6d1cfee9d434b538a8eb3bd72770da60e533c7cd4d229ca3635fbe96e2d89f2e903b961081e8d3ac52e1ec861ebc6de0a68dff7622272f06f08acf6ef78ce7e38bca3227df4cb79044e171082defa34299b2ffac52cdd8f662f8b5e91018d3b880b6a3a2fd1093101933c55a55b649333d4587ea59699999165d2824e10629f5bfad4ab3821eca285eb6283b75a7e771f927845448d55a667812167e7d9cd508ea91e259a49eb469ea12d8d8e26841da877b2d090de701c36babeb825e4cd484e564b89abddd2fc52502e61070f4f73e25c10b29f961707356082bd7175374fe717fd4e149914c2d8acc324ea757093f5711b26be898b44f96b4ba9920fde539aa6364aaf148743a3ec7c2093c1878f1e757b95d83537af5a84c6926b7644f9e4db2cd5a617693317cc1d1586929f7d6f88b185d9cc0c56ea3f1301fd7670b83c4ec2be91c94f9359300ad462eff3bb3b87fedb49c58fbdbbd9977028a974ad11b913c70288c04488e5fcbd28ab63b13474240b361c7ffd6f6cce036c7d1b9609013dfb99e853f497d90a83d85d5a7443e22ea07e957c308fe9c17fa3c50aef7236d19a0299c7ffce31acacd936d902620bd3808acfc94b55a964dfafbde1291b80d98070767d4c0fdaead4c4341713e0639c997764c526d637ea5c82720202f425e0b47090d9bec50bee4e6b34d94d5644c3466d6f25bae645505a59aa5ae88c8d9732e84dcf9901906dc25f08b5d1b2d43a0b37a9aa28c793e6b8770d17d25eb9e41485f668db77c1ff64caf4155cb90d8de3fffc95340546abff64f9eb7443849a98ef3c6e028f4b6adfd92766d31f30456e59f933de71c0e28e5a3b8ae98c0a769b1f9518194c6e960ae8364f82004e35e79a2b52f77984cf6aebb19d4db5eed52c2ac356442b8e342fee335b25fee9f89f1e0bd9c2fd44cffafba6db9230e604ab95490e807ea7f9435e9df9348aa23196c7e0292e2f598f3ead6672620ecc4502529301cbde92ff093a145114fd73ff7e170a100fb2e15c38e527d3720eb40ed4bb64074a1239bba1b700e921956c6b2541c637413fe773d628388568f6756a5e9059b6c45c14d3de81ddc8035f3e5d281159690554bf4993a72c500427fd5ee5e809a5fd78f6f5eec7c681f92f6f6c84aa9cfe9d3bf97f70da0144fd74b65ba27d13be6ee0c96b9674d58ce0e65eab59227b81676ddaf5fcefb87b0079557bf483e13cd6cbede1754fe1cba85f08a04fd05744729e130102802c2f345e2d23dcff045e69c3969956fd8a2f0cd66774aef9371a41843f8f32a65fec9774c0a88a696e9f32f2081931e9ee61161a2ec24e712406ca5a151722ecd24a0bed9d6a331f8724b2132c16b8e91118a6d632d77c1fd1907137ad956c8656aa5b163b6f98666afea7e8bd6434963f9b16553c558c6937949634d3b85f66c2f05c5867066dbe09c60572eb934c0d023ae773caf5f42e5aa50c6dc0f3839c6206e38339bfce9e8fa678e03e940ec7be403168c397d64aae307b3463537760cac9751f0f23dd15835ac3a92a48eaa5b44e9a4238fdc912a3cea5b33123c440cfbd186d7d9194a6f21582f7da9d5404a5892dd5b460b29d2e0a046ab1a5588267b42a62431c25453932bc349d77cbf69589e841ec1123d9943864b06e96fe4fe8ff7291700064eb6739a98cee1e69590d320bc8ba2f01839d4d10f2d496736d74d8ee2190cae1e4893e5339f01fff593c554b592385055f717e9d36e396"}, &(0x7f0000000000)=0x1024)

00:08:55 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
r1 = dup2(r0, r0)
r2 = open(0x0, 0x7d3beeb4a3686d92, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000280)={0x0, r2, 0x91, 0x0, 0x0, 0x5})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000340)={0x50002018})
fcntl$setsig(r1, 0xa, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$P9_RREMOVE(r3, &(0x7f0000000200)={0x10}, 0xffffff9a)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$P9_RREMOVE(r4, &(0x7f0000000200)={0x10}, 0xffffff9a)
ioctl$TCSETXF(r4, 0x5434, 0x0)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x80)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
write(r6, &(0x7f0000000380), 0xfffffffe)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400000, 0x0)
recvfrom$inet6(r6, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff})
r8 = accept4(r5, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000080)={<r9=>0xffffffffffffffff}, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6)
socket(0x1, 0x2, 0x0)
sendmmsg(r10, &(0x7f0000005040)=[{{&(0x7f0000000180)=@xdp, 0x80, 0x0}}], 0x300, 0x0)
sendmsg$FOU_CMD_DEL(r9, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000cab540a6faed33dadda6d9b2194aa2b8e3bbf27dd631fb72d6e2a4e5e78a87021872edff55ca1580c87ccb59293e26feff01c9469afc811bccbcb391b4658a79bdf0476936915806eff8da148563720a907ff40cf1686b5850798ce487781b9d5d022eceb16ab963cfc9f8cebfbfacf418af3876ef696b488218d7", @ANYRES16, @ANYBLOB="000129bd7000ffdbdf250200000008e800004e23000014000700fe8000000000000000000000000000bb0400050008000800000000000000000000000108000b00"/78, @ANYRES32, @ANYBLOB="080003002f00000008000800ac1e010114000900fe80000000000000000000003269cc1909646a6066e3290be256cfb3199b58f2c7949daacfcde122b5862fe9b08b225265b725a139ba55138e62fe3bafb5eb0205cfa64963190704af380cbd8259f24e200cdb81f1a2787aeffb678473964bbafe0692f14119176b0000008aa3ae3acdaf59eb181abb2f815e081b9af74ebef50ca481eb4e2d871ad7b632f0767497f6185ec7bede51ff57bba2b1c8319a209caf615c8ea9e389f8548d1cced4880e8561e7cabe3107097800dbf62f8c227d03ccf43188d3bbb89cffa8deb4b93a9bf24e7fd85cdb434f4ec2309ad1251350febf72cd8cd58e91f98687a94ac7473a5c0ae06f809a3c1db9b089ebc89ece74ead6bbbfa68a978c3565070de1"], 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[  142.351979] device lo entered promiscuous mode
[  142.363528] binder: 6386:6390 transaction failed 29189/-22, size 0-0 line 3014
[  142.371411] device lo entered promiscuous mode
[  142.375103] binder: 6382:6383 ioctl 4020940d 20000040 returned -22
[  142.375742] binder: 6382:6383 transaction failed 29201/-1, size 0-0 line 3022
[  142.376732] binder: undelivered TRANSACTION_ERROR: 29201
[  142.382241] binder: undelivered TRANSACTION_ERROR: 29189
00:08:55 executing program 0:
syz_open_dev$binderN(&(0x7f0000000040)='/de\xf9\xff\x01\x00nder#\x00', 0x0, 0x800)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})

[  142.411945] binder: 6382:6383 ioctl 4020940d 20000040 returned -22
[  142.420189] binder: 6382:6393 transaction failed 29201/-1, size 0-0 line 3022
[  142.444488] binder: undelivered TRANSACTION_ERROR: 29201
00:08:55 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0)
write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "a4695c532a8840cd6fab5414a4526f2c79702ae7d3c6501814b0f7c64161e134364c387ed362863f529d0903deef786d215310eaa4c13c41250db8794e3f0bf1be5e5d1aac357c8b6d3f43c2219de07cd2219aa3c3f251252b86ebd758fdaf0e156ad88b2e624d1e405363aebe4aa0f31ce7f0e51706273ea3b7c2cbd7d77d314a4adb25485c5e5bde9b998ae95c0581836fa841e241749ca8b55b9c4705c4a8714bd7165f7d0999adb658a9507fa64c7a41e58fc346dca457710f13e9699b0e175c7523b55aa74a54e6cccfb463a2d6a89451f85ebd962b042418e5cc266abd4f41bad18eb2639379b55aaf6e89d92d01bfd995274711f8e72094b45a4b79b0995e38b28f6633237f105a7ec050896f833de886c1d31e3c14f48ba185043d7f3ee7231fbfd2cbd31ef3454027c26940714dca40c74dda73812edb9d2adc7354ce2633aeeadbc6c14e169d994d7ac1b68043fc1b3727b2f96706da8c3f3b3771d5beba69188fca57852785f46cb373c19a3374d8c041f92ab3820d2a1eb525237cce0f7a99e0c66cf681e7ea950e062cfaf0e8d8d834da0443703ea2b63568d29cd2d7199b6ef6784e0dc8a8979841d4ddea77b998619e8eae45a9ea9bb1464ad2aa2df228e60a65b5e83ad369bc367b69a8207d8f0904b4c389c973ec705b73b666e2f298d10f57f098ed0af810231358dd151ea5bc03675bf1c9fe6ac570ad628152c8a2b8570d849c8a0460b617fabda499cd10aa0e366b8320e14b1bec56c6a96165d23b9806c0c4f86d2d4677a95a6c0e627aae99c235b06bf1432e7c81dd827e43fff9ecd24f7531ca4cfacf478f66ed764fcf53d773f4b9abe8185a661fdc9727a478f422a4bb1a7edeaf68b1e2ffa68e3068a7de077cedc7554de7a90dd2b2483a47814cc7bc85eb1a972246778db8b33bd522ec79aefa3529a000c58b570b940e55c0484386325f4097b13bf337759b0bec9321fe39e521a546a7563eb675a61ce680dee112f368343ca56332c28f44f95024ae1d77b411abe6ed80c645ce69daee65e2505d13b2d0f2f1dfe35ea7c5340c6eb70c4c34350fbcb9945e2ff4759baf55b01db49b1a7d1011eaee4811150e7f5caf7e93b0746efbc52f5733c74e27b8f4631d3852d544eef295eb18a2bf2369679c2bd9a9c5939803c6ea153d9c15dd4112789060da7b1d5b7e41b718a68a10f1d4f3e3298c16c5ab69a6c7187ddc82f2d3e8cd737afb7187dea3076359fac2b40917305d9f831b2ea698051f6560fc3cc6d24dbd148abe8e58f7d8127a9615ba027aa35aafc88debf06dab3ca38e01977102164747b0eb568009887342bbc14e274e1d12729b770887f9aea18d2ad6441849842d51d41907428ab28e36e815103360ef3c121d5a602231413d2825c0bc1a2f04614920b113e871ae1da79eb4f3a8528effc9e738c48eb2ba7843332b85bcc4d4f4cbce5090967fd6e88cd63a3d03f5c79f36ccc45be3941b3b39fb19e51298b8671930a5772ed878b057572b6db8ece6ac3f46a062a8fccd0a3b9133c0573419e3a2d5b7ab5ca40033e35918449d04428ecb9febcabeff937fba5ee21e75707de789432ec0680d3f952927ebb85e5609aebf96e8c84d88056d369493c875ce0f9e8ae5fac48912a7689914f9be71773d3f004306406cdb761c127382e70a77ac6da6aa98d57a575b218b72e2d90a66bcc130600b52765da0b017bab0e3f3e3689cf1220329ea86a03cd2f6d2b54c95364c839ebbc315153dfbc97d6961d7f0e6db56a93fa1d7afeaf479fe47ac35c92a398be921769f3f7c422cfd5ffc372f85ee3f619974b8c627568430c64d84f6aaf69a1276a7cf4cf57c057257181f15e82fd37271278da6235f34891fc702894cca12001e263d74a6e18a45bc0ebd1600987c3237804507a4923f4700ebcca3684ef35f8e4c0a8b9875cf92aec862519f5c0cdcb1d5b90710a88d39bb919c0820f25685085d179bd48ebce21c4ed697a9def3ad887eb4652ac5919ffb2ff34e78d53123e9c1ae9e50447d77560c3702d818ba1e9f848123f31ca6236457daeda138846b55017b426fd8fe0e65b5c1d8d936bda2e7e9f67ec0faaada6ebafb2440071f0c50aac2f0a5059dce32998799524bd6412c13bbee27b891de386bdc7b4a96a3e495300e82ec8d837b95b9af4b1171ea7640a27f27b3befeed4b864b5442f889b769206d6767b5815a74df960824fbcab31ab93281db2b651a838b790e52fb4c2ed29358cfe44c85f5453af706eb96ebc3140697eb914e803f3965614c15ca7fb5f6c632007fe7c56acdbdb0a197341d44f024cbe174244c0acfb1bd29f0d628d037956ad4434aa3a71ecd29556f3a23fbfc3735904c2ce5e84fd53bbc43e924940f307a81706556c45f53630c311aaae9ce4565aed2339d95bbf3107a90a3b8a6e95e8415a2ae7b8841dac758d52b7bb22cbe0ebad79900e9c7c40cca8799cca66b3571fbecf68e3ea2e3880bc2cbed1ad1dabd69593e1a968da410c5d8538fdc8199ee310a3a2b14c642e388e9f1413bb90f876aa478006554a01f6b0d41d2f5c8b7ff20d7cb79afd13f6ab3f1331a8de154a60da33aac5310c174cd54a79985772fce707da4a9ce7c5b7b60e9a9a58cd0aa4343c45d4acca17b04214076800d3ab346142ebe4bdf3c7094e73a552b1929af8c5a5603188cb751b35a98314694ecbf71c05e7997a322eec7a659c44899f7c53c8d3477d3c36f21577620813b41223aabdc72d772a2f60deb3b55bf1b5c1455371f14b0ad57af2cf6cc5b25793935d9d1fe24a2c54b5d1e45b0d69c7f697ba26595bd30e8361adee3e84b2bb08410435ae348947b1c389d5bb5a97b4654241f9b9bc07d968a6d963200e0f4eed7dc80780dadd6b570a2c5a6e9dd93712e6103bce24db15d906ba03085c06d5d963d3452f742a386661b1679f9a2cae3b9debf35c01a82a5e869cc63aabb113f6a37a3454b134108dfec975ac6192be9c699321ef5280e82e13a58d6c6f68d8d3abcde2d2fd047d8e08650c715932bedc0afbadbfad32dab976687c4d7dfc40d95399716f410d75e8d6b4e5ad85562e5604d1e414cecc3941b2e9cfd1aa2a6f31b2d509420dab96d19fe6627420c0c454f48b9263d2af216ab0858590005d57412234755b706da1a7a145fce8e007969695d00bb462270ac95fd1b483686ff6db7ffe576a8df61d80604443452236e27adbb46d4a70f2e7ccbf1735a9e9fce0f56859fa00c011742f5ded1a3631a8addbd1c412f4b404a6c7164b33f378c95395b8ce6185f90c93a9f6b33f905b03c2089554bef2991428d4d2b27e001926e714eef50ba21b7a9c048cbf2d72576a82b1145f40c9e8a2dd79684fd5c3319a8076b5f88632930542348241ee0c0b737c9474a4448d2a7d1ad2d81a5bcd4566520b678aedbb3c54cdc7dd6d03bb60af951eee9dfa5b92ebd2b6e4edf1cae7feee75c901b8fbef195921076aafce7c34732c3c67093587e25860e94028768b98c1980038fce54fb76d2531b9c3f945630ee9ec1afa2acba1e66d2ccc8b966c0470d5528cfc119c0ba14cf84c5c2a2fbcf99657c3c73ab20b32547275bba54d45eaf49e86622467e82d173d8dcaeaf5eba2a24abbdbeb5bcae6ff222d49eff8994c31297ee3f53ed0595ca90aa6315d30cffb5fdf27bd68f78ff547d4e1b443161c130cdb02f38bd0c5fc5eb86dc8a7cd9c3956d8aec7b9f4d342edffef3b819657f0891be01b974409e7a5b2ae63ac68bd7696e1b6ab1da8ee48ee955a3a12d14ce067c9c3c8b752e37c843fa9f5e9f3a1fff75ad6ff6366b34464a397bf6c74a6488912f2bb8fb379d1806a9a635d969b5818eaf11b7cd7377cc684d71f3745082efa2f49f64a057050c5f5c171b93a64dc93bdf89a181a70d38dae0731e5863c62735d7a4b28419abd22126a00fc9a5a75a74691caddc54d5426b81df6448efebc6b5105c4d648dcc23ae4f9ec7611aaef8030ea44d38952dd9cb32ddb484d3cd4e6b0174c58fd7288352f1639f78f2fd2113523462c4999a92e5d9e0ea1541c3ff9b749b5a37687f0499b1a13fb2590f7c76a1573f673ad8503845257c588c3049350e97ed93e24312ff82620d42f7229c4ac1094203e0b2022e9a6173d000e7644f867bfb7a142d4fc2e35a54de4e9e23516cc5cdce027b62ef24fc32cd10890e4f2fcf26a0f7b40039225ff19ff35ba97d9ecdb6e6d2cd211663dcc0dee1d41409f2d8410bf0bc9ceb490d292a3d97cc34ebc647354d8487b21c306e80b45dc57816924fee5e24e30915967e18a952b007da91d270af88fab23dd420fdb102387503280d436f644ced6868a2ab7ab2b1374969db72ea9c612636b858547a9bb187d2639fc30be948760bc634e572718efd0dad2fe4f6aaf44b0c5823e6854726f1d46bf41dd8691e58a77bdcb9afa63f3b0e1fbb0e5cafa7605406769d62a3f7e399e7d6c138adb02de7f4843783b0dc06f4c4539b02d565e79e81eba20609ba8a8914f74899ab42ac92b03580cfb5e457ca5d0b747a69ab9edd278cb59f7e6bd381a483d92dc866e9ccaf780b91a6f6993bab6f73d52593fe2cda79561ffbed677f5742f7844d284cfd9da34cb64b423073a4b3cff07fa6f18eea3a3ef843146870763c766d16c782517acfa89fb3d273e70dc8ba22a56f1d840c5dc87c31e4df33938c0a0dc78ea35872ae89b23290e786baf581ba3bcd995e5bddf22e6a54a6d6ae093278f6fbbd3e514cfea144d6901073e547d143c329ea2a1f97ab9aa766a2c0324890c8cb1aec1b21c88edfbb8f0d814848f31bd4a0370cc3cba4765c50975c8349da805df6fe1b67904b5aa70687e61f6bef1179e30a9b795704d11bdd7aba532bc48528574a3dfadd9f281c0cbfecd991e32c901b8d7cc57744ce5158f2259473f37e025c3f1ddae6c51cf50c2bc10bbdb17d01ac0f4807043cdadb0530283e52b6e82516603a1d7079bb45ae71c15b23a9877bc2ae706da4331b9ac9ab6e1ec8fd4041894ce2c989dc1c95802e3d443ff2cf05ec7e8348df32ae0202420dadbf6e23de917c76ab512426af82adea7a5fd72fdef2801851905ec73b83bfc8c6e63e572616a687851b8afa9e3f6c1ee357b6ffa917eeacd1005c67bced235f61436cb44dd9bf6842c8ea5ba281f77531e1d08a7a09ef0c19d2cac655bfb81ac4b7ad40083d09d9b83e7d56ada5b972cf6ee53ca693af576fe22cfde1796927aa2b54378884a93e80ecc992cf298ba99e4ad5b9d135af6e237f24c519f078b30ab1fa028438976935751d840a6078ad33f1229adf5663b5ba3c8abcff8ff30183446a62aae8a0937f8bb418e0d0c984c441271ccfc3984cdc23793346cfc36809f5ceec330e73e4f13d5a17726526b6e39931a8de1fb1d998680747f01724b117710759b9d29bf68fda8529473eaeb28182e502220a6bf5cdca4c118d2edaefe1ffac007bdb8f246407dba1f7ae277298b765e448b501e1c57e5f9e620fb6a894506d7e81fa92bd5571b32edaa3fbeb1a84e9dbd2d2e61d31bfface3ad615837f3fa95f2ed37c9e96cc045baedb79ad9c7ff37bd96798e6cce6a8d2fc8453c3a44865e1fae5e5fb551126038ef2ed4f6f7b6e186072aec9d62b8670f972eabdf12f13a1d3be51d037b25ee0552772c1fcfecccfa2bb445a34daeb79d4a1bcfbf70e718091dd72ca46069731c38775136d7256e445b58419ea845dd0f65a8a1daf88c750731a0092297c4c964005bc9cf9ec215f07c18a395b350cab70658bbb", 0xfffffffffffffdd1}, 0xfffffe48)
sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007)
mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0)
pipe(&(0x7f0000000340)={<r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r9, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r9, &(0x7f0000007fc0), 0x400000000000068, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, 0x0, 0x0)
connect$inet(r10, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r10, &(0x7f0000007fc0), 0x400000000000068, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r11, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r11, &(0x7f0000007fc0), 0x400000000000068, 0x0)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r12, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r13, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r13, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r13, &(0x7f0000007fc0), 0x400000000000068, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000480)=ANY=[@ANYPTR, @ANYPTR, @ANYRES32=0x0, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESDEC=r7, @ANYRES16], @ANYRESHEX, @ANYRESDEC=r8, @ANYRES32=0x0, @ANYRESOCT=r6, @ANYRESOCT=r10, @ANYRES32=r11, @ANYRES64=r12, @ANYRESHEX=r13], @ANYRES16=0x0, @ANYRESOCT=r7, @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYRES32=r9, @ANYRES64, @ANYRES64=0x0, @ANYPTR, @ANYPTR64], @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRESDEC=0x0, @ANYRES16]], @ANYRESDEC, @ANYRESHEX], 0x2e)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x4, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100)
recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000)

00:08:55 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000001000"/68], 0x0, 0x0, 0x0})
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x40)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
getpid()
ptrace$cont(0x7, r1, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00')
ioctl$TCSBRKP(r2, 0x5425, 0xb33)

00:08:55 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff000000000000000000000081508cbc1e6ce68dfda6"], 0x0, 0x0, 0x0})

[  142.536533] binder: 6408:6411 unknown command 268435456
[  142.542856] binder: 6408:6411 ioctl c0306201 20000140 returned -22
[  142.626566] binder: 6412:6414 transaction failed 29201/-1, size 0-0 line 3022
[  142.663724] binder: undelivered TRANSACTION_ERROR: 29201
00:08:55 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$RTC_UIE_OFF(r1, 0x7004)
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0), 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffd07, 0x0, &(0x7f00000001c0), 0x2c9, 0x0, 0x0})

[  142.681684] binder: 6412:6416 transaction failed 29201/-1, size 0-0 line 3022
[  142.695678] device lo left promiscuous mode
[  142.702432] device lo left promiscuous mode
[  142.703650] binder: undelivered TRANSACTION_ERROR: 29201
00:08:55 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10ac836cb6c9cc74}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@mcast2}}, 0xe8)
sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0)
openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0)

[  142.732554] device lo left promiscuous mode
[  142.740363] binder: 6417:6418 ioctl c0306201 20000040 returned -14
[  142.828204] Dead loop on virtual device ip6_vti0, fix it urgently!
[  142.866436] Dead loop on virtual device ip6_vti0, fix it urgently!
[  142.900119] Dead loop on virtual device ip6_vti0, fix it urgently!
[  142.929938] Dead loop on virtual device ip6_vti0, fix it urgently!
[  142.953005] Dead loop on virtual device ip6_vti0, fix it urgently!
[  142.989503] Dead loop on virtual device ip6_vti0, fix it urgently!
00:08:56 executing program 3:
r0 = syz_open_procfs(0x0, 0x0)
clone(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
clock_gettime(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000001200))
add_key$user(&(0x7f0000001100)='user\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0xfffffffffffffe2b, 0xfffffffffffffffb)
prctl$PR_GET_TIMERSLACK(0x1e)
pipe(0x0)
keyctl$search(0xa, 0x0, &(0x7f0000001080)='cifs.idmap\x00', &(0x7f0000001180)={'syz', 0x3}, 0x0)
mknod$loop(0x0, 0x0, 0xffffffffffffffff)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
keyctl$session_to_parent(0x12)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x5e2)
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$VT_ACTIVATE(r1, 0x5606, 0x0)

00:08:56 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0)
fchdir(r0)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000240)={0x9, 0x20})
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x16c, r1, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc98e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe34}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x1e}, 0x56b}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0)
setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcp_etc_t:s0\x00', 0x20, 0x1)
r3 = socket(0x100000000011, 0x2, 0x0)
bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
dup(r3)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000280)={r4, 0x1, 0x6, @remote}, 0x10)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008})
r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
write$FUSE_LK(r5, &(0x7f0000000040)={0x28}, 0x28)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30}, 0xb0b8)

00:08:56 executing program 4:
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/create\x00', 0x2, 0x0)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000000)
inotify_init()
unlink(&(0x7f0000000040)='./file0\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
close(r0)

00:08:56 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1})
syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x40)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x5, 0x7fff, 0x3, 0x8, 0x3a, 0x1ff})
syz_open_dev$binderN(&(0x7f0000000000)='/der#\x00', 0x0, 0x1)

