PVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x62}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000bc0)={{0x9, 0x9, 0x1004000000000000, 0x100}, 'syz0\x00', 0x4d}) fcntl$getflags(r3, 0x40b) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) 19:32:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x7) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70026000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x46}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x810) r2 = inotify_init() socketpair(0x1, 0x5, 0x70f, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r4, 0x6, 0x1, &(0x7f0000000180)=0xec, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_IOCTL(r5, &(0x7f00000001c0)={0x20, 0x0, 0x7, {0x0, 0x0, 0xffffffffffff991e, 0x1}}, 0x20) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x460}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x62}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x27c}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) syz_execute_func(&(0x7f00000003c0)="c401e5d05afec40301223f00470f7696e50c0181c401e1608a0f377ed08f0940018a0e000000f3437ecd40cf366644d9f4410f01dbc441fa1209") r6 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r6, 0x80408) r7 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000480)='/dev/keychord\x00', 0x8000, 0x0) write$FUSE_STATFS(r7, &(0x7f00000004c0)={0x60, 0x0, 0x5, {{0x2000000000000000, 0x7, 0x4, 0x5, 0x4, 0xffffffffffffff88, 0x4, 0x6}}}, 0x60) ioctl$KDSETLED(r7, 0x4b32, 0x4) sync_file_range(r2, 0x2, 0x80, 0x6) ioctl$TIOCNXCL(r7, 0x540d) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') r8 = openat$cgroup_subtree(r7, &(0x7f0000000580)='cgroup.subtree_control\x00', 0x2, 0x0) read(r8, &(0x7f00000005c0)=""/116, 0x74) write$FUSE_IOCTL(r7, &(0x7f0000000640)={0x20, 0xffffffffffffffda, 0x5, {0x9d9, 0x0, 0xb15b, 0x2}}, 0x20) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xf4, r9, 0xf00, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffff64}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe4f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20048885}, 0x20000000) ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000880)={0x6, 0x9, 0xfb}) write$FUSE_INTERRUPT(r7, &(0x7f00000008c0)={0x10, 0x0, 0x5}, 0x10) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/status\x00', 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000940), &(0x7f0000000980)=0x4) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000009c0)={0x20}) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r7, 0x0) sendmsg$TIPC_NL_MON_GET(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, r9, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x42a}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 19:32:45 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) rmdir(&(0x7f0000000180)='./file0\x00') syz_mount_image$f2fs(&(0x7f00000001c0)='f2fs\x00', &(0x7f0000000200)='./file1\x00', 0x3d5ea356, 0x1, &(0x7f0000000280)=[{&(0x7f0000000240)="9db75cbae049a6bd5668a79afb5f332df279731571892b121d5435028cabff3987c938", 0x23, 0x100}], 0x2, &(0x7f00000002c0)={[{@jqfmt_vfsv1='jqfmt=vfsv1'}, {@data_flush='data_flush'}, {@quota='quota'}, {@prjjquota={'prjjquota'}}, {@nobarrier='nobarrier'}, {@inline_xattr='inline_xattr'}, {@heap='heap'}], [{@appraise_type='appraise_type=imasig'}, {@uid_gt={'uid>', r1}}, {@hash='hash'}, {@uid_eq={'uid', 0x3d, r1}}, {@euid_eq={'euid', 0x3d, r1}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbfd, 0x2000}, 0xc) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000400)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)="605fe9230d00371c4f582596e0b6fb2e635ca5cada2bf07e9ae84b9e44c9c1315912245b2ad341eef32b2082f921d3c6842036d8441dc09e7cb737dc5b3e477ef60db645ff2bf9c59702cc4229ebb6e4e023a486a61af11baee8ceab340f1988b0aa6099385dba9e2db4d626df019cd6af891ce31b", 0x75}], 0x1, &(0x7f0000000540)=[{0xc8, 0x1ff, 0xfffffffffffffffd, "b338768ec4d595217607a6e313c5675071df37c7b729998f46fe53b806aa29fb142dec599dc8e912c3a71366f42847413317c466cbb8a9b6adf6f414d44e0f464c2db2d2a82ed488a420a05c9806e4da2153e0ace32168bcbfda01a669acdb71a9a9a55e5b6d1896a5fe6922236a777aa87389c63cb00b19455edba1f0710414a7a8788abfcb008116b83998bf3750ee9016c25658a93f15cc4a731b3e43ff70447b6eadcce2bb1cfb781298279d0a1f1487ea"}, {0x70, 0x11f, 0x0, "69a23adce34fa570e0392f18f5c575fc6ff30b819c97b8416eaeb16202c89ffe9aa9b28cc1ac29f66731170347d13cb193531249815e9e1c80dae070685e393a9d87cee63a9e50da30a4c4ea16efc06bf97924044df1fcbe81ba1cc8c584"}, {0x70, 0x29, 0x0, "87a16eeccfa3bf79a95858a45df85f2319fcd59de811db51885ef35d61f3f8ebc7a2070efb7866853c303e1bff90c6f85e4e36c46ad7f63fbdf1c166ada6a333a5aa129f27a6ffa758e93309e4f973f04d68fbefa9a6c32203d311af"}], 0x1a8}, 0x80) r3 = socket$inet6(0xa, 0x6, 0x2d90) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000740)={0xfffffffffffff8ac, 0x0, 0x3, 0xfffffffffffffffd}, 0x10) fremovexattr(r3, &(0x7f0000000780)=@random={'os2.', '\x00'}) recvfrom(r3, &(0x7f00000007c0)=""/170, 0xaa, 0x60, &(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x1, 0x2, 0x0, {0xa, 0x4e23, 0x7fff, @ipv4={[], [], @rand_addr=0x1}, 0x1}}}, 0x80) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) openat$cgroup_int(r0, &(0x7f0000000900)='cpuset.cpu_exclusive\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000001080)={&(0x7f0000000980)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @multicast2}, 0x1, 0x4, 0x4}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000a00)="fb44d6212fc5f8166a3d85fd7b93718585bb457a6d57cf9e48d2966c3def90126a00fd9afe0d40b424652c61bb624f79cffac72584d3a0c4ec7b6b443c4d159861becba23d7f1568bc6801749385a46015a5867b0a1255a51303a5a3280af6b277c00f196fd28a320b42eafc33263cdced46ff9e0129af3524c71a6f677eccfd7e571699d7d38c", 0x87}, {&(0x7f0000000ac0)="336eae27b03027a0268661b2deb3a60edb0bfa2e066a635cdaf301a9a9051cdbb446988c18d5b8b5e9fa3cfb58d1c28dc5468aaf0efea537b4c1e9149861c48934425f2163e0a1dd6231fb9be032e5528ad4d8935192ca44dc90df496c5349c7fc5f54eabf2b78acbc3eb0b28532c2192b357e7126adb78ff2c3b22bb677dd43c403acc29179817569db6e20c2b69724594ec300fa8b6f1ba8de76b5b3573fb6be650ffc69396ac3a55b925d315ab1f902157396b4d7d8c35729187cbe6767f48966bca2d352c89fd9", 0xc9}, {&(0x7f0000000bc0)="7873b6", 0x3}, {&(0x7f0000000c00)="4c8ac56152d70c3422ad46fa4f26a3cd4a28b14f9cabcaf413e2c3d79b063294a2f74940affef5842f7fc9fcee965b39b0773b6a29c4fc90cb656ea1dccc7997a9527e7cb5fc408d00951c38b3ebda79ea1600c81059a84206b90c786751d22b775b3500f9b5c6a1a45e79", 0x6b}, {&(0x7f0000000c80)="3577130617addca64f4ffcb6874cd2dcdfb3b37a7db9930cffd10f3efd73a0447fd51f25fa345a261fe82fc551bf1cf2e7088ebc3df5fedfc652a868e9676c0391885e1eadbb279c96b7b7a40f067d06ad20f190f47acf30d46d035f97659009fa2400573095b473394621d397483c9bc3d7e989e1c2e45ff2f942a89f6fa5760f1502e5b0bcfcb53be48fb6295d677f8a5c38ca2ace969fc009902b19e2b03cf0a8ffbe0f4b1c", 0xa7}, {&(0x7f0000000d40)="8bf14b8ecde692e0bcda3a1c509a45c9025497e83dc868edf7f271183a77247957d044b57759da9787c60f9d28f566390fe0cd2a09de410d1c4db394223c784aa0553b2f3c598f0383e0c978891f73181490ec18bb524d0651b4382247f853c7ca54939d3f8d169df5e0039605f23f262288718b15054a8eda64", 0x7a}, {&(0x7f0000000dc0)="ba926183edf1a3817b507904268f5d91341a2092d9ca6d9bd1387f94a691f6aae7d9034e013aabf431491c386c1d52f3db5d7fcc5005d390b2480d42547096573161d009e4927db81bded2b851eafbda9104198f8d26e00f39fb", 0x5a}], 0x7, &(0x7f0000000ec0)=[{0xc0, 0x13b, 0x5, "8e862993674cee79ee10462e06a12c83361fc943ab44ff7a2f2952e2b0070a8bb4a9fa4a7f66c576c8303f498a458b4ca2dc2614a4e0f5f5d82633ae48e23fdedb84acca49dc92a03df61638abaa01c0973a5a18d83c02c0993d8854841d37498e97e2ae056b2f709af7e6508b56e026d92b35306524531386fbd868881eeee7f0fd9bf5e8213d7c8247945181349ac7c714314a2d5b01820a8b91294e578e9cf4e159e060a19a4793f6a0"}, {0xf0, 0x13e, 0x80, "9e5232bf6dfcb0dbc9a78aac70887e61c779ad532aa95d22501af9f8422b5a36549cd8b07065fc88c00d04a25702710e065832c137f0fef8b2864522f97a34dee14d43d3f74189d4009eb43935f4460c952f47651a5a0aad33e5ba04e2a630921f4cab0d4e4d74c7144413db196d7e8fc1b872ba022f8b0cda90fff3a00b979cc78886260863352bbde9f804d2ef3780c6a354bff254e1c13568c6ff177730f42074a02b345df8626429af78fd0b50c5566a05c10ee0494ca62dcb9dbda9fb8c43751d71e8c0e3b3655280006a1d15db92c0a55187dbdee26eb3"}], 0x1b0}, 0x80) write$input_event(r0, &(0x7f00000010c0)={{}, 0x16, 0x1, 0x6}, 0x18) r6 = fcntl$getown(r5, 0x9) write$tun(r0, &(0x7f0000001100)={@val={0x0, 0x8bf7}, @void, @ipx={0xffff, 0x83, 0x3, 0x11, {@current, @current, 0x5}, {@random=0xffffffff, @random="38684de2a8df", 0x1000}, "67be35b8865fffaad9ae11b1f5248810177a3c1a0c0ea94ee8150b76d63065f7499c1339424746402478af369276ca86d8966162738198f3dd5d565c90c838aa9c453de97663213e708d99d5e7dcf6d56a90f8b99b25c3a897bf222026dfe118589aa2759b"}}, 0x87) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000011c0)={0x802b, 0x3}) bind$netlink(r2, &(0x7f0000001200)={0x10, 0x0, 0x25dfdbfd, 0x202a00}, 0xc) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001380)={'broute\x00', 0x0, 0x3, 0xc2, [], 0x4, &(0x7f0000001240)=[{}, {}, {}, {}], &(0x7f0000001280)=""/194}, &(0x7f0000001400)=0x78) r7 = add_key$keyring(&(0x7f0000001440)='keyring\x00', &(0x7f0000001480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f00000014c0)="ce39bd264325f78aae4bbfa1ccd2b14d631950d5fb6bfd71e95afc0e2b00827fe824769a530230dbcf885242206e43f4de0cf637407befe0994094070206c8af2786a53935a34b42f91328c751f15df5ab60dc0d5611bb529fd7f0a3b925929b0ac1f4934e220c58e290c37f1bc1bb98c71d71a34dc352e450d63c4df348aef77dbb5400a87e98cd9a623cf8630a2d987c73067b8e01acf5267d95518e8ee981302ea18e467f752d0ff010a1975ba998a7c2cd34641a23329106b9eb871b71bcf75b19c27440d8ce63d39619349cab22a1c25bf5c30cf3b65bf3c10f04", 0xdd) sched_getscheduler(r6) bind$unix(r0, &(0x7f00000015c0)=@file={0x0, './file1\x00'}, 0x6e) write$tun(r0, &(0x7f0000001640)={@void, @val={0x2, 0x0, 0x6, 0x81, 0x5da45b6f, 0x8eb}, @x25={0x2, 0x6, 0xff, "d0dc34317486433122e8eeb2e1f7e9a458951c669b768be7f2a37c0ebc616e601aca"}}, 0x2f) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001680), 0x4) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000016c0)='/selinux/access\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000001700)={0x2, 'vcan0\x00', 0x2}, 0x18) syzkaller login: [ 106.354441] audit: type=1400 audit(1549395167.986:5): avc: denied { associate } for pid=2110 comm="syz-executor3" name="syz3" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 106.436008] audit: type=1400 audit(1549395168.066:6): avc: denied { create } for pid=2955 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 106.467704] audit: type=1400 audit(1549395168.096:7): avc: denied { write } for pid=2955 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 106.493808] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 106.493814] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 106.494025] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 106.494030] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 106.494071] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 106.494076] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 106.494082] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:32:48 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0), 0x4) r1 = dup(r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000400)={0xa0, 0x19, 0x1, {0x20, {0x25, 0x0, 0x2}, 0x8, r2, r3, 0x8, 0x5, 0x401, 0x7, 0x8000, 0x1, 0x1, 0x800, 0x1, 0xffff, 0x10001, 0x7b, 0x6, 0x6}}, 0xa0) io_setup(0x9, &(0x7f0000000000)=0x0) io_getevents(r4, 0x4, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x989680}) 19:32:48 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f00000002c0)="b6", 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x20000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 106.494087] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 106.526737] audit: type=1400 audit(1549395168.156:8): avc: denied { create } for pid=2964 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 106.533429] audit: type=1400 audit(1549395168.166:9): avc: denied { bind } for pid=2964 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 106.534373] audit: type=1400 audit(1549395168.166:10): avc: denied { write } for pid=2964 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 19:32:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b0000000503000018030000cc000000ac010000000000001004c1e090e15bc551cc3d95c4f10000100400001004000010040000100400000500001800000000000000003b5a79971052c0ffc2ccef312033eda0aedcbb75d5431095222e7690c985f3c2af933ed2261d2567c143cd8de220e5666eee04b77d367b38bc5b6810d514c797f864c1073b3246633e72e2f0f153f6c059c915377ae2cb"], 0x1) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) fcntl$setstatus(r1, 0x4, 0x42803) syz_read_part_table(0x3, 0x8, &(0x7f0000000600)=[{&(0x7f0000000180)="c68e8fb5b7c9538806a59dc3f08a1a265d5779f5ff4dad5064ed13dc1bc2cb88fbfebe40f3def60a08aee1705076f4e6f667c41f1b8be027f67e8d4ccb3905ebb579b957d68e6675ce2ae658b1616f1b549eb34a7260b580250a4ad9c8d14929155cd4067b8f1e68dda06dc2b8936a245e717b4e4c892db97a311e6f691bec355ee05268230fc22c3ce7", 0x8a, 0xfff}, {&(0x7f0000000000)="4dafd3d027e4eef6e6c0da22ba59528f3a807b3211e600d0fe8a40a1d91ee3f5d6ece51d0e23e9c5d27693dbd04a1bd3ee736cd532d65ccea8b4c27caa4dc5ab1d9c6adcf79445d360dc945507dc43849d127831332767a151a0", 0x5a, 0x9}, {&(0x7f0000000240)="d030701eccfab846e0d3f69204be969deae04629deef69e82795ab84b3eb0242176e275043a1423a078a07d5108523a9cb846392ee7149", 0x37, 0x1}, {&(0x7f00000002c0)="6bf5be0d4ceaa6b1fb84cb4f9f57156acc690c77e1e485ff8add557c95a2eb891f7f9c8a586e844b900557357c715f4c452fd6f266be156ff84cbbc69d157da9567362a6288d0764c8efaf0505006338fdabc37331544ed2fe85f5f3a8aeb52b8c5ed6a9f47a8c9c0a238857e9bd0ac94db69295451484a73246bae220b3c7346d93b0678dbb0e7108494a5c2b40524d58e8621713a4a8ce94e95c98cc2c564c7106f57c907e8036d36206082fb027905242acf603aef9ec3b5c1aeb923bbadb8d80219a80649ea7a04ba1a0a9f0e6dc86b20df6a8d88db8a5e1e5f69d", 0xdd, 0xfffffffffffffffa}, {&(0x7f00000003c0)="bd4cc5dc9313168a95a41ca85a75c1c654a7029d2b81798fbe7db07424f9df4fd3975696b817fbacbdf6157552f4e46f9c69e0b547fe679fdd86b1146899ab628185e03ca05587075c317a3ed748ef135e14220e8190715cd9c9d941447c8342cbac294b130e874e99143cea4a5158", 0x6f, 0x7}, {&(0x7f0000000440)="a4ecfc6728581936a39a28d2dc1ec9bffadf5d276f8362ec3d1ec3a573f5bb85f7733e5cbe14c01748156a1ece80fa18040c350f9b3ae923cfcf6a5b7b33c1dcb4808ab2ce9ba4718fd08dd6c63dfd0548ce2a0da8b49415b8a8cd668530a183c5f569dc81", 0x65}, {&(0x7f00000004c0)="373ca5eb8d4a160efb53ac66646ea62a8b4379c8d3dbb372982b04ccc2528b1b75c0c7e8174408f7b0ba3c46191b6d905590c0d75a4f3a45c552b85a9a7a6279bfd7816b02024d879c2b13763b38a737fe5252380d2a4d468365023b972127961af4f9a39b1d4ffe48dfd54170efc96436000bba4834bc5645704056ff565d160b98466c5eec820dc9e016313cf54654840832c7777f32a9579e4356e2386ca06805fc026634916591188820275dba7346549ccae646ee1fed44aba30e35784cf10168d38ba1edebb27e072bd9171b3cc0b51989df660e9c904b5dd6ce246be3c7e2b5e4c3af795e18a3e41f5fd44c32f1adf6845699068b3e0a33", 0xfb, 0x401}, {&(0x7f00000005c0)}]) [ 106.590502] audit: type=1400 audit(1549395168.226:11): avc: denied { getopt } for pid=2990 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 19:32:48 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x6d3e556353a68e50) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x9, 0xa496, 0x100, 0x20, 0x15, 0x7c37, 0x5, 0x1, 0x6, 0x10001}) 19:32:48 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000016c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000001700)={{0x2, 0x4e20, @multicast1}, {0x306, @random="4bb04114f12d"}, 0x42, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 'ip6_vti0\x00'}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0) r3 = getuid() quotactl(0x2, &(0x7f00000014c0)='./bus\x00', r3, &(0x7f0000001500)="b6ac41a8b8fdd225c87e15ec7f263ea18587305df9fde678a55c892b5b9a184d0f9225fa63512ab0501933abdcb7c1e165e7669bc6c488545be27e422435654d0e3846be32c9cb03832385752a9baf50fc1f79009be6eb40f736f26e2393bced6bffb661a55519ac4f58593d4f305574d46f54231d8a1e24f09a23ccec491ddd2d06b561c81e036ad7edd03759b527426d0d5d4c740f5814eb39fb98a75d2136d08d1eaab940b6a4d6") r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) mlock2(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x3f, 0x0, 0x0) write(r4, &(0x7f00000015c0)="f47c6a01335c99d61943c98b4d69e8158db73d36609e49b1d8d6c87be4af27417e43b982958da7fc3c09c489378a509e42282163f88678ebf1c1835da99d60732578b7ad3dfe691dc114b06ada3224329642daf8b7a978b75bb70cdd12a5f092b7b2660c83046e64d25c80327f4370bd961068ad941109805b011a7abd1582609bb7b5f86958e014697cb117bcdc73ec3f806e4a89b25f1c857d7904ed5d9e4a125e780a8e6b2d6ccbe522f8c9e6fcea35754e8428644ab6f6be4077727080a894c4d3d21186f08f9fd92ab06f1254a7b8b4b10955eb25c1b6ba789c4ded139124b4dde3f2294f492039d50de090be7ab27822ed45e56e8e2641af4a8f", 0xfd) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) pread64(r2, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) perf_event_open(&(0x7f00000012c0)={0x5, 0x70, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001340)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000240)=0xe8) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000001480)={0x1, 0x3, 0x84, 0x5, 0xed, 0x9b3, 0x6}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000001440)={@rand_addr="08d87a682e9e42419d483c90905ea763", 0x2e, r6}) ftruncate(r5, 0x7fff) sendfile(r2, r5, 0x0, 0x8000fffffffe) [ 106.767781] audit: type=1400 audit(1549395168.406:12): avc: denied { read } for pid=3020 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 106.774847] FAT-fs (loop5): Unrecognized mount option "pcr=00000000000000000019" or missing value [ 106.832868] EXT4-fs (loop5): unable to read superblock 19:32:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000001000)=0x7, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x18, 0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x3) fsetxattr$security_capability(r1, &(0x7f0000000380)='security.capability\x00', &(0x7f00000003c0)=@v2={0x2000000, [{}, {0x0, 0x86}]}, 0x14, 0x1) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080), 0xffffffffffffff79) write$ppp(r1, &(0x7f00000004c0)="98091ed273283887f16d9ae433698cc6c3eb186a4b918e39d82b7a01a807f6ea2edea8c1d2178071cf9390ba670d3209347a8d3790a304bc57bc7b60d48fce2f64", 0x41) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x0, 0x100000001}) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) setsockopt$inet_int(r1, 0x0, 0x20000005, &(0x7f0000000240)=0x3f, 0x4) 19:32:48 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xa7}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x140, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x38) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x2) [ 106.906362] FAT-fs (loop5): Unrecognized mount option "pcr=00000000000000000019" or missing value [ 106.931149] hrtimer: interrupt took 25962 ns 19:32:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) poll(&(0x7f0000000080), 0x20000000000001c7, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f00000001c0), 0x4) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'cpu'}]}, 0x1800) INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes 19:33:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877d4ea5d7d64d00d49ed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae2082510bb7d0abe8d208f0f1bcc885c8ba93c00", "7b3177f4fc2eb04172daa8fddac4c4cf144a23173b6605afb988de7e07195d78f7ddd19a3782fba5bfe2566c845a0c58b400", "ee52c10d1e72a9432c222885fcedff747a3131991a00000000010004002000"}) 19:33:50 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in6=@local}}, 0xe8) r1 = syz_open_dev$mice(&(0x7f0000001580)='/dev/input/mice\x00', 0x0, 0x40000) mmap$perf(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0xca9e65d9b7284eae, 0x10053, r1, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000080)="385cfe417fe0f34e93ca263d918fe3fd857ec83991bd6b3906d58920eb09adefc9a6fb0239d2b50f1354524cdc298b47c1ffd0a51b5ab2c4ada197b6", &(0x7f0000000180)=""/191}, 0x18) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) preadv(r2, &(0x7f0000001500)=[{&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f00000002c0)=""/179, 