00:08:56 executing program 1:
pipe(&(0x7f0000000640)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000080)=0xc6c, 0x4)
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000740), 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x800, @local}, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000780)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x80)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68)
r3 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000180)={'HL\x00'}, &(0x7f0000000300)=0x1e)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0)
getsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, &(0x7f0000000140))
sendmsg(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000580)={'broute\x00', 0x0, 0x4, 0x6b, [], 0x9, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400)=""/107}, &(0x7f0000000600)=0x78)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r5)
r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r6, 0x2008200)
r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x8000fffffffe)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'syzkaller1\x00', 0x1}, 0x18)
r8 = open(&(0x7f0000000080)='./bus\x00', 0xa402, 0x0)
fallocate(r8, 0x8, 0x0, 0x10000)
write$P9_RVERSION(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="5565c9fe87813440bfc56b82948d2246b398dc849b64454721a7812f55c2cc60d2bf5b918642660cf00c7a8595a18b2d719142b879398b60216e5414db8d0b14000000000000000000000000f30f4ac29fff45bfe0a518119bba334ad838ff482c3b298dca3f4915e68be4318b46552351437f20487b2b6d1dbd7fbd8351f429e2e8160801a50aed915c37e982ff762836446dad440b0c"], 0x97)

[  143.355436] audit_printk_skb: 51 callbacks suppressed
[  143.367864] audit: type=1400 audit(1571789336.115:190): avc:  denied  { create } for  pid=6431 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
00:08:56 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="3981ae889d3bba709972b6cc1fc3971dfd186d42c68f2303be62761566375fd4dab57149e8924ed716eb5c0064bf4164fea3f03482483a179ffacab224a8d895ed93644aa81757741837b0c8cb160a577374d3b247583126a51c57f160152c5f2cc8a9b8b18a62de97a137d714e33738666bb68391b53a4f37281a878e479f3497050000003fdac23e8c5dbae4d4e5df426139859702accd223d15410752e397877d679d345acb028a6ba83da79ca75e86ec5feface1b06782b4120518be06e9a8050e5c0d8c91361caed0366b3f28efe155d5628ef1e2e1c8b88949c49cc5e8edc6", 0xe0}], 0x10000171, 0x1)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe44, 0x0}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x18)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x40000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
accept$unix(r1, &(0x7f0000000100), &(0x7f0000000180)=0x6e)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r4, r3)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000340)=0xc)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ptrace$cont(0x9, r0, 0x0, 0x0)

00:08:56 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r3 = dup(r2)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000001c0)="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")
socket(0x100000000011, 0x4, 0x0)
r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000a80), &(0x7f0000000b00)=0x6e, 0x800)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0)
bind(r4, &(0x7f0000000140)=@generic={0x0, "00001900000000000800449452922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee342b76795000b0000000000000101013c5811039e15775027d6c666fd792b1b0e5b00000000000049740000000000020006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x40)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r5, 0x0, 0x0)
sched_getaffinity(r5, 0x8, &(0x7f0000000040))
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x4c81, 0xfffffffffffffffe)

[  143.374752] audit: type=1400 audit(1571789336.135:191): avc:  denied  { call } for  pid=6432 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  143.374811] binder: 6432:6440 transaction failed 29201/-1, size 0-0 line 3022
[  143.376007] binder: undelivered TRANSACTION_ERROR: 29201
[  143.422070] audit: type=1400 audit(1571789336.185:192): avc:  denied  { create } for  pid=6406 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  143.511855] audit: type=1400 audit(1571789336.265:193): avc:  denied  { call } for  pid=6432 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  143.558116] audit: type=1400 audit(1571789336.325:194): avc:  denied  { create } for  pid=6433 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  143.586951] device lo entered promiscuous mode
[  143.659925] binder: 6432:6444 transaction failed 29201/-1, size 0-0 line 3022
[  143.687526] binder: undelivered TRANSACTION_ERROR: 29201
00:08:56 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/net/\x01\x04\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0x21000000802})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}})
socket$inet6(0xa, 0x800, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r4}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000080))
dup3(r3, r1, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, r5)
ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f0000000100))

00:08:56 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r2, 0x208200)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffd)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000480))
r4 = eventfd2(0x0, 0x0)
fcntl$getownex(r4, 0x10, &(0x7f0000000000))
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x1, 0x6}, 0x100010014, 0x0, 0x0, 0x442, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffff}}, 0xa0)
pipe(&(0x7f0000000640)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet6_int(r6, 0x29, 0x0, 0x0, 0x0)
read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000680))
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000000440))
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000400)='security.capability\x00', &(0x7f00000005c0)=@v3={0x3000000, [{0x8, 0x1}, {0x6e, 0x71f40d98}]}, 0x18, 0x2)
fstat(0xffffffffffffffff, &(0x7f0000000680))
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000005, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000140)={0x4928ea0bf7aed503, 'eql\x00'}, 0x18)
r7 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0)
r8 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
syncfs(r1)
r9 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
ftruncate(r9, 0x280080)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000100)={0x0, r8})

00:08:56 executing program 4:
open(0x0, 0x0, 0x1c0)
syz_open_dev$loop(0x0, 0x0, 0x182)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
inotify_init()
fcntl$setstatus(r1, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
lseek(r1, 0x0, 0x2)
sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe)
writev(r1, &(0x7f0000000680), 0x0)
open(0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
socket$inet6(0xa, 0xa, 0x82)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0xa5cc554)

00:08:56 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)="71b9aee13c95014d19ccea56084569b58c0afeea4e52592776287931dbdeb9b343ea532670fbea8cd35e2c202f113b673295915e3c6df613e32f7b5f6e97f4cf647e10a4e56ffb3daae81ce4c77e9501ec23f53e7881fbd6472616909f976bfbeab02d00463a2c6a9d9bea894787b0", 0x6f, r0}, 0x68)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
fgetxattr(r0, &(0x7f0000000380)=@random={'security.', '/dev/binder#\x00'}, &(0x7f0000000500)=""/63, 0x3f)
ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000240))
socket$inet(0x2, 0x1, 0x3b)
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="96af10518c48a9a142d15672d0731edbe7d6de8050726818ffcff5b61e97c2c1d2f84a5cc7da600d10b4b79bb8aa64f91b030edddc804333752505ef43056c7217332e5d26d11591547ef4054b617026ea7d6c75260e22113b50ecddf68b91648ee6d3d9f4c400c427a093cdcf83e26b4bff072a42e60e2fcb571982a7304163cd40c73167d0661438270fef05c3e12d0cabcce336e9bcd3203fc1d8793f79594694f2cca1019d8b15f05d7b10b1b100fb8e187ecdc4e822f5e84ffacde19d8975ebbb0acdfa278401400249ef1f"], 0x273, 0x0, 0x0})
r4 = creat(&(0x7f0000000340)='./file0\x00', 0x18)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000400)={{0x0, 0x3, 0x5, 0x2, 0x4557}, 0x4, 0x5, 'id1\x00', 'timer0\x00', 0x0, 0x57cd8d28, 0x3, 0x400, 0x9})
eventfd2(0x5, 0x1800)

[  143.796048] device lo left promiscuous mode
00:08:56 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0)
fchdir(r0)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000240)={0x9, 0x20})
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x16c, r1, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc98e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe34}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x1e}, 0x56b}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0)
setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcp_etc_t:s0\x00', 0x20, 0x1)
r3 = socket(0x100000000011, 0x2, 0x0)
bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
dup(r3)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000280)={r4, 0x1, 0x6, @remote}, 0x10)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008})
r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
write$FUSE_LK(r5, &(0x7f0000000040)={0x28}, 0x28)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30}, 0xb0b8)

00:08:56 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4822af20576d8985, 0x0)
r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x8122)
fallocate(r2, 0x3, 0x0, 0xfff9)
write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x198)
fallocate(r1, 0x11, 0x0, 0x8002)

[  143.909102] audit: type=1400 audit(1571789336.675:195): avc:  denied  { create } for  pid=6490 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  143.978826] device lo entered promiscuous mode
00:08:56 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='\x03\x00\x00\xf0?\x00\x00\x00\x00\ns\x91\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="400000000000000000000000000000000000000000000000004f18215e6705b589000000000000000000000000000000400000000000000000"], 0x0, 0x0, 0x0})

00:08:56 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r4}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xcaa38d6b51fd4db2)
fcntl$dupfd(r4, 0xa1df896b0ca3c30c, r5)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x0, 0xf4843e577662b68f, 0x81, 0x1, 0x1}})

00:08:56 executing program 2:
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, <r3=>r2})
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000200)=0x1)
write(r1, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffee8}], 0x1000000000000043, 0x2)
preadv(0xffffffffffffffff, &(0x7f0000000700), 0x31f, 0x10400003)
clock_gettime(0x0, &(0x7f0000000140)={<r4=>0x0, <r5=>0x0})
select(0x40, &(0x7f0000000040)={0x1f, 0x6, 0x0, 0x0, 0x9265, 0x0, 0x2, 0x7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800, 0x3f, 0x8001, 0x9, 0x1}, 0xfffffffffffffffd, &(0x7f0000000180)={r4, r5/1000+10000})
keyctl$get_security(0x11, 0x0, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
preadv(r1, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000003c0)=""/147, 0x93}], 0x3, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080))
r6 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r7}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
r8 = dup3(r7, r3, 0x40000)
pipe(&(0x7f00000001c0)={<r9=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r11, r10)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000380)=0x10)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r12, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r12, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r9, 0x0, r12, 0x0, 0x30005, 0x0)
r13 = syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r9, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x21000020}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r13, 0x300, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x4048801)
sendmsg$NET_DM_CMD_STOP(r8, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x14, r13, 0x10, 0x1070bd28, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0)

[  144.174535] audit: type=1400 audit(1571789336.935:196): avc:  denied  { create } for  pid=6433 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  144.250345] audit: type=1400 audit(1571789337.015:197): avc:  denied  { call } for  pid=6514 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  144.290506] device lo left promiscuous mode
[  144.331310] binder: 6514:6519 transaction failed 29201/-1, size 0-0 line 3022
[  144.352186] audit: type=1400 audit(1571789337.115:198): avc:  denied  { create } for  pid=6517 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  144.366092] binder: undelivered TRANSACTION_ERROR: 29201
00:08:57 executing program 1:
r0 = socket$inet(0x10, 0x3, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="dd"], 0x1}}, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0x340)

00:08:57 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0)
seccomp(0x0, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x0, 0x0, 0x20}, {0x0, 0x0, 0x9}]})
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fsync(r1)
ioctl$KDSETLED(r2, 0x4b32, 0x1)
fcntl$setstatus(r2, 0x4, 0x40000)
io_setup(0x2, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000140)="73844ae89d", 0x5}])

00:08:57 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = syz_open_pts(0xffffffffffffffff, 0x240002)
ioctl$KDSETMODE(r1, 0x4b3a, 0x1)

00:08:57 executing program 4:
r0 = gettid()
accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0x80)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480))
sched_rr_get_interval(r0, &(0x7f0000001500))
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x20021, 0x0, 0x677, 0x6, 0x4, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x400)
r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f)
fchdir(r1)
sched_rr_get_interval(r0, &(0x7f0000000040))
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0))
r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2)
mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffefffffffffd)
r4 = accept4(r1, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0xd, 0x80000)
recvfrom$inet(r4, &(0x7f0000001280)=""/53, 0x35, 0x40000000, &(0x7f0000001300)={0x2, 0x4e22, @rand_addr=0x2}, 0x10)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0)
socket$inet6(0xa, 0x5, 0x406)
connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x70, 0x3, r0})
capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401})
ioctl$RTC_VL_CLR(r4, 0x7014)
chroot(&(0x7f00000000c0)='./file0\x00')
getdents64(r3, &(0x7f0000000180)=""/4096, 0x1000)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0)
inotify_init1(0x0)
ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f0000000080)=""/11)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
fchmod(r2, 0x800000100000024)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5)

[  144.518630] audit: type=1400 audit(1571789337.285:199): avc:  denied  { call } for  pid=6532 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  144.550716] binder: 6532:6534 transaction failed 29201/-1, size 0-0 line 3022
[  144.561132] binder: undelivered TRANSACTION_ERROR: 29201
00:08:57 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1<i\x9a:\xdd\v*;\x86\x0e\xa1\xe6\x0f\xbcHe\xc4\xcf\x9e\"\x01%o\xf6\x92\xbc\xe2\x13\xc6~\x10\xab\x80|:\xb7\xe2`E\xb9\xd4\xe6\xfe&I\xbb)\xe8\xbc: N\x86\a\x14\xd6z\x1c(\xb9\xf9\xc9JO6\"\xb0\xdc]\xdf)@u\xc6\xf72\x95y\xf7\xbd\xc3\x9e\xb0\xb7\xf7\x8c\x88\xc1\x94\x00\xaa\x1a\xb7kF\xde&^\x15&0\xbd\r\xe8\x92WR\xcc\xcc\x18\xd9\xa6A>T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x68)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x3f, 0x7fff)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x800006, 0x11, r3, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x9a})
symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r7, &(0x7f0000000000)='threaded\x00', 0x2f5fa26)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
fsetxattr$system_posix_acl(r7, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r8, @ANYBLOB="040080000000000010000700000000002000010000000000"], 0x2c, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup2(r10, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r12=>0x0}, &(0x7f00000001c0)=0xc)
chown(&(0x7f0000000000)='./bus\x00', r8, r12)
r13 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
sendfile(r1, r13, 0x0, 0x8000fffffffa)

00:08:57 executing program 5:
mknod(&(0x7f00000001c0)='./file0\x00', 0x200001040, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
write$FUSE_OPEN(r1, &(0x7f0000000140)={0x20, 0x0, 0x3}, 0x20)
r2 = gettid()
creat(&(0x7f0000000100)='./file0\x00', 0x80)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xc2)
recvfrom$unix(r5, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x0)
openat$cgroup(r6, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r7}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
fcntl$setown(r7, 0x8, r2)
fcntl$setsig(r4, 0xa, 0x12)
dup2(r4, r5)
tkill(r2, 0x16)

[  144.569031] binder: 6532:6541 transaction failed 29201/-1, size 0-0 line 3022
[  144.577169] binder: undelivered TRANSACTION_ERROR: 29201
00:08:57 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

00:08:57 executing program 0:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
sendfile(r0, r1, &(0x7f0000000040), 0x6)
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:57 executing program 1:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = syz_open_pts(0xffffffffffffffff, 0x240002)
ioctl$KDSETMODE(r1, 0x4b3a, 0x1)

00:08:57 executing program 1:
perf_event_open(&(0x7f0000940000)={0x2, 0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x18000)
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x76}}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0)
ioctl$VT_RELDISP(r3, 0x5605)
open(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0)
r4 = socket(0x11, 0x2, 0x0)
setsockopt(r4, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
r7 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @loopback}, @in=@initdev}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendfile(r2, r6, &(0x7f0000000040), 0x9)
close(r4)
accept4$packet(r4, 0x0, &(0x7f0000000000), 0x800)

[  144.697002] binder: 6552:6556 transaction failed 29201/-1, size 0-0 line 3022
[  144.699249] binder: 6555:6558 transaction failed 29189/-22, size 0-0 line 3014
[  144.712007] binder: undelivered TRANSACTION_ERROR: 29189
00:08:57 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

[  144.752015] binder: undelivered TRANSACTION_ERROR: 29201
00:08:57 executing program 2:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x2d6}, 0x1, 0x0, 0x0, 0x40020001}, 0x24000000)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0)
open(0x0, 0x475100, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100))
fcntl$setstatus(r2, 0x4, 0x6100)
pipe(&(0x7f0000000540)={<r3=>0xffffffffffffffff})
fcntl$getflags(0xffffffffffffffff, 0xe)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r4, 0x0, 0x8000fffffffe)
writev(r2, &(0x7f0000000800)=[{&(0x7f0000000740)="072c1fb5ee415fd908429e9757bd25e49444e22afe2cc6d10dbb75b00146d915d5eeec29af419f866c789a1dd1107840f5226011a4c236d1a0f3d4411208e97891e83f460c33ce14d985b9fd5a6e5986e9faee22e96df6e90d055124695366ac1786e9b824610efad69a618b9bf2e236a81356b7d379d8f3ff0aafa43cdf5cab97226891d154a3b68dc7dd", 0x8b}], 0x1)
r5 = memfd_create(&(0x7f00000003c0)='u', 0x0)
pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r5)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"])
r6 = memfd_create(&(0x7f0000000040)='u', 0x0)
dup(r6)
sendfile(r2, r4, 0x0, 0xa5cc554)

00:08:57 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ae, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:08:57 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

00:08:57 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x100, 0x10)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x44c4897b0c069fa, 0x0, 0x0, 0xb2, 0x0, &(0x7f00000005c0)="31f019a27b817b43520c8bdd3bd4fefa912137480518e96e55db661de4021f58b1e004b522d500971bbb72acc8c0e23ac4fc0894d9a857a4c900dbcd017c2f3424dcd4ae2c323363373d2ae0a69c3c7d8d77a47f8726ffad5e3aaba678f13187bf4aa972d0828b048066e85b6be2e94f42cfbf600b677369ee3035800d"})
r4 = gettid()
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000480))
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
tkill(r4, 0x1000000000014)
execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r8}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x80, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x0, 0x36}, @flat=@binder={0x73622a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @request_death, @release={0x40046306, 0x3}], 0x21, 0x0, &(0x7f0000000340)="1eb0c891728783577c6095ea57486c253853aad178303fbf20c9e4278b93456bc1"})

00:08:57 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2a0080, 0x0)
write$P9_RCREATE(r0, &(0x7f0000000100)={0x18, 0x73, 0x1, {{0x10, 0x4, 0x6}, 0x4}}, 0x18)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f00000001c0)='^\x00', 0x1)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000200)=""/168, 0xa8}], 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup2(r3, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

00:08:57 executing program 4:
r0 = socket$inet(0x10, 0x4000000000003, 0x100000000006)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="24000000240007031dffeb946fa2830020200a00090003000f8ed3a78a14ff2f852f3b3c", 0x24}], 0x104}, 0x0)

[  145.060474] binder: 6577:6580 ioctl c0306201 0 returned -14
[  145.067262] binder: 6576:6578 transaction failed 29201/-1, size 430-0 line 3022
[  145.096140] binder: undelivered TRANSACTION_ERROR: 29201
[  145.103094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  145.106588] binder: 6576:6596 transaction failed 29201/-1, size 430-0 line 3022
[  145.106824] binder: undelivered TRANSACTION_ERROR: 29201
[  145.211852] binder: 6577:6601 ioctl c0306201 20000400 returned -14
00:09:00 executing program 5:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r1, r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4)

00:09:00 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})

00:09:00 executing program 1:
setrlimit(0x9, &(0x7f0000000000))
syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00')
clone(0x100000, 0x0, 0x0, 0x0, &(0x7f0000000080)="d353ff072d68b2e4dc14aa5fa8b3d94c22")

00:09:00 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_team\x00', 0x400})
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r2, 0x0, r3, 0x0, 0x30005, 0x0)
r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x25c98084}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x8, r4, 0x4, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048801)
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0xc40, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xe9d9f0f10e2f752c}, 0x100)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
dup2(r5, r0)

00:09:00 executing program 2:
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r1, &(0x7f0000000000)={0x11, 0x9, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
dup2(r0, r1)
gettid()
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
tkill(r2, 0x27)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

00:09:00 executing program 2:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0)
pipe(&(0x7f0000000840)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000280)={0x0, r2, 0x91, 0x0, 0x0, 0x5})
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x808}, 0xc, 0x0}, 0x20000004)
sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x8000)
syz_open_procfs(0x0, 0x0)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r5, 0x0)
keyctl$describe(0x6, r5, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r5)
r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r7, 0x0)
keyctl$describe(0x6, r7, 0x0, 0x0)
r8 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r7)
keyctl$unlink(0x9, r6, r8)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x14)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0)
setxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000400)='TRUE', 0x4, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r10 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r10, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080), 0x10)
sendto$inet6(r10, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198)
faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)

[  147.670785] binder: 6606:6613 transaction failed 29201/-1, size 0-6845471433603153920 line 3022
[  147.698930] binder: undelivered TRANSACTION_ERROR: 29201
00:09:00 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_MM(0x22, 0x0, &(0x7f0000ffc000/0x3000)=nil)
r2 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16F\x99\x02u\x9b\x94\x00'/24, 0x3)
write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67)
sendfile(r1, r2, &(0x7f0000000000), 0xffff)
fcntl$addseals(r2, 0x409, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup2(r6, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = gettid()
ptrace$setopts(0x4206, r8, 0x0, 0x0)
tkill(r8, 0x40)
ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r8, 0x0, 0x0)
r9 = getpgid(r8)
socketpair(0x31, 0x1000, 0x8, &(0x7f00000009c0)={<r10=>0xffffffffffffffff})
r11 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r12 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r12}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r12, 0x40046208, 0x0)
r13 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r13}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r13, 0x40046208, 0x0)
r14 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000037c0), 0x0, 0x2)
ioctl$BINDER_THREAD_EXIT(r14, 0x40046208, 0x0)
r15 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000a40)='/selinux/enforce\x00', 0x0, 0x0)
r16 = gettid()
ptrace$setopts(0x4206, r16, 0x0, 0x0)
tkill(r16, 0x40)
ptrace$setregs(0xd, r16, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r16, 0x0, 0x0)
r17 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r17, &(0x7f0000000000)='threaded\x00', 0x2f5fa26)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r18=>0x0})
fsetxattr$system_posix_acl(r17, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r18, @ANYBLOB="040080000000000010000700000000002000010000000000"], 0x2c, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r19=>0xffffffffffffffff})
r20 = socket$inet6_tcp(0xa, 0x1, 0x0)
r21 = dup2(r20, r19)
ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200)
getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0, <r22=>0x0}, &(0x7f0000000ac0)=0xc)
r23 = gettid()
ptrace$setopts(0x4206, r23, 0x0, 0x0)
tkill(r23, 0x40)
ptrace$setregs(0xd, r23, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r23, 0x0, 0x0)
r24 = getuid()
r25 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r25, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r25, 0x0, 0x0)
r26 = getuid()
sendmmsg(r25, &(0x7f00000092c0), 0x4ff, 0x0)
r27 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r27, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
bind$inet(r27, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r27, 0x5452, &(0x7f0000000300)=0x200)
connect$inet(r27, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r27, &(0x7f0000007fc0), 0x800001d, 0x0)
r28 = getgid()
pipe(&(0x7f0000000380)={<r29=>0xffffffffffffffff})
read(r29, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r29, 0x29, 0x20, 0x0, 0xfffffffffffffebd)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r30=>0xffffffffffffffff})
r31 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0)
fcntl$setlease(r31, 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000007c0)="44a434001dffe4f17339deff062fbc01a59a633db9c43af4009b1dcd152b61ec3783901da54644ce9b3e23e0f61fad2fc859202c84d56b196bd3f8aa2fb3f9200e283fcc98db216e0013b078c2688366d51d997b76ddf6675fd1cf6d9a919e9f0af2360674fe3f3204b65e091d57bd7360ac829b482bed863b80ac", 0x7b}, {&(0x7f0000000840)="72d70b46d2b4c16518e2e77e6f811fd1b1b6b0967e4d4a52e03ebad2539d6a2a8da46b61b6d495c73a194b47f25608f72078ca339a8fd13d81ed9273082d71325d89f3f4080700d1378ae3c12086bdc2c36ca478594205c988dbc13182416c7df0ac3254fbbe162580cc8fa08779990c2062b1a351080719dd7e281867debc12cb59e19bdad2228ead9daff40b63fd666878acd33541dc81edab6b461642eb711c3a9028ca141c59af626f78f0f0bbd0a6a4901c63b98692ab75c93e9e9cd18e538d3187f0ab4e706964c280e20f939e3a27a6e459cc0011e9c490", 0xdb}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r27, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r26, @ANYRES32=r28, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r29, @ANYRES32, @ANYRES32=r25, @ANYRES32=r30, @ANYRES32=r31, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES64, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x7d, 0x30000010}, 0x24e1)
r32 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r32, &(0x7f0000000000)='threaded\x00', 0x2f5fa26)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r33=>0x0})
fsetxattr$system_posix_acl(r32, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r33, @ANYBLOB="040080000000000010000700000000002000010000000000"], 0x2c, 0x0)
r34 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r34}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r34, 0x40046208, 0x0)
r35 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/net/tun\x00', 0x204500, 0x0)
r36 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r36}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r36, 0x40046208, 0x0)
r37 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/rtc0\x00', 0x880a00, 0x0)
r38 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r38}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r38, 0x40046208, 0x0)
r39 = signalfd4(0xffffffffffffffff, &(0x7f00000033c0)={0x9c}, 0x8, 0x800)
r40 = memfd_create(&(0x7f00000035c0)='\x00', 0x0)
r41 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r41}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r41, 0x40046208, 0x0)
r42 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r42}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r42, 0x40046208, 0x0)
r43 = socket$nl_route(0x10, 0x3, 0x0)
r44 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r44}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r44, 0x40046208, 0x0)
r45 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r45}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r45, 0x40046208, 0x0)
r46 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r47 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r47}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r47, 0x40046208, 0x0)
r48 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0), 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r48, 0x40046208, 0x0)
sendmmsg$unix(r7, &(0x7f0000003680)=[{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000000180)="f41d0b636d0fe8ec999427c76b", 0xd}, {&(0x7f00000001c0)="d474f915b99126b41426fa33141dbfdf4c5b5abd19fe0b89319ba8fd221c87d3e7b0b3ad53864e2ccc32782eda3530eabc046a42b9ec282b7b915ffe7560a1d35a16802a72e3668bdd640dc846e577ab160fe73d46eb599ddd4202bcb3cb7d66940aa5891b89bd9ac7562a93a530682b9ef30120e0b26ea5ea36281d5425803cbbef95bc59732f5d32b01aee76c42930829b023f2141d2ba2dd3538098a61ab25f1a2ef54f31b87c96ad4b7e1724e5ac90122cd38b312be10a521d73b71b", 0xbe}, {&(0x7f0000000280)="df7c139344ed1393349968069f038d2671e2f763e1fc826345f4d2b8855c0c7ec60a6fcc91a43cb88728bbe18d1324976708f6d49a69b7ed35dca3ddc5aa199d87254da58cbae5d2cb86aab7aa0f30c024a0106292b936e97bc64e0bc12b7850bcc6191dfc7385d958d065b681e5e66c062962849b1a66369a397376403ac209269ecf5f6b8c77bb8ad7172eff3f2f3627215af7467797aa5fbdde20333b5499c587206ba8a4164fe85dea786d3a12039be83bf046f9ca", 0xb7}, {&(0x7f0000000340)="a830a3b16b97f2e8acdede93b8c80267939d86f97b4a0a0be5331051c83b2077d04982d434572e8308b329b8fe585ac5bb0a2e7f964cec12cf1793d97ba66c945a18b8fd56ed976f2bfdd97cb96866435e4a848384a69328364f78b9be888c04c2d7e39ead4403e9dc5fe89f7c8b1f556ca2a277a013b52fa6c9551966e420bbbfada14c436f482e335e680cc4e5ea7753ca23c27380ef61926c3f86db74b58e10564cb83123a5ec65c1c7e7577b954755ea00b67157be1fff93149e6ba77a2a3ebcc9c08cbbc63e2e24b05451974922cf9d2b4d2fdf158a0bdf4757260be25143a755", 0xe3}, {&(0x7f0000000440)="303cdbeb1dfa8cbda592d1fbdf1388b0f383a11e7732d5b2f7e68006004022c3b7493cc23e73c5fddad4bedd618d6d6f0134a198070a0e492801dcf43f5a5491ca347ec9999b2e2d49e8beb5c02deb443f6bcaf40dc696405b167986879414a1f1762d59d42ea1d1d1ff3a8a81e49c49eeb84fde6b7f66ef91839884cac13f743b4f82a97fd5ec6fa27b7b860013214946420a1d32a3cd50dea0ee12bd54d7ba41ab7f", 0xa3}, {&(0x7f0000000500)="b0142f9ed2e3934ddc559b1bba648a4a1617025e2f6ec1d77953fd02f5d75a521a100d1d94b059dadea2069d5046be4a4a9d7068ffda460c3538612eeb90385057f2d0360bcccfed57f3c4bd13c88e67428673ed00954744eab7046230979a2d2af1918d09eeb6867d3944409e6ea553e30784f49d9327586344760da09d92fc0c2e825d9d02ece7ac28ec1acdd8dda5a960364d4afe182397940dd1930d257ec599213f2fdc346e907bb3252bc54031468eeb2708f1f115c7b0cb60d6729824157f9e468ee6c19a98af8a2d6674539f8f", 0xd1}, {&(0x7f0000000600)="30dd3cec7c8e329b972e712448695724211f7e450b497f208292fb47100ce673c4fd5a346b4fcc4ff634d531fc271599aa1c9254a1c3cc11c213b1fd781ca98ab78be1e93b74c5c61993e143b37c5b61a8b4f2457d0c7c33516d9119dba714cff4774e071ee28be2fc39e63ad56af2dc0ba152e620eb6807f7", 0x12}, {&(0x7f0000000680)="3477ae8fe3ac18125da021f71c7cd5524c2dfec6b82457bbc5d91897cf701d75a1df7fa2e355a6e7a92325a9016555fccf794ed9de9e4999af226376a0b53cfda48758c11966c278a273671a3f7d2c2e3cf38206ea764c4702ac1e19b0da654b8aa7ea65e685994811c0b78e1149bfccefeb20bd22e80579c5ba346c7f4da56dd60d651e4d8f26e35d50f8c6f0a4e7189c691a7456926baa5c7ec2d4349e38", 0x9f}], 0x9, 0x0, 0x0, 0x80}, {&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)="f4a428852b4678abba964304fb6c72573e8f2031b1a6f59339fa6b974152ce491ce31439707d332a2c15a4851347334400f3e5727531b9b85bffddd0437e887d229056f48b6f50652496002fdcb38ab30ae1efc8f629a16296", 0x59}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000000900)}, {&(0x7f0000000940)="a816eef680e8b41cd63395ea41a8953cc4e3086c46480b34946e1ab9842d4812f72354756f5d599a7f678678a2bc3f7a5f4a6e2945", 0x35}], 0x4, &(0x7f0000002c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r0, @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r1, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r18, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r23, @ANYRES32=r24, @ANYRES32=r28, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r33, @ANYRES32=0xee01, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r34, @ANYRES32, @ANYRES32=r35, @ANYBLOB="0000000014117540000000000100000001000000", @ANYRES32=r36, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r37, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x1808}, {&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003300)=[{&(0x7f0000000c00)="2c032f1d6b4e6d4e3bbbd5cc3b85e179b174e9770b790850c750cf8cc359cbcfb8ee980892", 0x25}, {&(0x7f0000002dc0)="2c06a1fb9cef8527a3addf44da03b5ddcf4d8d3ea099d5bf5be7102b6ba98b37443ca8978a70c3593affe56fb85597423e443109143cadbf7b700a4d233cd330ff13be60f459eeadbbd65bb59ccca2285880268d6f8f74a03933186f5ccc3eee9efad89382f2", 0x66}, {&(0x7f0000002e40)="737681df1a751263ae8785cc0b35ac31851a470e95ce532d0d6c8726fb403ebdcc5095e972b2fe77555c12cfaf1984602488ab93985000cfd972c1c014ea9b13db171f7afbffb6a601bf78994b7c877a49bef09339dbcd8a429f574a5fd932831d87c1fae7dfdb94617f4695a5df160936799ceda68a5f091efcb7511bbed875c26cdf7ccf30000eb75152c5d5184483", 0x90}, {&(0x7f0000002f00)="3b0397a2266ac1bd689368717ef82cba0572aff146e46deac996fccc06b14bed29e61f62da5424018548df3b0590fd2bfd64e539f6c836b72b2b9d58c17190d3c9952297e488f5b0188ee8aa9c355f3050aa82f81c9582ddc639c51cd5d55c175fad19adba5d011b1caf04aaa85b4e6e2c2b7e32f528e4d1cd8ad527ed55a72aa914189615ab1af4287c423aeeed68989560", 0x92}, {&(0x7f0000002fc0)="fdfab477f1052641bb4158bdb9633ed2aa8cbd570d9cd7191b87bcac3cdcb300a522402d41ec32bd6a366cfb27d5d47b92bec59b33ccc7e7f741179bc25445d4e3f927afee828d8f090871be5bf621abd562a01056c6f876071177b3610d1ee189c54f0b51451dc0adcbc42814ee5823e9f6c492db93b8cac5534a3447a730a36ef3f0c7c014093eddb5b92d36112eab730a37af22dffb4e", 0x98}, {&(0x7f0000003080)="5ebfc3245ca4fc04dfaa6d0b3f35ad69796ab221f5cc94723d0ca54fcdaae89c4cd1e5e9e7b415b909e45ea098353ef2802810affebe901ecc4c6069cab419371a", 0x41}, {&(0x7f0000003100)="fb489ba1b5f16f5f92b987ba18b762c36f9ebf6e4291e41026d3c5607f405757db47b52f30d53bbdaaf83b8bd56990fc80565dee0e659fc1fd9d70de245fe2bbbef937fc4cccaed60b318ae489eb2a7baed839a432d2517da533ec15867139388202188bd1d1dffe4c023e50ac6a168252416a1f23ef2c405ae09ff2e3715a6e7708e8314f29da261cffb3a50f0361ddf7534a8563f5ed59f9d8cd45c027cb945ae362900f0e620d0289b6e6831014327342c53e4fa0f29826c69eafa00d12a68f2abaa0dd8e38e931c8d792e8e81ecc42595b4e209d82e3cdab142938a96bc0d8471f5a47555128", 0xe8}, {&(0x7f0000003200)="239fe4740c53a9727d4c7256dc99c5ef44642f1957936ca85ab5c818671a16a1421d3a77663c204921e9942d75f090e4841efdf1598ba655ea9ae0e9a5", 0x3d}, {&(0x7f0000003240)="8ff5a1d83ce0d1f7cebd1980d8f30a288b365761ac9203342428d38274965ab4cf8c3d0d9d19bf1454ac5177563159a0b60f081e20a393aa062f08f93ed24d5d952a9f074fe49df64007140bceecb49bd3b0a9d7af7f4df6e21128166efb9b385cac47af2c1804c53f3feb01f442a4bb60e1ebb66282199477c74f27aac42f44c96c95fc472718a8fdc4dcd54a0543a051a9d855e9156c69752cd22e82a22f385d0b972ebd7c", 0xa6}], 0x9, &(0x7f0000003400)=[@rights={{0x20, 0x1, 0x1, [r38, r3, r2, r39]}}], 0x20, 0x4000}, {&(0x7f0000003440)=@file={0x1, '.\x00'}, 0x6e, &(0x7f0000003580)=[{&(0x7f00000034c0)="edcb71c873c0d865742106b8056b0021a5a9762fe0020ec0bf22e0f83b6a935990b120b7e039ba999f66a7586bd696d3c8f871dd3c0766be96ac9fdfcdc663f643be934deb900e5c9cdf5c25ec57b13f01c848cc24b16bad562c964dbf23ff604844f7cfefea71ec19b44ebbfc293a416230f6f0b8014455e64f5bf47a11a5d14698836c56892cd88ab57718906bbab475be0137925b86", 0x97}], 0x1, &(0x7f0000003780)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r40, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r41, @ANYRES32=r42, @ANYRES32=r43, @ANYRES32=r44, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r45, @ANYRES32=r46, @ANYRES32=r47, @ANYRES32=r48, @ANYRES32, @ANYBLOB="00035bf3aaedfc52e7a28b12c3000000753cafa9c26944518dd74746b1f332f13230b7c4"], 0x70, 0x20000000}], 0x4, 0x800)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup3(r1, r2, 0x0)

00:09:00 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$RTC_VL_CLR(r3, 0x7014)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0})
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r4}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
sync_file_range(r4, 0x81, 0xfff, 0x5)
eventfd2(0x7, 0x800)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0xa173, 0x1a38, 0x4})
r5 = syz_open_dev$binderN(0x0, 0x0, 0x1002)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000400"/68], 0x0, 0x0, 0x0})
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6})
write$P9_RGETLOCK(r6, &(0x7f0000000100)={0x2b, 0x37, 0x2, {0x0, 0xffffffffffffffff, 0xff, 0x0, 0x8, '/dev/binder#\x00'}}, 0x2f5f4b5446f54feb)
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x20, 0x4}, {0x1, 0x8001}]}, 0x14, 0x0)

[  147.713297] binder: 6606:6619 transaction failed 29201/-1, size 0-6845471433603153920 line 3022
[  147.724485] binder: undelivered TRANSACTION_ERROR: 29201
00:09:00 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

00:09:00 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)

00:09:00 executing program 5:
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, <r6=>0x0}, &(0x7f0000000340)=0xc)
r7 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r7, 0x0, 0x0)
r8 = getuid()
sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r9, 0x5452, &(0x7f0000000300)=0x200)
connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0)
r10 = getgid()
pipe(&(0x7f0000000380)={<r11=>0xffffffffffffffff})
read(r11, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, 0x0, 0xfffffffffffffebd)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0)
fcntl$setlease(r13, 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000007c0)="44a434001dffe4f17339deff062fbc01a59a633db9c43af4009b1dcd152b61ec3783901da54644ce9b3e23e0f61fad2fc859202c84d56b196bd3f8aa2fb3f9200e283fcc98db216e0013b078c2688366d51d997b76ddf6675fd1cf6d9a919e9f0af2360674fe3f3204b65e091d57bd7360ac829b482bed863b80ac", 0x7b}, {&(0x7f0000000840)="72d70b46d2b4c16518e2e77e6f811fd1b1b6b0967e4d4a52e03ebad2539d6a2a8da46b61b6d495c73a194b47f25608f72078ca339a8fd13d81ed9273082d71325d89f3f4080700d1378ae3c12086bdc2c36ca478594205c988dbc13182416c7df0ac3254fbbe162580cc8fa08779990c2062b1a351080719dd7e281867debc12cb59e19bdad2228ead9daff40b63fd666878acd33541dc81edab6b461642eb711c3a9028ca141c59af626f78f0f0bbd0a6a4901c63b98692ab75c93e9e9cd18e538d3187f0ab4e706964c280e20f939e3a27a6e459cc0011e9c490", 0xdb}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r11, @ANYRES32, @ANYRES32=r7, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES64, @ANYBLOB="7879fddaa073bf3c68"], 0x7d, 0x30000010}, 0x24e1)
fchownat(r5, &(0x7f0000000280)='./file0\x00', r6, r10, 0x400)
tee(r1, r2, 0x1, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r14 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r14, &(0x7f0000000180)={&(0x7f0000000040)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@tclass={{0x14}}], 0x18}, 0x0)
r15 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r16=>0xffffffffffffffff}, 0x0)
r17 = socket(0x100000000011, 0x2, 0x0)
bind(r17, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r17, &(0x7f0000000040)={0x11, 0x0, <r18=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r17, 0x107, 0x1, &(0x7f0000000100)={r18, 0x1, 0x6, @local}, 0x10)
dup(r17)
getxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'trusted.', '/selinux/status\x00'}, &(0x7f0000000400)=""/4096, 0x1000)
setsockopt$packet_add_memb(r17, 0x107, 0x1, &(0x7f00000002c0)={r18, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$inet6_mreq(r14, 0x29, 0x26, &(0x7f0000000100)={@ipv4={[], [], @loopback}, r18}, 0x14)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r16})
ioctl$ION_IOC_ALLOC(r15, 0xc0184900, &(0x7f0000000080)={0x5, 0x0, 0x1, r16})

00:09:00 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, 0x0, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xe1db, 0x6000)
ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f00000000c0)=0x7fff)
r7 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$BLKRAGET(r7, 0x1263, &(0x7f0000000000))
tkill(r3, 0x1e)
wait4(0x0, 0x0, 0x0, 0x0)

[  148.088374] binder: 6633:6640 transaction failed 29201/-1, size 0-0 line 3022
[  148.109061] binder: 6633:6644 transaction failed 29201/-1, size 0-0 line 3022
[  148.109641] binder: undelivered TRANSACTION_ERROR: 29201
00:09:00 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/\x7f\x00v/binde\xf2#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0)
read(r1, &(0x7f0000000240)=""/238, 0xee)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xffffffffffffff18, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000850200000000001000"/68], 0xe7, 0x0, 0x0})

00:09:01 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
r3 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0xa4, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffdc, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@handle={0x73682a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x0, 0x2c}, @flat=@weak_handle={0x77682a85, 0x523907cae3f7dab5, 0x1}}, &(0x7f00000007c0)={0x0, 0x18, 0x38}}, 0x1000}, @decrefs={0x40046307, 0x2}, @free_buffer={0x40086303, r3}], 0x96, 0x0, &(0x7f00000003c0)="7456c580bfddd594ac42e842dc48b171d43ae30bdb393272ec6fbff02124022489f4dbbc9f4c638e386de76b0e3e7a4446f2f335e3d63832ee3c085235ea8aae0a02939e53a89868749fcb14c04c580a6c21abc708818d77b862c66bc5db73db3da080d87cd1dce18987e7af48231e0e6f65c49f8b29935ee359c856d8cbe7efb81a9af6cd724fa4c66ed2461e9d409591063dec9bb6"})
clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x36)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = getpid()
ptrace$cont(0x18, r5, 0x0, 0xfffff7fffffffffd)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r6}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000680)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESOCT], @ANYRES32=r2, @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32, @ANYRES16=0x0, @ANYRESDEC=r6], 0x7}], 0x3}, 0x0)
ptrace$setregs(0xf, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r4, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
memfd_create(0x0, 0x0)
pipe(&(0x7f0000000340)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r8, &(0x7f00000001c0), 0xfffffef3)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000080)=[{0x0}], 0x1)
fsetxattr$security_evm(r9, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0233db6bf7d4c6c3bc799df222a748844f02c97573373c76efd146373f2aaf296fc06065478d7a084c6ff8dabad01b9c9aa773ae810086d7839a5956537934dc76551921d0a46dcd996ca1406ad49d7f3d3066e90c4c8c418f5f31ba6df7fc6fc1c754648275fd0d0ad080b28efc0076619e3d2995fb00000000"], 0x1, 0x2)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0)
read(r7, &(0x7f0000000200)=""/250, 0xfffffe8a)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/636], 0x27c)
inotify_init()

[  148.175127] binder: undelivered TRANSACTION_ERROR: 29201
[  148.248691] device lo entered promiscuous mode
[  148.335272] binder: 6653:6654 got transaction to invalid handle
[  148.341388] binder: 6653:6654 transaction failed 29201/-22, size 65500-24 line 3014
[  148.488185] audit_printk_skb: 30 callbacks suppressed
[  148.493437] audit: type=1400 audit(1571789341.255:210): avc:  denied  { create } for  pid=6608 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
00:09:01 executing program 4:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfffffef3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
pipe(&(0x7f0000000480))
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
socketpair$unix(0x1, 0x7, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = dup(r1)
r3 = socket$unix(0x1, 0x2, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x1, 0x2, 0xff, 0x5, 0x3, 0x6, 0x0, 0x212, 0x40, 0xdf, 0x5, 0xb5, 0x38, 0x1, 0x3, 0x6, 0xffff}, [{}]}, 0x78)
setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x48d42, 0x16)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r5, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x1000000b)
getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14)
ftruncate(r4, 0x7fff)
sendfile(r2, r4, 0x0, 0x8000ffffbffe)

[  148.605950] binder: 6657:6658 got transaction to invalid handle
[  148.612058] binder: 6657:6658 transaction failed 29201/-22, size 65500-24 line 3014
00:09:01 executing program 2:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0)
pipe(&(0x7f0000000840)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000280)={0x0, r2, 0x91, 0x0, 0x0, 0x5})
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x808}, 0xc, 0x0}, 0x20000004)
sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x8000)
syz_open_procfs(0x0, 0x0)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r5, 0x0)
keyctl$describe(0x6, r5, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r5)
r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r7, 0x0)
keyctl$describe(0x6, r7, 0x0, 0x0)
r8 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r7)
keyctl$unlink(0x9, r6, r8)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x14)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0)
setxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000400)='TRUE', 0x4, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r10 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r10, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080), 0x10)
sendto$inet6(r10, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198)
faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)

[  148.871856] device lo left promiscuous mode
00:09:01 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x4000})
fadvise64(r0, 0x5f, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c)
gettid()
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000040)})
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)

00:09:01 executing program 5:
r0 = socket(0x11, 0x3, 0x81)
setsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000540)="950041b6", 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xfffffffffffffff8)
bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x2, 0x7)
ftruncate(r1, 0x88001)
write$P9_RXATTRCREATE(r1, &(0x7f0000000040)={0x364}, 0xfffffffffffffcab)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000580)='team\x00')
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000140)=0x2, 0x4)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
bind$packet(r4, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="38ce157ded3c"}, 0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = fcntl$dupfd(r7, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
accept4$packet(r9, &(0x7f0000000640)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000680)=0x14, 0x80000)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={0xd4, r3, 0xad932c6691a6e7a7, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0xb8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40840}, 0x0)
r11 = socket(0x100000000011, 0x2, 0x0)
bind(r11, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, <r12=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000000100)={r12, 0x1, 0x6, @local}, 0x10)
dup(r11)
setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f00000002c0)={r12, 0x1, 0x6, @broadcast}, 0x10)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x60, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r12}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x40)
sendfile(r0, r2, 0x0, 0x4e68d5f8)

[  149.095994] audit: type=1400 audit(1571789341.865:211): avc:  denied  { create } for  pid=6676 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
00:09:01 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00')
pipe2(&(0x7f0000000000), 0x800)
sendfile(r0, r0, &(0x7f0000000040)=0xc202, 0x5)

00:09:01 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup\x00\x8a@\xd2e\xb4W\xab\x99\xac\xb4\x9a\a\xea\x1c\xc5\xf9\xfd(2+mTS\xbc\xd0F\x88\x10\xd2\x11\xdc\x81q_\xc0Q\x1bE\x970Wv\xbeKN\tV\xb0\x01\x15\x18\x9c\x8b\xea\xe9 \x19\x0e\xfc8M\xb1 \x05\x82\xccW \x06\xe2\x06\xd5\xb3\aTbK\xd9\xa1DY\xbeZ5\x85\x04!\x90_\xfb\xa5\xfaX\xe8R\xe1\r\x1b\xa1\xb6\xd2)\x8bM\xe2\xb6\xac^\xe5\x84\xa9\x8fE{o\xb8\b\xb6\xd7P\xa3\x1a\x01\x8b{\x10J o\xeb\xb2|\x1d\xdb\xf2n@\x83\xeae\xbf\x9b\xcb\xbdj\x02\x8e\xa09\xbfo;\xce\x85\xea%\xe8\x84\xd8\xc6\xdfI\xe6\xa8\xf1\x00\x19kN\xce', 0x200002, 0x0)
fchdir(r0)
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0xff411d8cbfc662ae)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)={0x2, 0x2, 0x5, 0x2, 0x27, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d3, 0x3, 0x0, 0x9c}, @sadb_sa={0x2, 0x1, 0x4d2, 0x80, 0x4, 0x34, 0x1, 0x20000002}, @sadb_x_nat_t_type={0x1, 0x14, 0xbc}, @sadb_x_sec_ctx={0x1c, 0x18, 0x9, 0xe6, 0xd4, "32bd4114ae287443f5bbfb6c6c10fd115813fa6cc1e55f065aaad553ad7adf0a9989cacf880fc7a615930d4358e1ac063af4d7d97cb618e7d351961a807e07d808276c54aea2996926f471cf9a7cdce4971c2e97512952c372504b5ca1f0a2ce23d911e089e699c670f98f0575ce83bd5277179dc13757ac5a084414ffc8d75511025df623cdf970536e8ef238ac81469569cbe526110dc8bd9f0cb11882550950d3514d46f3c624b11f66e1c687a22ad74048f19d578382001cde307561a9316ad9d41b6ad7b5e0ed3ebc3705638f13801fe754"}, @sadb_lifetime={0x4, 0x5, 0x2, 0x8001, 0x8, 0xe4}]}, 0x138}}, 0x4041)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3})
write$selinux_access(r3, &(0x7f0000000080)={'system_u:object_r:hostname_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x1000}, 0x4a)
r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
write$eventfd(r1, &(0x7f00000001c0), 0xffffff7f)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x10d000, 0x0)
read$FUSE(r5, &(0x7f0000000200), 0x1000)
r6 = socket(0x100000000011, 0x2, 0x0)
bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, <r7=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @local}, 0x10)
dup(r6)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000002c0)={r7, 0x1, 0x6, @broadcast}, 0x10)
connect$packet(r5, &(0x7f0000000100)={0x11, 0x9, r7, 0x1, 0x5}, 0x14)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
fallocate(r4, 0x10, 0x0, 0x16d4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

[  149.168015] device lo entered promiscuous mode
[  149.294958] device lo entered promiscuous mode
[  149.315199] device lo left promiscuous mode
[  149.366269] audit: type=1400 audit(1571789342.135:212): avc:  denied  { create } for  pid=6676 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  149.435792] device lo left promiscuous mode
[  149.440861] device lo entered promiscuous mode
[  149.560493] device lo entered promiscuous mode
[  149.594968] device lo left promiscuous mode
[  149.614864] device lo left promiscuous mode
00:09:03 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ptrace$cont(0x7, r2, 0x0, 0x0)

00:09:03 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r4}], 0x1, 0x4)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r5=>0x0, <r6=>0x0})
ppoll(&(0x7f0000000040)=[{r2, 0x4}, {r1, 0x20}, {r1, 0x5000}, {r3, 0x20}, {r4, 0x4012}, {0xffffffffffffffff, 0x800}, {r1, 0x10000}], 0x7, &(0x7f00000000c0)={r5, r6+10000000}, &(0x7f0000000100)={0x69}, 0x8)
fcntl$setstatus(r1, 0x4, 0x46000)
ftruncate(r1, 0x800)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r7}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
lseek(r7, 0xffffffffffffffff, 0x0)
r8 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r1, r8, 0x0, 0x9c49)
r9 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r10 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r10, &(0x7f0000000280)={0xfe82}, 0x1033b)
fdatasync(r10)
r11 = open(&(0x7f0000001ac0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r11, 0xc020660b, &(0x7f0000000000)={0x0, 0x7, 0x1})
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000200)={0x0, r10})

00:09:03 executing program 5:
r0 = socket$inet(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84000)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1})
ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x4e21, @local}})
sendmmsg$sock(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)='1', 0x1}], 0x1}}], 0x1, 0x20008084)
r2 = socket$inet(0x2, 0x2, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10)
sendmmsg$sock(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)='1', 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$sock(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)='1', 0x1}], 0x1}}], 0x1, 0x0)

00:09:03 executing program 2:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001200e7ef007b0000f4afd7030a7c", 0xfcd1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/27, 0x1b}], 0x1000000000000196)