0xb3}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, 0x0) 19:33:50 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x200000, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) 19:33:50 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb='[d::],0::b:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 19:33:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fe, &(0x7f00000002c0)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES16], 0xfffffe5f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='reno\x00', 0x5) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x8034}, 0x0) 19:33:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = pkey_alloc(0x0, 0x2) pkey_free(r1) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) dup2(r0, r2) 19:33:50 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000300)=""/229) 19:33:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 19:33:50 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000090f80000"], 0x0) 19:33:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900), 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001640)=[{&(0x7f00000004c0)=""/59, 0x3b}, {&(0x7f0000000500)=""/66, 0x42}, {&(0x7f0000000580)=""/8, 0x8}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/108, 0x6c}], 0x5, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = dup2(r1, r2) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040028bd7000fbdbdf250100000000000000024100000010001369a03a6772658f61703000008b88ecd81c5cf6f58d8fbf0a6c4a2976eca5962111378744722069f1bb2df5224ec3870ff0b30e6590ec2411fec2f8ce7f6fa80b424c460000000000000000a2fd4b0274f56dcf276f1b02217d3f22f5ff83053689a40a9f486c0f831aeb2989631edd8b7cc0715cb82e694117f32b756d2d61c41f04a7cec9edaeed3d9ae484c4f8710e393fa933691dae9e10108a4f4542fcfee98cef6a72348c0d58aae22088c937596b30294344d9382fe6"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x6, 0x6, 0x3, 0x0, 0x2, r4, 0x40}, 0x2c) mount$fuse(0x0, 0x0, &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clock_gettime(0x0, 0x0) utimes(&(0x7f0000000300)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') preadv(r7, 0x0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) 19:33:50 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4000, 0x4) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000040)={0x7ff}) ptrace$setopts(0x4206, r0, 0x0, 0x20) tkill(r0, 0x6) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x3a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa0000004}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x20004000) ptrace$cont(0x1f, r0, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000002c0)) ioctl$TIOCNXCL(r1, 0x540d) ioctl(r1, 0x483, &(0x7f0000000300)="76d9105522765d66a38bf067189907ef0fc53e5ccef5ad93c2aeab6564856ab2ef0d572818f1b1e57916265766215a5f62d0d4ebf7f208b0ca5381fbcf205e6b172d4a07c6c79e6f00028433efd69ac0684edf4eb677327971a6d7ce600514a7caf8f270cdfe") syz_genetlink_get_family_id$tipc(0x0) 19:33:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x101400, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000100), 0x4) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYPTR64], 0x8) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x0, 0x0) [ 169.315513] audit: type=1400 audit(1549395230.946:13): avc: denied { map_create } for pid=3119 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 19:33:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000000200)={'erspan0\x00', @ifru_names='veth1_to_team\x00'}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x41c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000900)=""/4096, 0x1000) 19:33:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {{}, 0x0, 0x8000}], 0x30) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) execveat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) 19:33:58 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x3) dup2(r0, r1) 19:33:58 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0xfffffffffffffffe, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) futimesat(r0, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) clone(0x2122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='status\x00') exit(0xa) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000000)) ptrace$getregset(0x4204, 0x0, 0x200, 0x0) fcntl$dupfd(r4, 0x0, r2) getitimer(0x3, 0x0) sendfile(r5, r6, &(0x7f0000000040), 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000240)) setpriority(0x2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syncfs(r4) perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000000, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) timer_create(0x0, 0x0, 0x0) [ 176.510277] syz-executor4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 19:33:58 executing program 0: r0 = socket$inet(0x2, 0x803, 0x5) prctl$PR_CAPBSET_READ(0x17, 0x1a) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x4, 0x7fffffffefff, 0x3) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000040)={{0x2, 0x4e23, @loopback}, {0x306, @dev={[], 0xd}}, 0x8, {0x2, 0x4e20, @multicast1}, 'lo\x00'}) r1 = fcntl$dupfd(r0, 0x406, r0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x400, @empty, 0x3d}, 0x1c) 19:33:58 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/4\x00') ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x3ff, 0x5, 0xa}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=',', 0x1}], 0x1}, 0xc100) sendto$inet6(r0, 0x0, 0x0, 0x4000050, &(0x7f0000000080)={0xa, 0x0, 0xded7, @mcast1, 0x1}, 0x1c) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') r4 = perf_event_open(&(0x7f0000271000)={0x20000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)) getresuid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) getresgid(&(0x7f0000000440), &(0x7f0000000a40), &(0x7f0000000a80)) getpid() fstat(r3, &(0x7f0000000ac0)) getresgid(&(0x7f0000000280), &(0x7f0000000200), &(0x7f0000000180)) getpid() getegid() fstat(r0, &(0x7f0000000cc0)) fcntl$getown(r4, 0x9) getgroups(0x5, &(0x7f0000001440)=[0x0, 0xee01, 0xee01, 0xee00, 0x0]) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) lstat(&(0x7f0000001600)='./file0\x00', &(0x7f0000000300)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002300)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000001640)=0xe8) r6 = socket$inet(0x2, 0x6, 0x77) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f00000002c0)=0x71) fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002b00)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000002c00)=0xe8) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000002c80)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002d00), &(0x7f0000002d40)=0xc) fstat(r2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003100), &(0x7f0000003140)=0xc) getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@ipv4={[], [], @multicast2}, @in=@multicast1}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000580)=0xfffffffffffffce3) getgroups(0x0, &(0x7f0000003380)) fcntl$getown(r3, 0x9) getresgid(0x0, &(0x7f0000004a80), &(0x7f0000004ac0)) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000004b40)) getgid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000004cc0), 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000004d40)={{{@in6=@mcast2}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@dev}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004e80), &(0x7f0000004ec0)=0xc) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000004f00)) 19:33:58 executing program 5: readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/147, 0x93) r0 = socket$inet6(0xa, 0x0, 0x8) setsockopt$inet_group_source_req(r0, 0x0, 0x30, &(0x7f0000000180)={0x0, {{0x2, 0x0, @multicast1}}}, 0x104) 19:33:58 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x105000, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'erspan0\x00', 0x74}) socketpair$unix(0x1, 0x1022, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd4(r1, &(0x7f0000000240)={0xfffffffffffffffd}, 0x8, 0x80800) openat$urandom(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x303000, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="61000000000000000900000000000000f1ff01000000ffff", @ANYRES32=r3, @ANYBLOB="00000000ff0300000000000000000000000000000000000000000000"]) openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$inet(0x10, 0xc000000003, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="24000000520007031dfffd946f610500020000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 19:33:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x9b, 0x7, 0xfe, "6bfd622ddac113fc3247b267cb88cfe8", "b7c9886d43f46fcef236f5dcbb012650ac86d581b0dc5e97db4d279a4285e1399449e6ad82a13419771219b2c7ce795fc555a79b4504364500cc047bf221f25483d9b8f1db76cac9c886980ac80289cfd20c2d7388acf6f79b7d3a9f908d58b94871dcd811bcf019b875ffbe5ae869515f5be7faffa620397e6a95c69cb96564c9b086d03766"}, 0x9b, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000002380)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002280)=[{{&(0x7f0000000280)=@l2, 0x80, &(0x7f0000000800)=[{&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/77, 0x4d}, {&(0x7f0000000400)=""/58, 0x3a}, {&(0x7f0000000440)=""/231, 0xe7}, {&(0x7f0000000540)=""/187, 0xbb}, {&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f0000000700)=""/238, 0xee}], 0x7, &(0x7f0000000880)=""/4096, 0x1000}, 0x400}, {{&(0x7f0000001880)=@nl=@proc, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001900)=""/121, 0x79}, {&(0x7f0000001980)=""/219, 0xdb}, {&(0x7f0000001a80)=""/193, 0xc1}], 0x3, &(0x7f0000001bc0)=""/111, 0x6f}, 0x9}, {{&(0x7f0000001c40)=@llc, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001cc0)=""/25, 0x19}, {&(0x7f0000001d00)=""/144, 0x90}, {&(0x7f0000001dc0)=""/136, 0x88}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x4, &(0x7f0000001ec0)=""/26, 0x1a}, 0x6}, {{&(0x7f0000001f00)=@hci, 0x80, &(0x7f0000002180)=[{&(0x7f0000001f80)=""/74, 0x4a}, {&(0x7f0000002000)=""/241, 0xf1}, {&(0x7f0000002100)=""/97, 0x61}], 0x3, &(0x7f00000021c0)=""/137, 0x89}, 0xcf5}], 0x4, 0x40000000, &(0x7f0000003400)={r1, r2+30000000}) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/233, 0xe9) r3 = gettid() socketpair(0x11, 0xa, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x27) 19:33:58 executing program 4: socketpair$unix(0x1, 0x4000400000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) creat(&(0x7f0000000000)='./file0\x00', 0x60) 19:33:58 executing program 4: r0 = open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x40) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2000000007) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000001000000feffffffffffffff010000009ff8ffff0a0000000000000000000000000000f800000100000000000000008000000000000000000000000000000000000000000000000000000100000000000500000000000000000200000000000000000000000000000000000000000000001000000000000000000000000000002000000000000000080000000000000003000000000000000000000000000000000000000000000001030000000000000000000000000000f7ffffffffffffff08000000000000000100000000000000000000000000000000000000000000000a0800000040000000000000000000006d9d000000000000030000000000000040000000000000000000000000000000000000000000000000200000000000000000000000000000ff00000000000000040000000000000019f0ffffffffffff0000000000000000000000000000000004100000000000000000000000000000080000000000000009000000000000000400000000000000000000000000000000000000000000000001000000000000000000000000000003000000e800000002000000000000000200000000000000000000000000000000000000000000000008000000000000000000000000000002000000000000007809000000000000ffffffff000000000000000000000000000000000000000080000000000000000000000000000000ffffffffffffffff040000000000000094000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000680)=0x2000000000000077, 0x4) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000200)={0xc6d9}, 0x8616) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getpeername(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, 0x8) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) rt_sigsuspend(0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000280)={0xe0, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @loopback}, 0x3, 0xffff, 0x1000, 0x7, 0x4, 0x0, 0x0, 0x7}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/checkreqprot\x00', 0x0, 0x0) r5 = getpid() sendmsg$nl_route(r2, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@RTM_GETNSID={0x3c, 0x5a, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_NSID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x4000) flock(0xffffffffffffffff, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 19:33:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pwritev(r0, &(0x7f00000008c0)=[{&(0x7f00000006c0)="b066f8469444b8934ef253077fb588e8c3b2149fea16fae90c2ebb8d8f3133006a5f647445a5dbcceedb13f444a09775e94b7072d7aaa0f72b01c4a15fe91ee5fcd34509de4318085c12906dbed7cc175ed849f33bd343b5efefa9769e4abaa9abda13dc8dc453e72365f86aa40f30320b30f9567596cff787e656ecac152394a7ba9fdae9cc3ac2ad1e3fbef2fa6d12b48e3ecdbe7276d42b7860fcb19e9fce01618d6c8dde572d8a63b902122228e61a92b18f50adb8b2a536253828757f68e3a185f2aca262b5bd3c92f8181408b1b872aa6df4a1a7d43ed0cd18e19faa81be3a2c6b3c0cd2", 0xe7}, {&(0x7f0000000240)="c019ef2daabecf65222b1104dc1c6c1ca33b7e1fbdf4a86efde0d2951317d8e8bcc589d97e2f", 0x26}, {&(0x7f00000007c0)="695532d6a0761e44d53be9afe3807460e0221133367581b864d0138f9a15ea029d43ac197277b0e85999ae9bbdf5028fcaf920efb8b7880a6945e2ece18a9362686a48e466c3991992b169882f5a6415af60aca4408cecfe019dd6594ef8429888661e89b37b2cbe84f010451cade2de9d0689371947ac0a3411497d6a5560c2d4b32d8e6b2cd67bb5215a", 0x8b}, {&(0x7f0000000880)="6cc1fa63bd176ce7c81f38340f929771f3163222d6d03c27757a8260139773ab", 0x20}], 0x4, 0x0) dup2(r0, r0) r1 = epoll_create1(0x80000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000100)="4b41c770c688620fc5f3e6cac2c65cae8975e38fcba5f29807a3", 0x1a}, {&(0x7f00000002c0)="e5ca147c9162b76de09e61197083232b397d1c05fab49519327653eca836ac276e1b5d00bbd329f5152c512bec1e2cff66e82c993745f16beba255543fd66cd667ac35ba18c8e1260004cf870e17ad3224d33e620a0810130dc524807fae5654cc354d28244f92dd635173cb65e8144fc9737f1f6d92756ff580a36842e3ae6390d0eab8c6b580b1a1bec86ca2051605318fd37d1f79dba8ac073911a7256fd4207f5dca945aab99d0be5f27ca7f395bf5efce30cf41fdbafd0a8720ea8c74292564aca353af05215729ae", 0xcb}, {&(0x7f00000003c0)="78b3433d124fd199adb08d783c31e49080d90cc85bca15dc8731513c297b7febeb141108b25ff49b2906f0e48ab7757d3b0bf948948c8450d60f40c49be12645616169af9c5f3b3b0818aeb54af996d9f772814cb7e270ead81f9c9d3181fe7f8c46d13096e533ea8b3e3a8a313c1362d60b97374325a40d9ece98628567a39682f7649126d003281e0694f92c23b40c2476db9df700109c167a900d42e01c379359edc4b0162e9f572959179db8dc8bf67b686195050c3674866148e899963119e188808cd78abadbfb", 0xca}, {&(0x7f00000004c0)="7579920c37211bc56e53b411835d1c4cd072e655342e5acaa9f18137b60a7d474ae5c63dd91c5a4ea5a6917754fe93841c841ca05cb067ec6425700e9e92e7e3cf51823469f95b98b1aecc83271c3c8b7489a843845d66157fa239cf667396aac10c46a46afb257f19435a86494417bf5d08a4a38203c3a4968e226069a04dba3c060144aab16342053c666c71d0fcd7fc0e5727370f944e97bd748990c5609408598c866c36ec7bd7ada4b013a1494f2423dd259c6746c1b80834d844c13169285c756268c2790eb832bb95ffa5f6129da7d7385df4f7a3f1b5a5b649f1e4faea", 0xe1}, {&(0x7f00000005c0)="01754ac56ce957956c55aa4389d6098b5c6494fbcd4afda16028b69c276f0308808ebe3ba5a06be1dbff54acef8c27c4300a607dcf7663c71f48829ccb7ec83a21697c83eff9845f9a087e48ac32f916064d9c79bc381c006dd4a2fbc6ff", 0x5e}, {&(0x7f0000000180)="2c9a1fb219a622b05d5a5486d5678865f9ccd9b72a8974302e564d339af97c6304bb31aada4ed29f25d2bd744145a19a", 0x30}], 0x6, 0x2) [ 177.211030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 19:33:58 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1) timer_create(0x3, &(0x7f0000000100)={0x0, 0x4, 0x0, @thr={0x0, 0x0}}, &(0x7f00000004c0)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x7}}, 0x0) 19:33:58 executing program 2: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r0) keyctl$revoke(0x3, r0) keyctl$get_security(0x11, r1, 0x0, 0x0) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/83) 19:33:58 executing program 3: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) mkdir(&(0x7f0000000780)='./control\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb) mkdir(&(0x7f0000000940)='./control/file0\x00', 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x10040, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000008c0)=0x7fe, 0x370) sendto$inet(r0, &(0x7f0000000800)='I', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007280)=[{{&(0x7f0000002200)=@in={0x2, 0x0, @dev}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x12000, 0x0) [ 177.265320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 19:33:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_KEEPCAPS(0x7) 19:33:58 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0xfffffffffffffffd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000340)='threaded\x00', 0xa7571fbb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r3 = getpgid(0xffffffffffffffff) getpgid(r3) recvfrom(r2, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) 19:33:59 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCXONC(r0, 0x540a, 0xfff) connect(r1, &(0x7f0000002a40)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80) 19:33:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\xacr\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0x102}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x800001000008912, &(0x7f0000000040)="3f3188a070006371faae6421efcb712915fe63231942d3c27fc3d55d705ba79700") ioctl$TUNDETACHFILTER(r0, 0x400454d1, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000100)='bdevuser@\x00', 0xa, 0x0) 19:33:59 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x2) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev={0xfe, 0x80, [], 0x26}, @in6=@empty, 0x4e22, 0x100000001, 0x4e23, 0x8, 0x2, 0x20, 0x20, 0x2c, r3, r2}, {0xa63, 0x80, 0x6, 0x0, 0x100000001, 0x9, 0xfffffffeffffffff, 0x1}, {0x100, 0x0, 0x3, 0x7}, 0x6, 0x6e6bb4, 0x1, 0x1, 0x1, 0x2}, {{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1f}}, 0x4d5, 0xff}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x3500, 0x4, 0x1, 0x7, 0xffff, 0x9}}, 0xe8) write$P9_RWRITE(r0, &(0x7f00000003c0)={0xfffffffffffffebe, 0x77, 0x1, 0xff8}, 0x1a) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) setresuid(0x0, r2, 0x0) write$P9_RVERSION(r0, &(0x7f0000000240)={0x15, 0x65, 0xffff, 0x5, 0x8, '9P2000.u'}, 0x15) link(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 177.411970] audit: type=1400 audit(1549395239.036:14): avc: denied { connect } for pid=3703 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 19:33:59 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 19:33:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000500)=[{&(0x7f00000001c0)="02c21a2afa19c3d7037c27a2a5a7efca23dcf65893a39fe6ce12916e09c70ae87c0d4ec34cad33e886cafbcb88a05a1198edda3f214a518f44c25b979ef321335730b303d96cbb382dd9d45321732805b9a90438965fd27aca9b854409b21ae236a251ec941d46c9e07bb76c4561751d2d827631b2a712df6535055112085ec12a74fa4c48d6fe669f230c57c8aa82e09262814ee83aa19240a375c3b927c2", 0x9f}, {&(0x7f0000000280)="b3153239924b20dd6889fb421da7d13dc115f8a160423418db7f5649e6c87ea79066924c208f53064184f1232adf1ad15c9dde6e686931f9f188e2abf978bd92951427e28f33b1001a8459999e59b4d4181dfdbd2a2f30e488e6cc221f65a701ee80bddfb193259d942ccd14a71d69ab7e04eed33feac59488236a29aec76cce40c15a02e4d6fa79990a12cda2427e3e", 0x90}, {&(0x7f0000000340)="bc78817aeeb943192f662851c756f32a17da9cf8cd26c77934ac064e945b0fd446083074512ccd9e6b341ac9e10b00921fe9d497ec52a1574bb00aad782d4e23e8c51f763e770ae3aa14dcc6e1c455969435664d00e94a130a40c2e791e26cabc6", 0x61}, {&(0x7f00000003c0)="89a22a2fc93d8bb1e27006a85691d11a217f4e1c876032807dbd05d32b31da7cd6594192d57c314f10b8734b1c056ff7d9a40e5c6797fc2cefa23fcab6656362168505594f145847f1a67e8ca9e0917f305c71ae12ea54e6d1f7c92b80e17947b722a5b025f41151", 