00:09:03 executing program 1:
mknod(&(0x7f0000000140)='./bus\x00', 0xa88, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
lsetxattr$security_selinux(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:mount_exec_t:s0\x00', 0x22, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = socket(0x10, 0x400000000080803, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r3}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
r4 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000300)='/dev/keychord\x00', 0x4000, 0x0)
write(r4, &(0x7f00000002c0)="240000003a00d1fda539ffffffe2001d0a0b49ffe8d1dcc589ce51e84e5e7aa36960b2cbaa0800030001000000", 0x46217050415728f0)
execve(&(0x7f0000000380)='./bus\x00', &(0x7f0000000580)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)='system_u:object_r:mount_exec_t:s0\x00', &(0x7f0000000440)=')user\x00', &(0x7f0000000480)='sip\x00', &(0x7f00000004c0)='sip\x00', &(0x7f0000000500)='-::\x00', &(0x7f0000000540)='system_u:object_r:mount_exec_t:s0\x00'], &(0x7f0000000600)=[&(0x7f00000005c0)='system_u:object_r:mount_exec_t:s0\x00'])
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, 0x0)
r6 = dup3(r5, r1, 0x80000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4020840}, 0x8081)
ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r7})
ioctl$TIOCSIG(r7, 0x40045436, 0x2b)
write(0xffffffffffffffff, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed0000090000280008000300010000", 0x23)
write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup2(r9, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
r11 = openat(r10, &(0x7f0000000640)='./bus\x00', 0x400, 0xa8)
lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r13, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r13, 0x0, 0x0)
r14 = getuid()
sendmmsg(r13, &(0x7f00000092c0), 0x4ff, 0x0)
r15 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r15, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
bind$inet(r15, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r15, 0x5452, &(0x7f0000000300)=0x200)
connect$inet(r15, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r15, &(0x7f0000007fc0), 0x800001d, 0x0)
r16 = getgid()
pipe(&(0x7f0000000380)={<r17=>0xffffffffffffffff})
read(r17, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r17, 0x29, 0x20, 0x0, 0xfffffffffffffebd)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
r19 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0)
fcntl$setlease(r19, 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000007c0)="44a434001dffe4f17339deff062fbc01a59a633db9c43af4009b1dcd152b61ec3783901da54644ce9b3e23e0f61fad2fc859202c84d56b196bd3f8aa2fb3f9200e283fcc98db216e0013b078c2688366d51d997b76ddf6675fd1cf6d9a919e9f0af2360674fe3f3204b65e091d57bd7360ac829b482bed863b80ac", 0x7b}, {&(0x7f0000000840)="72d70b46d2b4c16518e2e77e6f811fd1b1b6b0967e4d4a52e03ebad2539d6a2a8da46b61b6d495c73a194b47f25608f72078ca339a8fd13d81ed9273082d71325d89f3f4080700d1378ae3c12086bdc2c36ca478594205c988dbc13182416c7df0ac3254fbbe162580cc8fa08779990c2062b1a351080719dd7e281867debc12cb59e19bdad2228ead9daff40b63fd666878acd33541dc81edab6b461642eb711c3a9028ca141c59af626f78f0f0bbd0a6a4901c63b98692ab75c93e9e9cd18e538d3187f0ab4e706964c280e20f939e3a27a6e459cc0011e9c490", 0xdb}], 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r15, @ANYBLOB="000000001c0000400000000001000000020000007d9082dc785277cf8add7350cc45f46de826cbddbd701c1dcdebc40c35f73c4dfe905640c791014d5d93c2f53c9fac877329953a40427e45708db01bce42256a6d1e38c4a4dafc702f660000000000000000", @ANYRES32=r14, @ANYRES32=r16, @ANYBLOB="0000000024000000000000000100000001000000bb136bb82fff92c6ca671218071a96c22d028b2c9b35aa304508f067ffe366705c257579f42c2815cb9a4a4f687f26b569fb66f8fe1ee223b34adc7ccd70eddb9e3c444b3cde1b7e172597525b", @ANYRES32=r17, @ANYRES32, @ANYRES32=r13, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES64, @ANYBLOB="7879fddaa073bf3c68"], 0x7d, 0x30000010}, 0x24e1)
write$FUSE_DIRENTPLUS(r11, &(0x7f0000000740)={0xb0, 0x0, 0x6, [{{0x4, 0x2, 0xd5f, 0x3, 0x9, 0x0, {0x2, 0x3, 0xfdf6, 0x7e, 0x6, 0x5, 0x6, 0x5, 0x131, 0x2, 0x2, r12, r16, 0x7ff, 0x78c4}}, {0x1, 0x80000000, 0x5, 0xddcc, '?user'}}]}, 0xb0)

[  151.139492] audit: type=1401 audit(1571789343.905:213): op=security_bounded_transition seresult=denied oldcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 newcontext=unconfined_u:system_r:mount_t:s0-s0:c0.c1023
00:09:04 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000000000005da2995f6c500000000000000000000000000000000000000000000000000000000000000000000000000000000000000070907803000000000000009900"], 0x0, 0x0, 0x0})

00:09:04 executing program 2:
open(0x0, 0x4400, 0x1c0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000380)='./bus\x00', 0x100)
ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0)
fcntl$setstatus(r1, 0x4, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x282a41, 0x0)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4)
add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r6}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=0x0, @ANYBLOB="5884514b9da6fbb9da38ae536c6f55927efb82a14acb660e", @ANYRESHEX, @ANYRES32, @ANYRES32=r3], 0x5b)
sendto$inet(r5, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac60bded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x9, 0x0, 0x27)
sendfile(r5, r4, &(0x7f0000000040), 0x8000fffffffe)
writev(r1, &(0x7f0000000680), 0x0)
socket$inet6(0xa, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x6)
pipe(0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=0x6, 0x4)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000040)=0x6, 0x4)
write$selinux_load(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7aba3947d603e06455778662875f3b0899a0028965d646abca34c0194ff503bb8e50c1b7cda93ff3fdcb7477999316e676190436309524a851c8a4d9e904efdaefd90290a36cb3bf08efed7ced10dfaedcdeb57dbafbd8b1dccb6193080000002240006acf5b0d1ceba81dc977b979fa00000000000000"], 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x15dc20, 0x0)

00:09:04 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000040))

00:09:04 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x27)
r2 = dup2(r1, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup2(r6, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{}, {}]})
r8 = dup2(r4, r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
dup2(r10, r9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r11=>0xffffffffffffffff})
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = dup2(r12, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
r14 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r14, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400202)
r15 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r16=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r16})
sendmsg$nl_netfilter(r16, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa0, 0xf, 0x2, 0x4, 0x70bd25, 0x25dfdbfc, {0x1a, 0x0, 0x4}, [@nested={0x8c, 0x46, [@typed={0x88, 0x48, @binary="27f9b0c6c1da989378e9646e0478797c2ba10cbc92f3e98ace16b5ce56618b57580ae914e7c8be53d652774fc3e8a591d029340eb55116926e8ccef93f0f3bb960b08e50f8ecec30960c92dabc39e01e590f822fb3509617b7640a5cdf30dc845c004b4316375e5ee21c013ded341655e0b294fcf54a7b3a7fcac0e2f132f2878132"}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000)
preadv(r15, &(0x7f0000000480), 0x10000000000002a1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r15, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x3, 0x3ea, [0x20000340, 0x0, 0x0, 0x200005d4, 0x20000604], 0x0, &(0x7f0000000180), &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x462)
r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
fchdir(r17)
r18 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$FS_IOC_RESVSP(r18, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0x0, 0xfa8})
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080))

00:09:04 executing program 1:
io_setup(0x3b24, &(0x7f0000000740)=<r0=>0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup2(r7, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = socket$packet(0x11, 0x0, 0x300)
r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)
r11 = openat(r5, &(0x7f0000000580)='./file0\x00', 0x400000, 0x11)
r12 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r12}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r12, 0x40046208, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r13=>0xffffffffffffffff})
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
r15 = dup2(r14, r13)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
r16 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r16}], 0x1, 0x0)
r17 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r17, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r18 = openat(r17, &(0x7f0000000d40)='./file0\x00', 0x10000, 0x180)
ioctl$sock_inet6_udp_SIOCINQ(r18, 0x541b, &(0x7f0000000d80))
ioctl$BINDER_THREAD_EXIT(r16, 0x40046208, 0x0)
r19 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r20 = fcntl$dupfd(r11, 0xc0a, r19)
io_submit(r0, 0x8, &(0x7f00000009c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xfff9, r2, &(0x7f0000000080)="7d03a0302fc9ea71226409e4d46833e73c3d57c778d94341929c47aa0c6a7ea674699a45871e9ea9a70c0b30676c749d4acb54769cac29b334262223a895878cba2f479618560ddd8f74f96a7197bfcd8b498236e1401836f84051f71b7a13c8c999ecc4f4208620f6c862e4032db37d8707b8f1fcdfd526857e98937c13cd204979ccc2ac2087ec855bceeafcf85f204047781b063e846e0b31959cd409edb958d858b8f0773209ed", 0xa9, 0x9, 0x0, 0x0, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f0000000180)="886c44d00469", 0x6, 0x5335, 0x0, 0x3, r8}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xbe66f643477750de, 0xffff, r9, &(0x7f0000000200)="3a7b19271e9e335143c7677cc2d93bbcf52571e6806e1e01641c9f68237a0ed35072a7e12f033937ea5d539f0480eb5a610c445fb2161ced0f992facc054a6d99b1f7bb259a06348ff7921ecef6c60210e5f2477fbe64d5f8518b649f0833508304f670eae20f73e1b73c46bb1793856ded280c256f9ae8b2e105e7b4aab71faf02c622ce513fcba2ee414f6e14747796cd2ea1b67ae25b031b1d0b356ca018d982a71435f1efb1eed4fe20be3db4b009fd66bf0b6819de32dbc", 0xba, 0x9, 0x0, 0x3, r5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x5, r2, &(0x7f0000000400)="67b013694ab05cd1b26074f1d3d7aefca60049e21b42f066de0a4987e8179a4a8196fcddb4a4d94c170c82b75e6e09b88f25c891057486eeda1651940d879f857f9e2e33096b41350bf7b041c9a39479defacd7d674df20251648e7f5e39c7fb2a7b16aa98e53aea62453d69d77c6b46305e8f89a8c1fd346b26439fd53853bfddfb2a19d1b011a5970ce072b50754f3c5538cb0c53008330192f043e6f03752937afbd87b26dfd865546d07945dd358", 0xb0, 0x100, 0x0, 0x0, r10}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x8001, r1, &(0x7f0000000a00)="5a8d59029110e2b5a7f128992de075397468c72c2e522be0006572cde6e3e9635dc80526a418af3916891aaa16bbbfc0a1d81b8dac4a8c22e0dbf16da571d7e169a11950691f066a0c912b6a1d192b24062c0f87aed9c4f747aa76b1db06400d96be9f517a14c1acc560d8f6f228a29808124834843763ca449374e5a9c8eab48b3b41f458b6a6debe9d262c52c536505bd9f5748d41c084a3c338180311336264cb6ff9fe8eeeec5813e15e1cf3eefae6287667a20fb901f72e4226a2b6647e54acc7351a4a72949704a8eecb505b296cd89fb747958a77bfab52c5fcc90a4c165e9c1f8398eeb1550f", 0xea, 0xb4, 0x0, 0x0, r11}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0xbf, r12, &(0x7f0000000600)="1afcddbb816b399af86ce1007aeca52cf1c14ae8029da1cc3e7cedabbe6ecfdcfb34d3bd9491c762ba25fb2be791421774e8e57171107bdcdb8fc6e42cc08429d2839c36ef542656806b78c59058fab5e312665041b20fd9714e77c2568c602368e3ac28acf6a9813415ad81931c1500056e2969cd2d481d936a4646f797c857d2afbb8309b1a677624c", 0x8a, 0x6, 0x0, 0x0, r15}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0x8, r16, &(0x7f0000000780)="8288610e4b0d7bdf71e7c5a1e3f7a2d4d23282e307a7888edeac009aca59897bd26f68d901ef12855d076c78351bca6d04d5e66dd2c779816fe8493865fbdcbc3efcfa1fab2a6d5575b534e79bb2de597c2ce8dcfeb81a9a0c5e81cda5e18603d3b64480eef62506eed673605c3bc1c2078c45d28686f5670e3402a1d535c7f3da36db7fa50f7203c2a52e7fdcd997b692f607", 0x93, 0x6, 0x0, 0x1}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x7, 0xfc00, r3, &(0x7f0000000880)="a4e3b3a5b0fd0f0311f72835b61c8064fe38e3674f33b7eb1d27169f51eb0aebec5446cb9dcc30fe02f811520c678362b479bc0c45a7f5d2ba9661404e9bb41a4b593ae1c579e8a3d943ceaf8cbb31e5aa5bc2b0c175c1defb7402d1b7e84dc1528ee83b62ac55703c9cbeaf4a860a23c214f4b5ce41cd881cd046c4e68288ee610081c61aa83eadf3dcb6a285340186960068a58139deb60a197e1fc5b8a992bfdd8a29f8456fe024e7dcaf2ac41c5eaf0c8b55d77e9ff947b469e4f463832f076b3070cf1596262ac99b8469d4d5887ede1f9fa1694a133301496bf2de278693ab13c2f1922c99804ba733aa3851024041cf3f76b6ada340", 0xf9, 0x6a98, 0x0, 0x1, r20}])

[  151.280473] audit: type=1400 audit(1571789344.045:214): avc:  denied  { call } for  pid=6722 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  151.304317] binder: 6722:6723 transaction failed 29201/-1, size 0-0 line 3022
[  151.313831] binder: undelivered TRANSACTION_ERROR: 29201
00:09:04 executing program 5:
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket(0x11, 0x800000003, 0x8)
setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0xff95)
bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x78)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="070100009200000e0000000000000000000000000000000008000000000000000529"], 0x22)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000140)=0x146)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

00:09:04 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x1002)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1})
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xd6)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x1ff, 0xdade])

[  151.321373] audit: type=1400 audit(1571789344.095:215): avc:  denied  { call } for  pid=6722 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  151.348643] binder: 6722:6729 transaction failed 29201/-1, size 0-0 line 3022
[  151.368137] binder: undelivered TRANSACTION_ERROR: 29201
[  151.434187] audit: type=1400 audit(1571789344.195:216): avc:  denied  { call } for  pid=6739 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  151.458936] binder: 6739:6740 transaction failed 29201/-1, size 0-0 line 3022
[  151.467906] binder: undelivered TRANSACTION_ERROR: 29201
[  151.475827] audit: type=1400 audit(1571789344.235:217): avc:  denied  { call } for  pid=6739 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  151.500926] binder: 6739:6743 transaction failed 29201/-1, size 0-0 line 3022
[  151.509084] binder: undelivered TRANSACTION_ERROR: 29201
00:09:06 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ptrace$cont(0x7, r2, 0x0, 0x0)

00:09:06 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r1, 0x0)
poll(&(0x7f0000000000)=[{}], 0xb5, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup2(r7, r6)
r9 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r9, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$TIOCCONS(r9, 0x541d)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000040)={0x7, 0x3ff, 0x400})

00:09:06 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffdd8, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

00:09:06 executing program 4:
r0 = openat$keychord(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000840)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000c80)={0x8, "5f5539ae7383df635d7eb9f00cde999ef4e1d4fbae589edcbcd64ae9781d89f20a7c347bd734db9d80a3e9ee0d0f04fe5305dacf9e656dc623d0d8abb05b81ebf7fa83533ebfe364612ee7d5571be6e3af5eccf0e26370ff66a26e95f4b7b1206b9d9a70fe612b356ec5074716b0e71eb9f60ac1c5e653c9a7de0de9a5f8c8047f77ece27201fc36e2ca04338864356e123b3b96be97afa5d6698e6f08a657f7ad07b42df05dfca83247581434b575e2d4419e52f1103e9e3ddc440a98f9caeace71f8affb3cfc62e4b428403787ff063d2923a50c0410f191c7923b77c51fea54cc7f2b8adcd2a5e1f53495c168736a160f28435b70f6e40df8523c2deaef8b70f13bc408d1d6eb05dbcae35f0c12cb00b8d589c0dda912acf9315852e1cbb85857f9421cd623fc5046448db22eec3c07358c4778c73a2495bf3452b18d8e904ed88ae250a99edb20b78fc923ccc841847a4f6d514320309afe2f0a075e50096c7a8cd4da2d88791d01a10cea10a97d32e8bb05a5e2bf52be5fffa3fb26953a0fadac598644cf0297d01d5c1ed9f2123ba789fa650b0d140a478903cc23a5b5c2a2a52f19bdd40039ac0291f648f1f991e272c52669f7843e73b3be22103fe0a88d5d405b9ecea5d602be0b5466d18d8a971b69a8e80e48621103a6bc6ee3a7b70b199005241779f22fa2cc159988eaf2d53c858ec06ab56acc232b587ffee3a5cb29f5641b2189fb1617d1a652e42511fe2e447a2636f18ceabc261126200193eb9f309f80aa204a93883bf6fb247ade866685f300295f8735e18d1d81365dbd2bddfa1779c59effed803bbe0a68302b1ab0f0d00892138ad24d52d653d92897bd28c2f031a77eae54ef3ce9a1fc44ea41763b2d780a454f68ea1a297302b4fa6664923a818040f5a74e0db3ff24e940e97d4abff40af2d36f7bceb8a0c5e90dbefbc8ba496f6e42f11ce11fb20655138f9387938abc3aa3a742f749a8695d972c537127519f654945bac96f0a2ef9d6b24f2226ae677684e3eb63041d6b5105777a8e6aa41ff11366448c0af1ddf5e3f2a1d828b4c9ede3809eab736c9035f2a7032ce38b699dfdc3e158e1ce62d325441e1b05a3ba5f663f20b0cb703cb2960aad298177881aa6b52bf4ae112c5d2bb691ac34b0723be7ddcfff0015e578475db1f062c5a50b54bbcba2f591eb4d6de66f386b0d5dd3975229ad25ae95d82266dfb9c1a6f497ef54b6ac5ee81edae16c47e89f9a435377dfac411db459559ce483921251745b8b94f69d4815b009ea86aedc5a75a516ff2afaff9a418f73c2cacbcdf45dd02ba962399f9b81e149635c2b4c0bda790a6d72fc243f6fbc73d0a0636db51c03d93b44b42c07f2269b465231f953e6a45dc549e9b5ef05443da7820cd667f5b0ff47a13f0a3df630a6f98f72e09978b829389d6a11afb0a7a0988822bb95fcb50399e51295f464662118646d2996da0fa710b082036820ae0a60828479bad4489061244b74179cfec74ab273551190c0eb2ca95be86391b8e469454796d04b29646b8aaae49889ffd84e83e33fb0cd7b10d778e72422f474911897dbd4548d9658e9af23cfff0ad4a7d750ab59e0f8988082ab7ac8d27eeab1c5809de6694aba8ee6ff1ba23d422f38dc026a77933cb0fc916d22131f7f736e35c881c5551f13a5037f65b9090372bb8e73bb9cd686715afef6b40ff275a978078c1e1c7db358285e5caee5c53cb4a7b446db91e5c0615342265edd9f09a72002aae56c7ad4269a0513569db514ee852724cdcccb72e8836fc270f7aa03e03e65f4572c2909e6fb1b557e89c3b505ba2f2b10b545513758abdbdc5b3e5ec1fe4d6bd5947b354058eccb79f10e971a85bdafa5aa27224acc734d884f9282ed033fc540defa3181d451713565d940879cd70a1d704b9a390de509351d5129bff18051b0c7ca196a78d3b8d0c8f384c79ad637b2e1770fecfc980960ef403cbc6bb284792cd169133f35aea028d9ffdc1668572dd197db86a26cb6fe1bb822bb76968ef2cd3c384704b75d0f17a50bcce054a400edd3b2f2abf72d2d8a679fdc94216d2d7d43ca1e60aeb5a313f8104f8ae54e75beb6c106cf080b9ecc9a1f91508b37d9ede25a1bede738c3a7f3501391a7b1863fe120ea26c4ff13f1de4588b150f3f2c12a9b9d92e6a8610c788c4d449a91416307a313536e1779bef88028d65a9398c5d1492b729d5f08e34e64fa07507f64297a1f9305a2d68169f653d5c107c9860ca0d822916eb357c646c229e792b1a5da56b35ab971bb82e41581e11f24f9c6b26c019dd2f2f89f2a82b74bd856ed7b46a2d9c07b2856bc39e9a28f271c5bb06db5bfa04d21e37e778b3e03071d25da8bbc91543fe8909603ba92e3455cb0edfe1dc040f12c169a97a5b8fb09f97acda29ab8491e7c9f81320b1a9de5773078557a6a0bdc5a1bfd2d953c47b3e5ccc70d76dc4ba10c297d7591e2c2150b8235de09714fedcf23aedb0ec9586e52f6af6c299256ad5a0a4ce22666be48592977dc5ff5c5eea529b81df4510016240b8fc8489bf59c899bb75481220554d0b9aebf1660cb72b01dfc3ffaac27dc1d36247e86339c6d99fc3ca8edf585fdb236ecdffda1b99819f873367ee5d8fde5d596517f895c9154deab01ca26008edbeadecfe33cae750ff044469a1b3b104b35af0c04a35a48aecf54dd8844b598432b81f67ce232ad46a247cad103274cd7c206d890008b149aaa3310f9794243cc5e04d4bd3e66a5b01ef67044412eba507a20399856cd26fb6233ebc064aa7b5ba94198bc05301dd74d6875b6d3b4731c2a11f0656767a3e6ba0a3d6951a7f9385ff99876891b8150ac5257756ef92a6c3854ccba8f13bca3cd3e66fdc93feefc44c3eba570970e0a6921f1eef24713ed5a174b8e52a0bc1bd3b420bdd0e521835289d29267fca4512caeaf64d1adeba2457864801d30d37e4eea965f8cfdb314f62307d8a12084a65da330f800862cae3876cdffe8c77d982ce9527b069628f0d796c0ec1c1b423ab6eb248e176a9b201d4de572f7901d8d88ae3dc6c3f196a4e3fb81552f16f7a7b7b3a242824b0618a855fc150fe8d484c80b3e1ea6c42f165dcfa7b0b292f9c7f27179d32260d4f472385a8818f7d76133030cf1256153b4162c8c3a3629c01e9b8cb5a30b3d0068d7f0e3727d8159739386511746fad1cfcc98c7af05b489876432957c6d59c51f12ebb62acac90311e6b00cea58b355db5a36718dfb8140d23e64e41ef9d33969cae75ea3ef8f14ad8c9b2d0c8bd7bf4366b091b5992ffbd71800495c0484cbee4b5fffaede0808cdcfa2409227e6b96dd82481d6d00bfff72c29f860b7fa4fa9c3634d9a2e4f7a8ef240c997b749e0562514d5c2c5d66da75149dea37b1cbb347fa0df5be2b9a5ddf20a6d47936b3b55cedc64453e69413a89c8a9eaeda00fccc96281b4f29db0f3e45fa098c77ffe3c0488529ecfa801cdf7fe8a23f6a3aa04acaf4e300c44e6d873f43b9fd4b13cbed2411c97378e07c7a6799d272d36ac8964233130947ed88f727915fa58a4812ceacd6cc6a52bc7fcba5e57543e93d293d5a428c73b194f33ba752b0ebeb0262423e7a8f490707a220857f44e191304cffb93cfc75b217ca306292549c8742fe3aa62a464d40c666115015201c0fef3e9555615f91c3d15b6e1556a9b04febc2ae7e3d689ca5f58b51f2717ae8c5153f2c2a4df11ea8cafcc369327c2a0a6f7946daf09be323d59e4b0e42ebcdeca373a6d70a3286382f1405b7107af899da00dbd52324657870bd18ca26f3ef47e0e81cd335c827512e88f24202836e7a1b505f0d03a23d577430d971458a11ff42e36b2d2883b664d402eb7497a90ba1f94829b6d9c6b4c4f7e9dc49882520a6fd2590cb8b41328541b9076e43f6019c3da9084e57960478c268f4215bb98455fbd2981e7e37caf7aaf9008f87cfe196da930637c55da5a34e142a433494e6f92a5985d7e6fc0ec68d2ad25144919af6dc81afc88cd05f01b401730bccc3086c9dd06d38ed522e52e7ffae7671898fb91cec0821c061aaea6c47ae877d2d7f5ca1ecf159e0ea152ce713f652c116f62e12cad293331db922a5fed311ab22096d90fc17ccc53f84d46eae680def0b9949e0d9debff263d575e590941a5ce0b33548beb6dbc01104f6054da73cc349625adece6a54e092d8d740915b91d81df30374a78693d6b69724f05354d61ac0febff4a544b88954d11d3f4927895edf6ad755313227ac87f24f12d70a831df16bd45c4a03570fdf27d698fa5581fce2d002890a3f2059a6bfdf77f0aeee3ad8318449bc1b2d486b225b148a78e921c73a2c37256dfb1ad611e410d5436e0d31d00ab5177da7915a74ef3307927c23c764f5cf62c3e2db86284c9abb39045b625d507f5c8d440557b4dad2a39593fbb572cce25a364aae44134fdd97ef0148690881bee42b6bd929f12cdf07996597a2a8366b12841f8fb8dfc0ece651756637b95c6bdb92320302805b4a700e7d3dfb0b8878862f400f8437a6c153b5fab40d30af07e73cf4345cb6fa81574018a7bc0e8789fae8b8560f4b93d413fa8e0e0218527ccb82873fc9da6cc34b6197c1d8bd9223ab7c4efb1f8cf021450037f4576934d83116655c120062fc3b912176fd395ccc792d492f2730465f8b4c68155b6ceb52e80742d2970e24004171f4685cd78467a4e943a0fecff66dffff10922d69236460dc37c1df9b19dded1ecb932dd8dd2045d2f8e8d3dfb6a83a65d6623553a2aed7a12b78effeeaa58eec84cdefc84923177afb7bd04f6fc3d3332d63ed5c5d6fe8820b9853e7615407eb23962f5232db44bc0267e7f07e47b158de0732a974b80aeb00ffeeca83d26fe21e487ea4472cd9048f942155784af8f68006cdb4286480a7ffa1ba6e93fe7fdb33283359d28bf9311dee59899e0e77aa113fadda21526c8e2bd60f21e182b735a5b0177fb95e948857c6c4ae391b2b4950a35b129e7bf25b7eb2c0857290c55f5d28b78ca1f39f0cd676610805b0a378647ae958182b26de1ddbf80e80d7ab1d2476086ed192e98bee0969bc0e8765278cb5570ccc29ac6d7298821bff4f85895deffcf4ce54a69878cfb41eade0d8703cbcff02352733ace2d800ba68b0fdcc52b94247ecacddf80ad228cf76eb547d276d0f6402054e34c3569e2b53ea3cbc54e49e099372cde3acd1ba47f836a765f855763a175a58ec4d6cecc72375da2d8c956c2868e77bfdb697182b554f0b743d7095cf13a3ba1d19e7590c281bd09ce235898a9682aacb5633b4fa4c3bdd71139c20c518b6a7651a47df7658a5a7ed41b3e7e43543d68c1dd4a5d01ec7e42cabdd6963db84f0d69b5a471ff8b929a8774baee39b14ab325af2ea7756c656c0135a59568499208341333d6b896cf0cc10108970e20313df241d179bd2a4d2392b269e6aeb9d2570bba7e3c67f49e90cf95562f93077a5fb588225724d444fcd8da55921dcff7b0be49ac0171ae98209e729f65bcebe447ccc0a185719f3fd55d1ae263daac4a420da91d05cdfc85d48e5743483dbb6fe81e5c216948953d95d5e725db17df44f05a57c6cc425e55572f9163e536a6d2d51d5213c937f6ddba08fc1f90ec73088a766a685f2c0d43b80422d48eef23b2ea588ea26b8dffb4f0df0cf91d6ea8f14a663ba2b165e4427010742fe63905d62b9dcf2385dce09fe75e4746d5c9c402ee77bfc9f39a28eb9f2751a81b090a499706accafbf5ae1afa9af350fd7481bb", 0x1000}, 0x1006)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000280)={0x0, r4, 0x91, 0x0, 0x0, 0x5})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x2008000fffffffe)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x808}, 0xc, 0x0}, 0x20000004)
sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x8000)
syz_open_procfs(0x0, 0x0)
pipe(&(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f00000001c0), 0xfffffef3)
read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0)
setxattr$security_smack_transmute(0x0, &(0x7f00000003c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000400)='TRUE', 0x4, 0x0)
socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198)

00:09:06 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x5, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0xd1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x60}}, 0x0)

00:09:06 executing program 5:
syz_open_dev$loop(&(0x7f00000004c0)='/de\r\xcd\x1a@\xb1\x02\x91\x11', 0x6e04, 0x182)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe)
fcntl$getownex(r2, 0x10, 0x0)
ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100))
inotify_init()
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$getflags(0xffffffffffffffff, 0xe)
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080), 0x4)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe)
writev(r2, &(0x7f0000000680), 0x0)
socket$inet6(0xa, 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0)
r7 = socket$inet6(0xa, 0x480040004000, 0x6)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x5f)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000b82000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r12=>0xffffffffffffffff})
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
r14 = dup2(r13, r12)
ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200)
sendmmsg$unix(r14, 0x0, 0x0, 0x8)
fcntl$dupfd(0xffffffffffffffff, 0x0, r10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x40, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r16, 0x1, r15, &(0x7f0000b82000)={0x40000019})
sendfile(r16, r6, 0x0, 0x800)
write(r8, &(0x7f00000001c0), 0xfffffef3)
fcntl$lock(r8, 0x7, &(0x7f0000000100)={0x0, 0x1, 0xd95})
getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8)
setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r17}, 0x14)
setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r17, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571")
write$selinux_load(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0xa5cc554)

00:09:06 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
prctl$PR_MCE_KILL_GET(0x22)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000002c0)={'team_slave_1\x00', 0x3})
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000180)=0x20)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x800)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000008f78e2cab68b8963bf5b7dd6c5944a87c15d17081fda0e7dca16d3cd0320ca39a072257d3f002453bb538c6898042e172484c48fb91be74f87dcc55f26d9e3a54696b1f3533953e1441e7754087a080e7e453653255a661cd9260ba9b2a5ff61ab208568306c8fb0ffde634b1a85169da2dc10fd57c3ddbd8d8069ac36e687ee3d6717040b98761cb14b14"], 0x0, 0x0, 0x0})
r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r5 = getpid()
sched_getscheduler(r5)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r7})
write$UHID_INPUT(r7, &(0x7f0000000480)={0x8, "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", 0x1000}, 0x1006)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6})
r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r8, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xc0, 0xa, 0x5b, 0x0, 0x0, 0x1, 0x10000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000340), 0x5698f155b51a5a90}, 0x1, 0x0, 0x4016, 0x8, 0xfffffffffffffbff, 0xc, 0x512}, 0x0, 0x6, r8, 0x5)
flistxattr(r9, &(0x7f0000000240)=""/110, 0x6e)
fchmod(r4, 0x10)

[  154.141718] audit: type=1400 audit(1571789346.905:218): avc:  denied  { create } for  pid=6759 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
00:09:07 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x8)
ftruncate(r1, 0x2081fc)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r4 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x820d7e197aee1832, 0x0)
connect$netlink(r4, &(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x42200a0e}, 0xc)
write$FUSE_WRITE(r3, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18)
r5 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
sendmmsg(r5, &(0x7f0000007e00), 0x40000000000025d, 0x0)

[  154.178492] audit: type=1400 audit(1571789346.945:219): avc:  denied  { create } for  pid=6759 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  154.215833] binder: 6771:6773 ioctl 40086607 20000180 returned -22
00:09:07 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x2081fc)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x1)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x20000)
getrandom(&(0x7f0000000140)=""/68, 0x44, 0x3)
read(r3, &(0x7f0000000000)=""/250, 0x128b9372)
r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
write$FUSE_WRITE(r6, &(0x7f0000000080)={0x18}, 0x18)
fcntl$setstatus(r1, 0x4, 0x6100)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r7, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0)

[  154.223934] audit: type=1400 audit(1571789346.985:220): avc:  denied  { call } for  pid=6771 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  154.276959] audit: type=1400 audit(1571789347.045:221): avc:  denied  { setattr } for  pid=6771 comm="syz-executor.0" name="exec" dev="proc" ino=23910 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=0
[  154.324286] binder: 6771:6773 transaction failed 29201/-1, size 0-0 line 3022
[  154.336494] binder: undelivered TRANSACTION_ERROR: 29201
[  154.354305] audit: type=1400 audit(1571789347.115:222): avc:  denied  { setattr } for  pid=6771 comm="syz-executor.0" name="exec" dev="proc" ino=23910 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=0
00:09:07 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80082, 0x0)
write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}, 0xa, 0x8}], 0x18)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}}, &(0x7f0000000180)}, 0x40}], 0x0, 0x0, 0x0})

00:09:07 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x102)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001300)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x3c}, @flat=@weak_handle={0x77682a85, 0x880, 0x3}, @fda={0x66646185, 0x5, 0x1, 0x17}}, &(0x7f0000000040)={0x0, 0x28, 0x40}}}], 0xa6, 0x0, &(0x7f0000001380)="c3717ec7f590e3e6c79310300514a266990cbb7af7e0dbd9f96258ff76f0e52df56e00e84abe064678622cf5dbc43d8ebf9d2128009b319978bb12c04186866d7e8aca818c51a143c57f47837b597172d3624a879a399bb605b54b27ffc5b534b0b97d9a763058ad9690a9f067c1ebc3455e26dd46f6891e948dc5be969004d2a466dd7170fcdbe9d73ee16ffe3d6d311c3fd9d9ada62d75d804427c8d68ef0fc6d68129bc9e"})
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000001440))

[  154.605014] binder: 6793:6794 got transaction to invalid handle
[  154.617566] binder: 6793:6794 transaction failed 29201/-22, size 0-0 line 3014
[  154.636587] binder: undelivered TRANSACTION_ERROR: 29201
00:09:07 executing program 2:
io_setup(0x3, &(0x7f00000000c0)=<r0=>0x0)
io_getevents(r0, 0x2, 0x4, &(0x7f0000000180)=[{}, {}, {}, {}], 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000000)={0x7, 0xbc8a})
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
io_destroy(r0)
prctl$PR_SET_SECUREBITS(0x1c, 0x18)
io_setup(0x3f, &(0x7f0000000080))

[  154.708504] audit: type=1400 audit(1571789347.475:223): avc:  denied  { call } for  pid=6797 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  154.781357] binder: 6797:6798 transaction failed 29201/-1, size 0-0 line 3022
[  154.800297] binder: undelivered TRANSACTION_ERROR: 29201
[  154.994207] audit: type=1400 audit(1571789347.755:224): avc:  denied  { create } for  pid=6759 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  155.039811] audit: type=1400 audit(1571789347.805:225): avc:  denied  { create } for  pid=6759 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
00:09:09 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ptrace$cont(0x7, r2, 0x0, 0x0)

00:09:09 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x1805)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:09:09 executing program 2:
pipe(0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000480)={0x100000000, 0x6, 0x100000000, 0x80000000, 0x6ee4, 0x0, 0x9, 0x0, 0x9, 0x8, 0x75, 0x8})
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x40, 0x9, 0x0, 0x56, 0x1a, 0x84, 0x5, 0x6, 0xfc, 0x7fffffff, 0x6, 0x8})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x0)
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000300)=0x1)
fchdir(r0)
creat(&(0x7f00000004c0)='./bus\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
sendmsg$nl_netfilter(r4, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0)

00:09:09 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x23081, 0x0)
mount(&(0x7f0000000080), &(0x7f0000002d40)='./file0\x00', 0x0, 0x5010, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
umount2(&(0x7f0000000380)='./file0\x00', 0x0)

00:09:09 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4000000fa8})
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
read(r2, &(0x7f0000000000)=""/18, 0x12)

00:09:09 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x137080)
ioctl$BLKSECDISCARD(r0, 0x127f, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x438)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000004c0)={@local}, &(0x7f0000000480)=0xfdbc)
r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x62800, 0x0)
close(r1)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @dev, @broadcast}, 0xc)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000600)="72dcd2d8a0d02d7a145b5f2462d7c0fe4413d96959ceaf5d66298ce7724050bcb834e95ec8329b682ce9d271f16104413e57545ead69a84f6b296b79d0277e37b11c3ee0efba37d1075dab513fa9f0c00cf0fddcff1008fecef3665f7de4a8416654a671b1ebbfe9f65ea57f3c1a44ca093bb47adfa52347773f43887a0a2f9a06a2371de22eb167d394", 0x8a)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000340)={0x6})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$TCSETA(r2, 0x5406, &(0x7f00000003c0)={0x7ff, 0x5, 0x9, 0xff, 0x0, 0x5, 0x99, 0x0, 0x1000})
write$binfmt_aout(r3, &(0x7f0000001140)=ANY=[], 0x0)
r4 = socket$inet6(0xa, 0x6, 0x96)
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000900)={'veth0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={@rand_addr="1258b3a09465ea1ea5055d66630e7b59", @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1140142, r6})
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x2)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x1000000000000003, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup2(r10, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
ioctl$KDENABIO(r11, 0x4b36)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080)={0x80, 0x20000005, 0x4}, 0x35e)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380))
sendmmsg(r4, 0x0, 0x0, 0x0)

00:09:09 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
dup(r1)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x107401, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x40)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x90, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2640}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  157.176427] audit: type=1400 audit(1571789349.945:226): avc:  denied  { call } for  pid=6812 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  157.200793] binder: 6812:6823 transaction failed 29201/-1, size 0-0 line 3022
[  157.210222] binder: undelivered TRANSACTION_ERROR: 29201
00:09:10 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000005d105fe52bb3f5d700000000000000080000000000"], 0x0, 0x0, 0x0})

[  157.215806] audit: type=1400 audit(1571789349.985:227): avc:  denied  { call } for  pid=6812 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  157.215868] binder: 6812:6830 transaction failed 29201/-1, size 0-0 line 3022
[  157.265481] binder: 6834:6836 transaction failed 29201/-1, size 281346127691776-3163038837182038016 line 3022
00:09:10 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0})

00:09:10 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000805, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
fadvise64(0xffffffffffffffff, 0x0, 0xfffffffffffffff9, 0x3)
sendto$inet(r0, &(0x7f00000012c0), 0xfffffffffffffff2, 0x11, 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={r2, 0x0, 0xc2, 0xffffffff, 0x556})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
dup2(r3, r1)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x8905, &(0x7f0000000000))

00:09:10 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x4002)
io_setup(0xc32f, &(0x7f0000000440)=<r2=>0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0)
ftruncate(r1, 0x48280)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}])
openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0)

[  157.303435] binder: undelivered TRANSACTION_ERROR: 29201
[  157.327600] binder: undelivered TRANSACTION_ERROR: 29201
[  157.334332] binder: 6843:6844 unknown command 0
[  157.340679] binder: 6838:6839 ioctl 40046207 0 returned -13
[  157.383912] binder: 6843:6844 ioctl c0306201 20000140 returned -22
[  157.432068] binder: 6843:6854 unknown command 0
[  157.446484] binder: 6843:6854 ioctl c0306201 20000140 returned -22
00:09:10 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x121000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/13)

[  157.520103] binder: 6860:6862 transaction failed 29201/-1, size 0-0 line 3022
[  157.546457] binder: undelivered TRANSACTION_ERROR: 29201
[  157.557238] binder: 6860:6863 transaction failed 29201/-1, size 0-0 line 3022
[  157.573820] binder: undelivered TRANSACTION_ERROR: 29201
00:09:12 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

00:09:12 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000002c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000080)=[{}], 0x0}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000000)={@empty, @empty, @rand_addr=0xfffffffd}, 0xc)
recvmmsg(r1, &(0x7f0000000300), 0x121, 0x0, 0x0)
setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x3bc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x400000000000123, 0x0)

00:09:12 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000100000000000000000000000000000000000000000000000000080000000000000007d2c00"/68], 0x0, 0x0, 0x0})

00:09:12 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x2081fc)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x800002, 0x4000010, r5, 0x0)
read(r3, &(0x7f0000000000)=""/250, 0xedf1d44)
r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
fcntl$setstatus(r6, 0x4, 0x40400)
setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000280)=0x6, 0x4)
write$FUSE_WRITE(r6, 0x0, 0x0)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9)
fcntl$setstatus(r1, 0x4, 0x6100)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binderN(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
poll(&(0x7f0000000040)=[{r8}, {r7}], 0x2, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
sendmmsg(r9, &(0x7f0000007e00), 0x40000000000025d, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e)

00:09:12 executing program 4:
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x4c1f, 0x9}, {0x5, 0x3f}]}, 0x14, 0x1)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4000000004, &(0x7f0000000080)="441f07638d0000000000000e6d0000b69c14bbf1a236b160ba6b3abe0f", 0x1d)
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))

00:09:12 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x4002)
io_setup(0xc32f, &(0x7f0000000440)=<r2=>0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0)
ftruncate(r1, 0x48280)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}])
openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0)

00:09:12 executing program 4:
r0 = eventfd2(0x0, 0x0)
fcntl$getownex(r0, 0x10, 0x0)
r1 = fcntl$getown(r0, 0x9)
getpgid(0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/rfcomm\x00')
readv(r2, &(0x7f0000002340)=[{0x0}], 0x1)
readv(r0, &(0x7f0000000580), 0x0)
syncfs(0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x4, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x0, 0x0)
clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x1, 0x80005, 0x1800000000009)
r3 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0)
close(r3)
r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082)
r5 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0)
pwritev(r5, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x7, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c)
ioctl$UI_DEV_SETUP(r6, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'})
write$binfmt_elf32(r6, &(0x7f00000043c0)=ANY=[@ANYBLOB], 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x0)
pipe(&(0x7f00000003c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r8, &(0x7f00000001c0), 0x526987c9)
lstat(&(0x7f0000000040)='./bus\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000680))
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000400), 0x0)
read(r7, &(0x7f0000000700)=""/250, 0xffffffc9)
sendfile(r4, r5, 0x0, 0x180003)

[  160.201743] audit_printk_skb: 18 callbacks suppressed
[  160.231697] audit: type=1400 audit(1571789352.965:234): avc:  denied  { call } for  pid=6870 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  160.310485] Dead loop on virtual device ip6_vti0, fix it urgently!
[  160.336100] binder: 6870:6878 transaction failed 29201/-1, size 36028797018963968-3205718509757661184 line 3022
[  160.347629] Dead loop on virtual device ip6_vti0, fix it urgently!
[  160.385497] Dead loop on virtual device ip6_vti0, fix it urgently!
[  160.394847] binder: undelivered TRANSACTION_ERROR: 29201
[  160.412854] audit: type=1400 audit(1571789353.175:235): avc:  denied  { call } for  pid=6870 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
00:09:13 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200080, 0x0)
write$FUSE_POLL(r2, &(0x7f0000000180)={0x18, 0x0, 0x7, {0x2}}, 0x18)
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  160.436494] binder: 6870:6898 transaction failed 29201/-1, size 36028797018963968-3205718509757661184 line 3022
[  160.447761] binder: undelivered TRANSACTION_ERROR: 29201
[  160.462942] Dead loop on virtual device ip6_vti0, fix it urgently!
[  160.516866] audit: type=1400 audit(1571789353.285:236): avc:  denied  { call } for  pid=6900 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  160.517606] Dead loop on virtual device ip6_vti0, fix it urgently!
[  160.522815] Dead loop on virtual device ip6_vti0, fix it urgently!
00:09:13 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r2, r1)
getpeername$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340400000000100"/68], 0x0, 0x0, 0x0})
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6)

[  160.561653] binder: 6900:6901 transaction failed 29201/-1, size 0-0 line 3022
[  160.582925] binder: undelivered TRANSACTION_ERROR: 29201
00:09:13 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x0)
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c)
r1 = getuid()
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in6=@loopback, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x10, 0x33, 0x0, r1}, {0x4, 0x1000, 0x80, 0x9, 0x2a9, 0x800, 0x800, 0xfffffffffffffffe}, {0x0, 0x3, 0x0, 0xff}, 0x9, 0x6e6bb8, 0x1, 0x19d7a73ff08fdf9f, 0x4}, {{@in=@rand_addr=0x4, 0x4d5, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x24}, 0x3501, 0x0, 0x1, 0xff, 0x4, 0x2, 0xc3}}, 0xe8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, {0x2, 0x80, @broadcast}, 0x114, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='lo:\x00\xff\x05\x00\xf2\xff\xff\xf8\xff\xff\xff\xff\x00'})
lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b, 0x1)
r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r3, 0x0)
keyctl$describe(0x6, r3, 0x0, 0x0)
keyctl$describe(0x6, r3, &(0x7f0000000300)=""/83, 0x53)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
write$P9_RREMOVE(r6, &(0x7f0000000380)={0x7, 0x7b, 0x2}, 0x7)

[  160.665158] binder: 6904:6905 got transaction to invalid handle
[  160.679015] binder: 6904:6905 transaction failed 29201/-22, size 0-0 line 3014
[  160.702001] binder: undelivered TRANSACTION_ERROR: 29201
00:09:13 executing program 1:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x8000)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
execveat(r3, 0x0, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
write(r2, &(0x7f00000001c0), 0xfffffef3)
writev(0xffffffffffffffff, 0x0, 0x0)
read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x83)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x165)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000005c0)=""/221, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r5, &(0x7f0000000100)={0x2, 0x100, @multicast2}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x400000000000068, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0)
connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x400000000000068, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6g\x02\x00', 0x199)
connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r7, &(0x7f0000007fc0), 0x400000000000068, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r8, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r9, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r9, &(0x7f0000007fc0), 0x400000000000068, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRES32=0x0, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRES16], @ANYRESHEX, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRESOCT=r6, @ANYRES32=r7, @ANYRES64=r8, @ANYRESHEX=r9], @ANYRES16=0x0, @ANYRESOCT=r1, @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYRES32=r5, @ANYRES64, @ANYRES64=0x0, @ANYPTR, @ANYPTR64], @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRESDEC=0x0, @ANYRES16]], @ANYRESDEC, @ANYRESHEX], 0x2e)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r10 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r10, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
socketpair(0x3, 0xa054b98f838cc548, 0x7f, &(0x7f0000000180))

[  160.721544] binder: 6904:6910 got transaction to invalid handle
[  160.735498] binder: 6904:6910 transaction failed 29201/-22, size 0-0 line 3014
00:09:13 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  160.765789] binder: undelivered TRANSACTION_ERROR: 29201
[  160.796723] audit: type=1400 audit(1571789353.555:237): avc:  denied  { create } for  pid=6913 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  160.836780] audit: type=1400 audit(1571789353.605:238): avc:  denied  { call } for  pid=6917 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  160.865057] audit: type=1400 audit(1571789353.625:239): avc:  denied  { create } for  pid=6913 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  160.932335] binder: 6917:6918 transaction failed 29201/-1, size 0-0 line 3022
[  160.954233] binder: undelivered TRANSACTION_ERROR: 29201
[  160.968292] audit: type=1400 audit(1571789353.735:240): avc:  denied  { call } for  pid=6917 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  161.106580] binder: 6917:6922 transaction failed 29201/-1, size 0-0 line 3022
[  161.155067] binder: undelivered TRANSACTION_ERROR: 29201
[  161.261528] audit: type=1400 audit(1571789354.025:241): avc:  denied  { create } for  pid=6913 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  161.307998] audit: type=1400 audit(1571789354.075:242): avc:  denied  { create } for  pid=6913 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
00:09:15 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

00:09:15 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4, 0x0, @ipv4={[], [], @rand_addr=0xfffff801}}, 0xfffffe1f)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(r4, 0x1000000000013)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6})
ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f00000000c0)={0x1, 0x1f, &(0x7f0000000080)="73ef916a190bc9c8a2ac4f5e9958ab785d852496dfadbd639a0d93352cd14d"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r8}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0)
r9 = dup2(r7, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$sock_inet_udp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000040))

00:09:15 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8fd95c852a98fa248e37000"/79], 0x0, 0x0, 0x0})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20002, 0x0)

00:09:15 executing program 2:
setrlimit(0x9, &(0x7f0000000000))
clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d68b2e4dc14aa5fa8b3d94c22")
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x51ff05a0629e6ff9, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000080)=0x4)

00:09:15 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x15, 0x0, @loopback}, 0x1c)
arch_prctl$ARCH_GET_CPUID(0x1011)

00:09:15 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x16, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0xe, 0x0, 0xffffffff})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1280400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}]}, 0xcc}, 0x1, 0x0, 0x0, 0x700bb583c213c9de}, 0x46080)
r4 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff)

00:09:16 executing program 2:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0xfa, &(0x7f0000000040), 0xfffffffffffffdb0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
r1 = gettid()
read(r0, &(0x7f0000000180)=""/221, 0xdd)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1004000000013)

[  163.250648] audit: type=1400 audit(1571789356.015:243): avc:  denied  { call } for  pid=6932 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
00:09:16 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0)
write$P9_RSTATFS(r2, &(0x7f00000000c0)={0x43, 0x9, 0x2, {0xfffffff8, 0x187f, 0x3a, 0x79, 0x8, 0x10001, 0xfffffffffffffff9, 0x7, 0x3}}, 0x43)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
syncfs(r0)

00:09:16 executing program 1:
r0 = socket$inet6(0xa, 0x80000, 0x0)
r1 = dup(r0)
bind$inet6(r1, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
accept4(0xffffffffffffffff, &(0x7f0000000100)=@caif=@util, &(0x7f00000001c0)=0x80, 0x0)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
fallocate(r5, 0x0, 0x0, 0x5f5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r7, r6)
r8 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x1000)
getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000780)=0xffffffffffffff66)
r9 = socket(0x100000000011, 0x2, 0x0)
bind(r9, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, <r10=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r10, 0x1, 0x6, @local}, 0x10)
dup(r9)
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000002c0)={r10, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000340)={r10, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
write(r11, &(0x7f00000001c0), 0xfffffef3)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x2000, 0x0)
ioctl$KDDISABIO(r11, 0x4b37)
getpgid(0xffffffffffffffff)
getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@ipv4={[], [], @initdev}}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8)
getgroups(0x4, &(0x7f0000000680)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0])
setsockopt$sock_cred(r11, 0x1, 0x11, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180), 0x4)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0x800)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x100)
ftruncate(r12, 0x10199b4)
sendfile(r0, r12, 0x0, 0x800100000001)