0x68}, {&(0x7f0000000440)="7377efb93bdd2ea3590cf4d1fe71160001bda65f1c611dda7e9a7387614d14ed", 0x20}, {&(0x7f0000000480)="cf8aed1a4c22e3402023028b8d89f1fa7f8cb522acd8341ba7fa4772", 0x1c}, {&(0x7f00000004c0)}], 0x7, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000040)={0x1, 0x9}) fsetxattr$security_smack_transmute(r1, &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffff00000000) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x7530}, {0x77359400}}, &(0x7f00000000c0)) 19:33:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000180)) mknod$loop(&(0x7f0000000040)='./file1\x00', 0x6001, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000280)) open(&(0x7f0000000080)='./file1\x00', 0x40000040080, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000140)=0x1ff) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) 19:33:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x87) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x81, 0x1800) write$9p(r0, &(0x7f0000000800)="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", 0x600) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x100000001, 0x8000, 0x7, 0x0, 0x0, 0x100000001, 0xa000, 0x0, 0x8001, 0x80000001, 0x9, 0x80000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8001, 0x8a, 0x0, 0x8, 0x20000000, 0x3b, 0x0, 0x8, 0x3, 0x675, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x9, 0x4, @perf_config_ext={0xe0000}, 0x2, 0x0, 0x8, 0x2, 0x4, 0x9, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendfile(r0, r1, 0x0, 0x10000) write(0xffffffffffffffff, &(0x7f0000000100)="f4", 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x0) lstat(0x0, &(0x7f0000000780)) fstat(0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) 19:33:59 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/fuse\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x50d, 0x100, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffedf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x8, 0x0) r1 = socket$inet6(0xa, 0x1000000000080005, 0xb) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x800, 0x0, 0xff, 0x0, 0x0, 0x8}, 0x20) mkdir(&(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000041c0), 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000a80), &(0x7f0000000a40)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000580)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000010}, 0xc, &(0x7f00000003c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x8015}, 0x20000000) mkdir(&(0x7f0000000800)='./file0\x00', 0x12) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = accept4(r2, &(0x7f0000000740)=@in, &(0x7f00000001c0)=0x44d, 0x800) fstatfs(r0, &(0x7f0000001080)=""/130) accept$inet6(r4, 0x0, &(0x7f00000002c0)) write$FUSE_INIT(r0, &(0x7f0000000100)={0x95a83514627f702e, 0xfffffffffffffffd, 0x7, {0x7, 0x1c, 0x200000000000400, 0x0, 0x0, 0x80, 0x10000, 0x2}}, 0x50) setsockopt(r4, 0x7, 0x9, &(0x7f0000000d40)="968b07da0d1d2bdc77d29c243d372092d22bac0c48517a84d715d26e7fbcfd440c30f93190fa3488c937d9bbef68160ae47c0e78c3059fb0f1c04bafce8a3437584c4ad26c3324fa235cc99cc755fece47245d98c9953e6eee9086fb678e6872851783e5d78e9f3d8a283f22dbbe2e21f87a0ec17018833fadb92a4ded03ebbfdd3a2450a2cb787fa939b84378cbfe95fe89bfd04590d263b64b3e2d728158529914798f16088d00611c9a5478fac9566d737f7b4c82ea7dfaa6394b43629193167e6d8cf883ffe741de8fd1edad5438ef254e", 0xd3) umount2(&(0x7f00000004c0)='./file0\x00', 0x3) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000005c0)) socket$inet(0x2, 0x3, 0x5) recvmmsg(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000500)=@xdp, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000000940)=""/100, 0x64}, {&(0x7f0000000580)=""/44, 0x2c}, {&(0x7f0000000a80)=""/244, 0xf4}], 0x6, 0x0, 0x0, 0xfffffffffffffffd}}], 0x1, 0x10000, &(0x7f0000004000)={0x0, 0x989680}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004140)={&(0x7f0000000440), 0xc, &(0x7f0000004100)={&(0x7f0000004040)=ANY=[@ANYBLOB="140006000000000000000000010000000400000014000200fe80000000000000000000000000001b14000100000000000000000000000000000000001400060001000000020000000500000001000080"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000007c0)={0x18, 0xffffffffffffffda, 0x4}, 0x18) 19:33:59 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 19:33:59 executing program 2: io_setup(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x100082) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) flock(r3, 0x8) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x0) sendfile(r1, r3, &(0x7f0000000240), 0x20000102000007) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/status\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, &(0x7f00000005c0)=0x1e) creat(&(0x7f0000000700)='./bus\x00', 0x0) setxattr$security_smack_entry(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000500)='security.SMACK64IPOUT\x00', 0x0, 0x0, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r3, 0x28, &(0x7f0000000640)}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000600)) r5 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@loopback, @local, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85160088, r6}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000100)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000636000)=0x2, 0x4) finit_module(r2, &(0x7f0000000140)=',{', 0x3) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000000)=""/154, &(0x7f00000000c0)=0x9a) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xfffffffffffffffc) sendmsg$nl_route(r7, &(0x7f000001bfc8)={0x0, 0x11f, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 19:33:59 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x10, 0x8000a, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lapb0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe82}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x70}}, 0x1) r3 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x2000006) [ 178.272241] audit: type=1400 audit(1549395239.896:15): avc: denied { audit_read } for pid=3743 comm="syz-executor2" capability=37 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 19:34:00 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x8000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x100, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/35) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000003c0)='./file0\x00', 0x42202, 0x1) write(r3, &(0x7f0000000600)="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", 0x1000) r4 = creat(&(0x7f00000004c0)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000001c0)={0x6, 0xbb, 0xc0, 0x0, 0x0, [{r4, 0x0, 0x6}, {r2, 0x0, 0x4}, {r2, 0x0, 0x7fffffff}, {r1, 0x0, 0x401}, {r3, 0x0, 0x3}, {r3, 0x0, 0x7}, {r4, 0x0, 0x7}, {r2, 0x0, 0x7fffffff}, {r1, 0x0, 0x3}]}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000380)={0x9, &(0x7f0000000300)=[{0x8, 0x92ef, 0x9, 0x6}, {0x3, 0x5, 0x1, 0x3cf2}, {0x9, 0x8, 0x0, 0x1}, {0x40fb7408, 0x1, 0x5, 0x1fe000000000000}, {0x3, 0x1, 0x9}, {0x1, 0x8, 0x10001, 0x100000000}, {0x401, 0xe94b, 0x7ff, 0x7f}, {0x0, 0x3ff, 0x0, 0x80000001}, {0x3, 0xf15ca1d, 0x10000, 0x9}]}) fallocate(r4, 0x0, 0x0, 0x10001) sendfile(r2, r3, 0x0, 0xffffffff004) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xffffffff) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000140)={0x100000000}) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 19:34:00 executing program 4: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000002500)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x2000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1dc, r2, 0x210, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_BEARER={0xa8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0xff}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x7}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x360, @remote, 0x4597}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x53f}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x1}, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, r0, 0x0) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000000)=ANY=[]) 19:34:00 executing program 2: creat(&(0x7f0000000140)='./bus\x00', 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ff5000/0xb000)=nil) mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000006c0)='ramfs\x00\xb0\x9eVL\xb2\xa5x]\xd3\x01\xbc\x00\x00\x00\x00\x93\xc9\xf4\xe0\xe0\x87\xd9U\xfd=,l\xe5\xa4\x11\b\x89\x84\x9cA}{>\xa8\xba\xbe\xd9\x1e\x8a\xb6\xfa#\x06\x8b\x8f\tF\xb44\rG6\xf4[%\x06)\x06\x97\xf7\xb9\x88%h\v\\\x05~\x16\' \xcb\"s\x82\xe4P\xee\xdd\xbe{\x13$\xfe\xef\xf2D\xac\x9b\xabd\xa2QH,\xca\x8e\xdd\xcf\x8c\x04\xadnr(\xdb+\r3#\x96L7\x16^\v}\aq\xa8\x91\x1dc\xa9j\x9b\xa0locq58Z}~_\xb3\xe3R\x1d\xdc${\x06\xfc\x85\xd6d\x10I*\xa2\xc6\xac\f\xd9\xb1\x8dk\x03h\x9a9p\x14\xf6\x16 \xa7\xfa#<\xe6\v\x8c)\xcb%\xe9\a\xcc\x10z\xe4\xbc\xcd8\'\x04E\xc3\x93', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='./bus\x00', 0x0, 0x3002480, 0x0) 19:34:00 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='fuseblk\x00', 0x0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='./bus\x00') sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000600)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7) write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7) sendfile(r0, r3, 0x0, 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) 19:34:00 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7ff) r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @local, 0x0, 0x2, [@empty, @local]}, 0x18) setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) 19:34:00 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0x10e6) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/72, 0x48}], 0x1) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1c, 0x2000000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x36, 0xfffffffffffffffc}}, 0x50) open(&(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x0) 19:34:00 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x800000000000, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = memfd_create(&(0x7f0000000000)='/dy\xbdv/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r2, 0x0) dup3(0xffffffffffffffff, r1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) 19:34:00 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 19:34:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 19:34:00 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x20000000) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000080)={0x33, @empty, 0x0, 0x0, 'ovf\x00', 0x0, 0xd447}, 0x2c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0xda8, 0x4) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="57b0", @ANYRESHEX=r2, @ANYRES64, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="ed40d572788fd7a94c214cfa655ee60ffda87a8e58bdebf25c17664dc97c76fcf81c5cfdb2b816b26f1925ab7fa7397c45778ecf7b126570d926b65725f716f665376b84d5255fdadddb84adc73a022d6334cd3d5a476ead286882e39f35bf5efb2455a126378195a1880800317f336d290ca4b26ae6809d3674d84b39a4b5242f11650e74"], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES64], @ANYRESOCT=r3, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRES32=r2, @ANYRES64=r0, @ANYPTR, @ANYPTR64], @ANYRESHEX=r3, @ANYRES16=0x0], @ANYRESOCT, @ANYRESDEC], 0x4f) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000040)) 19:34:00 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000040)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000001c0)=0x8007) getsockname$netlink(r0, &(0x7f0000000100), &(0x7f0000000180)=0xc) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x600) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000200)={0x7, {0xc0, 0x100000001, 0x0, 0x401, 0x7, 0x9ff}}) ioctl$TIOCSCTTY(r0, 0x540e, 0x6) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140)) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f00000002c0)='id_resolver\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='keyring\x00', r1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000240)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) 19:34:00 executing program 5: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80a81, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = epoll_create(0xffff) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'wlan1#/'}, {0x20, 'trusted$'}, {0x20, 'eth1&7@'}, {0x20, 'vmnet0'}, {0x20, 'trusted-ppp1'}, {0x20, 'nodev}cgroupeth1./trusted,em1em0&&'}, {0x20, '^)em0&'}, {0x20, '}'}], 0xa, "913fbe83eeb93d7285cfa4f775bdf3a120e01e929145a3a4a4dcf1a0f4b48a494c1cba44e71a81ce038bd550cfcf793791a39e906dac57562c2bd087c4a5cc73e12a0e937cdfab6b8cfa3e6f8b89e0b8a348b7ab7cf7b2b9f34daf54"}, 0xc0) 19:34:00 executing program 2: mkdir(0x0, 0x80000000025) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000080)={&(0x7f0000000140)=""/156, 0x9c}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x400000, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000440)={0x5, &(0x7f0000000040)=[{0x8000, 0x2}, {0xfffffffffffffff8, 0xffffffffffffff7f}, {0xf}, {0x7ffc, 0x6}, {0xffffffff, 0xffff}]}) sched_getscheduler(r0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000480)) poll(&(0x7f0000000140)=[{r3}, {r3, 0x100}, {r5, 0x400}, {}, {r3, 0xc}, {r3}, {r5, 0x2000}], 0x7, 0x2) lsetxattr$security_evm(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='security.evm\x00', &(0x7f0000000600)=@md5={0x1, "99552ed56c9b0048c2a1bd4622148a58"}, 0x11, 0x2) syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') write$binfmt_elf64(r2, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c460304013f060000000100000002003f00ff7f00006b0300000000000040000000000000005a030000000000000000000001803800010000000600001004000060010000000200000000000000e0ffffffffffffff07000000000000000400000000000000fc00000000000000566dd223ebff00004500f11ec9d9d8175e760d8b17c80dc40a20b0acdbda26181d16c509365b936fc0faa459bb1e6e28ba6a2a6ddecacb9243aab9f226b429ce0e890241d2eff00b8c00d151ba1c0d947783db9c7b24d1c0574c9e6c56acc83d9087a60dc2b43311fe77ace62badb5977c93ce2e2cbc0a4825ebcc046785c3e64a2b27940a2f2f008000001924b1de9549be73ace377aff1aea43bd6c3d09c685833a962c7649c2c2a48e4d48d6aefc16681677f3bf87d06e655b896ef88b907155dc11ee54122f0a96c72e50e82157ca973281845a4bde3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0247a29da45c1f3bac7a2d59faedf4f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5eb7d53d1ef99a6ec7525200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003288efbdb0ea88e8f9cca9530068000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e91a408166a2f7073a008a9fce12780d96c2fab417f525761f8dd4eb3801d077cd23eb0ac161fc2e1064afa70dd7461ec73a483b105101f2cb8a688b8b121530c3868"], 0x3a7) r6 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000280)="03a17080f881aaf109470b57d27c9937fbd3fbc8416efab5ef092df4b1fac327c0722036ad24f6e62d4a34836a81d1ae77ba35f3bafc4f2d2de50b33e03a20cee36a8575e35ab3e685debd890ef5830a101e9f05bf853fb2beb9a80d501f83a7adaf40142e386ad5cf46aac0616c2c993dedbbb4fd3ebcd199fe8f7ef7cd0dec9da48cbdf1eeafaeb7cf530f167018da335b2ee147a4bcc8a3331c38b6c55e5316fb44627f9573b958299c83b9e8a8e07bc7d0015c58ecdf5d4a878e7703ccfd4f959c90152e5833f181be41", 0xcc, 0xffffffffffffffff) keyctl$update(0x2, r6, &(0x7f0000000380)="38fb4986c3d595e62605a514f490", 0xe) getpid() getuid() clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000003c0)={'IDLETIMER\x00'}, &(0x7f0000000400)=0x1e) syz_extract_tcp_res(&(0x7f0000000000), 0x12000000, 0x9) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x350) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setuid(r8) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) 19:34:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 19:34:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x29, 0x6, 0x6, 0x5, 0xffffffffffffff00}) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000300)="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") write$cgroup_int(r0, &(0x7f0000000080), 0x2001007f) ioctl$FIBMAP(r0, 0x1, &(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x28, &(0x7f0000000180)}, 0x10) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x800000000000000}) [ 178.907777] audit: type=1400 audit(1549395240.536:16): avc: denied { prog_load } for pid=3835 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 178.981614] audit: type=1400 audit(1549395240.616:17): avc: denied { prog_run } for pid=3835 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 19:34:00 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000002000000000000000000000028704eb827b1d410253066f3944ea4ad27fb60b53d9cb1d4ec2f2d82c252519decdc81f71dd1c0414f2511f9920a3227ac4ba0c16becaeb0f9fa89479b622878e8bab1c1467a32f7e74fd6385f38eb2575934c0a11ba0da003d3e9fc32f984974ef5a2151ccb7fd519c1a871e7fff45a92dc94dd3db1800a0d35c28128381f5fa4d02ed8adf3868242e37ad70dfb3653812d03"], 0x10}}, 0x0) 19:34:00 executing program 0: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000800)) stat(0x0, &(0x7f0000000880)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x4100, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80) fcntl$getown(r0, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, 0xffffffffffffff9c, 0x0, 0xb, &(0x7f0000000600)='bdevmd5sum\x00', 0xffffffffffffffff}, 0x30) sendmsg$netlink(r1, &(0x7f0000000780)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc, &(0x7f0000000580)=[{&(0x7f0000001bc0)=ANY=[@ANYBLOB="1000000000000000000000a900fbdbdf"], 0x10}], 0x1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x4000000000000d) r2 = creat(0x0, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000680)={'\x03\x00\x00\x00\x00\x00\xaf\x00', 0x1000e803}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setxattr$security_smack_transmute(0x0, 0x0, &(0x7f00000004c0)='TRUE', 0x4, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000340)=0x30) ftruncate(r6, 0x2007fff) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) sendfile(r3, r6, &(0x7f0000d83ff8)=0xd, 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) [ 179.067423] binder: 3843:3847 ioctl 6609 0 returned -22 19:34:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x317}, 0x24}}, 0x0) [ 179.318097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=3857 comm=syz-executor0 19:34:01 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x800) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) syncfs(r1) 19:34:01 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 19:34:01 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x39) rt_sigprocmask(0x2, &(0x7f0000000140)={0x1}, &(0x7f0000000180), 0x8) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) munmap(&(0x7f0000551000/0x2000)=nil, 0x2000) chdir(&(0x7f0000000480)='./file0\x00') r1 = getpgrp(0x0) sched_setscheduler(r1, 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) sched_setscheduler(r1, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfffffef6) sched_setscheduler(r1, 0x6, &(0x7f00000001c0)=0xf77) signalfd(r0, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0xc0e, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x8, 0x3f, 0x0, 0x60, 0xb114, 0x0, 0x0, 0x0, 0x8ff, 0x1ff, 0x800, 0x100000001, 0x0, 0x0, 0x100, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x9, 0x3, 0x4, 0x3, 0x7fff, 0x0, 0xe5b2, 0x3, @perf_bp={0x0, 0x4}, 0x800, 0x0, 0x0, 0x9, 0x0, 0x378}, 0x0, 0xe, r2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = request_key(&(0x7f0000001180)='cifs.idmap\x00', &(0x7f00000011c0)={'syz', 0x2}, &(0x7f0000001200)='devtmpfs\x00', 0xfffffffffffffff8) add_key$user(&(0x7f0000001040)='user\x00', &(0x7f0000001080)={'syz', 0x2}, &(0x7f00000010c0)="9593195f1e2514519f81bf1c153fc7b0563225a9cb43f0a33935fc726c58a553e39eb915fdebe65201e777ec60885c470c9e3b989aa614591b9d0f41f3732e5bfd5db7f2e6f512212f677ad6374c7d890055ce151b77b234a50e95768162a7645657707af6bb1395177b2a066fd1a9a8ed8c9d6cb665cd8d22e0067735b9b3b74f44494b7d6472da09602ba5", 0x8c, r4) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000040)=""/4096) exit(0x0) close(r3) [ 