00:09:16 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
fsetxattr$security_selinux(r2, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:root_t:s0\x00', 0x1c, 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="39000000130003006900000000000000ab008048060000004600010707000014190001401000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x1)

[  163.315377] binder: 6932:6944 transaction failed 29201/-1, size 0-5965182624472236032 line 3022
[  163.333432] Dead loop on virtual device ip6tnl0, fix it urgently!
[  163.350773] binder: undelivered TRANSACTION_ERROR: 29201
00:09:16 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x3ff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
personality(0x1bb2baf3005ac137)
mkdir(&(0x7f000002b000)='./file0\x00', 0x0)
creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0)
r2 = open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r2, 0x0)

[  163.406054] binder: 6956:6960 transaction failed 29201/-1, size 0-0 line 3022
00:09:16 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0xfffffffc, 0x0, 0x0, 0x8, 0xffff}, 0x2)

[  163.446475] binder: undelivered TRANSACTION_ERROR: 29201
[  163.451998] device lo entered promiscuous mode
[  163.475365] binder: 6956:6968 transaction failed 29201/-1, size 0-0 line 3022
[  163.500187] binder: undelivered TRANSACTION_ERROR: 29201
[  164.127050] Dead loop on virtual device ip6tnl0, fix it urgently!
[  164.194335] device lo left promiscuous mode
00:09:19 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

00:09:19 executing program 4:
ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000180)={0x7, 0x200, 0x2})
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e23, 0x0, @rand_addr, 0x1}, 0x1c)
ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000000))
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=@srh={0x2f, 0x2, 0x4, 0x1, 0xc2, 0x20, 0x7fff, [@mcast2]}, 0x18)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000080)=0x800, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @rand_addr="3192322ad1fc4a73e7c32794e2405455"}, 0x2)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000140)=0xffff)
r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x8000)
ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x4)

00:09:19 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7e, 0x0, 0x0}}], 0x0, 0x0, 0x0})

00:09:19 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001440)='/dev/ion\x00', 0x0, 0x0)
ioctl(r0, 0xc0084907, &(0x7f0000000100)="2994ddfd61")
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15)
r2 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x80000)
ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x10, 0x32, 0xb, 0x1, 0x1, 0x5, 0x5, 0x15d}})

00:09:19 executing program 2:
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r3, &(0x7f0000001d80)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x1, 0x0)

00:09:19 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000), 0x4)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68)
write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYPTR64=&(0x7f0000000140)=ANY=[]], 0x5)

00:09:19 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1)
getpriority(0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0))
pipe(&(0x7f00000000c0))
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x40)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000300)='net/igmp6\x00')
preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000200)=""/222, 0xde}], 0x2, 0x0)
write$P9_RREAD(r4, 0x0, 0xfffffffffffffe2d)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
open(0x0, 0x0, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
pipe2(0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
prctl$PR_GET_THP_DISABLE(0x2a)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4)
ftruncate(r2, 0x80006)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r5, 0x1000008910, &(0x7f0000000040)="11dca542cfc3df7452d1bf")
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff})
flock(r6, 0x922f358ed6f687ba)
r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000000)={0x0, r8, 0xd, 0x2, 0xfffffffffffffffc})
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
dup3(r0, r1, 0x0)

00:09:19 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xa)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r1 = socket$inet(0x10, 0x2000000000000002, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2f0000001d0005c5ffffff000d0000000200001f01000000000002c9130001000000000050800000d18e1092e0c875", 0x2f}], 0x1}, 0x0)
accept(r1, 0x0, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x44f8f437147c3b7, 0x2)
sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2f0000001d0005c5ffffff000d0000000200001f01000000000002c9130001000000000050800000d18e1092e0c875", 0x2f}], 0x1}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet(0x10, 0x2000000000000002, 0x0)
sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2f0000001d0005c5ffffff000d0000000200001f01000000000002c9130001000000000050800000d18e1092e0c875", 0x2f}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x2000000000000002, 0x0)
sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2f0000001d0005c5ffffff000d0000000200001f01000000000002c9130001000000000050800000d18e1092e0c875", 0x2f}], 0x1}, 0x0)
fstat(r4, &(0x7f0000000280))
r5 = syz_open_procfs(0x0, &(0x7f0000000580)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a\xc9n;v<\xd6h\xb0\x15\xaf;x\xb5;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK(\x0f\xadG\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa9<s\x18\xb7\xbc\xc3\xc5o\xd7\x0fu4(c\xcd\xd6u\xa4\xff\xea\xb1\x96\xdbI\xb72\xb4\xcfahW\x9c\xcc\x00\x00\x00\x00\x84OE')
openat$cgroup_ro(r5, &(0x7f0000000380)='mem\x00\x01y\x04\"waS\xbbb\x85\x17\x89\xc95\x86B<\r\xe8\xea\xc7\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;', 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
r6 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0)
write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000001780)={0x18, 0x0, 0x0, {0x10001}}, 0x18)
r7 = socket$inet(0x10, 0x2000000000000002, 0x0)
sendmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2f0000001d0005c5ffffff000d0000000200001f01000000000002c9130001000000000050800000d18e1092e0c875", 0x2f}], 0x1}, 0x0)
write(r7, &(0x7f0000000180)="fd986cdc4b5bfaa9b731493a38a9da73876514d6c3af857a85f72512b6e9658608dc661643416383326824ed645d3ceb3ec9c484afb6859c80cc7f6b9449e9020be0934b99780f81b76904f1765eb964b56dba0be841932a7ea3f4d6762611e51f3bd4e26b96a4a31c49af3cb7", 0x6d)
ftruncate(r6, 0x200004)
sendfile(r0, r6, 0x0, 0x8000fffffffe)

00:09:19 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101})
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0000010000000002000000e0000001e00000014c7c58072c4c3e97db9190c79713758741798d300d320870612cd5f6a360234a20378839b95132280f8af7f141a7040000009faa6b9fcdeeb57ea7bb2e338c21902d96941e27ef030000001dd1cca46ccfba7ca34f3abdf186921d2180e43bc6c513894e54b81d7a3a0c053c8dd109e59cdfbbe7022897d2eaca9eea79f76afbd6a6fcbfa335a9e0c45bfcfad61ca10905abf9dc6c646f3ae497ff4e5eb25a0c18c97847f90398d7afb6211b80a5049e95cae877dcfe"], 0x18)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'lo\x00\x00\x00\x00\x00\x00\x00`\x00'})
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
poll(&(0x7f0000000140)=[{r2, 0x64}], 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x40)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r5, 0x0, 0x0)
ptrace$setregset(0x4205, r5, 0x203, &(0x7f0000000100)={&(0x7f0000000040)="8d02f81c82b096dd3587c0bbfef1bf76182a0cf9457a5d66c71f679f6b5407fc4769f22b3ddbcdc45812abc0665a77b7befb4e7b75f853733689fa9aaa21e87d0c7d31bea14b9444909cdb3109561090d0723aec2b6a1994c87c943d7c1c7af7e46c80fe9e739dd7f4", 0x69})

00:09:19 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@dev}}, 0xe8)
sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)

[  166.285677] audit_printk_skb: 18 callbacks suppressed
[  166.291198] audit: type=1400 audit(1571789359.055:250): avc:  denied  { call } for  pid=6983 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  166.322092] binder: 6983:6989 transaction failed 29201/-1, size 0--130 line 3022
00:09:19 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000800000000000000000000000001600000000000000000000f33c4b641090a592000000000400000000000000f400"/68], 0x0, 0x0, 0x0})

[  166.352575] audit: type=1400 audit(1571789359.115:251): avc:  denied  { create } for  pid=7005 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0
[  166.362458] binder: undelivered TRANSACTION_ERROR: 29201
[  166.388070] device lo entered promiscuous mode
[  166.396467] device lo left promiscuous mode
[  166.402502] audit: type=1400 audit(1571789359.165:252): avc:  denied  { call } for  pid=7015 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  166.429931] binder: 7015:7016 transaction failed 29201/-1, size -6516690637860048128-4398046511250 line 3022
[  166.442108] binder: undelivered TRANSACTION_ERROR: 29201
00:09:19 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x400, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0xc5, 0x92, 0x4, 0x0, 0xc9, 0x10, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x5, 0x40bd26a1}, 0x4480, 0x5, 0x6, 0x2, 0x8, 0x200, 0x1ff}, r1, 0x8, r2, 0x8)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3})
accept4$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14, 0x80800)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340401b0000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000f1d3e94a000000000000"], 0x0, 0x0, 0x0})

[  166.446503] Dead loop on virtual device ip6_vti0, fix it urgently!
[  166.447233] Dead loop on virtual device ip6_vti0, fix it urgently!
[  166.448167] Dead loop on virtual device ip6_vti0, fix it urgently!
[  166.448986] Dead loop on virtual device ip6_vti0, fix it urgently!
[  166.449655] Dead loop on virtual device ip6_vti0, fix it urgently!
[  166.450861] Dead loop on virtual device ip6_vti0, fix it urgently!
[  166.477489] audit: type=1400 audit(1571789359.245:253): avc:  denied  { call } for  pid=7015 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  166.477545] binder: 7015:7021 transaction failed 29201/-1, size -6516690637860048128-4398046511250 line 3022
[  166.499917] binder: 7023:7024 got transaction to invalid handle
[  166.499926] binder: 7023:7024 transaction failed 29201/-22, size 8796093022208-0 line 3014
[  166.501526] binder: 7023:7025 got transaction to invalid handle
[  166.501533] binder: 7023:7025 transaction failed 29201/-22, size 8796093022208-0 line 3014
[  166.549863] binder: undelivered TRANSACTION_ERROR: 29201
[  166.555469] binder: undelivered TRANSACTION_ERROR: 29201
[  166.561077] binder: undelivered TRANSACTION_ERROR: 29201
[  166.586869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23371 sclass=netlink_route_socket
[  166.598584] audit: type=1400 audit(1571789359.365:254): avc:  denied  { create } for  pid=7005 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0
00:09:22 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0))
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

00:09:22 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x9, 0x0, [], [{0x8, 0xfffffff7, 0x3, 0x1, 0x6, 0x3}, {0x5, 0xffffff00, 0x7, 0x0, 0x81, 0x4}], [[], [], [], [], [], [], [], [], []]})
openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0)

00:09:22 executing program 2:
clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x36)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0xfffffffffffffe54, &(0x7f00000000c0)=[{0x0, 0xfffffffffffffce2}, {0x0, 0x15e}, {0x0, 0x3ff}, {&(0x7f0000000000)=ANY=[], 0x9c}], 0x1000000000000063, 0x0, 0xfffffffffffffe82}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000840))
ptrace$cont(0x20, r0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
memfd_create(0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
fsetxattr$security_evm(r3, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0233db6bf7d4c6c3bc799df222a748844f02c97573373c76efd146373f2aaf296fc06065478d7a084c6ff8dabad01b9c9aa773ae810086d7839a5956537934dc76551921d0a46dcd996ca1406ad49d7f3d3066e90c4c8c418f5f31ba6df7fc6fc1c754648275fd0d0ad080b28efc0076619e3d2995fb00000000"], 0x1, 0x2)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0)
r5 = open(0x0, 0x0, 0x1c0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022bbd7000ffdbdf25020000000c0a060001000000000000000c0000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r7})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r9, r8)
getpeername(r8, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, <r10=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x80)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={<r11=>0xffffffffffffffff})
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r12})
r13 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r13, &(0x7f0000000480), 0x0, 0x3)
r14 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/zero\x00', 0x111000, 0x0)
sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb8, r6, 0x606, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x114}, @NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r10}, {0x8, 0x1, r2}, {0x8, 0x1, r11}, {0x8}, {0x8, 0x1, r12}, {0x8, 0x1, r1}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r13}, {0x8, 0x1, r14}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x43}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24004005}, 0xb9473506025dcf52)
read(r1, &(0x7f0000000200)=""/250, 0xfffffe8a)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x9, 0x100000001, 0x10001, 0x8, 0x2, 0x3, 0x4, 0x1f4, 0x40, 0x14c, 0x0, 0x5, 0x38, 0x1, 0x80, 0x2, 0x7}, [{0x2, 0xfff, 0x7ff, 0x3, 0x2, 0x7, 0x911, 0x80000000}], "be5d0b7aafba3908eabaa1818d8d6a", [[], []]}, 0x287)
inotify_init()
clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x2, 0xc)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000000c0)=0x1)

00:09:22 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x2f5fa26)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
fsetxattr$system_posix_acl(r3, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r4, @ANYBLOB="040080000000000010000700000000002000010000000000"], 0x2c, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@loopback}}}, &(0x7f0000000080)=0xe8)
getresuid(&(0x7f0000000100), &(0x7f00000002c0)=<r6=>0x0, &(0x7f0000000300))
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r7, &(0x7f0000000000)='threaded\x00', 0x2f5fa26)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
fsetxattr$system_posix_acl(r7, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r8, @ANYBLOB="040080000000000010000700000000002000010000000000"], 0x2c, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8)
r10 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r10, &(0x7f0000000000)='threaded\x00', 0x2f5fa26)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
fsetxattr$system_posix_acl(r10, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r11, @ANYBLOB="040080000000000010000700000000002000010000000000"], 0x2c, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8)
r13 = getgid()
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x5}, [{0x2, 0xa, r4}, {0x2, 0x6, r5}, {0x2, 0x7, r6}, {0x2, 0x1, r8}, {0x2, 0x4, r9}, {0x2, 0x6, r11}, {0x2, 0x1cfacae475641c60, r12}], {0x4, 0x5}, [{0x8, 0x2, 0xee00}, {0x8, 0x2, r13}], {0x10, 0x7}, {0x20, 0x1}}, 0x6c, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x8010, r1, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r14=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r14})
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f00000000c0)={'\x00', 0xc205})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001)
r15 = socket$inet(0x2, 0xa, 0x0)
dup2(r15, r0)

00:09:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@dev}}, 0xe8)
sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)

00:09:22 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x109}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x9, r0, 0x100, 0xfd9a)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  169.272777] Dead loop on virtual device ip6_vti0, fix it urgently!
[  169.290053] Dead loop on virtual device ip6_vti0, fix it urgently!
00:09:22 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
r0 = getpgid(0x0)
write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x1, {{0x8, 0x3f, 0x0, r0}}}, 0x28)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000380))
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000003c0)=0x401)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10)
fchdir(r1)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x200, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000340)='threaded\x00', 0xffffffc5)
ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000140))
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup2(r6, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
setsockopt$inet6_udp_int(r7, 0x11, 0x66, &(0x7f0000000180)=0x7, 0x4)

00:09:22 executing program 0:
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffe1f, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0056cfae8e2cffd0c0af650e00000000000000000000000000000000000000040000000000120082ffffffbfffffff000800000000000000000000000052000000000000"], 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@polexpire={0xc8, 0x1b, 0x200, 0x70bd2d, 0x25dfdbfc, {{{@in=@rand_addr=0x7, @in=@broadcast, 0x4e24, 0x1, 0x4e21, 0x80, 0xa, 0x0, 0x20, 0x0, 0x0, r2}, {0x1, 0x9b, 0x0, 0x1, 0x3, 0x7fffffff, 0x4, 0x1000}, {0xfffffffffffffffd, 0xc3, 0x9, 0x2}, 0x9, 0x6e6bbf, 0x0, 0x3, 0x2}, 0x2}, [@ipv4_hthresh={0x8, 0x3, {0x11, 0x8}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)

[  169.335893] binder: 7032:7043 ioctl c0c0583b 20000240 returned -22
00:09:22 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00')
r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0)
r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r2, 0x0)
keyctl$describe(0x6, r2, 0x0, 0x0)
r3 = add_key(&(0x7f00000191c0)='big_key\x00', &(0x7f0000019200)={'syz', 0x2}, &(0x7f0000019240)="d3704e67b9f145763641f6f4e69d89ca806c366756bf9ab87fb4cf7fba5e09c6b41041c5189f4af6f9bb4499d3ef1f9c594c28a6fde31051b5d4c0e672c152dcff80aae9bce2e3ce0f879da9c29e114dffd9485c078048ed037235357a7bb728cabc08e129df89176285b986a3cf05451c540366c02b63afbeea44cab913630845036de3bd8cff108bb247b173516de21417b836722e315a8700de94bb7e8538cca097d3db83e9f97cdcfcccf348150d9d9fcd3fb89a2d0b9be39eaef57ad688e04212862c7f0f9a8c5561876d887082d7439cc5fe80303d5fb6ae38e6f0fc1c70b0b9c3d88e9dd9800d781986af142a83b063eb18b0ebe55e1be09dd209876679e80687a2bae0415809e811a6eaa459a440f9f6f5b065db3b27f48db633187d7371611fec120b2c66872328a42e6bf33989e4a25a895f95c75eb28ff565278f977fc12f5620df4cf15be5ec2867e22b375e253f8b90fd5d103afe1c066d9f612e39fa2a061bfa9f963835669d6eb29622bc542663f9d4a763713227f49ba50808873027d5c949190cf2ba89de94ba1b91b5a80d6a7b63b30ecff2f6d3b1259a14ed5d59bed033152bca1c1d2851758a7e7a84365fa0d5c014b1a8664c2dab1b26f0d16071e36c2a560ecb61d5895d16dd35053aa4c8146236e61ff05fca5364bcf2ef78abccec3512b7cf18bb4567a7364cc7911c25221d62fb78547d3cba504c2e4e50e6b3f203743be61b11d91d5ae23f8dca9450764627008fccadc79f97a22beda3c1db5d6a46cb9b4f5bf3108c3f0047e43ca68bb1a9269571a4d4977f1f5bbf8b72aec0e9dc452b14ae08be187318cc714462cf619d1199c189e3a4b69c85c5df30d107349e062fe5ba90371fcd64a050eaa1d3795465b8f0c4a73466a763816dc5adefce63a70b06171438fe54312e2e0be51afeeecdd92d4b3070b99c3c9f64f04d49723bac79b495e4fe25735c4a65da07bd368861ff9798df7a4046865cae15e9b73846ce384c355272c86f2957918bd4922a149bd984753892a21a4b19c3c7a3d9a0147d979242cdad687c742861a6dd277335f04c8a97407e3347cd1fa314051e9ff95fc76c9c934a57f01a6d07ea14bf8ee712eadb96e862fd9cf5c6ba49a4eb029c8888fd551e4a76db3ff1eb23f219bc20f4048240580f803df8c32073d97f0cbf21401c20b9ff1b2f8247d73c5e941e04bce3fe1e366e37017a9f6f2c24a4286a852240ab2d3c49f6957cba8f96ac425b9394e518d30daa912f848d63f5ce3901778d5c1e309a6eef8b05dcf72543b72d1536006b3ea3cf7d1660844eeb320b59d3ba01952d5ca818c27b2bf5eeab59ac39c9802234462d5e6e875180d4a6536fbec79d054a769cfc9badbfa7ea901aaa78f62de7db5a7a50a0512c5bd5ee9f1cce25b7192f542358c259833e2a57e87007746a446768c156d9cee731daf3523d520d74dc0dcbfcaecc037f43eac53351a1c5149948ae7048c17bdeea563e159cb274bf65f3ff4033a22f6a825e0621e8bb79e7c8a8820769cab79db80f272b74ef0dbfc7a7ff46cd058adf4596f6e2073875bd58db0a4c497ed22e8a2e61085aebd8f5d73c9051778e4434bfa26bcb28fa52d0074ac5df75e3383e96ec00f20df7e2efd829604cabd914c033eea7776097e83230b5afb9caae17778ab70f1ffc582ae5092a5717e74a87a4e71e4ccf1df29443e43ae4f92edda1acfcfc224a60db1e83105a541491ffbf71f2534efab827ae8b443ab11d007e08736d97b9f4c2b57e0d421fdaafac7ece5d1176d3dc6cf5fc70e889e9f160f82749d1889c9294e9bc094f438cdc1ea03ea8efef107bb43de9a654574d11830a7b1968fb230b0289edfb670b101e9a9f5306b27c8053b17637e9f8f896198c4d65f70e5cfe1a9f804dbbb47511fe7c922c5e7adf835d1cc07aa40045da4713eda89fe56435ef41cfa41151a233fa66b685bd4249bd481a44c76edd3a392d463e498ed8aba50754b0f8a7ee52c1a01e66ce5c30afa921e711792247e8aa9d456ff98799b2fb6798a0b309ec2fd1df3c118653d51ed614dce056481c7862589287b9b4c98b46b755403240702183da8eab973142a93f7dddf4c137571d05e643168c2266c18d4f724684ccbcdfa8a0a9055aff98b14ee60af9b6ea4ce5ef58c50d021d4844822caf26f7919e453201b3dc231c387ce249cb5e69de3d9570eb4aa5f2be7d96427f3a7bdaeff1caf349ad30ca2204f916ce84f9b7d5d7c28660bfebccaedba11b9d22d72e50194d1beedce5d0a42265446e2213ea92221c3767d84a795d386e32c0b02a3457b2cc418913176ceb89ab97869007e33e5900137bbce1956f13805f5afa8f032d61dc7b6dcf76a8ccecdecc8ec3cd98c05070592a6ad504876c58db1d10f4d141c9462f77a2cf4e3e1e8f94029f0e5e0ce4f67b1a5d0f3f1182372730ffb4d52e84acc9d9e7d7bb795635566fb1a8103a8a3501f9bec7e92d1e429c4d75c0e39a60b76ab0bf58d6c0110d38eee75a78b4826c99734fc07de4b7a7d04b3e34dfbf15a3fdd6a24db1e93c94149f1f4469dccb823e60de55881f195ac64225eae17a3892aa02ea0917e412cb91faa7e9071f2aa2e8f3c8b5a337babdedd8830306f9f5b17132de8e49de25af7d88931e4816da033e7ce6032fa12cbff8d958de1d3ad5aff9560717f3694d48eae6fd9ad088aeffdec5948e30d4e7adb799107e034b496a1fad1b0fe848ec94d311d03178fc25f7f507ba356eb728ebf96c0e11894d35616fd5bc96347e66efb6f7dd8b99d286a48e42644a6e34a2537fd6d1441fb0ae17f1e2d1e3cd825b3f7f4274c723b368beda101730659324fc3dab20a94fff8d4cd51f608d231addc763835fefe32b830a54af1fb8e070720c74d18f9a6364e4544bd685d51353038dbcad2c947dfb3877fc905d5c027b75824b69e05285dafd4f5dcd0b7686cac858d8a437e72139973d78ee18772c7da5a01b03412bb5c3ffd34391f922b53ce809a3f7d23aee53dfe409373fe1ab9122a7dc2daf8ab0e65c0c04f158091f671e0e08c337c2bc5ad0459a43fcf9d670ff8fc82461d889c253a2498bf55eb135cefd7b3b92c753da0dd0cbde99e7bec4e90832f6e9fe82924941e6d2ec8bd9901d6c5a1b80f8a3ab6a6dc9482036f46ced98b0662111e24b9ec82ea15ad036f8df3ad90fddb58379b0c293adc46652e103bb997ad178f4848fe42caa86c0fc5272f18a0078b86aa06fe67640f564149073b9e574773030ad72b282f77e6ef7feff070f14dfeda6485b606fa9e6c5e7958a2bbdbb6202c202a80151e36718d559b0ccf1fd11f08d1010ff491b94f5a4a50d64a64d651b8181f002ee3746ee373e8bde8e025db9e038309846925277076de4b955e22cb1fa03f7ddbaac85f1cbe7253647fc7219667b699a6ce346e12938c1e5512eae183cf5ec7a47854d13dee83c908a700d69f8b4643b96114199966cf2bbd6ff3f99c1488b7e03aa6ce2c5e3736690c51431155c9588bdcdd51c2d064f1545b2f99d32785b63c3d15f149f41b5d77eae01f29a914a7c8dc2308ba51ea596d3ea8ee000cce4cf70aebcacaf3f75d7cc6aab4a75197c85ebe7dff478253e6b5d98110106a002dfbc33d629e37b7f29b1c2001103b65200f5e741eda39a517edde059ff9d555f4c43408cb34742d5096d328285b52bc082116914ccacfa55ee7712a661f01a5ce61ea9a8b70f826d71e8053c4846058c45b20ef0265faa4bffaf1d9cc11ec58c7b6ecb6766ca0bfaa0678176aaac327af36d1808876d406a71a0274ef7f364cbc667785acdabf29199898815cf52d43265685ffc7a9084895793cb9cc32df787a8cd9033f6d57f7596b3a9392deda12d95b6438b1874e88b50933f50c41771699a7a16d6f4834c1457d97c75b6f802bdf6a7bfcb36859ed07efce0868bb4ed3393078320e2c0731b21d266b2e1ba0d9dafae0a967b719847a8cdb5692edcbf5a6257d873b98595919887dd91b4ad700dcb28dd6acb96d0143090d3d4e35ca17f80a24fb778e582d42b8eba95dc784e17f2fa07a7df944bfd6f833eab770a450fed2c9829111f1eebdfeef0cb11026001d326140ebd47823b52e660356cf5b8b70f3c317ce7255eb15a138e0b430a7925fb2554914efc5436b85bca8339ac5434ccd7d431dee01e0c5c6eb218dc07036315e2fc6dff73b95637e7eea4965042d7219caf4e34b81b631759f1847cfc5d8fcd3a20073b63b938ca78e05a3431e47ee7413b345700991fd24c0558b740810cd67dc1f7002d453165858795b1abe57d057bf4d2a91fc12f5bee09497e3f1928caa5481cb74eb22ff2201200732a468ca0591aed5b5ee5fed86de1e67f8a7147182f2df4a0bfd4aad74b807bc42d09d4d19c88f1090c4ba792de91c56e74a61e0d42d2da5d968b19a8151d9b95a85d1e88a1b7b4561e0922c9d92f88209086cbfbd50c8da2365d8a497800f2d1b1043fbd06fd3ef138c7aced15e671392347b9acf67e1e1f8177dd8e3b6c8da99969c6693cb108d891d15ea3eade5039656dd74535eca1ded8350c836e151408f664e982be8bb47c81e02a3f3c2437ea9cdd87892f8cd6adde031b1235f6b3a24189d9fe99a286d2465e59a04cef8a0766acd8eb004ac3a2976a0abffa9bfc4c1b0c48744ed88fa3f2bedfbbee9b56e786de4ae564786e632ea819c2268acd7675c6c1f65ad83ff236c448e39b5a40ed1457dc42e3e5336144ea359218bda6fef1f40bc12f062178ecd42c8454c13773c7ebff7b9067be76a8ddc9a373651c7a5ba83a259063b59bd1b2acec0ec8fe56a3460ccc92373225ef66b2ef7f435e64dfebe922d348c61237c8f6112709b5a042becf689b70c8d4c24cf73cc0e9c9cddaa3c75bfcaef604a255a26c49d04906f7b15cc070e4919c248e41e2e195555a7f755a03de5ffdc0fdc415fb7439261668f8371096cc48fcffbd33119f72902ca353ecc3baac74fb0c8f5e2fa1403abd1c6785fe532af182277c16b56bd028365b9a78b0c03128a4c0a3c67972137704507f212a70bbd7025c49f6c6a99231a72a5dffe694b3ac277e91c073b3ab07c9d40593fc166113a3ab6f8fc1c4f68f71d2933f1d7e183c33fb63bd82987175e680fdca898226064fbd1e39b20be972e25844f07b6f6311dd38d739b8adbde45b948472df6ead1a044e01a4cdff0e3b299d2fe666e77f93910aed3f1fd166c2e8d626041950c8e985e6e2a04292a2cde2a9168f6cf08d7ad52069dfd6ce86573e74f8b00a2ed70b8d8fbcfdb889e466f1631639fe77243bb0a646581a126ab6e6e14a7030106b01341e870d8efb660bd71aa8b53d0dd4be81c3acaa48f710abb4745d00e241d9ccf572ea1e999c2fe9d327e2d1c1b05b038254851f0194bb098ea433e0ad9c610f01dacd27358e871c6e683a02e0b6253858e3878832eae17dcd85b1e62e736a608a2b9aa4f56a664e4952ad032d9e9c335901050fdbb04efdf51eaa7f406742bad49d0623b81d95be90f2c872186211caf90d9dd9284d62d1f8c1a22a54f4dec64086519a60437b335a22567accb8ae9f50c997e540283ffc50807972ca4b1ae0d77b408058dd7765b3dde2e833207141d5591266f403c91594cda99120d3ae0323b3ea0d533beb01b3e6af1e416de472dd3f3ca80c80883b0a3870e2cb35aa492a175835d75e70ce95d2cb6d4478d67d38fd15983597b0064d96ea1151aed6a980cebbe86a32c1de86573cb8fc9038dd6f4b1556676ae535e18483a241a641", 0x1000, r2)
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3)
pread64(r1, &(0x7f0000000080)=""/105, 0x69, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/102400, 0xffffff46}], 0x1, 0x20000000000)