179.398491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=3857 comm=syz-executor0 [ 179.414884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=3857 comm=syz-executor0 [ 179.428879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=3857 comm=syz-executor0 19:34:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 179.472832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=3857 comm=syz-executor0 [ 179.496203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=3857 comm=syz-executor0 19:34:01 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r1, &(0x7f0000000240)=0x20000000000080, 0x8) write(r1, &(0x7f0000000040)="0600", 0x2) sendfile(r1, r1, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYRES32], 0x1}}, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 179.534409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=3857 comm=syz-executor0 19:34:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 179.627101] binder: 3843:3847 ioctl 6609 0 returned -22 19:34:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000140)="1f0000000104ff00fd4354c007110000f3", 0x11) r1 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r1, &(0x7f0000000240)=0x20000000000080, 0x8) write(r1, &(0x7f0000000040)="0600", 0x2) sendfile(r1, r1, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000)) 19:34:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:01 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'syzkaller1\x00', 0x1}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 19:34:01 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) open(&(0x7f0000000e00)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') sendfile(r0, r1, 0x0, 0x80000008000000b) 19:34:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:01 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) socket(0x10, 0x3, 0x0) [ 179.855346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25955 sclass=netlink_route_socket pig=3907 comm=syz-executor4 [ 179.881555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25955 sclass=netlink_route_socket pig=3907 comm=syz-executor4 [ 179.896774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=3907 comm=syz-executor4 19:34:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 19:34:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:01 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) open(&(0x7f0000000e00)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') sendfile(r0, r1, 0x0, 0x80000008000000b) 19:34:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe3\x10\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=\xe4\xb3\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 19:34:01 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000640)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 19:34:01 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:02 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) [ 180.337887] binder: 3927:3932 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 180.347979] binder: 3927:3932 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 180.355716] binder: 3927:3932 got reply transaction with no transaction stack [ 180.363291] binder: 3927:3932 transaction failed 29201/-71, size 0-0 line 2921 19:34:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:02 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r1, &(0x7f0000000240)=0x20000000000080, 0x8) write(r1, &(0x7f0000000040)="0600", 0x2) sendfile(r1, r1, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000980)={0x2, 0x1}, 0x10) syz_emit_ethernet(0x423, &(0x7f0000000080)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) 19:34:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) [ 180.401847] binder: undelivered TRANSACTION_ERROR: 29201 19:34:02 executing program 2: mknod$loop(&(0x7f0000000040)='./file1\x00', 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x2001000, 0x0) quotactl(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 19:34:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/73, 0x49}, {0x0}], 0x2) 19:34:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7b56f364cf67f16b, 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:02 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 180.588339] mmap: syz-executor5 (3977) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 19:34:02 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:02 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) dup(r0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syncfs(r1) 19:34:02 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:02 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:02 executing program 0: 19:34:02 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x8) ptrace$cont(0x1f, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) 19:34:02 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:02 executing program 0: 19:34:02 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:02 executing program 0: 19:34:03 executing program 5: 19:34:03 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:03 executing program 0: 19:34:03 executing program 2: 19:34:03 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:03 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:03 executing program 0: 19:34:03 executing program 2: 19:34:03 executing program 5: 19:34:03 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:03 executing program 0: 19:34:03 executing program 2: 19:34:03 executing program 0: 19:34:03 executing program 5: 19:34:03 executing program 0: 19:34:03 executing program 5: 19:34:03 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:03 executing program 2: 19:34:03 executing program 0: 19:34:03 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:03 executing program 5: 19:34:03 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:03 executing program 5: 19:34:03 executing program 2: 19:34:03 executing program 0: 19:34:03 executing program 2: 19:34:03 executing program 0: 19:34:03 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:03 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:03 executing program 2: 19:34:03 executing program 5: openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mremap(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 19:34:03 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:03 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) 19:34:03 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:03 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0) write(r0, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0xa00002) sendfile(r0, r0, &(0x7f0000000040), 0xff8) umount2(&(0x7f00000004c0)='./file0\x00', 0x0) 19:34:03 executing program 0: r0 = socket(0x81000100000010, 0x2, 0x0) write(r0, &(0x7f00000008c0)="1f0000001e0007f1fff57f02000200000000010053d6445f19100836be381b", 0x1f) 19:34:03 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getgid() listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x0, 0x800) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 19:34:03 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:03 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:03 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:03 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:03 executing program 5: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:03 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:03 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:03 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:03 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:03 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:03 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:03 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:03 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:03 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x39) rt_sigprocmask(0x2, &(0x7f0000000140)={0x1}, &(0x7f0000000180), 0x8) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) munmap(&(0x7f0000551000/0x2000)=nil, 0x2000) chdir(&(0x7f0000000480)='./file0\x00') r1 = getpgrp(0x0) sched_setscheduler(r1, 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) sched_setscheduler(r1, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfffffef6) sched_setscheduler(r1, 0x6, &(0x7f00000001c0)=0xf77) signalfd(r0, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0xc0e, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x8, 0x3f, 0x0, 0x60, 0xb114, 0x0, 0x0, 0x0, 0x8ff, 0x1ff, 0x800, 0x100000001, 0x0, 0x0, 0x100, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x9, 0x3, 0x4, 0x3, 0x7fff, 0x0, 0xe5b2, 0x3, @perf_bp={0x0, 0x4}, 0x800, 0x0, 0x0, 0x9, 0x0, 0x378}, 0x0, 0xe, r2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = request_key(&(0x7f0000001180)='cifs.idmap\x00', &(0x7f00000011c0)={'syz', 0x2}, &(0x7f0000001200)='devtmpfs\x00', 0xfffffffffffffff8) add_key$user(&(0x7f0000001040)='user\x00', &(0x7f0000001080)={'syz', 0x2}, &(0x7f00000010c0)="9593195f1e2514519f81bf1c153fc7b0563225a9cb43f0a33935fc726c58a553e39eb915fdebe65201e777ec60885c470c9e3b989aa614591b9d0f41f3732e5bfd5db7f2e6f512212f677ad6374c7d890055ce151b77b234a50e95768162a7645657707af6bb1395177b2a066fd1a9a8ed8c9d6cb665cd8d22e0067735b9b3b74f44494b7d6472da09602ba5", 0x8c, r4) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000040)=""/4096) exit(0x0) close(r3) 19:34:03 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:03 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:03 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:03 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:03 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:03 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:04 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:04 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:04 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0x10e6) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/72, 0x48}], 0x1) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1c, 0x2000000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x36, 0xfffffffffffffffc}}, 0x50) open(&(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x0) 19:34:04 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:04 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:04 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:04 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:04 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:04 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:04 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:04 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:05 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:05 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:05 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:05 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:05 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a3") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:05 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:05 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a3") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:05 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:05 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:05 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a3") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:05 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 19:34:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:06 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:06 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 19:34:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:06 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a0") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:06 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 19:34:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a0") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:06 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:06 executing program 2: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a0") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:06 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:06 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:06 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:06 executing program 2: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:06 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:06 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:06 executing program 0: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:07 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:07 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:07 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @multicast1}, 0xa, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller1\x00', 0x5, 0x8, 0xafe373c}) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000100)=""/1) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:07 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:07 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:07 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:07 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:07 executing program 2: pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x40002000000001) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:07 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x2000, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet(0x2, 0x6, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, r1, 0x0, 0xd, &(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) sched_setattr(r4, &(0x7f0000000340)={0x30, 0x7, 0x0, 0x1f, 0x3, 0x3, 0x8, 0xfffffffffffffffe}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xffffffffffffff18) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r2, r5, r6) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r7 = fcntl$dupfd(r0, 0x406, r3) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x7ff, 0x0) r8 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r9 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r8, &(0x7f0000000500)=[{&(0x7f00000004c0)="7aa285ba83df853c9644314364cf284e47e70676b1f4e2186d2267abb59e608e8ae155408e25607cf3c759", 0x2b}], 0x1, r9) write$P9_RLERROR(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="0f00000007010006002a2e707070312752f8f5937cfed38010ea527dac70374a11afe6a74aef1ffb415ba811ae04c780deeb8c22ab4820237df1cdc6dd9ecf49f478708ef50933a9e0b80491c92f1730f8ed205954e95fafa537de6051bb8d12e9cffccb8fed6ae2487414309e47ad6bd69f30bde41c7edbb244408b5317bea0cab4d7efee98824cc8ee6c3a50691ac4d95c14f074e8cc8feac228631774c447fec27606a68736c3beb72990c69b4ef83ba91c2ff81cf41c7b3cbca3d64be9bdfc4fd9"], 0xf) 19:34:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:07 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:07 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = request_key(&(0x7f0000000080)='.dead\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\'\x00', 0xfffffffffffffff8) r2 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$negate(0xd, r2, 0x3, r2) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r3 = dup3(r0, r0, 0x80000) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000180)={0x5, 0x4, 0x7, 0xff, 0x5, 0x800, 0x100000001, 0x1f, 0x7ff}) 19:34:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000000)=""/53, 0x35, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="b075bdcc625586e5b5800e2cce46fce50d63f2792177ed4cbd95ea4503330bc566f4d9da318bbd27dd936d152efe913c56c90c90fc74b4b29bfc310539d19ace6fd6aa8fac285f4215534c4bc726fcc6649f0d1e1fdc7105ef80c6ed16f63c6a52ca1503fe99aab7c39f8f3347ec95023de585ffd3a6d1708021b239d71be5a88e7a06ba825547599b49c933a466575574b0c8188597e13d46bac4d3aba7ba6e797fbfc41645613f7ba81af72c1527552c8ef4bd", 0xb4}], 0x1) 19:34:07 executing program 1: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r1}], 0xffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0, 0x201}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x6, 0x7, 0x5, 0x3}, 0x14) r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f00000000c0)=0xf2) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000080)) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x3f, 0x0, 0xa, 0x20, 0x4, "dd50c0588f4a10e669bff8f8fb65cfd5ad2ca938dcde05915bf4ad1ef6c13a2e0aadeaefb56102d5bde6e28a427e8761c55f520c8ba21d9abc336cd82aa8f2a9", "c814bb270ab2bb4651679458dafbf73e534fa269a3eadd4f44ca8497c32e1f664cd0c2f4056ecf409d0a8880f7e4296daa0814de074810629d220ef3a125650b", "1ffd6de1780ad6c6af05f964396342489838ed21f907d642e6d257ab97b43ba0", [0x744d, 0x3]}) 19:34:07 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) munlockall() poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:07 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x5, &(0x7f0000000000)='eth1\x00'}, 0x30) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x6000, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000180)) timer_create(0x7, &(0x7f0000000080)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 19:34:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x40) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 19:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x400000, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0xdad]) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000002c0)=@req3={0xffff, 0x1, 0x800, 0x5, 0x80000000, 0x1cd, 0x3ff}, 0x1c) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) fadvise64(r0, 0x0, 0x7fff, 0x4) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000180)={0x101, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @local}}}, 0x108) 19:34:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)=""/4096, 0x1000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000080)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:34:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:08 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = request_key(&(0x7f0000000080)='.dead\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\'\x00', 0xfffffffffffffff8) r2 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$negate(0xd, r2, 0x3, r2) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r3 = dup3(r0, r0, 0x80000) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000180)={0x5, 0x4, 0x7, 0xff, 0x5, 0x800, 0x100000001, 0x1f, 0x7ff}) 19:34:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x4010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={r1}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/92) 19:34:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = accept(r0, &(0x7f0000000080)=@xdp, &(0x7f0000000100)=0x80) sendmsg$unix(r2, &(0x7f0000000580)={&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000380)="4b14f0ad2dc6882dbb4fa6ab580562ed86e385fe14fcdb9d16105b816243dd76e3284d19746cb12a97e92a9e3ebab21255735f891dd755df33d67d56912f0c0c9154d4d91c3ca1f549371b642e7b01f4dd5dd7a0d5ee0313d95a88a2666abdfc197eb319b58f1e2e110b87bf9c02a0c78176010990b913ab696bb2d18887a06272db7276ec1da43239d0c1dc5d401ca27ff7f4c8b4ae63c9d82bee6e603f7f2761628dd4e305882f8758930ceb794813595f56ba09957ef3b0507fc84348", 0xbe}, {&(0x7f0000000440)="4c5f779aea399458ac5ef21108a283ada5b45ead3088b1bb4fce2141e6a4ba725139f7711149de962d7b1c20fcce8f3989798373e5bab803c8b20a63cd72f45429e42f4c40b6c4365b0a126514d2dbde4982d226389d4eddc0490be4bb48ab86bed1a7f81cd31e83e8680618167f7dd796386591d43ae74d0b6443666b29c54e48463aa6cac4523e738d253cbf3a651b688406b27f532f5bf175ad18343664e99bd01d8106fb3c64cb567fd41dce4c471bbef44f88772feec21dadf5d8a0fb201ebf26b31525378a6c807143a8713602da89d33c2b8d82bb73ed383ad59f764806c856b53f3863bcd8d799dcc3402eecd600e6896095edc5", 0xf8}], 0x2, 0x0, 0x0, 0x800}, 0x40) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x800, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)={0xb, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0x5a, 0x5, 0x7fffffff, 0x3, 