00:09:22 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSTI(r3, 0x5412, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000000)=0x10001, 0x4)

[  169.415927] audit: type=1400 audit(1571789362.185:255): avc:  denied  { create } for  pid=7034 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
00:09:22 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000000)={@broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, 0xc)

[  169.456011] audit: type=1400 audit(1571789362.225:256): avc:  denied  { create } for  pid=7057 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  169.478265] audit: type=1400 audit(1571789362.245:257): avc:  denied  { call } for  pid=7065 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  169.478320] binder: 7065:7066 transaction failed 29201/-1, size 0-0 line 3022
[  169.483692] binder: undelivered TRANSACTION_ERROR: 29201
00:09:22 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
read$eventfd(r1, &(0x7f0000000040), 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0})
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7})
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
lseek(r3, 0x0, 0x4)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f00000000c0)=0x8)
r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x42c080, 0x0)
write$FUSE_DIRENT(r8, &(0x7f0000000180)={0x10, 0x0, 0x3}, 0x10)

[  169.532526] audit: type=1400 audit(1571789362.295:258): avc:  denied  { create } for  pid=7057 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  169.548232] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET)
[  169.555899] audit: type=1400 audit(1571789362.295:259): avc:  denied  { call } for  pid=7070 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  169.555973] binder: 7070:7071 transaction failed 29201/-1, size 0-0 line 3022
[  169.560760] binder: undelivered TRANSACTION_ERROR: 29201
00:09:25 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0))
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

00:09:25 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40010000)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000008c0)="fc0000001a000700ab092500090007000aab0700000000001d60369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030005000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc)

00:09:25 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00c@\x00'/68], 0x0, 0x0, 0x0})

00:09:25 executing program 1:
r0 = socket$inet(0x10, 0x3, 0x20000000006)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0)
sendto$inet(r2, &(0x7f0000000080)="f4fb10e3f5fc1e8e7ab8b27d85c1381c03c8275e07721c94e3168ae3902383f2e0a6b04de16c9b0f999a1d9f004cc91d34df13237a3d995bd457e3b07d8ebe", 0x3f, 0x4402c054, &(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r3 = dup(r1)
accept(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000180)=0x80)
r4 = dup2(r3, r1)
socket$inet(0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e39629a38cf60f15a3", 0x4c}], 0x1}, 0x0)

00:09:25 executing program 2:
clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x36)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0xfffffffffffffe54, &(0x7f00000000c0)=[{0x0, 0xfffffffffffffce2}, {0x0, 0x15e}, {0x0, 0x3ff}, {&(0x7f0000000000)=ANY=[], 0x9c}], 0x1000000000000063, 0x0, 0xfffffffffffffe82}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000840))
ptrace$cont(0x20, r0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
memfd_create(0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
fsetxattr$security_evm(r3, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0233db6bf7d4c6c3bc799df222a748844f02c97573373c76efd146373f2aaf296fc06065478d7a084c6ff8dabad01b9c9aa773ae810086d7839a5956537934dc76551921d0a46dcd996ca1406ad49d7f3d3066e90c4c8c418f5f31ba6df7fc6fc1c754648275fd0d0ad080b28efc0076619e3d2995fb00000000"], 0x1, 0x2)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0)
r5 = open(0x0, 0x0, 0x1c0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022bbd7000ffdbdf25020000000c0a060001000000000000000c0000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r7})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r9, r8)
getpeername(r8, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, <r10=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x80)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={<r11=>0xffffffffffffffff})
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r12})
r13 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r13, &(0x7f0000000480), 0x0, 0x3)
r14 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/zero\x00', 0x111000, 0x0)
sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb8, r6, 0x606, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x114}, @NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r10}, {0x8, 0x1, r2}, {0x8, 0x1, r11}, {0x8}, {0x8, 0x1, r12}, {0x8, 0x1, r1}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r13}, {0x8, 0x1, r14}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x43}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24004005}, 0xb9473506025dcf52)
read(r1, &(0x7f0000000200)=""/250, 0xfffffe8a)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x9, 0x100000001, 0x10001, 0x8, 0x2, 0x3, 0x4, 0x1f4, 0x40, 0x14c, 0x0, 0x5, 0x38, 0x1, 0x80, 0x2, 0x7}, [{0x2, 0xfff, 0x7ff, 0x3, 0x2, 0x7, 0x911, 0x80000000}], "be5d0b7aafba3908eabaa1818d8d6a", [[], []]}, 0x287)
inotify_init()
clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x2, 0xc)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000000c0)=0x1)

00:09:25 executing program 5:
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event# ', 0x8000, 0x0)

00:09:25 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0)
bind$inet(r1, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10)
connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00')
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x790, [0x0, 0x20000180, 0x20000614, 0x200007fa], 0x0, &(0x7f0000000100), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0x7, 0x2, [{0x11, 0x10, 0x1c, 'veth1_to_team\x00', 'veth1_to_team\x00', 'syz_tun\x00', 'veth0\x00', @remote, [0xff, 0x0, 0x17e, 0xff, 0xff, 0x1fe], @local, [0xff, 0xff, 0x80, 0xff, 0xff, 0x80], 0x11e, 0x11e, 0x24e, [@stp={'stp\x00', 0x48, {{0x38, {0x3, 0x5, 0x4, @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x11d, 0x7, 0x7ff, 0x7f, @remote, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x4e22, 0x4e21, 0x20, 0x3, 0x80, 0x466, 0x5, 0x100, 0xca, 0xffc0}, 0x301, 0x100}}}, @time={'time\x00', 0x18, {{0x0, 0x1, 0x1020a, 0xf3c7, 0xa8, 0x3, 0x1}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7, 'system_u:object_r:removable_device_t:s0\x00'}}}}, {0x11, 0x3, 0xdc5518a915bb4bae, 'tunl0\x00', 'dummy0\x00', 'veth1_to_team\x00', 'dummy0\x00', @empty, [0xff, 0x0, 0xff, 0x7f, 0x1fe, 0xff], @random="caf2942b7e0e", [0x7f, 0xff, 0x0, 0x0, 0x1fe, 0xff], 0xae, 0xe6, 0x216, [@time={'time\x00', 0x18, {{0x6, 0x6, 0x10c3b, 0x13658, 0x8, 0x5, 0x3}}}], [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xffff, 'system_u:object_r:sshd_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x11, 0x70, 0x4, 'vcan0\x00', 'rose0\x00', 'gretap0\x00', 'veth1_to_bridge\x00', @dev={[], 0xf}, [0x0, 0x80, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0x0, 0x0, 0x9198279c92bf9e6c], 0xee, 0x166, 0x1b6, [@helper={'helper\x00', 0x28, {{0x1, 'ftp-20000\x00'}}}, @connlabel={'connlabel\x00', 0x8, {{0x3}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x9a, 0x101, 0x0, 0x0, "18f539d740f049bdd014a0b267dc8ccbe145a29df613573e49e0f93d82d7074c71a312e305da28b5b28bf2f6a6c4cd88f76d699d22a03d77fb8e0ec92549f24a"}}}], @common=@log={'log\x00', 0x28, {{0x2, "bf9d2a98986652cb66675178fced488974e43b53b637f06a4008dffac79f"}}}}]}, {0x0, '\x00', 0x3, 0x0, 0x1, [{0x11, 0x8, 0x53212450d23c207, 'syzkaller1\x00', 'bond0\x00', 'gretap0\x00', 'syzkaller1\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @empty, [0x7f, 0x0, 0x0, 0x0, 0x0, 0x1fe], 0xae, 0xae, 0xe6, [@quota={'quota\x00', 0x18, {{0x1, 0x0, 0x7fff, 0x1}}}], [], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffe}}}}]}]}, 0x808)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
read(r3, &(0x7f0000000000)=""/86, 0xfffffeb7)
tkill(r0, 0x1000000000016)

00:09:25 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40010000)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000008c0)="fc0000001a000700ab092500090007000aab0700000000001d60369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030005000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc)

[  172.318083] binder: 7096:7099 unknown command 4219648
[  172.341056] binder: 7096:7099 ioctl c0306201 20000140 returned -22
[  172.356041] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  172.373533] binder: 7096:7118 unknown command 4219648
00:09:25 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40010000)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000008c0)="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", 0xfc)

00:09:25 executing program 1:
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800)
prctl$PR_MCE_KILL_GET(0x22)
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
poll(&(0x7f00000003c0)=[{}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x1, &(0x7f0000044000)={0x0, 0x2, 0x6, @thr={&(0x7f0000000080)="716bf444368ba14bc8a1963bd5bdd23971e22793c3c3cbc3ca207bd092ed39f1bc5373152ae26050fae5521490e709d2082c0775e310f02c4ef7be14c6551ae1f99278e29ca54ced8ce073389723f503b29c69b67b9b0af91e28e885850cc96f25e3d4f126", &(0x7f0000000100)="a835f4ff3805225941198902c325fad94c9458c1"}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0})
futimesat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{0x77359400}, {r1, r2/1000+10000}})
tkill(0x0, 0x1000000000016)

[  172.387315] binder: 7096:7118 ioctl c0306201 20000140 returned -22
[  172.404080] audit_printk_skb: 15 callbacks suppressed
00:09:25 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@increfs, @increfs={0x40046304, 0x1}, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x67, 0x0, &(0x7f00000002c0)="b1c88ec3921fc6e4ab34adaafa82417a08117c51bcf089623c38956410da640e46d0ecf094b7f7c3e2f3a36151bbd5379bb9d7c354fddef45d1ded34d6c73016c44a360631fd2e58fbda7c4d9e0f566e01aed18385267882873f290c3bff7283d1057e6d2f6910"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  172.417805] audit: type=1400 audit(1571789365.165:265): avc:  denied  { create } for  pid=7095 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
00:09:25 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40010000)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000008c0)="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", 0xfc)

[  172.471050] binder: 7128:7131 IncRefs 0 refcount change on invalid ref 1 ret -22
[  172.488112] binder: 7128:7131 got reply transaction with no transaction stack
[  172.523865] audit: type=1400 audit(1571789365.285:266): avc:  denied  { call } for  pid=7128 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
[  172.555785] binder: 7128:7131 transaction failed 29201/-71, size 72-24 line 2922
[  172.563607] binder: 7128:7137 transaction failed 29201/-1, size 0-0 line 3022
[  172.577082] binder: undelivered TRANSACTION_ERROR: 29201
[  172.584062] binder: 7128:7137 IncRefs 0 refcount change on invalid ref 1 ret -22
[  172.592365] binder: 7128:7137 got reply transaction with no transaction stack
[  172.600758] binder: 7128:7137 transaction failed 29201/-71, size 72-24 line 2922
[  172.657915] audit: type=1400 audit(1571789365.425:267): avc:  denied  { create } for  pid=7095 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0
00:09:28 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0))
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

00:09:28 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40010000)
write(0xffffffffffffffff, &(0x7f00000008c0)="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", 0xfc)

00:09:28 executing program 0:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00c@\x00'/68], 0x0, 0x0, 0x0})

00:09:28 executing program 5:
r0 = socket(0x80000000000000a, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000004c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
r1 = socket$inet6(0xa, 0x1000000000000002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0)
ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000600)=""/4096)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x0)
getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, <r7=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000000c0)={@local, r7}, 0x14)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x4008080, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r8})
ioctl$PIO_SCRNMAP(r8, 0x4b41, &(0x7f0000000240)="3d0573aea6e5b0692a43546f60464203a749c03d1a5f689ea7a2cef5b14bbfc26f910d61f106618834fe2ade308c96acf1c1dd6bf305aa384f1c1299d52ab74301858fc89844d54d9436521b3da20b3b2a72f0d50cb294ce6e6d0f78b76c63111d4c3634844dfe821740465d0b7dcddc2eea92778136305dd264ad924f9ad72e3375b48fbca02623bf8ebd408b4858ac7b970f901a381e52c5ff879965ed54e9b6")
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

00:09:28 executing program 1:
clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @rand_addr="bf27db5d88cbc77b49af57f8579aad95", 0x5}, 0x45)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x14d)
dup(0xffffffffffffffff)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
listen(r0, 0x80)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x91b9f36d5dcf34de)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x131480, 0x0)
r10 = socket(0x10, 0x400000000080803, 0x0)
write(r10, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, 0x0, 0x0)
sendto$inet6(r9, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
rt_sigsuspend(0x0, 0xffffff87)
accept$packet(0xffffffffffffffff, 0x0, 0x0)
pipe(0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = fcntl$dupfd(r12, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
r14 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ftruncate(r14, 0x0)
write$selinux_access(r14, 0x0, 0x0)
pipe2(&(0x7f0000000080), 0x0)
ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
getsockopt$inet6_int(r8, 0x29, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
write(r9, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r9, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000200)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)=""/72, 0x48}], 0x2}, 0x40000002)
r15 = accept4(r0, 0x0, 0x0, 0x80000)
sendto$inet6(r15, &(0x7f0000000040)="789327dcf17bc3e8394ec10e0fd060b46f56aa3388a720fb988858ccbe598e5d11", 0xfffffffffffffd24, 0x0, 0x0, 0x0)

00:09:28 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r4}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r5}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r6}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r7}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
poll(&(0x7f0000000180)=[{r4, 0x4000}, {r5, 0x2040}, {r4, 0x8400}, {r7, 0x2}, {r6}, {0xffffffffffffffff, 0x404}], 0x1ffffe31, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
r8 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0)
connect(r8, &(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x26}}}, 0x80)
chmod(&(0x7f0000000040)='./file0\x00', 0x10)
sendmmsg(r8, &(0x7f0000000000), 0x24a, 0x0)

00:09:28 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40010000)
write(0xffffffffffffffff, &(0x7f00000008c0)="fc0000001a000700ab092500090007000aab0700000000001d60369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030005000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc)

00:09:28 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@mcast2}, {@in6=@mcast2}, @in6=@dev={0xfe, 0x80, [], 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x4000000}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[  175.358506] binder: 7153:7156 unknown command 4219648
[  175.377356] binder: 7153:7156 ioctl c0306201 20000140 returned -22
00:09:28 executing program 5:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
pipe(&(0x7f0000000840)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, &(0x7f0000000280)="529017891583ddf5d3119d67b87633c3fb622c4c187c911aa69a13d3babd85ddeb00939493e9ae747100000000", 0xfffffffffffffce4)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000140)={@loopback}, 0x14)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@ipv4={[], [], @local}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c20082})
ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000300)={0x3, 0x1000, 0x8, 0x8, 0xe, 0x40, 0x8, 0x3, 0xffffff14, 0x5, 0x1f4})
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
r6 = open(&(0x7f0000000200)='./file0/file0\x00', 0x20141042, 0x0)
write$UHID_INPUT(r6, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000002c0), 0x4)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r7}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
sendfile(r7, r6, &(0x7f0000000240), 0x2008000fffffffe)
syz_extract_tcp_res(&(0x7f0000000080), 0x9, 0x0)
chmod(&(0x7f0000000180)='./file0/file0\x00', 0x4)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
init_module(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00', 0x6, &(0x7f0000000340)='smaps\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
syz_genetlink_get_family_id$tipc2(0x0)

00:09:28 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40010000)
write(0xffffffffffffffff, &(0x7f00000008c0)="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", 0xfc)

00:09:28 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000000000)="290000002100190000003fffffffda060200000000e80001040000040d000300ea11000f0005000047", 0x29}], 0x1)
prctl$PR_SET_DUMPABLE(0x4, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)
setsockopt$sock_void(r1, 0x1, 0x12, 0x0, 0x0)
write$FUSE_STATFS(r1, &(0x7f0000000040)={0x60, 0xfffffffffffffffe, 0x6, {{0x6e650598, 0x7, 0xdd3, 0x9, 0xfffffffffffffe00, 0x80000001, 0x7, 0x2}}}, 0x60)

00:09:28 executing program 2:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0)
pipe(&(0x7f0000000840)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x91, 0x0, 0x0, 0x5})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x1, 0x5, 0x3, 0x5, 0x6}, 0x14)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x8000)
syz_open_procfs(0x0, 0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
writev(0xffffffffffffffff, 0x0, 0x0)
mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x83)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000a40)=ANY=[@ANYBLOB="000003f5e9b0b495f93bcf781c87b26003e6270f405936c6520669a2b470472491e59c71940cdef19b7796b4cf3b6944c7c46aeb463b8325a67f08994db88f9a37e9d65deb7b1c0df22971918c40a89b586560e7e1e40fc5f9eddda1c6fe9657bea50bd4a99bc52f3366c66948f9cf11473b6712051802faddf416d487bc39edfe8bb4a9b66f5813ae918d59640d5490eae836955bcd98b019360561a0c717386fa3162af61ae6835606f0b67c763ebb5de3a95181eb43112683"], 0x1)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x83)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000980)=ANY=[@ANYPTR=&(0x7f00000007c0)=ANY=[@ANYRESOCT=0x0, @ANYPTR64, @ANYPTR, @ANYRESDEC, @ANYPTR], @ANYPTR, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=0x0, @ANYRESOCT=r4, @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYBLOB="e32c83f5a4c2f14dfebb6949f183", @ANYRES64, @ANYRES64=0x0, @ANYPTR, @ANYPTR64], @ANYPTR64=&(0x7f0000000a00)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYRES16=r1]], @ANYRESDEC, @ANYRESHEX], 0x2e)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r6 = socket$inet6(0xa, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0xfffffffffffffff7, 0x1e2300)
connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0x1}]}, 0x10)
sendto$inet6(r6, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0)
socketpair(0x3, 0xa054b98f838cc548, 0x7f, &(0x7f0000000180))
faccessat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x1600)

[  175.516112] audit: type=1400 audit(1571789368.285:268): avc:  denied  { create } for  pid=7181 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  175.564150] audit: type=1400 audit(1571789368.325:269): avc:  denied  { create } for  pid=7173 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  176.027827] audit: type=1400 audit(1571789368.795:270): avc:  denied  { create } for  pid=7181 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  176.347782] audit: type=1400 audit(1571789369.115:271): avc:  denied  { create } for  pid=7173 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
00:09:31 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

00:09:31 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082)
r1 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000000))
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x68, "f8ca781d5f7e93115c52fa936f014904ccdb29372829d175a4e80426585243b3926d887f686449fdd786f718d8343d49d4273cc82e06000000524fc21d710476", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da"})

00:09:31 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
dup(r0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f00000008c0)="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", 0xfc)

00:09:31 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x163442, 0x0)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9a})
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000000c})
ftruncate(r1, 0x1c08)
r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0xfffffffffffffe77, 0x5, 0x0, {0x0, 0x0, 0x0, 0x2}}, 0x30)

00:09:31 executing program 5:
open(0x0, 0x4400, 0x1c0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0)
fcntl$setstatus(r1, 0x4, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x282a41, 0x0)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2)
add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa)
truncate(0x0, 0x800)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="32f2a9a80ab5310d35d4d37d"], 0x1)
sendto$inet(r4, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac60bded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x9, 0x0, 0x27)
sendfile(r4, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe)
writev(r1, &(0x7f0000000680), 0x0)
open(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x6)
pipe(0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_int(r5, 0x0, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000280)="ff", 0x1}], 0x1)
write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
write$selinux_load(0xffffffffffffffff, 0x0, 0x0)

00:09:31 executing program 2:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0)
pipe(&(0x7f0000000840)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x91, 0x0, 0x0, 0x5})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x1, 0x5, 0x3, 0x5, 0x6}, 0x14)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x8000)
syz_open_procfs(0x0, 0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
writev(0xffffffffffffffff, 0x0, 0x0)
mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x83)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000a40)=ANY=[@ANYBLOB="000003f5e9b0b495f93bcf781c87b26003e6270f405936c6520669a2b470472491e59c71940cdef19b7796b4cf3b6944c7c46aeb463b8325a67f08994db88f9a37e9d65deb7b1c0df22971918c40a89b586560e7e1e40fc5f9eddda1c6fe9657bea50bd4a99bc52f3366c66948f9cf11473b6712051802faddf416d487bc39edfe8bb4a9b66f5813ae918d59640d5490eae836955bcd98b019360561a0c717386fa3162af61ae6835606f0b67c763ebb5de3a95181eb43112683"], 0x1)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x83)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000980)=ANY=[@ANYPTR=&(0x7f00000007c0)=ANY=[@ANYRESOCT=0x0, @ANYPTR64, @ANYPTR, @ANYRESDEC, @ANYPTR], @ANYPTR, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=0x0, @ANYRESOCT=r4, @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYBLOB="e32c83f5a4c2f14dfebb6949f183", @ANYRES64, @ANYRES64=0x0, @ANYPTR, @ANYPTR64], @ANYPTR64=&(0x7f0000000a00)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYRES16=r1]], @ANYRESDEC, @ANYRESHEX], 0x2e)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r6 = socket$inet6(0xa, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0xfffffffffffffff7, 0x1e2300)
connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0x1}]}, 0x10)
sendto$inet6(r6, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0)
socketpair(0x3, 0xa054b98f838cc548, 0x7f, &(0x7f0000000180))
faccessat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x1600)

00:09:31 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000008c0)="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", 0xfc)

[  178.367050] audit: type=1400 audit(1571789371.135:272): avc:  denied  { create } for  pid=7202 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
00:09:31 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
dup(r0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f00000008c0)="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", 0xfc)

[  178.426436] loop_reread_partitions: partition scan of loop0 (øÊx_~“\Rú“o
IÌÛ)7()Ñu¤è&XRC³’mˆhdIý׆÷Ø4=IÔ'<È.) failed (rc=-13)
00:09:31 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082)
r1 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000000))
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x68, "f8ca781d5f7e93115c52fa936f014904ccdb29372829d175a4e80426585243b3926d887f686449fdd786f718d8343d49d4273cc82e06000000524fc21d710476", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da"})

00:09:31 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000008c0)="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", 0xfc)

00:09:31 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
dup(r0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f00000008c0)="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", 0xfc)

[  178.516340] loop_reread_partitions: partition scan of loop0 () failed (rc=-13)
00:09:31 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
dup(r0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f00000008c0)="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", 0xfc)

[  178.636109] loop_reread_partitions: partition scan of loop0 (øÊx_~“\Rú“o
IÌÛ)7()Ñu¤è&XRC³’mˆhdIý׆÷Ø4=IÔ'<È.) failed (rc=-13)
[  178.795997] loop_reread_partitions: partition scan of loop0 () failed (rc=-13)
00:09:34 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

00:09:34 executing program 4:
r0 = socket(0x0, 0x3, 0x0)
write(r0, &(0x7f00000008c0)="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", 0xfc)

00:09:34 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
dup(r0)
write(0xffffffffffffffff, &(0x7f00000008c0)="fc0000001a000700ab092500090007000aab0700000000001d60369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030005000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc)

00:09:34 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082)
r1 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000000))
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x68, "f8ca781d5f7e93115c52fa936f014904ccdb29372829d175a4e80426585243b3926d887f686449fdd786f718d8343d49d4273cc82e06000000524fc21d710476", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da"})

00:09:34 executing program 2:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
pipe(&(0x7f0000000200))
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffe44, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
mkdir(&(0x7f0000000640)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000040))
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
socket$inet(0x2, 0x2, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="4034abbb01403f0014520d34"], 0xe}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
tkill(r1, 0x40)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4)

00:09:34 executing program 5:
open(0x0, 0x4400, 0x1c0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0)
fcntl$setstatus(r1, 0x4, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x282a41, 0x0)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2)
add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa)
truncate(0x0, 0x800)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="32f2a9a80ab5310d35d4d37d"], 0x1)
sendto$inet(r4, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac60bded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x9, 0x0, 0x27)
sendfile(r4, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe)
writev(r1, &(0x7f0000000680), 0x0)
open(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x6)
pipe(0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_int(r5, 0x0, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000280)="ff", 0x1}], 0x1)
write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
write$selinux_load(0xffffffffffffffff, 0x0, 0x0)

00:09:34 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
dup(r0)
write(0xffffffffffffffff, &(0x7f00000008c0)="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", 0xfc)

00:09:34 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
dup(r0)
write(0xffffffffffffffff, &(0x7f00000008c0)="fc0000001a000700ab092500090007000aab0700000000001d60369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030005000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc)

00:09:34 executing program 4:
r0 = socket(0x0, 0x3, 0x0)
write(r0, &(0x7f00000008c0)="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", 0xfc)

00:09:34 executing program 2:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="401bccd3d2bb03000000148c0f34"], 0xe}}, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
select(0x40, &(0x7f0000000000), &(0x7f00000000c0)={0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x80000001}, 0x0)
tkill(r3, 0x40020000000c)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]})
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x401)
ptrace$cont(0x7, r3, 0x0, 0x0)

[  181.429292] loop_reread_partitions: partition scan of loop0 (øÊx_~“\Rú“o
IÌÛ)7()Ñu¤è&XRC³’mˆhdIý׆÷Ø4=IÔ'<È.) failed (rc=-13)
00:09:34 executing program 4:
r0 = socket(0x0, 0x3, 0x0)
write(r0, &(0x7f00000008c0)="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", 0xfc)

00:09:34 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000008c0)="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", 0xfc)

[  181.557283] loop_reread_partitions: partition scan of loop0 () failed (rc=-13)
00:09:37 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

00:09:37 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082)
r1 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000000))
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x68, "f8ca781d5f7e93115c52fa936f014904ccdb29372829d175a4e80426585243b3926d887f686449fdd786f718d8343d49d4273cc82e06000000524fc21d710476", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da"})

00:09:37 executing program 4:
r0 = socket(0x10, 0x0, 0x0)
write(r0, &(0x7f00000008c0)="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", 0xfc)

00:09:37 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000008c0)="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", 0xfc)

00:09:37 executing program 5:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r0, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800)
setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x80)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0)
write(r2, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0x1f, 0x102, &(0x7f0000001880)={0xa, 0x0, 0x0, @empty}, 0x1c)
accept4(0xffffffffffffffff, &(0x7f0000000040)=@ipx, &(0x7f00000001c0)=0x80, 0x80000)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff})
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

00:09:37 executing program 4:
r0 = socket(0x10, 0x0, 0x0)
write(r0, &(0x7f00000008c0)="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", 0xfc)

00:09:37 executing program 1:
r0 = socket(0x0, 0x3, 0x0)
write(r0, &(0x7f00000008c0)="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", 0xfc)

00:09:37 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

00:09:37 executing program 1:
r0 = socket(0x0, 0x3, 0x0)
write(r0, &(0x7f00000008c0)="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", 0xfc)

[  184.456051] loop_reread_partitions: partition scan of loop0 (øÊx_~“\Rú“o
IÌÛ)7()Ñu¤è&XRC³’mˆhdIý׆÷Ø4=IÔ'<È.) failed (rc=-13)
00:09:37 executing program 1:
r0 = socket(0x0, 0x3, 0x0)
write(r0, &(0x7f00000008c0)="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", 0xfc)

00:09:37 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082)
r1 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x68, "f8ca781d5f7e93115c52fa936f014904ccdb29372829d175a4e80426585243b3926d887f686449fdd786f718d8343d49d4273cc82e06000000524fc21d710476", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da"})

00:09:37 executing program 4:
r0 = socket(0x10, 0x0, 0x0)
write(r0, &(0x7f00000008c0)="fc0000001a000700ab092500090007000aab0700000000001d60369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030005000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc)

[  184.519819] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  184.538616] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  184.552440] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  184.561563] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  184.572256] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  184.576649] loop_reread_partitions: partition scan of loop0 () failed (rc=-13)
[  184.605131] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  184.615407] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  184.625919] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  184.636048] loop_reread_partitions: partition scan of loop0 (øÊx_~“\Rú“o
IÌÛ)7()Ñu¤è&XRC³’mˆhdIý׆÷Ø4=IÔ'<È.) failed (rc=-13)
[  184.736086] loop_reread_partitions: partition scan of loop0 () failed (rc=-13)
00:09:40 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
tkill(r2, 0x40)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

00:09:40 executing program 1:
r0 = socket(0x10, 0x0, 0x0)
write(r0, &(0x7f00000008c0)="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", 0xfc)

00:09:40 executing program 4:
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f00000008c0)="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", 0xfc)

00:09:40 executing program 2:
r0 = getpgid(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x38)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0xffff, 0x0, 0x0, 0x20000000, 0x59})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x21, r1, 0x0, 0x0)

00:09:40 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082)
r1 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r2)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x68, "f8ca781d5f7e93115c52fa936f014904ccdb29372829d175a4e80426585243b3926d887f686449fdd786f718d8343d49d4273cc82e06000000524fc21d710476", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da"})

00:09:40 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x145042, 0x0)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$P9_RREMOVE(r3, &(0x7f0000000280)={0x2}, 0x43c5)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7b0})
fdatasync(r3)
ftruncate(r4, 0x8200)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000a80)={0x0, r3})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x4100, 0x0)
sendfile(r1, r5, 0x0, 0x8000fffffffe)

00:09:40 executing program 4:
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f00000008c0)="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", 0xfc)

00:09:40 executing program 1:
r0 = socket(0x10, 0x0, 0x0)
write(r0, &(0x7f00000008c0)="fc0000001a000700ab092500090007000aab0700000000001d60369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030005000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc)

00:09:40 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a)

00:09:40 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
tkill(r2, 0x40)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

00:09:40 executing program 4:
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f00000008c0)="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", 0xfc)

00:09:40 executing program 1:
r0 = socket(0x10, 0x0, 0x0)
write(r0, &(0x7f00000008c0)="fc0000001a000700ab092500090007000aab0700000000001d60369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030005000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc)

00:09:40 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000004000), &(0x7f0000001ffc)=0x4)

00:09:40 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x1a7, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0xe11, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0)

[  187.497218] loop_reread_partitions: partition scan of loop0 (øÊx_~“\Rú“o
IÌÛ)7()Ñu¤è&XRC³’mˆhdIý׆÷Ø4=IÔ'<È.) failed (rc=-13)
00:09:40 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082)
r1 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r2)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x68, "f8ca781d5f7e93115c52fa936f014904ccdb29372829d175a4e80426585243b3926d887f686449fdd786f718d8343d49d4273cc82e06000000524fc21d710476", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da"})

00:09:40 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
tkill(r2, 0x40)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

00:09:40 executing program 1:
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f00000008c0)="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", 0xfc)

00:09:40 executing program 1:
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f00000008c0)="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", 0xfc)

00:09:40 executing program 1:
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f00000008c0)="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", 0xfc)

00:09:40 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
write(r0, 0x0, 0x0)

00:09:40 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
write(r0, 0x0, 0x0)

[  187.593897] audit: type=1400 audit(1571789380.355:273): avc:  denied  { create } for  pid=7389 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
00:09:40 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
write(r0, 0x0, 0x0)

00:09:40 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
write(r0, 0x0, 0x0)

00:09:40 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000008c0), 0x0)

[  187.622197] audit: type=1400 audit(1571789380.395:274): avc:  denied  { create } for  pid=7389 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  187.650585] loop_reread_partitions: partition scan of loop0 () failed (rc=-13)
[  187.661669] audit: type=1400 audit(1571789380.435:275): avc:  denied  { create } for  pid=7389 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
00:09:40 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='sessionid\x00')
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x20, 0x47, 0x0, 0x0, 0x0, 0x0, 0x9828, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3b7873b4, 0x0, @perf_config_ext={0x200020000000000}, 0x412, 0x4, 0x0, 0x3, 0x0, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
listen(0xffffffffffffffff, 0xc1d)
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)

00:09:40 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000200)=@ethtool_dump={0x3f}})

[  187.689730] audit: type=1400 audit(1571789380.465:276): avc:  denied  { create } for  pid=7389 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
[  187.766841] loop_reread_partitions: partition scan of loop0 (øÊx_~“\Rú“o
IÌÛ)7()Ñu¤è&XRC³’mˆhdIý׆÷Ø4=IÔ'<È.) failed (rc=-13)
00:09:40 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082)
r1 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r2)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x68, "f8ca781d5f7e93115c52fa936f014904ccdb29372829d175a4e80426585243b3926d887f686449fdd786f718d8343d49d4273cc82e06000000524fc21d710476", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da"})

00:09:40 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000008c0), 0x0)

00:09:40 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r3)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120140d0f34"], 0xe}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r4)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

00:09:40 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182)
getpgrp(0x0)
r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x7ff)
sendfile(r0, r0, 0x0, 0x24000058)
dup(0xffffffffffffffff)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000000c0))
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x0)

00:09:40 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet_int(r0, 0x0, 0xc, 0x0, &(0x7f0000000340))

00:09:40 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
write(r0, 0x0, 0x0)

00:09:40 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
write(r0, 0x0, 0x0)

00:09:40 executing program 2:
io_setup(0xc32f, &(0x7f0000000440)=<r0=>0x0)
r1 = socket(0x18, 0x0, 0x4)
io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])

00:09:40 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000008c0), 0x0)

00:09:40 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000008c0)="fc0000001a000700ab092500090007000aab0700000000001d60369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030005000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9d", 0x7e)

00:09:40 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000008c0)="fc0000001a000700ab092500090007000aab0700000000001d60369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030005000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9d", 0x7e)

00:09:40 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000008c0)="fc0000001a000700ab092500090007000aab0700000000001d60369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030005000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9d", 0x7e)

[  421.744809] INFO: task syz-executor.2:2112 blocked for more than 140 seconds.
[  421.752372]       Not tainted 4.4.174+ #4
[  421.756604] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  421.766247] syz-executor.2  D ffff8800b9677668 25088  2112      1 0x00000004
[  421.773791]  ffff8800b9677668 ffff8801d8fc4740 45bee1506e8a5a24 ffff8801d8fc4740
[  421.781857]  0000000000000000 ffff8801d8fc5000 ffff8801db61f180 ffff8801db61f1a8
[  421.790008]  ffff8801db61e898 ffff8800b90f17c0 ffff8801d8fc4740 ffffed00172ce001
[  421.798823] Call Trace:
[  421.801398]  [<ffffffff82709b79>] schedule+0x99/0x1d0
[  421.806662]  [<ffffffff8270a333>] schedule_preempt_disabled+0x13/0x20
[  421.813238]  [<ffffffff8270c492>] mutex_lock_nested+0x3c2/0xb80
[  421.819417]  [<ffffffff8154e9cc>] ? __blkdev_get+0x10c/0xdf0
[  421.825450]  [<ffffffff81a7f9d0>] ? get_disk+0xe0/0xe0
[  421.830726]  [<ffffffff81d0f003>] ? kobj_lookup+0x273/0x410
[  421.836648]  [<ffffffff8270c0d0>] ? mutex_trylock+0x500/0x500
[  421.842526]  [<ffffffff81a81fa7>] ? disk_block_events+0xc7/0x140
[  421.848712]  [<ffffffff8154e9cc>] __blkdev_get+0x10c/0xdf0
[  421.854707]  [<ffffffff8154e8c0>] ? __blkdev_put+0x840/0x840
[  421.860493]  [<ffffffff811ff5b0>] ? trace_hardirqs_on+0x10/0x10
[  421.866635]  [<ffffffff81551938>] blkdev_get+0x2e8/0x920
[  421.872076]  [<ffffffff81551650>] ? bd_may_claim+0xd0/0xd0
[  421.877736]  [<ffffffff81550d7a>] ? bd_acquire+0x8a/0x370
[  421.883268]  [<ffffffff82717f6d>] ? _raw_spin_unlock+0x2d/0x50
[  421.889774]  [<ffffffff8155219a>] blkdev_open+0x1aa/0x250
[  421.895463]  [<ffffffff8149154f>] do_dentry_open+0x38f/0xbd0
[  421.901247]  [<ffffffff814b6d8e>] ? __inode_permission2+0x9e/0x250
[  421.907604]  [<ffffffff81551ff0>] ? blkdev_get_by_dev+0x80/0x80
[  421.913984]  [<ffffffff81494d3b>] vfs_open+0x10b/0x210
[  421.919308]  [<ffffffff814c4947>] ? may_open.isra.0+0xe7/0x210
[  421.925310]  [<ffffffff814c5ddf>] path_openat+0x136f/0x4470
[  421.931002]  [<ffffffff81483f86>] ? kasan_kmalloc.part.0+0xc6/0xf0
[  421.937344]  [<ffffffff814c4a70>] ? may_open.isra.0+0x210/0x210
[  421.943411]  [<ffffffff811ff5b0>] ? trace_hardirqs_on+0x10/0x10
[  421.949754]  [<ffffffff814ccab1>] do_filp_open+0x1a1/0x270
[  421.956039]  [<ffffffff811ff5b0>] ? trace_hardirqs_on+0x10/0x10
[  421.962217]  [<ffffffff814cc910>] ? user_path_mountpoint_at+0x50/0x50
[  421.968833]  [<ffffffff814f32ea>] ? __alloc_fd+0x1ea/0x490
[  421.974451]  [<ffffffff82717f6d>] ? _raw_spin_unlock+0x2d/0x50
[  421.980459]  [<ffffffff81495668>] do_sys_open+0x2f8/0x600
[  421.986002]  [<ffffffff814fc4c6>] ? mntput+0x66/0x90
[  421.991099]  [<ffffffff81495370>] ? filp_open+0x70/0x70
[  421.996468]  [<ffffffff814cd464>] ? SyS_mkdirat+0x164/0x250
[  422.002173]  [<ffffffff8112f3a1>] ? task_work_run+0x251/0x2b0
[  422.008097]  [<ffffffff814cd300>] ? SyS_mknod+0x40/0x40
[  422.013451]  [<ffffffff82718d0e>] ? int_ret_from_sys_call+0x52/0xa3
[  422.019877]  [<ffffffff811ff385>] ? trace_hardirqs_on_caller+0x385/0x5a0
[  422.026826]  [<ffffffff8149599d>] SyS_open+0x2d/0x40
[  422.031943]  [<ffffffff82718ba1>] entry_SYSCALL_64_fastpath+0x1e/0x9a
[  422.038549] 1 lock held by syz-executor.2/2112:
[  422.043212]  #0:  (&bdev->bd_mutex){+.+.+.}, at: [<ffffffff8154e9cc>] __blkdev_get+0x10c/0xdf0
[  422.052977] Sending NMI to all CPUs:
[  422.057006] NMI backtrace for cpu 0
[  422.060620] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.4.174+ #4
[  422.066863] task: ffffffff82e151c0 task.stack: ffffffff82e00000
[  422.072904] RIP: 0010:[<ffffffff810a1dc2>]  [<ffffffff810a1dc2>] native_safe_halt+0x2/0x10
[  422.081317] RSP: 0018:ffffffff82e07db0  EFLAGS: 00000246
[  422.086837] RAX: 0000000000000007 RBX: ffffffff8319bf68 RCX: 0000000000000000
[  422.094174] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff82e15a84
[  422.101473] RBP: ffffffff82e07de0 R08: 0000000000000000 R09: 0000000000000000
[  422.108747] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  422.117108] R13: ffffffff82e08000 R14: dffffc0000000000 R15: ffffffff82e00000
[  422.124964] FS:  0000000000000000(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000
[  422.133230] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  422.139288] CR2: 0000000001dc03e0 CR3: 00000000b923f000 CR4: 00000000001606b0
[  422.146576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  422.153837] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  422.161181] Stack:
[  422.163338]  ffffffff81020b16 ffffffff82e00000 0000000000000000 ffffffff82e08000
[  422.170992]  dffffc0000000000 ffffffff82e00000 ffffffff82e07df0 ffffffff81022d50
[  422.178538]  ffffffff82e07e08 ffffffff811eb4c8 0000000000000000 ffffffff82e07ed0
[  422.186094] Call Trace:
[  422.188661]  [<ffffffff81020b16>] ? default_idle+0x56/0x3d0
[  422.194345]  [<ffffffff81022d50>] arch_cpu_idle+0x10/0x20
[  422.199908]  [<ffffffff811eb4c8>] default_idle_call+0x48/0x70
[  422.205975]  [<ffffffff811ebca1>] cpu_startup_entry+0x6d1/0x810
[  422.212103]  [<ffffffff811eafe8>] ? complete+0x18/0x70
[  422.217382]  [<ffffffff811eb5d0>] ? call_cpuidle+0xe0/0xe0
[  422.222987]  [<ffffffff82709b8b>] ? schedule+0xab/0x1d0
[  422.228370]  [<ffffffff827055f9>] rest_init+0x190/0x199
[  422.233723]  [<ffffffff831dc3fc>] ? trace_event_define_fields_x86_irq_vector+0x2c/0x2c
[  422.242431]  [<ffffffff831d58a0>] start_kernel+0x64a/0x67e
[  422.248066]  [<ffffffff831d5256>] ? thread_stack_cache_init+0xb/0xb
[  422.254459]  [<ffffffff831d4120>] ? early_idt_handler_array+0x120/0x120
[  422.261222]  [<ffffffff831d4120>] ? early_idt_handler_array+0x120/0x120
[  422.268791]  [<ffffffff831d430a>] x86_64_start_reservations+0x29/0x2b
[  422.275410]  [<ffffffff831d4443>] x86_64_start_kernel+0x137/0x15a
[  422.281632] Code: 2e 0f 1f 84 00 00 00 00 00 fa c3 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 fb c3 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 fb f4 <c3> 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 f4 c3 0f 1f 40 00 66 
[  422.300743] NMI backtrace for cpu 1
[  422.304355] CPU: 1 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #4
[  422.310789] task: ffff8801da6f4740 task.stack: ffff8800001d0000
[  422.316845] RIP: 0010:[<ffffffff8109b617>]  [<ffffffff8109b617>] flat_send_IPI_mask+0xf7/0x1b0
[  422.326191] RSP: 0018:ffff8800001d7c88  EFLAGS: 00000046
[  422.331645] RAX: 0000000000000000 RBX: 0000000000000c00 RCX: 0000000000000000
[  422.338938] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fc300
[  422.346217] RBP: ffff8800001d7cb8 R08: 0000000000000018 R09: 0000000000000000
[  422.353464] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000246
[  422.360764] R13: 0000000003000000 R14: ffffffff82e5f2e0 R15: 0000000000000002
[  422.368494] FS:  0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
[  422.376725] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  422.382590] CR2: 00007f162c5b9000 CR3: 00000000b7bc4000 CR4: 00000000001606b0
[  422.389867] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  422.397142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  422.404731] Stack:
[  422.406867]  0000000000000001 ffffffff82e5f2e0 ffffffff831a6ac0 fffffbfff0634c34
[  422.414375]  000000000001b6c0 0000000000000008 ffff8800001d7cd8 ffffffff81092bee
[  422.422029]  0000000000000008 ffffffff82924260 ffff8800001d7d30 ffffffff81ab8252
[  422.429581] Call Trace:
[  422.432147]  [<ffffffff81092bee>] nmi_raise_cpu_backtrace+0x5e/0x80
[  422.438577]  [<ffffffff81ab8252>] nmi_trigger_all_cpu_backtrace.cold+0xa1/0xae
[  422.445939]  [<ffffffff813ab1a4>] ? print_lock+0xa8/0xab
[  422.451368]  [<ffffffff81092b90>] ? irq_force_complete_move+0x330/0x330
[  422.458308]  [<ffffffff81092ca4>] arch_trigger_all_cpu_backtrace+0x14/0x20
[  422.467245]  [<ffffffff813b4762>] watchdog.cold+0xd3/0xee
[  422.472771]  [<ffffffff81309bec>] ? watchdog+0xac/0xa00
[  422.478318]  [<ffffffff81309b40>] ? reset_hung_task_detector+0x20/0x20
[  422.485052]  [<ffffffff811342c3>] kthread+0x273/0x310
[  422.490220]  [<ffffffff81134050>] ? kthread_create_on_node+0x4c0/0x4c0
[  422.496914]  [<ffffffff82718079>] ? _raw_spin_unlock_irq+0x39/0x60
[  422.503392]  [<ffffffff81159431>] ? finish_task_switch+0x1e1/0x660
[  422.510342]  [<ffffffff81159403>] ? finish_task_switch+0x1b3/0x660
[  422.516672]  [<ffffffff827081ff>] ? __schedule+0x7af/0x1ee0
[  422.522984]  [<ffffffff827081f3>] ? __schedule+0x7a3/0x1ee0
[  422.528791]  [<ffffffff827081ff>] ? __schedule+0x7af/0x1ee0
[  422.535566]  [<ffffffff81134050>] ? kthread_create_on_node+0x4c0/0x4c0
[  422.542205]  [<ffffffff82718fc5>] ret_from_fork+0x55/0x80
[  422.547869]  [<ffffffff81134050>] ? kthread_create_on_node+0x4c0/0x4c0
[  422.554577] Code: 00 c3 5f ff 80 e6 10 75 e1 41 c1 e5 18 44 89 2c 25 10 c3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 c3 5f ff <41> f7 c4 00 02 00 00 75 1e 4c 89 e7 57 9d 0f 1f 44 00 00 e8 f1 
[  422.573786] Kernel panic - not syncing: hung_task: blocked tasks
[  422.579931] CPU: 1 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #4
[  422.586313]  0000000000000000 7f011725c99a9665 ffff8800001d7c60 ffffffff81aad1a1
[  422.595068]  ffff8801d8fc4740 ffffffff82872120 dffffc0000000000 0000000000000002
[  422.604907]  00000000003fff9d ffff8800001d7d40 ffffffff813a48c2 0000000041b58ab3
[  422.612921] Call Trace:
[  422.615524]  [<ffffffff81aad1a1>] dump_stack+0xc1/0x120
[  422.620878]  [<ffffffff813a48c2>] panic+0x1b9/0x37b
[  422.626245]  [<ffffffff813a4709>] ? add_taint.cold+0x16/0x16
[  422.632032]  [<ffffffff81ab8061>] ? nmi_trigger_all_cpu_backtrace+0x3e1/0x490
[  422.640247]  [<ffffffff81ab8046>] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490
[  422.647511]  [<ffffffff81ab8046>] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490
[  422.655101]  [<ffffffff813b4773>] watchdog.cold+0xe4/0xee
[  422.660620]  [<ffffffff81309bec>] ? watchdog+0xac/0xa00
[  422.665975]  [<ffffffff81309b40>] ? reset_hung_task_detector+0x20/0x20
[  422.672635]  [<ffffffff811342c3>] kthread+0x273/0x310
[  422.678775]  [<ffffffff81134050>] ? kthread_create_on_node+0x4c0/0x4c0
[  422.686007]  [<ffffffff82718079>] ? _raw_spin_unlock_irq+0x39/0x60
[  422.692303]  [<ffffffff81159431>] ? finish_task_switch+0x1e1/0x660
[  422.698613]  [<ffffffff81159403>] ? finish_task_switch+0x1b3/0x660
[  422.704917]  [<ffffffff827081ff>] ? __schedule+0x7af/0x1ee0
[  422.710601]  [<ffffffff827081f3>] ? __schedule+0x7a3/0x1ee0
[  422.716374]  [<ffffffff827081ff>] ? __schedule+0x7af/0x1ee0
[  422.723212]  [<ffffffff81134050>] ? kthread_create_on_node+0x4c0/0x4c0
[  422.731340]  [<ffffffff82718fc5>] ret_from_fork+0x55/0x80
[  422.736876]  [<ffffffff81134050>] ? kthread_create_on_node+0x4c0/0x4c0
[  422.744337] Kernel Offset: disabled
[  422.747971] Rebooting in 86400 seconds..