0x44bc, 0x8, "a587d062ec8a8a00f3ffabab6e6300afc5749e59b57c8f659582bad73768452f4d868bd139ff51a788e6227e8f9912d2226d8a94720a482ce48c9de88d576e118a08bbb5676308564141b606a2495cd032df36e6926e4d29895f"}, 0x172) 19:34:08 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:08 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x100, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000440)=0x8000, 0x4) clock_getres(0x0, &(0x7f0000000000)) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0x0, 0x2}, 0x20) read(r1, &(0x7f00000008c0)=""/4096, 0x1000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 186.538607] binder: 4669:4675 ioctl 8018456f 20000000 returned -22 [ 186.553382] binder: 4669:4683 ioctl 8018456f 20000000 returned -22 19:34:08 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000100), 0x20000000000001ca, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nlmon0\x00', 0xdfae1840ceb4f7e2}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x8, 0x7, 0x3ff, 0x3, 0x5}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101900, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x5) socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$VT_RELDISP(r0, 0x5605) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0x50, &(0x7f0000000040)}, 0x10) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x2000000000000229, 0xfffffffffffffffe) poll(&(0x7f0000000040)=[{r0, 0x214}, {r0, 0x285}, {r0, 0x8}, {r0, 0x18}, {r0, 0x102}], 0x5, 0x10000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x38103, 0x0) [ 186.640947] binder: 4700:4705 ioctl 801c581f 20000000 returned -22 [ 186.652624] binder: 4700:4705 ioctl 801c581f 20000000 returned -22 [ 186.661727] binder: 4709:4711 ioctl 5605 0 returned -22 19:34:08 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8041, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="5f704f30e2ce302f1003fb8a2211ef7b979ab42cae5de30fabf4e5a91cb4be59c76585fb660d73e3d9c0ef938f0d2643d1050a3c78fd947e8fd7cc6e832ed849ad4788c0876e6ca27e4fbe85084224ee2060b5f79280db5c196668a3d092a69c73eef1d67047968a55f3d1507ef79afee98cfba3178190ec6a239c18add287e42b1e3b37ac2e34615dda6edaa2658921c0cd11228c060b31d94a07527c34c7c4e6275bab20cb3b45dd2deb18fc33bebd999c1de7de82b142f0c90ae5c893d363fd579dc6", 0xc4, 0xfffffffffffffff9) r2 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000280)="b7efe78eb816aa3272fb8a01669c845491e05cc8e72c79f42b1ff5e4a386c03c7c942f1ede454fb19825301e6fcce2dd2bd1f95ed14db701ac2194be62fd213078742702584ed73b80606e24ef56baf85f1780e854431233adf8f33e063e303c85276a6fa70664ab8301b37aca9a813f6f5d40349c8a7a1e57166e1f151c16ab9fb94f19f05926138bf75d3b8b204024c6443bf507045200ba5abe2b8b2916f082d797", 0xa3, 0xfffffffffffffffa) keyctl$reject(0x13, r1, 0xf3f, 0x5, r2) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000000)=0x54) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 186.692309] binder: 4709:4711 ioctl 5605 0 returned -22 19:34:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x202082, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000080)=0x1) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0, 0x800000000000}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00') ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/113) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x10, &(0x7f00000000c0)={&(0x7f0000000280)=""/202, 0xca, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000380)={&(0x7f0000000180)=""/220, 0xdc, r2}}, 0x10) 19:34:08 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:08 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x0, 0x6) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) set_thread_area(&(0x7f0000000040)={0x3, 0x20100800, 0x4000, 0x5, 0x900000, 0x3, 0xdd, 0xe1, 0xa08, 0x2687}) 19:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000080)='user\'systemsystem}\x00', &(0x7f0000000200)='posix_acl_access\x00'], &(0x7f00000001c0)=[&(0x7f0000000180)='/dev/binder#\x00'], 0x1800) r2 = request_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='eth1\x00', 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r2, 0x3) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x100000000000802) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x3, 0x87, [], 0x1000000000000155, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000080)=""/135}, &(0x7f0000000200)=0x78) 19:34:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x3, &(0x7f0000000000)=@raw=[@exit, @alu={0x4, 0xffe, 0x5, 0x4, 0x7}, @generic={0x323a, 0x2, 0x3, 0x800, 0xf5}], &(0x7f0000000040)='syzkaller\x00', 0x2f5e, 0x18, &(0x7f0000000080)=""/24, 0x41100, 0x1, [], r1, 0xf}, 0x48) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7) 19:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000000)=""/186) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$UHID_DESTROY(r0, &(0x7f0000000000), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 19:34:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = dup(r0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 187.064276] binder: 4790:4798 ioctl 80e85411 20000000 returned -22 [ 187.102584] binder: 4790:4807 ioctl 80e85411 20000000 returned -22 19:34:08 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x400, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000200)={0x1, 0x1, {0xb, 0x4, 0x1, 0x8, 0x7, 0x4, 0x3, 0x103}}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x7, 0x40, 0x2, 0x400, 0x22, r2, 0x1ff}, 0x2c) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:08 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x564c8a0135918489, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000180)={0x2, 0x6}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x1, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000010}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd4, 0xa, 0xf, 0x0, 0x70bd25, 0x25dfdbff, {0x1, 0x0, 0x1}, [@generic="15fea6a99e8d6676343aeb2f33c77c809815ba9be2e9e6bf9112d51adeca1b0f2dadf3ecde237abdcde489", @generic="14b0f3a3e220b0512a926143fb05bf3ecef440a68df125db5bb2fa02385abad4b8ecc27d8172d31a268de39f855a8053c238fc4403b624dff02cfae61e1c65f241612d697711b874aa521fd9250215777785ecb87fdd85718cd158f1cb02dcaf5316333b5dd7298cc96d24c488fe115b1cce479fae9f9a7d2fc12c2687cec0fcd53a867b685a0368b4dd46bd2aa9ff8b7c1f8b0b"]}, 0xd4}, 0x1, 0x0, 0x0, 0x2404c011}, 0x0) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) ptrace$setsig(0x4203, r3, 0x1ff, &(0x7f0000000040)={0x23, 0x1, 0x3}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl(r0, 0x3, &(0x7f00000008c0)="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") ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r0, 0x800}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:08 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'team0\x00', 0xffffffffffffbbb8}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x4178ce2c, &(0x7f0000000040)="0af50e1687a33f3188a070") r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 187.226320] binder: 4818:4825 ioctl 3 200008c0 returned -22 19:34:08 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:08 executing program 0: r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="609f6dc8db958fa514123f59d4adb5cfb5c96f33eebed9b34ab723d953d3428ff4f7c8cd23e4756127bff417e539c88c04beb66c8aa8e0e1fcb7e179a486e5028174f66749b7be82b81379c480fb6a61e79e58fdc8ed6b679ae066b53a8d62906cdfe6ba54eb2798410c60a5091819d6e9de8aed", 0x74, 0xfffffffffffffff8) keyctl$setperm(0x5, r0, 0x20040000) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L-', 0x6}, 0xd3, 0x1) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) keyctl$assume_authority(0x10, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) write$FUSE_DIRENT(r1, &(0x7f0000000000)={0x40, 0xffffffffffffffda, 0x3, [{0x2, 0x8, 0x11, 0xb39, 'vmnet0cpuseteth0+'}]}, 0x40) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 187.273329] binder: 4818:4836 ioctl 3 200008c0 returned -22 19:34:09 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 187.338409] audit: type=1400 audit(1549395248.956:18): avc: denied { set_context_mgr } for pid=4844 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 187.392556] binder: BINDER_SET_CONTEXT_MGR already set 19:34:09 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:09 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x40, 0xffffffffffffffff, 0x3, 0x5}, {0x6, 0x0, 0x0, 0x2}, {0x5, 0x7fff, 0x3ff, 0x7fffffff}, {0x100000000, 0x4, 0x3}, {0x9, 0x101, 0x9, 0x80}, {0x1f, 0x400, 0x36, 0x8}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000380)=0x2e8000000000, 0x4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r2, 0x0, 0x9, &(0x7f0000000400)='GPLeth0!\x00', 0xffffffffffffffff}, 0x30) capget(&(0x7f0000000480)={0x20080522, r4}, &(0x7f00000004c0)={0x5, 0x8, 0x48000, 0x800, 0x5, 0x1}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x24048014) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) write$P9_RSYMLINK(r2, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x90, 0x0, 0x3}}, 0x14) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000340)=0x0) sched_getparam(r6, &(0x7f00000003c0)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000000)="23bf26f8bad36365efb6432795cc3f7f01f6ada681ea75a7904c14a985eece5885e7dea96441cf335c3665aaaed0c65b5c4d6f34a90590daa373b0d4dd52138f00e9cc4ea2fd4221320707e79a016265eb970bf9929889e314144b2ff9ea1443251522172ca6143691b17d42b29642c22b251760352068eec3fd8007be45029e322f41bcde84e38771775199cd523a96a4818894f09fffbcf98aee54ec088e297a9cc2fddb237cbfe7ab462f28e61020d9e8259452ab3a92f05c2b748657dbcb1f926f39158c550f60c66315cc59cd82e6b9535e93e0180cffe9ac9b0f70985ba8449b12624cd6", 0xe7) 19:34:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_open_pts(r1, 0x2000) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, r2, 0x500, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfa}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xf1c2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000001}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040091}, 0x4000000) [ 187.422387] binder: 4844:4860 ioctl 40046207 0 returned -16 19:34:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0, 0x40}], 0x1ffffffffffffe7d, 0xffffffffffffffff) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) getuid() pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) clone(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000200)="1bb4d98e4e2aaf07a1ccb13290106b76b0d8244f955cdce9cff53e45012327fc2eafb1d75d7375603a3b68a6edecce0fac8584218ff8ac") r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x4}, 0x10) r2 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x400, 0x110) write$nbd(r2, &(0x7f00000008c0)={0x67446698, 0x1, 0x3, 0x3, 0x1, "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"}, 0x1010) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0xfffffffffffffffd, @broadcast}}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) creat(0x0, 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, 0x0) epoll_create(0x7) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:09 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1f) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1ff, &(0x7f0000000100)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffc0, 0x2, 0x2}, 0x5, 0x307, 0x57f}) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x7f, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x80, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000004c0)={'hwsim0\x00', 0x180}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)=0x0) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000540)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000040)="85da20c53295657c5b9eb0860ea794492763", 0x12}, {&(0x7f0000000200)="2edde2a9f641207ef99b9b3eb437b92105d75103b7e5755edc3fe93958e9fbf35276d56ac735f33935ef9cdf5eaa309709197c28e3bb27d563dbb8f0ab9bcff8de0caf89d4940ed3b8165f2046d4309565b174d623f36a06633ac03dd343617525d12c6a99b253cb10eb3948be4a9fbe295232f7cc57208d8f6c2b4e7ae1548a528bfa46f4f79b53d03c6c90ebc9d0238d23b0101e573e56ae4caa17c2745f515996278ec1730f9f7d3493a92535edf9bb5b9e7d1219db32444e17b038ad54d59a6631a8a3363c7ba0abc4df5bb921be10", 0xd1}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001800b00e0000000001000000010000008399b4d052d6eeaecdb421856fa7d49325eaec7c4577414c9f448106ece50f5e4edc493e692edab12284c053ae36bf915f756da4181671fbb2d7c1e658132c187798918fdb765b4907790372524435575e956bbbb30367bcb7523c6e53c97a1fa43734d8e454c6c75794485b0b5b3f5ca3af05207f1ea104ce7a880c1da7756d6f270aecff558713699963c916e64db0973abeee4e5fbbd15706d3f7dccaf579c087b029deb01b573d110af3d1a7008f7cfdd8e733cad3439e5ad64e3ae3b386033f9a420587b922c2b748745060c5c9156e5000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x40}, 0x10) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000080)) 19:34:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1, 0x200400) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:09 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in=@initdev}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/current\x00', 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0xbffff, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000180)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x77a) 19:34:09 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0, 0x100000}], 0x1, 0x0) pause() ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/131, 0x83) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000100)=0x3) poll(&(0x7f0000000140)=[{r0}], 0x458, 0x8) 19:34:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x2) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:09 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:34:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x20, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000045}, 0x20000000) prctl$PR_GET_CHILD_SUBREAPER(0x25) 19:34:09 executing program 0: prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) clone(0x80800400, &(0x7f0000000180)="b8e29ab929ef932f736c84591acb180a00049d670378d40614fb99fb374e6ac6d2742b1975d62cacde62052159", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="c0ec13eed1ed9e30e7ded50be742701f18b2c0cffdbcde4a47dcc289659ce1b25c5f1eaf6872f9c6d961793c0ef30a0fa94155984ca36ac338281439892d315b64d37ae8e5d1cbcab2e9f46f1b5f3635a85659119bf32b59e190ac3d60fb31") r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) keyctl$describe(0x6, r1, &(0x7f0000000480)=""/117, 0x75) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x20000, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000340)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x18, 0x0, "ccd168965deb220b1cc6d1c4d02e65839064e1e2a3b2fd5ed88108cb78f3b63ca273759e9eb07600d82bc2cdc31ca5c46d7262ba38c00b46c5ed635ce918e2e47669010231d0e282d1c03d2240113435"}, 0xd8) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 19:34:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x4, &(0x7f0000000000)=""/14) 19:34:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) timer_create(0x2, &(0x7f0000000180)={0x0, 0x2b, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) timer_getoverrun(r2) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/llc\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) 19:34:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@v1={0x2, "bf2e02f988"}, 0x6, 0x1) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:10 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = dup3(r0, r0, 0x80000) write$P9_RLERRORu(r1, &(0x7f0000000000)={0x1a, 0x7, 0x2, {{0xd, '/dev/binder#\x00'}, 0x1f}}, 0x1a) 19:34:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) r2 = dup2(r0, r1) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000080)='syz1\x00') 19:34:10 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='a\xe9\xb6\x96\xb8\xc7\xbbo3tat\x00\xdaEK\xea\v\xfb[\xdeK\x84\xa1z\x94\xf6\xa8\x05\x00\x00\x00\x00\x00\x00\x00\xf6s\x8f\xb6\x8e\xbb\xa1\x1b_is\x9e\x1b{\r{\xdc\xf0\t0\x98\x161\xed\xb7\xf6\xccb6\x98Q\xae\xa5\xf8\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x80000001, 0xb0, 0xff}) r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x5) poll(&(0x7f0000000000)=[{r2, 0x8}, {r2, 0x8a}, {r2, 0x80}, {r2, 0x80}, {r2, 0x200}, {r2, 0x100}, {r2, 0x57d58dddf97609a1}, {r2, 0x4}], 0x8, 0x3ff) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = getpgrp(0x0) fcntl$setown(r0, 0x8, r3) 19:34:10 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r1, 0x2007fff) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) 19:34:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x104) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 19:34:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = getpgid(0x0) syz_open_procfs(r2, &(0x7f0000000080)='syscall\x00') 19:34:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@remote, @in6=@remote}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x8001) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000180)='net/igmp6\x00') 19:34:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r0, 0x0, 0x7, 0x10000, 0x101}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a301ed6f871aee3e432f525a0806f4ae6959f0bfeddc544aa87f4d562d40aefaf2525d98e5b9142baba0a2de9a317fd79c7c1cc4a254dd4f82fa6bae5d9e78c9bb3c9175d703b86b57755256f45390085642e5e918e7caaad7e7cc7c62ae370603728e6349b82cd5595a3fdffffffcd3787a5c8aacf943096"], 0x7b) 19:34:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") syz_read_part_table(0x64, 0x4, &(0x7f0000000280)=[{&(0x7f0000000080)="ea16ebc406dbc50fe652df33a8fc0239c6222f72fa9ee1d0a356b2a701fce98b94d7c60b6a254680e204e78da065c27e8e08a3f6281402b9bd1e71130a54fd3223d46b2c27b36dd8218dcf28c9eabec11e6e94827ddf8ae75d81e19abab734ef5300912f656766696e7463a772f5070e65", 0x71}, {&(0x7f0000000000)="39556229bd9f84caa7be276bc7ebe0e1bf1d93b656b5659429389d1dd31ea823146c17a44bed34f56cdf464d4b0b8180cf", 0x31, 0x100000001}, {&(0x7f0000000180)="55b02f830b697b96f91603379994102af6113dd3651d3bf8bb47212f23693e451fdf23d37361ae78cb05e2e67839d3d47796ed0b43f51ddf8eda6c782869f70d0ff93f9a406c", 0x46, 0x3ff}, {&(0x7f0000000200)="71a56963669c5a5f073f2d1f23407407b8594ca7a59a83e0a1592fc58a00bab6cd8aaecc22e6c023b89da27212c6e3a669f393c6f64bf2b20ebea53bb7901ebfe2928b7d5ba61cdcbe58b79e51576c811b10fbc8f1e3c8a6282442ce5b13b1d68c5f25bb71b3382a63f834cf04b8ed1b3e", 0x71, 0x100000000}]) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:34:10 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000240)=0x20000000000080, 0x8) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r0, 0x420}, {r0, 0x40}, {r0, 0x2}, {r0}, {r0, 0x4400}, {r0, 0x8}, {r0, 0x140}, {r0, 0x20}, {r0, 0x41}], 0x9, 0x5) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:10 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000240)=0x20000000000080, 0x8) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:34:10 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r1, 0x2007fff) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) 19:34:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x7ff) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:34:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 19:34:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x8) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:10 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000240)=0x20000000000080, 0x8) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:11 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r1, 0x2007fff) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) 19:35:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e24, 0x400, @mcast2, 0x1000}, {0xa, 0x4e21, 0x3, @loopback, 0x2}, 0x0, [0x3, 0x0, 0x1, 0x3ff, 0x40, 0xfffffffffffffffd, 0x1, 0x9a82]}, 0x5c) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x800) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:12 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x5, 0x2, 0x3, 0x5f1}, {0x2, 0x4, 0x200, 0x8}, {0x38, 0x3f, 0x3, 0xc00000000}, {0x6, 0x4, 0x1, 0x627}, {0x76, 0x2, 0xffffffffffffffff, 0x7f}, {0x8, 0x6, 0x7, 0x4}]}) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0xfffffffffffe) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'broute\x00', 0x0, 0x3, 0xb8, [], 0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/184}, &(0x7f0000000200)=0x78) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0, 0x5001}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000180)={'syz1\x00', {0x200, 0x9, 0x200, 0x34}, 0x46, [0x10001, 0x89, 0x7fffffff, 0x2372ff7a, 0x5013, 0x9, 0x6, 0x6, 0x4, 0x1, 0x1f, 0x100, 0x1, 0x1, 0x400, 0x8, 0x3ff, 0x10001, 0x4, 0x80, 0x10000, 0xb4e, 0x4, 0x7f, 0x3, 0x0, 0x8, 0x6, 0x400, 0x0, 0x10001, 0x0, 0x1, 0x5, 0xe5d, 0x0, 0x6, 0xfff, 0x9, 0xffffffff, 0x3, 0x2, 0x7, 0x1269, 0x2, 0x80000000, 0x80000000, 0x8, 0x6, 0xffffffffffffffc1, 0x401, 0x4, 0x1, 0x86f, 0x0, 0x7fff, 0x7, 0x333, 0x8, 0xffff, 0xff, 0x100000001, 0x20, 0x9], [0x9563, 0x1f, 0x8, 0x0, 0x4, 0x7, 0x4, 0x8, 0x9, 0x1, 0x2, 0x1, 0x2c2f, 0x5, 0x1f, 0x9, 0x6, 0x5, 0xfff, 0xfffffffffffffff7, 0x1, 0x5, 0xffffffffffffff12, 0x401, 0x9, 0x2, 0x5, 0x1, 0x2, 0x7a8, 0x6000000000000, 0xffffffffffffff7f, 0x2, 0x3f, 0x100000001, 0x2, 0xb53, 0x80, 0x7, 0x7, 0x0, 0xfffffffffffffff9, 0x3, 0x7fff, 0x1763, 0x1f, 0x8, 0x2, 0x2, 0x6, 0x9, 0x9, 0x7f, 0x6, 0x4, 0xfffffffffffff853, 0x20, 0x2, 0x3, 0xfffffffffffffff7, 0x7, 0x16c, 0x8, 0x6], [0x63b0, 0x3f, 0x7ff, 0x9, 0x4, 0x2, 0x7538, 0x8, 0x2, 0x2, 0x20, 0x400, 0x80000001, 0x7af, 0x8, 0xc27b, 0x2, 0x40, 0x100000001, 0x3ff, 0x8, 0x800, 0x7, 0x0, 0x6, 0x0, 0x8, 0x6, 0x5, 0x7, 0x1, 0xc8a2, 0x7f, 0x0, 0x9, 0x885, 0x20, 0x100000000, 0x80000001, 0x6, 0x7c67, 0x65e, 0x2, 0x2e0a, 0x9, 0x10001, 0x6, 0x1, 0x7, 0x80000001, 0x0, 0x7, 0x9, 0xef5, 0xfffffffffffffffe, 0x9, 0x2, 0x5, 0x1f, 0xff, 0x5d, 0x7fffffff, 0x100, 0x790e], [0xb32, 0x8000, 0xffffffffffff8001, 0xc5, 0x8, 0x80000000, 0xfffffffffffffc00, 0x7, 0x7, 0x0, 0xfffffffffffffb9d, 0x7, 0x5, 0x6, 0x8, 0xdf, 0x4a, 0x83, 0x8001, 0x1, 0x0, 0xfff, 0x7, 0xffffffffffffff01, 0x6, 0x2, 0x9, 0x9, 0x1e3df596, 0x4, 0x1, 0x2, 0xa000000, 0xfff, 0x0, 0x4, 0xffffffffffffff8a, 0x5, 0xfffffffffffffffb, 0x6, 0x6, 0x2, 0x0, 0x7, 0xfffffffffffffffd, 0x5, 0xfffffffffffffffc, 0x1, 0x10000, 0x1, 0x8, 0x3, 0x6, 0x2, 0x10001, 0x7f, 0x3, 0x5, 0x2, 0xfffffffffffffffa, 0x0, 0x33, 0x80, 0x2]}, 0x45c) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:16 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) socket$key(0xf, 0x3, 0x2) 19:35:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x28000, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x1) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x13, "481330e688ad90fed8b68dd9308494a141ac1e"}, &(0x7f0000000240)=0x37) setresuid(r2, r3, r4) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000001c0)="802a70440d7133038ccd", 0xa) 19:35:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x4, 0x7fff, 0x0, 0x9, 0x6b3}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:16 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:35:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1100030}, 0xfeb9, &(0x7f0000000080)={&(0x7f0000000180)={0x1a0, r1, 0x0, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffff, @remote, 0xff}}}}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0xbc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x866c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffb}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) poll(&(0x7f0000000140)=[{r0}], 0x200002eb, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = dup2(r0, r1) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) timer_create(0x6, &(0x7f0000000000)={0x0, 0x1b, 0x2, @thr={&(0x7f0000000080)="d6ed2693b4abf46b947b585a7200076f7344456577185154603a4dcd4211fec9883604343bf4c1845bd2c1b7a7fdfd0e24249c1691692c9aaaef1a50d75277e87213e73863b0df32821448b5d24a8fd45076676ab03e0f95b2efea3572e943f36ff7e3ede230a4cce8f337c12c9680238efe6f4108c1480d62e755a3c9adc0b688cf7d659849e4704a660b92dc87f252805a7d5b77cfe145c342826ce016d78d00ca1a865bcc3ed095d9d306fe5ac39c42568fdd0bfa31b98f4dc5", &(0x7f0000000180)="386c03fb93b6c50b8c5afc869bf05684d109e76c3760d71384ddd0a4b67732858e55f3d45ed673b92941dd02acf2bbd2f5be9e88eee0bd59df86ca46ee97a66a18c2232e51eb5252800155642c1ff354cda3ed0f4388bd724a79353c397fc539ebe7513361d81ccecdb6e88a73eaea1530a7ec9da31bd886e2f679c7b20805f3097e8ff43828183dcdec47ef36700106d58351edaae04f66e778c7923f3fc6101df5f18c6e22b2d16e32fef1340a1495bdb7551e6faff3c4161d05bcc7ae5719a1c319abdefd1b753970775af5659c094701223444c6f711229983bbd8b1fc40ee"}}, &(0x7f0000000280)=0x0) timer_gettime(r3, &(0x7f00000002c0)) [ 255.398642] binder: 5970:5978 ioctl 801c581f 20000000 returned -22 19:35:17 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r1 = dup(0xffffffffffffff9c) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) dup(r0) 19:35:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xffffffffffffff1c) socketpair(0x5, 0x2, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000180)) sendto(r1, &(0x7f0000000040)="d43910ea7f9f49c0cb1c536b897ee97f68c2c93f50d34d89a82bf75b03917188659bf879736f2455a58372d3674c85a2c8d1c8731a3e2be541be0d0d7ec8b6be14ee09c99563be0ee5f0e1d0e263fc35f92c896ee1e973cb96e159aeea5060138e4f8cd1dbca7a03e2001bd0ae6341e0b84d7bc4bd29fefd292ff9cf137c65050e29d35f75a47bb79c257ddf3debebaddfe9e20e29ff2bffb667872825cdfd9fd244e4c0f7e5e39ecca76bfc5a57c4620e52a7e999c079d558271862cd44dfdcde8f1aa1f678100bfbf9720a307d864638f3683c7f305a1af93d557ee21450689bb948a7309a7e507edd9dc3a2773e2a71b53120", 0xf4, 0x4, &(0x7f0000000300)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neon\x00'}, 0x80) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sync() 19:35:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) poll(&(0x7f00000001c0)=[{r0, 0x80}], 0x1, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0xc00, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x19a2) [ 255.448816] binder: 5970:5978 ioctl 801c581f 20000000 returned -22 19:35:17 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0xa4300, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000080)=""/180) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 19:35:17 executing program 2: poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:35:17 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:35:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x2936187dbd27e6c3) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) signalfd4(r0, &(0x7f0000000000)={0x1000}, 0x8, 0x80800) 19:35:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setsig(r0, 0xa, 0x11) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$int_in(r0, 0x5473, &(0x7f0000000000)=0x7fffffff) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x1, 0x10000, 0xe86c, 0x9, 0x279d}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000e00)={'veth0_to_hsr\x00', {0x2, 0x4e24, @remote}}) ppoll(&(0x7f00000000c0)=[{r1, 0x202}], 0x1, &(0x7f0000000100), &(0x7f0000000180)={0x7fff}, 0x8) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = geteuid() fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000340)={{{@in6, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000440)=0xe8) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d80)=@nat={'nat\x00', 0x19, 0x3, 0x3a8, [0x200009c0, 0x0, 0x0, 0x200009f0, 0x20000b38], 0x0, &(0x7f0000000840), &(0x7f00000009c0)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1f, 0x2c, 0x89ff, 'rose0\x00', 'ip6gretap0\x00', 'vlan0\x00', 'tunl0\x00', @local, [0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0x0, 0x0, 0xff, 0xff], 0x70, 0xe0, 0x118}, [@arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x2a}, 0xfffffffffffffffe}}}, @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}]}, @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{{{0x9, 0x9, 0x8, 'veth1_to_bridge\x00', 'team0\x00', 'ip6gretap0\x00', 'rose0\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0xf0, 0xf0, 0x128, [@helper={'helper\x00', 0x28, {{0x0, 'tftp-20000\x00'}}}, @connlabel={'connlabel\x00', 0x8, {{0x6d2, 0x1}}}]}}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}}}}, {{{0x0, 0x40, 0xe93f, 'ipddp0\x00', 'bond0\x00', 'hsr0\x00', 'bridge0\x00', @empty, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xa0, 0xa0, 0xd8, [@connlabel={'connlabel\x00', 0x8, {{0x8, 0x3}}}]}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}}]}]}, 0x420) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x2, r3}, {0x2, 0x4, r4}, {0x2, 0x5, r5}, {0x2, 0x6, r6}, {0x2, 0x6, r7}, {0x2, 0x3, r8}, {0x2, 0x2, r9}, {0x2, 0x7, r10}], {0x4, 0x7}, [{0x8, 0x5, r11}], {0x10, 0x3}, {0x20, 0x7}}, 0x6c, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) 19:35:17 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 19:35:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200000, 0x10) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)=r1) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000040)=0x200000) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB="2c64656661756c000000000100000073696f6e732c626c6b73697a653d3078303030303030303030303030303030302c6d61785f726561643d3078303030303030303030303030303031302c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c626c6b73697a653d3078303030513230302c64656661756c745f7065726d697373696f6e732c7569643d000000000000000000", @ANYRESDEC=r5, @ANYBLOB=',\x00']) 19:35:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000000) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x4000, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000180)={0x9, 0x7}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) socket$netlink(0x10, 0x3, 0x1b) 19:35:17 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000080)='\b\x00\x00\x00\b\x00\x00\x00\x00\x00\x00') r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/32, &(0x7f00000000c0)=0x20) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 255.682033] binder: 6042:6044 ioctl 8004e500 200000c0 returned -22 19:35:17 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:35:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000480)={'broute\x00'}, &(0x7f0000000500)=0x78) r2 = socket$netlink(0x10, 0x3, 0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x20400, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4210}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@report={0xc4, 0x20, 0x411, 0x70bd25, 0x25dfdbff, {0x6c, {@in6=@rand_addr="22bea1f283b413e21010e8feb8ef3735", @in6=@rand_addr="d3e482273db3b746ed8afa4d5f052f44", 0x4e21, 0x6, 0x4e20, 0x400, 0xa, 0x80, 0x80, 0x21, r3, r4}}, [@offload={0xc, 0x1c, {r5, 0x1}}, @tfcpad={0x8, 0x16, 0x7}, @migrate={0x5c, 0x11, [{@in6=@mcast2, @in6=@ipv4={[], [], @rand_addr=0x4}, 0x2b, 0x1, 0x0, 0x3503, 0x2}, {@in6=@ipv4={[], [], @remote}, @in6=@mcast1, 0xff, 0x4, 0x0, 0x3505, 0x0, 0xa}]}, @tfcpad={0x8, 0x16, 0x1}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 19:35:17 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080)="5cd4eb3c033d94e04d723ca30520fbabb860745ba19031f1edea656b0e0e072a5b9cba6c6e41631143c714c5d4c88da385eb37559804ae3aed616f5992ac0ea98d3e11868d4673b5661e5f472084d3952d0ad2dbbb30bb72bed1525eff803aa0", 0x60, r0}, 0x68) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, 0x7}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2000, 0x0) 19:35:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000300)=[{r0, 0x3ffc}, {r0, 0x80}, {r0, 0x400000003080}, {r0, 0x200}, {r0, 0x409}, {r0, 0x1000}, {r0, 0x8}], 0x7, 0x0) r1 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r0, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x1031, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x7c, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x3, 0x2}, @dead_binder_done={0x40086310, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x50, 0x48, &(0x7f0000000000)=[@flat={0x776a2a85, 0x100, r1, 0x3}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}, @fda={0x66646185, 0xa, 0x2, 0x37}], &(0x7f0000000080)=[0x0, 0x48, 0x0, 0x89195edb3cc55844, 0x0, 0x30, 0x18, 0x38, 0x38]}}, @acquire={0x40046305, 0x4}, @free_buffer={0x40086303, r2}, @increfs={0x40046304, 0x3}], 0x7, 0x0, &(0x7f0000000100)="26b47a8a92cfe4"}) iopl(0x8000000) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt(r3, 0xfffffffffffffc77, 0x101, &(0x7f0000000280), 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 255.762126] binder: 6042:6068 ioctl 8004e500 200000c0 returned -22 19:35:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) r2 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f00000007c0)=0xe8) r4 = getgid() r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000b40)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000b80)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000c80)=0xe8) lstat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = gettid() r10 = geteuid() getgroups(0x3, &(0x7f0000000d80)=[0xffffffffffffffff, 0x0, 0xee00]) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000dc0)=0x0) stat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)=0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001500)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001540)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0x18bc7ea1cc716c51) stat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000001d00)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001d40)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000001e40)=0xe8) getgroups(0x3, &(0x7f0000001e80)=[0xee00, 0xffffffffffffffff, 0xee00]) r21 = getpid() r22 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, &(0x7f0000001f00)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001f40)=0x0) getresuid(&(0x7f0000001f80), &(0x7f0000001fc0), &(0x7f0000002000)=0x0) getresgid(&(0x7f0000000000), &(0x7f0000002080), &(0x7f0000000080)=0x0) r27 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002100)={{{@in6=@remote, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000002200)=0xe8) r29 = getgid() r30 = gettid() r31 = geteuid() getgroups(0x3, &(0x7f0000002240)=[0xee00, 0xee01, 0xee01]) sendmmsg$unix(r1, &(0x7f00000023c0)=[{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000002c0)="4dcc0f7aba179317ae004c15e4aeab35a2c8b4cc1f1b65088ae9ccd28bce18009c54a36640f6e02e9620769d21be100adebe4c783a049a76cd72c24b58a0ae7a1b8729c80b908e74c6098cf0297610fe31e5040ca65a", 0x56}, {&(0x7f0000000340)="6680ad9c4ea7b40854b3cc240225f52e71a507a790164f16d68f911f93609f762433b67ee5902d31f4ed376b50df553865f9523293603b09d4428f36e1c050bba429fab47c4fac10ff3cb76733093d51134e9d0a82a56d9270b8b972de9216361efc61258addaa621e58231218f043062ee1753c8667af1f9f661ae360e1b200e39520ca79f95abce42b6e9b2ed01696190f876174a4d344e72ddc75aa8826216bfb134c47d181be7741cfefd6318c36c337ca402c34b343747aae356a6db1bee5c8a7bcb4e64e0b5c1f4727ad5ddd", 0xcf}, {&(0x7f0000000440)="dc50ba9d74382e41d56723a02035fe540cd62a7a392754be2c527e2fbf161879fdf712de6cd58c8732014308e5339032efb9cda2ad81785a5e390d15512cec1f97097c0b21aa3a6052d9bc969a973efb2170f384188d30c088f4a8559ba6a8fbce9883ca1c748f35532f9868d3dea5da9d185721852e5b03a975fe40c3e2d24870eae3bae2d2b4ec3d138709055aaa84f41ec3f6674865b55750b51f6bc4499d0fb11e592a5f476e34104ca8de14bea4da7fd1e26778083fabe576f816821512a08468d5", 0xc4}, {&(0x7f0000000540)="0d7b553d8da88514bdf98695ce105e749d4ee42284973593695ac3e4249bb91e6f968f030234fc18a69b517eb38be83cdb0814a4bcfd4f00116d6c4787ea6f7e3a27069e0cb53bdb70c3bec6966fc3d9f643e098e0bdc1019bb451c9e737a016a27b14e4f0f996a18e370868682c39e5074149945ab6e67fa5169e640244753545797a9f16a03a", 0x87}, {&(0x7f0000000600)="65227ca7764da0a048baeb2cbb0edc1de081fd62d6d9a8fb8d8f1f220e69f4536f47fee6a39d5741e4be0d2fdc6b9604142855536a3368aa0457c11029637fe4be9298c2378681113f387c3776ffb12c8534120d3dd8f7d5ebb054968ff8ff1bf5424c8a1f4d7fd984efa2e0440e10d66ee00cec3cbb97758ca5c6b4bbab10c71cd414e6d35e3e74af5f7bdebbd3b2c77c2b036181162d102d7638bab531f48fe5a18f87ba124282af80", 0xaa}, {&(0x7f00000006c0)="de8ee221b92ed32b4e56bf68f656bce1e521dce766a144cf9becd656d7b5a3ce4a62d237639adb57f0b56bee69be0229bc14e8fb234ba6afe1e69252467027bdcd6ccf643d1caca0b3943cacb645199bae2662cb85b30da0947d6d26d77c77b4ffd5", 0x62}], 0x6, &(0x7f00000024c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="006a1c00000000473eda64ee76952796480ef2f93d01b6d4", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x88, 0x54}, {&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000a80)="4bfa3f8bc6989fbf5ec11954a1ae72edc280861fab292e8f653a4740650d74cd69a986031bfaaad6b6e79ac09b51fbb865d58840c8d08a73934cc7366d7ec54d", 0x40}], 0x1, &(0x7f0000000f80)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r5, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}], 0xe0, 0x4}, {&(0x7f0000001080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001100)="6f53cf79edb97a6c19eddfa28ac06525f9b4d4fb4b0c123e0c40cdb9e4e6baf35facdd722a909d372115b9028e22528f01a31d6b237ae6faee7b9d635a6434df35e09da5015e7196856c7f1c9feb1c24bf5284e3cf6eb0ea696535de920c06e8da8d4299ed6d1cd1da8a78efdbd53a6c4d059d80d125be0c592e19e471f5046e36e7fac9eb3c4d01cb427138a469d8de26edbff15d6273e086e2fc15c884e2bba27959a30e210951c6a28ec23b0d6953c0156b67f50f7d046d10c62db5258b", 0xbf}, {&(0x7f00000011c0)="5da7791808a127f6dc5ddd4bcd468a767ceaf4523f3b239f3724967a3b8a04fa4a973fbe79b2125bc0d65c02b6f7f9f76fd6c94a4438ea6c60a7d05837b0bf8fc7d5413d22eb6261509274b2439823ad6f7b1aa04eb618cf32f93e38e7c8f07f67e29ce08a7f65e4bd456ee3bbc95862429248e3b3a5fb0af0", 0x79}, {&(0x7f0000001240)="3c04d65c5e4222b780e174abcad39ee1cb1f45839472182c2eca1b7210c0dcad466cf676285baf94ff51a2830e23dada079048a44185958446779fb05d8c654df65c8c56523ebed086aa8a9a7a1424fdbb9d0df645bbe340defc73b805f1bfc315020db653fa389dc78054544ba69ccba0dd657930403dcebc5b4d7e07634b7bd53ade34a8b72e2c7dfbcabbf2c332086730d03b454c75a15e5a707f5637", 0x9e}, {&(0x7f0000001300)="dbf98f97", 0x4}, {&(0x7f0000001340)="4c7c7185ac10f78900e1cfc1340d621bd5bbc5f6dafb8ee8479f5fff6b6826be8adec65d6c543d64700f7ddf4ecc9a60b59980b7dbbdd1d81a01e63b767464975bf7978184c813ec557a7243ef8b6e789c0e8b9971759993a54f9f54d49c20", 0x5f}, {&(0x7f00000013c0)="46a0b18cfdf462a98006eeba7e7bc89bc1df61afaa67a13b7315fd812b939847b7fa159a8042d34020ca717468c1d30c92703df20a95cd663c26166c1633bc678c59b2ecafb8ddf700a9c175b8a5ca752627fdd47958dcf17dab9c471a54d66368f3d5a4dddce8d554919a2369e88831e68a33ddb2a3b47b6aa8121eae59a097e5c56de33885e8233f7cb47adced38d62ae4a064b836779e18cb043089c3a32a9de1b8faa1fdc32bc9b980f5843a3fd35e6d9b7495d944", 0xb7}], 0x6, &(0x7f0000001740)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}], 0x40, 0x40}, {&(0x7f0000001780)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001800)="784f8b9f470e2b9de7654ec924a64782e534a5223948db30f7a0672afc1171d661eeffc4e8e39017217a49b117eaf353d3680bc3bf88ac0d54f24139f04fb6abd6c55f26c87fb85f4fcad8b7727d34e08aecbcb4535febe32c39873e20f0fa9bb644772274111db473481ef1d679b3b2522349de4b7ded49b8683a2ab4f4ad0db8b933fd1fac2ea7a2f4d140474352d3312ee2747991ba734a6398c270a4f8c46174d484945e87e87167bf16e3a2d377beb6ffd0e21cb4b8924cbb9328a914374035b7aa1c8b69a211ebc7ba19", 0xcd}, {&(0x7f0000001900)="91df321a", 0x4}, {&(0x7f0000001940)="958ef49f8db3e24fbc2be1f957a8cf28fc6943fd725ce6943a9e0e7b18340f84ecca1320440443df9ca44431451aa9cb3d4a1fa3efa64447feb5bfeeeb9fb377515b7143152691fb85e65544230187157691ad3ae7e2d8cf43ae7cefe5ff5f57f4af7d71e1329cb2073f28e37d07ae131b85f001ccd261c54f3f7c15fe7a9d1bd975", 0x82}, {&(0x7f0000001a00)="58230a31d5ed953dba4219695ff5d5481e829fa4035780eb37719349480c90", 0x1f}, {&(0x7f0000001a40)="1334f5256369a8bdf1550b8b75cc9af1e7b8a385207023361944da5f5c5d99fa2f018b0e26e31d3b07731815d8beea6e79711c3e65513030a6a23c47cb280ab847b054a68b54627c401da11b7da11d5b86c6daf5b022532ea917fcb283ac7f8749f08a79027296f1d75e83c7cbc971534608f3a3801223ad00b1c00c6e9b5414e13537623944d2b40509260ae77eb2a0b87476e9e78c6e7fecfaa9b7bb01435f5a50f6f1c7a3b50614eef51e6a33a1b1b4754d6dc2cdfe884ff919938aca44f792d8e3cc21674825ca1e9882fd08b0d7b6f557b682573ae2dd5d03afa06a18422f3e9ecb1b5d0da53a033e", 0xeb}, {&(0x7f0000001b40)="c6a0a6ef667a0fce869672110ac61fd2598f590192031c68cec889b5c391bda7bfe03ee69c00e823f255ca46484dc5651c509dbd7d02ace9efdb96690fb317cedacddbbaed48c27a42081f33ada054f9aee40a2fb69461da634de519ea5b39a1a1bd6b99d39d85d7d150c6f886dc463295cb693e800ef2d0ce81d64c0ccdf2cbf0d15a7a1f6dee7b04516422c11b8a3b6e6a17a87dc7271471aa9571198023513e288c9fec37", 0xa6}, {&(0x7f0000001c00)="876d9756e19d0f27c6d7f9aa2d940418d721fee57072d467fb63ec2f290b0400389ca3e394ac1d15f16edf5647c56a9c2685b83d1705e6b0d83131e65ee55677cc129431b9c6024b8f745b3a88fb9d01051f287da79f46af5f41e4fe8cb6bb1084", 0x61}], 0x7, &(0x7f0000002280)=[@cred={0x20, 0x1, 0x2, r18, r19, r20}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r24, r25, r26}, @cred={0x20, 0x1, 0x2, r27, r28, r29}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r30, r31, r32}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0x128, 0x40}], 0x4, 0x800) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r33 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r33}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r33, 0x40046208, 0x0) 19:35:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2, 0x7f}}}, 0x88) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)='\\/\x00', 0xfffffffffffffff8) keyctl$update(0x2, r2, &(0x7f00000001c0)="1908c46e5e0c90083b90e3efcf623b3f8507f736f54e9a7ca2d75b6c4fc768cdfa01434ebf231a93854d81db298686b693a1e798c132a2a5fe2d6b1b816d3bc403421baf2f6e3185fcf52aba1cddbe3cc1bed5f4e8b099c56215476761bcf2b293102727aa851d5c2e454cfbf70896e66bc09ecf1ac1350e6e2a", 0x7a) r3 = dup3(r1, r1, 0x80000) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000040)=""/65) [ 255.822733] binder: 6080:6081 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 255.831787] binder: 6080:6081 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 255.832579] audit: type=1400 audit(1549395317.466:19): avc: denied { create } for pid=6061 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_iscsi_socket permissive=1 19:35:17 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [], 0x9, &(0x7f0000000000)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 255.915358] binder: 6080:6081 got transaction to invalid handle [ 255.922564] binder: 6080:6081 transaction failed 29201/-22, size 80-72 line 3013 [ 255.950890] binder: 6080:6109 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 255.966419] binder: 6080:6109 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 255.977696] binder: 6080:6109 got transaction to invalid handle [ 255.986088] binder: 6080:6109 transaction failed 29201/-22, size 80-72 line 3013 19:35:17 executing program 4: openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x1f) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40200002500020025bd70e1fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x2e4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) poll(&(0x7f0000000080)=[{r1, 0x40}], 0x20000000000000a7, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000008, 0x10, r1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000180)="c811f07de33748dd7bbeef677c2175ce0c2a466ca648339cfa980e22fa490c8c876e8b4c5ed5ff18e96bea28b957d9ae62bcbe2ca1a279d6789aec5be4669ad4fac00ccc1bf88a8accffa7215f90d1a4d5aba9241519c175ef98e4924c90c370f5f50178713edb51c5c6005ec0889ffa286ed225fbc9158b02067c5e9641d240322516c2b3e4637d38bf3d248049e8dba8079f6aefd7", 0x96) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) poll(&(0x7f0000000000)=[{r0, 0x70}], 0x1, 0x6753) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000680)=0x0) r10 = getuid() lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000007c0)=0xe8) fstat(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003040)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003080)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000003180)=0xe8) stat(&(0x7f00000031c0)='./file0\x00', &(0x7f0000003200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003280)={0x0}, &(0x7f00000032c0)=0xc) r20 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003300)={0x0, 0x0, 0x0}, &(0x7f0000003340)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003700)=0x0) r23 = geteuid() lstat(&(0x7f0000003740)='./file0\x00', &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000003800)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003840)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000003940)=0xe8) getgroups(0x2, &(0x7f0000003980)=[0xffffffffffffffff, 0xee01]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003a00)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x18, &(0x7f00000039c0)='/proc/self/attr/current\x00'}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003a40)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000003b40)=0xe8) r30 = getgid() r31 = getpid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005740)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000005840)=0xe8) r33 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000005880)=0x0) fstat(r0, &(0x7f00000058c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005940)={0x0, 0x0, 0x0}, &(0x7f0000005980)=0xc) r37 = fcntl$getown(r0, 0x9) getresuid(&(0x7f00000059c0), &(0x7f0000005a00)=0x0, &(0x7f0000005a40)) r39 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000005cc0)=0x0) fstat(r1, &(0x7f0000005d00)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000005d80)=[0x0, 0xffffffffffffffff]) sendmmsg$unix(r2, &(0x7f00000083c0)=[{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)="9d52d565c3370559a1d9c02e4bbf9214d63f721e8b938858b31792c848bd7da52b31372df2864aeb741eac7ecb4f5de55e9a2becf9061987d4ec0ec0e02c1e69090ffceba2340dc3b72a0b5a54ad9ff45afa583bf4eacd8888047729aaebcb93ad0ef2c7e7fcf1828731faa0c63c053f78142d1b3c295f4079fcae19d9252d413eece539520c11de08f7df60e1ca30a45dc8578161fcca6c3fcb8ebabf7315c2205dd23e9c2ebfcb2a6fe815baf662fe5426750f813287b33c56a2c8302fd9bdf2d7e11c9f1d64921cdb1ecb5f110193c4588375aab16e5c34251a10c9c7a7a720322ac1f34a006bd5ddce9efabf67741e", 0xf1}], 0x1, &(0x7f00000009c0)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x28, 0x1, 0x1, [r1, r0, r1, r0, r1, r12]}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @rights={0x18, 0x1, 0x1, [r0]}], 0xc0, 0x4}, {&(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000b00)="14a78bb29b66227ef2f62a51d9930208b87200dfd58dc58f46fbd48bb8279bc4dd9a4bc7bdbbb719c583c36e4254b0e4facbd22607b10d622a26825a93a81f228965624c3c47c973d0e6433e6c8cb16f882b00fab874ca0fcb579961cb2d7f3ce6966adc", 0x64}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000000c40)="9ed242c3bfbe7e3794c1dcab5a039ab04a4800e628fdd241699743e02095183ad64f1ddf9b6c35843e807d442a7a4e68885b0cedd20df1223aafe7d15905207e9d1c879b0758ccff103d743bea2cf6be879dc248cbf6863317c0a75c1418adb85ebbff7b9507e744c1894232410f73c108b77f69f9dceccb36872a61", 0x7c}, {&(0x7f0000000cc0)="3f82650820ecd651b2bf9c781a0394b828f0ad07f62adecbf950df3a39c08d2d0a7be378b282d334c944bdb178f402a802b8a53b4e88664075ea0bdc8ab4a2f40a26d662cc6622", 0x47}, {&(0x7f0000000d40)}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000001d80)="be671ee822d944dd514e64fb3d0d842fa59b291b62b8e7aa11275478fd5d82e87c99f30ba56403be018134d2846d004711409dc07eb974cbb05e6142dbb5748f59ccd72806ae8778", 0x48}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="e9f3a212692f9699771af078ac78f5cf2b69a7431e36c3f8c0906a413c9d7ba95c980b0737ffb560ffa1fa7f9e9449322806e8128ca44526901b88300fcc36dd6cfac5a69c20d57970d379e8d8e0ae57394b8bc7aa47f8effb", 0x59}, {&(0x7f0000002e80)="a15ae70ee9f071ef9f0c46fb9b0b5e904a4bf77a481a24fc22146ad7c72a991c9891db4b88623781098014c2f54884b5967203b598a686a597c66310f348f8106f96a27b80925ebf8fa8216906654d640bc2a33fe2516fd05d8fb4555faac41ba20a2beb88190769c97e6dee8723a31263fc9d5bdcbe213bdb23c8212b2a72212bc1aabc3c2922269a63f4b3b6619d43466333db83101a18ad2fbd60c4cd78b2f30d78f4ddf86d45c996165f827b6ea788814b63d46002f7ee", 0xb9}, {&(0x7f0000002f40)="c0f180", 0x3}], 0x9, &(0x7f0000003380)=[@cred={0x20, 0x1, 0x2, r16, r17, r18}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @rights={0x20, 0x1, 0x1, [r0, r1, r1, r0]}], 0x60, 0x4000000}, {&(0x7f0000003400)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000036c0)=[{&(0x7f0000003480)="d203c7f4501146bd19c72526056e0114e357c2cb751fb0a3ae4223bc599562f23d45c95b48342cd36ab059da4778b9c008f60e5554972cd70f04034ad7d160f487bd09751a759f1742d299f6712f8cec00d074aa1b11e7b47346316907f5fbb1adcfbfad6f0036", 0x67}, {&(0x7f0000003500)="ec5627e82d4230f10d18e306caf6988b9775b52aa3efdd59f5701f1b1af820b5a105e043ec4e7df6464799a29ab30d631514a701ab1187b6511b1d783210e67791140753556a15e2f0a3758ffd94c93a76f5867a0ab0ffd5a076c449a75ea76b4d49dc95e5d0a2ab5f411b733c1a8e34d653e6fc5d004e3e8dcc023da22c1d48cca6c2894c93e1aa66af36b127fdbb26f48abdcde1746b73345e3255f0b6b0de9a07758faf5f8e631e50", 0xaa}, {&(0x7f00000035c0)="7c9b85c1eacda28ed68e542b3cb44dff5efbe88eae8304dd5be13821d715ea8f13e154a1cac9e785ffbba4026ce69ee22351581f2746fae6cacc4fe8a392b3067b62cb34d1787bafa1aff619f960b183eb690cecb70e9fbb5ec1a017b7bedf96d9aba63c4a16b7914eab37575b7defc96d367bdc064612ba57453d04b98cc12646e4a8cfa96eaac25a3c0519ea5afc9f370fea22365082247432b3e0c33c493addcd23a0b33ba1b74a1ecb438ee6bcf2316f4d4b900d33aac810c4a31928b75720538463bb8ea62bfb302527cee8a3f4877d6294d94bd55938030e300d", 0xdd}], 0x3, &(0x7f0000003b80)=[@cred={0x20, 0x1, 0x2, r22, r23, r24}, @cred={0x20, 0x1, 0x2, r25, r26, r27}, @cred={0x20, 0x1, 0x2, r28, r29, r30}], 0x60, 0x4}, {&(0x7f0000003c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005200)=[{&(0x7f0000003c80)="fc5fecebb2018a048084c3cf789945ba8dacf2a9c6d9723ac6b4d8a60742144fb31e2f2bd968187e9f40d8fb97c22bb1b035fc41b1127d40532a2c4b34d143f26150c373785f87ba7ac89c68e4e83b2ce42795b1b28bbc06c201bab02388210634c23443b077d5f58944fe7bf4a9f2776cc070825701eb92773cdaf7e6e1ee552a4d865f4d0e873fe0f0", 0x8a}, {&(0x7f0000003d40)="b63a861f62001d190616b660feb7b121238a540c2249970277f039380a829099cfac8929aa9fb33d235c35a03f517636a694d636e1fa0918b8658ea0298312e7cf7197d764488994b77f64eac7048efb5e6dc67f890db80acc77537731b1e1bff01cece4689892540ca50472bfddcf501ee724ae76dc186e501bbc3b4b4a2acc7332c562114a7bfe93562bcf4a6b48cf333d4726734ad4cd183192610caebe71d491fdf245d235a63b344d4f17bc889c46b944aa10e6802d1a1f6af762cae7aaf5725aaa1f2f5a4d2306c30490802db7901f938762165e1fe807990d0814750869c525c0c1845b8a951fa49ef7eec0d631af0c61c6bd0fba66ec0dc9c8bffe6b1894cf186796c03c1b3128f31b925ff750827e14051ef34e885361466d32617a32e72d6e34daa0b755fc54f4c7b0ae8bc9f5d357124d943bba86f10eeb14aaaf3ab5c4e4631e2219c6834ee3f7f0246a7d4a5e08f6e98564d422f7a191372942b0f4cbc56f2cde3ef5bba54022f9dee2e8d7aa195c8a2dbbb359ff588bf535259988c6e115627735304a82b6019f38f1fd9a605bc4a846d46ff460637bd15e4361549400efc7676d8589ecb4946c10773e68d535a71d4255e9c3258890904c1b94b97bd3c3203bb25ba7e7b045d35ce14e806fba960ae15bd7288648c860f8c7fc4aad3f7a0cdd379122cd4de5af1cb71db87844efed5dc4a313bfe577f3858301e35f415d086e2238a63f38f514f3d0af0af61fdcda0f20c4d5acf08f847648337d67a5a9b7d07e0a8f1662011e56ea9b381cf0a2788a178d4b8598f243a5587d416193c895a496264dfd2ee8e3fb8b9d8fdf126bc26c31a005643f8ca522dba50369c00914028b7b8a82f65843584ccc0501ee0f072f562e2ef4b0c2b293ae8e710154b810c75117e8f93faa022cdbba6fbfa7dc1e7b2f9abfeaac3a138607639571c4a44d3cfd54d3df276809cdbcb027d41e0ea7d133e4d8011e66752c00942b4d3dce39724ffbed36e4655fe06b03b967f2afdb8e8cce18e233fb6fa0cf1313e38004110975b103f7d0b311302c054471208a4edaf5682484d9fba320f0481aaabe16249499f8f063d6a1008fcc3d468d6f27dd358942a39ea102ddbee9430ab4164f3727332687da3c71bd3b0668c704c9bb08d6b986a39c1e767627bfb0c1f8dd74fd02203731ea7d87b319d70789a22851d8500b823417c6ede74e13206ca846a92bff8763c9f87fd1ec9c735d23186fdefc628adfdcd1ef28babd8a34fa7335c8afbf84528323bc60713e5da361c913a24d4b82d709f7e55455b166917f5323c5fe3841b3e9a3e29c5e7e0351c19e68ad29b210204c74705e914c7db17ced434bece6c7ef8a192418445715d83f44a9c7fcf425a8fb46c2da9b857af3c99b7c552610bfd651cee4d233609e6a736fa7284be6796a126673a2125491809a4460e7f1bc5f7f55d818460c1b5f591d5051db597a7d5d1e79f367ed1c2485b919508f639090302953e3755ebe0d69b2c44b203192ff5badd0a29d6984385115067ed5983f67dc53f181ce922d44782805e8cbd2c2a533f71662700d371bba66caff31c0fb88b1c26c0ddae0b8fd1e178c8521b84cc35d0fb988034834cff0c5c8c226af7b6d1af53fd20e7ea458c351ea16ae53c74cd0d81c16ff06c9bc9e04f592a847e472d0d537e0c84fe14ff67191bfe53130d94717292f87bf392307bb81a87cb0b52d9aa242cdb3b7dd1982b26afd4b7a4314f6e43adbd7abf2e687da94fdb98f4d0c0ea23af0c507773feab370779bd056ab7ec1fd08f7593ac433dc3813f564483a4c4939ce7d70ce04b954b85308b925a13880733f8e730db08aa65b1e8b4ea8766a9303df5348581fddedabc92c1eef5ea8135d4e52152ed1204d33c95c2aa64402527e83b4cd95897dc23591cdaf8ea78c612dec25ee83765f23e71c0d5f6bba9697cdb76200da746147d6f2dd664a3d2c4f636eeb98c9fb07d32ddcbc49eb734b384b2b453f4f9c97f58e84cafc690111b614b649353e541abb2f5f13b173ff7eba55a4c918ddd046402d476af85267a6e89b24c7176301bb9fb73aeae5b993a24097fb1b243397461f2b60a4df3b940a6b916b8770411213f6e833ac0bff959819a09b4d1508954751ed374a0512241605888e46776d08be3ed63676d3120a9421a49a67765d8c85d245e63da7756887c1b99860c9ed8081a7980340ee80152b51a48b84e688e6efce50221b80735171b156dd7ad8c24ce8786a01f03dddc6af77f83082b3b499458ff45b1443a3115669c52195085f1623c1221d838a0f0dfd647a74f9414ddc94af74c37587dcc9d8108b35a57e245f2d7b9866566df77a677f32d9cca9a533aecc1e4e0d4e4946211bdbe994c978a0b19d74641d096446550238e2497779b67d20a3fa32d656a7f6951cc6b10134973711405e076681042912f57505801582184824d9f337a917a25cc89b434ff4245d0fe25110204d55894a3ea0e92cc90463fe0c96867457cf6db42f9fa116d1a79a3de3967e2f77e3f94de551de27c6647950fdbc67a6ac5922bd502c5aa1996548077ac296f2d5100bca8f6d503de37032eca4e47d830276f9652d7b3676cc10c083cc0ab2688c82f4aba11be4f118ac0059f005d147e85c88ad80ef89bc77e8757da3e9c05d7df05a90384291640d186bdc142ad7a82b488e70a408e706f1d883efce00111efe475ddbefde7dfe9d024dd944c58445cca08ec4ce85effb7bc680e1967b78b4934c99a09f8fb62a53f563e72f4214abb1f0a782ef5ed0cdeed8d9643cb1599d90ed3ec44d7ec68b7695df0d031ec551a3ad538d80e00ece7c1d554624e022deaaf550ee870dda93eb8b1aeb94ac4e79225e0c9e0088d52780e3c0925e2047fa74d68ac358f9b87fe717e7c7844e8ed1961ecb9472ad6941298203318be7a221394e99bab86c508d39e08473681fa2d187df7b9d3516dd9150f7661a1f51ef7c199b909a007a913f0c1361adba170fc58da3887d3ae79252f9d7ead78f66d8e3517d7e2c47e866e749fdbaba63e19035c605b21329980c7fe48ec004df541857be569a32fb28ef70ece1a7d312e98084706ff8b3b96ab7404a867ab7da3502620c7c1886f45138a394c156753daabe1cc5eab55ec13597164077b78605b2cc24b9ae5522f6e89f1ea982884e27b238356769fec9f9f2fdebeba3117873598cbccc0a2d86664d8ab4022aea7494322f6c25cc112bd71bd753349d298e50b1b6b3bf776144804aff4fddfe03648c90f69ea16a6ba68a0afaed171f2828268bb410d5bf30c00a772d7ec442ca270a7e1f4b38dcaa6155fcbb45b296ef66c5783fef271129ba3d1e43a696b3f573b1a6c5474c874fbf3aa29162e6a7504444394687a887f06dce180f58b77327e794f70d853d743bce59a189ff4c9105347df9d46645d1cf418179d6efef177b64e85dd81bceb7bbc8ae329fbb80ad6473dec5510d07651b9acf9e5bcfec4ae06bbcac7cebbf942998767e0db08b093efa5efd083c0d1f7beea1529aa52eac53cbb0dc5bf76d471ffa2bddef91f62d71564e39d1377dc444eda877f09bed387d563df89f585d5bcefc0b5548057a830c80f00ce6c3b8be6cb0bb8e462b48978558d0655d68a467f951a35117ee28b7633f15e62e868ce02fb82551957083f62d2c47ebdd57bd294cb1a11846a99c1a88ef082d5dca4188ca316f308fa7d0cc82841314f2624e33af2a421246c48a57465493f9a0391dd64ba8b8f321797ace6fd592d20bdca5731b621b375a38dbbaa4b3cf361847d3d62ef33baa2fc2dfd1046d531fcb5b45c16e04585e0b26e656319ab6d7daf1b75e52bb433f72abcfe15b1f8aed8adfb08fe2558261f155a6d72270d19590ce683dc17180dc6556ae45c4a1dbef33ce41bf33a486add27f33efb03320c933194d077a1a221a4edc729d01833fcfbe41a67577fe575fb73b2168f0588b3f5bacd575e2c34d44f9dcc7d0f8492bae29abad6d1c2de653a486a2ff1d8a0b9d891617fa89f039426fc170b0058bf24e1c95ef8aa929ab233c8014946ea186d3a8aa62ebafb3fe2bcc49d4868e1c213799829652b4a14d4783c345fa5ad235cac7b1d9af783075426124c28ebcd3e4899742a4897dd5b2b3e03898a3f7956046e2e19bd63426da48b61e7aa6e2af31ee8251237e3884f0f6efe158cf38cae6930ef26d6f7cab239b05a2dadcc9e3417b1e2678071e8c5dd5a2585320269f58d0753266a1fdb06e91baa8c8cdbfb668de1bcd42a30c1a130adcb2e7b37a429baf5578a01100b41e5d9dc296ae539990f9e502d109d0294dc1d5ce89d710df4891dcc5a6c10f469cb32ea48602d3ac05072a1a40fe0e58415bf585e605ca574633eb36cb295cbe8081f8d333f6cbce666694f65e36f4b4ce29d466eee20653c4c3859959347851a09cbe29b992eaab99262b050530e7bb09473146cce0067f2908fb514002036f309373cc5bca522b3792326c19d3001b818c3189db26ced2b913102422d341a3274823632fc6d03e813e9ea00ae887d53e21f252390295ebdd8fb9c3d9edb0a8b57f9ec0aeda534bded8f55c261d9abfbe695f90f921315ddce1b53cfdc3afd67f7f4e1d27c2f5b87163ac1ba6820418e8c8c996626d818eec8026efa4719747c542ccbb83ec21ce61670b9b3a0f15581329848418c8490a706aea9c6123c51369bf6da5b0e4f69bccd3718d54881691a88d09d57ca872a44295d5935701708f35a7b1a3caaba7a64679022df6ffcee26b52002cc2e429ec979a80e2fed95116cf1c054704ef66462282052c0ed133d0b158d7e092a9ea75ebf5d2017be8f435ff0224f817c429312d52b4a8bf5d30eac2d41a16cb78555ec8c1a94966a2c43a5ef14ea13ae0b1c020d5a800aeccfdedc664c838f79e67561129e8008cb99b86000b6ac6d8c71eb72276114f168e8ffdf03943e3ba08ad8916a68acf0c9e4d0f02208e211eb6f416e6742459c57a9962895fb7e7c01e5856ff544448f1daa8de619fe7443c451cb27d6fd2496dddf6873eb424258bbcb607617059780ab6bb39f319cb5f61e2ab8a858f9163a37faf22e80c18c0c5d6844f6b4206d72e513985226336d1a33b5eda835d631837631c83991159995745ed43559cf2a33ef7b3ec40091496da167dbae57d9d52ebce029ed8a5eb8f1e15ceafd8ff47abed1d18d083dffc5de26556ef7d160f130089403590f4870bfde21b7065198980d21b1bb06bbba84d0c9646bcc55db807805b57926432573c8341347583a66e0235271e9d89858e82cae249017d3d2fee317374a4cd315236a7df4647c01dc8525119fdc09163059eae0d34e51b4812a3a30dbace9c33aa6947ec88ae29f799472d071ec0aaadc2e7ad905dd9949df54f3079afe7ff53f22047d130f9413632ac371d86ab07dc75d200df0895e057cd7f95a57579a353a9c5809240886c3bcb8e2653552fa237293f82ba8ef6b3185eac59326a224eecf9993f24ca4b5ba94c0889ceabe1c666cddd8678134faa60372cb2544fc715c48d2d5f2420ed25cf19fe75b0e26c5e454a9b7415b09b82498c9c3404afc05d8cb478065509998552aa6715701876dd429852b7a58862ea67467f7fa0fe87036be76a323682de56453fb6e0d17227af6a795b2ce98857f889d37dd368f7d0f56165202bb45835f64f3eaad625a974a7f22969fbd110749a74c688b08103c095ab79d116036bfda6c4917946674718c0ead4e44af9aca983d2f747142af4e42473e5ba8515", 0x1000}, {&(0x7f0000004d40)="7d9e81", 0x3}, {&(0x7f0000004d80)="aff2691acae8668953705386493ac61b76e54bc030dbad681e3b6a27d91ee2b577993174c77b75a826fd90959008c0b5df8e5a1fea5edb108e4af8604f860211cbc2363135de5cd647ba2ef3bae67f56e996eb8b59993d8075bf04d842e26d8d43e0e124ee100baea67db633bd7d25d3cb7876060f71f8651bde8821bbee6e8ad223935e57b464308df6e96be1cb31f4b28836dcef98a4e8defedd0a8476338c3f911802c181aff1685bf4982b85e36f4acc9af99871fb9860563f34c09bec387aaff2be488582a4d54b05623e34175a3a692efd274c1741758e23f599a4cc326e7b3df986685dbf305a5ecc11d49efaac4b172758267e6e304ff2d42c6e32", 0xff}, {&(0x7f0000004e80)="b3f5b09dcf1664ac326ccff57e70cde044a0c1a92fad4a7139a5d7623887acdaebe96f3d109384664e0ecae6d8b151aa449abcb30323d11d96d7c3972781608c5141cc7bbbb4a52c404790c935e9111fb45678070f55187eedda2ad86c2b5ec60bbe8c38a2d261cd8c84", 0x6a}, {&(0x7f0000004f00)="e7309689a6a48050931be148445910d3547503a1b589ca00ef18333c347bee5891d8bf1d2c9e7b7eb08c3743f1f4b07613ba1856146267abf4933e3509bdd9c6faa2041e4561e6a19d163775f20ddb684fce9016356ead21", 0x58}, {&(0x7f0000004f80)="e3dc69c54aac9607646bc59e8f1b2a28f56c77af4d8e377c0181b4ccd57a2cddd4a37439a35335da62a82bbdeb3c16769915ade347c5a916c4735441aed567b9226fa8946602bedfcfd32165f5040cb4eadd42f49ef217bf0aae9c92baa448be38c1555966f81c5854bc0072a90d3a48f8c854312ef1713c7e29e5b560aca6a315deeced8c0ba6d3720cc6e1632ab822cac1505cc8e4dc7b3a7f3fde9162c66b043614f1f4e210a9873c", 0xaa}, {&(0x7f0000005040)="c00eccf466a2519ccf81610b50221a297790ac76d84d1ac5b2e3d0228b1464da8e3911948cba7d0023530ef0520bfa52c66aba2bfed7740760a9a6a4afae9fe821b4971777ec2a660adb83280d566c95471acc6a327033af33c7449626a767123d75a3cb9fcad84f1cd02a66bc1f29cf1c121393d737a9a3ff166e59f11959b5b37809e85919a7c5e2e54ddc2429daae53970a0ec49a9053919143105de54fda0f", 0xa1}, {&(0x7f0000005100)="e30a94cde0b2b19d1858a309cb50121729115a4fd95c45bc32fbb3d430326bb4d166218bd5745952da245e32da6798150a9df32bda3c8964d74f632490fc9978414c1eb60a7659c922a995f8c7d6ea8f99b6cecc95c5201cfb296f8cdbd4ff11dc994c78a1bdfb93f679a9cd25275ddabf4d7b03ee7ac5fcc804253dfa9526833970749b263f3511ef07cf197fba79582455f06711430765685a1a506b44579455d7449f6526b56431e8507249ee401b855f441297a1642acd8ea700b0296210c4424388253669fa1ff0a7562b71b1d7478e226927dced5704389dd95b5455058887aebc5e186c82bb58c54d48f2", 0xee}], 0x9, &(0x7f00000052c0)=[@rights={0x18, 0x1, 0x1, [r1, r0]}], 0x18}, {&(0x7f0000005300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000056c0)=[{&(0x7f0000005380)="f5b9108357a9554163e8171c62b6e7be34f4467e8fd85ee887565dc771fed02d010e060f280a0975c1afd6017d98109a495101aec2ede4b8d5f101fdb918fd398b491f0821d6b22174e9452ceb889f9a047cc1c8d18d55c1e355d0cfb88ee313d49a0cc16735ff4594f911b8946923b7076e1f262ff17b6c742bf8eee17e64d2e49eaa046f27fc8041fab241d8d16af9d1a2843ba9811ed5438d7d87a447eb7d16d6498ea947cb26b00fadf1fd6b89108115e3a7bdd7fb1493f8adb54ce7b71f905ca03b5ddf08f66bf559f50e84cb36903c053e92c48e46bd36cc4062fe8b6344157f54ddfc", 0xe6}, {&(0x7f0000005480)="04bc1b305b41e601df092600d099ea7deb0f10eaaaa0129290f63f6d505036a865b8cf20e61e445c9885af4d30f871118d4fd43b8c8504d047881db6387c5efef5af4ee0cab384a60bf66029d0d0ec5a0f8bfb2a584763325460c6485341764a18015ee208f3", 0x66}, {&(0x7f0000005500)="370213b5a393d425875e858f916beb1693eada2cdd2e1d291202ca6b631446404edd2789c1d4b9ee4becddf29bfd1ea0832a", 0x32}, {&(0x7f0000005540)="56a8fe8fd03d45a2f4ce7d17ec518ede06f69ac3d5ea6ec932cfbc311e", 0x1d}, {&(0x7f0000005580)="b49b64a979b014d3c65116e82527f6bf6ce4aca3a46ba738af37def0a3f439daea8e58f575ba7225b2b4b7e0daabd17a2f35a00648fcdd9d4af00a952a93832ca08ac59b359b7d4ef6a89caad5", 0x4d}, {&(0x7f0000005600)="f4351c68ed0481ce8ad542fa8f8545e2308ce216dc9e91aa513cf4a1bb82b1d8756d1160d8bfc83c49b50d70cc3d7099204dffe5530dd966e159264c11a565f5da766b786ba7a518fc76551e9c92097238d25ea3c906f5d00bef3f517d674b336298f3927f6ae9efe9c676b68fab68f7077cec42ea146d4dc65f319522c3381464847bf183019a9965224d4f76e831fe838390efc984ed8de54f204e", 0x9c}], 0x6, &(0x7f0000005a80)=[@cred={0x20, 0x1, 0x2, r31, r32, r33}, @rights={0x18, 0x1, 0x1, [r0, r1]}, @cred={0x20, 0x1, 0x2, r34, r35, r36}, @cred={0x20, 0x1, 0x2, r37, r38, r39}], 0x78, 0x40040}, {&(0x7f0000005b00), 0x6e, &(0x7f0000005c80)=[{&(0x7f0000005b80)="0e66598d914fa0b9e9b86781597629399763c456b13baddc2ffe9a8ba7446bc6066e5d8afecc86ba4c0391ccb757561a404752983cabf7d87b2a0e34735cde3287a9c6e98c1adb807b1e6c2cf4f024e26f8d73a608629ce57fbfcdb782dbc851c2b265882d4b814b2603c0a4da0995cbc07e769a711e0de84f4c5b3f96135a33cad14eb51e407019ad7847b81d59920f8b1a22cb51bf39afe69799591d250b4909df52dc47e56176f099ee66988578779a4c3eeff5f4e3427b5e2f8975575b1b6efecd6ca86ee9af3bffd81dfbf542b2e1422aa98d7de1a081c841b1c64e4ea55785", 0xe2}], 0x1, &(0x7f0000005dc0)=[@cred={0x20, 0x1, 0x2, r40, r41, r42}, @rights={0x20, 0x1, 0x1, [r0, r1, r0, r1]}], 0x40, 0x20000001}, {&(0x7f0000005e00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000008300)=[{&(0x7f0000005e80)="b6dbd015badce4710f024cfad5efd61ce5df86bd6c411cf14fdbc5a18ee547a1aea64baa29a97947208b2a9574615dd61001634f5c80d23bbf0e1f1df744573ea00170a52defed282a827ba2d2e359f21863745ac528097a1fcd57dd7bcb455af9f4b151190c7ed29e727766b195958eb54082baf1f0b836d89110f2d740ff8b2c4de3ccbbb5189dc873c841c50d", 0x8e}, {&(0x7f0000005f40)="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", 0x1000}, {&(0x7f0000006f40)="ad70137338533618164f29272c6eb76878b5996441304c59d5ba48bc194eae7fc1ff83", 0x23}, {&(0x7f0000006f80)="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", 0x1000}, {&(0x7f0000007f80)="54b229b6316fb2ab00373005e2140e25d0f5f8d1a03f873e8b2955c659af08782c33189751189e5fa1c00d204d74386113e372de2c5c94ba274d8f4e16ab19e061091f7200fcce50389974e7f40c51223f6a8546539f8cb0ffb918f8c16d453f6b9fe5f3fd8cfa44bba36dfa1c84fac18c3433fbb1932e6aa73e6bc6a5416ac70a0e0c36c525ac288e1fe40f319cf6dc3be5acf83dd962fcf95813c2bceab7ba5d93f909082806fef435c1bb8cb16ba9f19c78718ebf2f822e298f0b09166775011bbbf9659af04af978dc74c61283c4ee6a4315a3fb9bd7df8ccc921069f724abc0e3e3d35254550067df62", 0xec}, {&(0x7f0000008080)="ca68967f16fda6dbbd427213ebb5f83292eb020f67221fcf069cbf51429c0f16ccfac3a01c7e85e9a30b0f619addcbc6b8", 0x31}, {&(0x7f00000080c0)="6747feb78dfcca19fbb07451c5b3b1a1bda2b634235fa496b933b00d02caf4d25fc2acb99bf2fa3868c805b48ebb6f9d0d4f6e55ff9e11c6297654590004d3d1db9ec35fc710e623ce9ee8617d7c5921fc890d490f9671398e57bba7fd5772f078ceaaf4e029b38534d777015d75c94ed919edcd16059c4e228e2ca10cbfe73df4ee3500f15673db3512646d30af2d5286223af80682c110a0c4ac1ccbf8a3bdf9edc5fbca85939cc52b6315edf9e7c9e131610b7bfe2c", 0xb7}, {&(0x7f0000008180)="ad33adbe4a2e0ddc239186001b333f5e91b083c010b3251e73a3e28384f3d59a1455f32b3fcfd2fe6bc817aef25635f584cc35a6c0435dc286c4d110645e058ed144f42c595c769457ae840f1a974bae8c04537d572b94cffb01d29230db5765b3805771929b3421aab8032352e09dc4229f81a844be6260f502418045510010e7f10841e426cf7c011a5637cf17a83d847929f6fca5711a2602ebf066ac7d7da6618db095f17314276debcfa3928602901cbbe1ca511dd563641c2eb9029bdff0586366953b4fd6e73d06af7984422edf", 0xd1}, {&(0x7f0000008280)="442e90937ae600aa6f6c9da257a3d8cf95204f121c7fb4aaefbb2c24bf6ea8ff2b9f6f8d1c2fa208f15a4107962b1ffc061e8e07dd899a9be23b90b5c7896e936b426be63e208adf13ddef29154c0d17ba1abb4d24719817453f7f8605bd4690a4b05d922dedf6403dfd604c5cf9ce5161baa9f8b2d1", 0x76}], 0x9, 0x0, 0x0, 0x1}], 0x8, 0x4) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) 19:35:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) socketpair(0x17, 0x3, 0x7, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff00000000060000000000000000653000ca5424"], 0x3c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x78, 0x400, {"fdc2ecf3faa9294909e51ffa924507340acd2c0040771b29f9b9281271e16d590dfeadbb083e193c9b14484d6da656d8bf8c835f5ab3cef38b3c973a74c937c3bd4ffcebcb18e28e242478075c0c31d7bcab502c3bd4d07176df3e518544e6b6"}}, {0x0, "fcd7ce76c12d0ed193001e8a46e944ab57efaa732c47abf0a35e0ce11bbe3b652d2137f7ef2a972b0e83ac692a11550fbe7127e1f1189ed3c44e12335a2a66b9273e9eace65114ab6f8ec131f6070ff66f869ca9c524c7c8ee99fe566d1ddcaf674665bc5b0600a91f08df28995a2a97067c1bc6fb82ca903bee4369f37e484efb8d56456869f7115d626977f63f45bf3e7b20d1c894adaa73ee662d9b40b3d9034ce899de9042ffc4fce720641af1ce66c29ea4ce3f62cb5b0e9376d854c4ce3e21f642ef8c67d40aeed9713f2ee1adf9d629db631405b09f4a53e904ec1a"}}, &(0x7f0000000400)=""/182, 0x159, 0xb6, 0x1}, 0x20) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000200)=@buf={0x3f, &(0x7f0000000180)="6931abb813f35531746035b45231f13ef1084b4076c6f20a3d7c3a9b7a1523c6047236d07e53ccdd22c961418c203931de08223870f17f8edb815d9ff3aa5b"}) 19:35:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2) poll(&(0x7f0000000140)=[{r0}], 0x2000048f, 0xffffffffffffffff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x2f3) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xf762) [ 256.037590] binder: undelivered TRANSACTION_ERROR: 29201 19:35:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x6010, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 256.107450] binder: undelivered TRANSACTION_ERROR: 29201 19:35:17 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:17 executing program 5: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xe68, 0x6d381e5, 0x3, 0x4, 0x2, 0x7, 0x7, 0x26a, 0x40, 0x50, 0xae2, 0x40, 0x38, 0x1, 0xa2210000000000, 0x5cb, 0xea5d}, [{0x4, 0x3, 0x80000000, 0x1000, 0xd7, 0x8, 0x1, 0x6}], "9e1d4a424fa15a804180bc8531855e4d023027c097b56ba0d111322ccf2a0b623fd2cf20fd2ec528865262c0e5507a262bdf5676b6df16741ac2cab6f83d016301d2e0d298bc605f26befa110c711de695b27b7ce08aaf36431c6cba59c8f9bbebbc08d63213b413eb79fa99264d1cb48cb784776a8bb79a7c91ce0267d53a3ca78baec6329f8216e2a989c8a2092360a86fa3a0e7724ec37757b5727dcfbd2e4e65f118e2", [[], [], [], [], [], [], [], [], [], []]}, 0xb1d) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 256.151778] SELinux: ebitmap: truncated map 19:35:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = accept$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000000c0)=0x40) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:17 executing program 4: openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r1, 0x0) 19:35:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = dup3(r0, r0, 0x80004) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) epoll_create1(0x4000007ffff) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x3) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) poll(&(0x7f0000000080)=[{r1, 0x4000}, {r0, 0x20}], 0x2, 0x7) 19:35:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) capget(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000000080)={0x2, 0x1f, 0x1, 0x1, 0x8, 0x3}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000040), 0x200000000000022a, 0xffffffffffffffff) r1 = dup3(r0, r0, 0x80000) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000080)=0x54) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:18 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x6) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'trusted.', '/dev/binder#\x00'}, &(0x7f00000000c0)='\\eth0,\x00', 0x7, 0x2) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x150, r1, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x148) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000380)={'raw\x00'}, &(0x7f0000000400)=0x54) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0xac, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r2}, @reply={0x40406301, {0x2, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000), &(0x7f0000000080)=[0x40]}}, @clear_death, @reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f00000000c0)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x1}], &(0x7f0000000100)=[0x0, 0x0]}, 0x8000}}], 0xd6, 0x0, &(0x7f0000000240)="5059ba3af357df315d934bbcb1e79184b52364a6d1c948fbb9b76a80a305879e8f6c0d7ad17e9d2a1158290422116c5a36249ab61eb9daa308bb2c33a90c374a8e8461f3ab87e6dae66958eb47f76f15915cb9535975fad5e215550ac49b4bd0e189be2bba522f0064e41e0abfee8146f9d4a84ac8939ec9b2253abb715bb952bec0f86389448d9542873445218672412bdb82d47ee3231e19c5adcd31b6671b4dd81b55d5f29a5554eb2cb89013307ebd05710d2139034af9dc83ef2853877a4fb429cac42b91fb91eda698bf31286b1b7d72295638"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:18 executing program 4: openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:18 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x630000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 256.905741] binder: 6191:6199 BC_FREE_BUFFER u0000000000000000 no match [ 256.917129] binder: 6191:6199 got reply transaction with no transaction stack [ 256.924768] binder: 6191:6199 transaction failed 29201/-71, size 0-8 line 2921 19:35:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x20) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000180)={0x10000, 0x6, 0x0, [{0x5, 0x2, 0x7, 0x20, 0x1, 0x7, 0x3}, {0x0, 0x7, 0x7fffffff, 0x1, 0x20, 0x5, 0x8}, {0xb1, 0x20, 0x3, 0x7, 0x3, 0xffffffffffffb4eb, 0xc7}, {0x2, 0x60000, 0xfffffffffffff801, 0x3, 0x7, 0x40, 0x4}, {0x6, 0x5, 0x1, 0x4, 0x1, 0x1, 0x1}, {0x8, 0x8, 0x100000001, 0xffffffff, 0x8000, 0xffffffff, 0x6}]}) 19:35:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0xa08, 0x2, 0x2, 0x39, 0x1, 0x4}, 0x2c) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80041, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 256.997822] binder: 6191:6199 BC_FREE_BUFFER u0000000000000000 no match [ 257.005316] binder: 6191:6199 got reply transaction with no transaction stack 19:35:18 executing program 3: sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 257.040411] binder: 6191:6199 transaction failed 29201/-71, size 0-8 line 2921 19:35:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000), 0x0, 0x1) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 19:35:18 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(0x0, 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) [ 257.059757] audit: type=1400 audit(1549395318.696:20): avc: denied { write } for pid=6223 comm="syz-executor0" name="net" dev="proc" ino=14724 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 257.060191] audit: type=1400 audit(1549395318.696:21): avc: denied { add_name } for pid=6223 comm="syz-executor0" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 19:35:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000080)=""/149) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") splice(r0, &(0x7f0000000180), r0, &(0x7f00000001c0), 0x3, 0x4) r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000280), 0x2049, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000500)={@dev, 0x0}, &(0x7f0000000540)=0x14) accept$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000005c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000700)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f00000007c0)={@broadcast, @rand_addr, 0x0}, &(0x7f0000000800)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'netdevsim0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000a00)={@mcast2, 0x0}, &(0x7f0000000a40)=0x14) accept$packet(r1, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000ac0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000f40)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000001040)=0xe8) accept4$packet(r1, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000010c0)=0x14, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@mcast2, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000001200)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001240)={'rose0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001400)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000001500)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001540)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001580)={0x63c, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0xc0, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x7c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}]}}, {{0x8, 0x1, r6}, {0x164, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xc24}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xf1c}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xc4, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x25}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x158, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x401}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x9, 0x6, 0xd0a3, 0x8}, {0x2a, 0xfffffffffffffffc, 0x401, 0x4}, {0x8, 0x9, 0x6, 0x9}, {0x1, 0x20, 0x1, 0x8001}, {0x0, 0x0, 0x316, 0x7}, {0xffff, 0x0, 0x2, 0x94}, {0x5, 0x80, 0xffffffffffffff2a, 0x2}, {0x7, 0x1, 0x111, 0x1}]}}}]}}, {{0x8, 0x1, r15}, {0xf0, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r18}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x175}}, {0x8, 0x6, r19}}}]}}]}, 0x63c}, 0x1, 0x0, 0x0, 0x81}, 0x800) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000200)="e20595f219abb6c3bb8a5feb92ae51b5e6ec7ecda92574deee1b17a105220615b0858a20b960283dd6816166c086f8d7acb6ab868e8916d813b2906b90d90c241fbc22d5b3b7eef71244a510221df19849b9bb8b508a7788") 19:35:18 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) setsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000000)="281d689fb6fa5829443782d41b52117df86c928450b6cbd8155b04aa283578ea59a5d03c2b66b8fc2eddb682de7c53ac668003379f7041a7b8054786155c7043c9ea961dac46a0967cc9875b46", 0x4d) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 19:35:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101000, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x1, 0x3, [@empty, @broadcast, @local]}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:18 executing program 3: sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 257.060982] audit: type=1400 audit(1549395318.696:22): avc: denied { create } for pid=6223 comm="syz-executor0" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 19:35:18 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(0x0, 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:18 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(0x0, 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x804) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000008c0)=""/4096) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000040)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 19:35:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0x1f2, 0x1, 0x3}) poll(&(0x7f0000000140), 0x0, 0x2) r1 = dup3(r0, r0, 0x80000) r2 = dup3(r0, r1, 0x80000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) fcntl$lock(r2, 0x0, &(0x7f0000000100)={0x1, 0x5, 0x8, 0x3, r3}) 19:35:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f00000003c0)='fdinfo/4\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f00004ee000/0x1000)=nil, 0x1000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r3 = memfd_create(&(0x7f0000000500)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r', 0x200000020) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) unshare(0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000000c0)) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xd, 0x0, 0x7fffffffe, &(0x7f0000000840)={0xffffffffffffffff}) finit_module(r5, &(0x7f0000000340)='/dev/uinput\x00', 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00\x00\x05\x00'}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') socketpair(0x1, 0x7fffc, 0x7, &(0x7f0000000480)) r8 = creat(&(0x7f0000000440)='./bus\x00', 0x400043) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000380)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x80000000004) ftruncate(r8, 0x2008200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xf2, 0x0, &(0x7f0000000200)="cdfbc072d9b632e85d76d76862be4a564ed6068d2e0596694f159e7e7897e02f0942a44ece4131a5983ab1e66a05aa824be8e34d177d312d9d6e0ffdfb9de6c3adfbb7db9cb55d169161644d92f15ff247fb6f1b727b943dbd7adb75d0317b141febb0df1e04f9fb064f73de3833dda6897e6352227da70680b9ce1e6ed24bfaca347810474682203b21d18ccdc276ec0ec9fc6eea59722e467688a2c9fbdf6b77dfb01016c6fd07609f6495d2e077ad8c808814921804a91c649977b686e7cc9988f5bddd1837ee7778c23ad6eb9c2b7f2a9a89b637f4c52fb2a022fa2ccb7485bc2a407e473e54b2fdd628e1fa1b9cf94d", 0x0, 0x1000}, 0x28) r9 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0) sendfile(r8, r9, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) 19:35:18 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:18 executing program 3: sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 257.294857] binder: 6280:6284 ioctl 4b48 20000000 returned -22 [ 257.311509] binder: 6280:6284 ioctl 4b48 20000000 returned -22 19:35:19 executing program 2: poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x1002}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x200}], 0x0, 0x10001) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x304, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:35:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 19:35:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000180)='em0&\x00', 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r3, 0x5, 0x2}, 0xce) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:19 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:19 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 257.473237] device lo entered promiscuous mode 19:35:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x800, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x84, 0x3, 0x4}}, 0x14) r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000000)={@initdev, @multicast1}, &(0x7f0000000080)=0x8) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000340)={0xfff, 0x4c4c, 0x1000, 0x9, 0x7f}) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000180)=@ipx={0x4, 0x3, 0x0, "e88240bd0163", 0x100}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="6880a09cc2baafc790e430ed8a24171bebc3f83b4354d098c1aa73c0095201c7b49a872024337e2f1ec102e1ede4055f198f3d0ab5f1b33d6743e8c01bce", 0x3e}, {&(0x7f0000000240)="dee97056928b308ed71610bdf73f44d1fa11ebe523300b547bd071457a697504e5c017a9190313b06617d21234f03a", 0x2f}, {&(0x7f0000000280)="ddce3a5a1865246e894dd4a3734904df38800e3aea7895083222b300d3d760db23b7514f335b4f03bd8a4aed6c801a8cdf55a814b6479302d314087e3137b26c4494ddb974a4381227df1a85b6b4964de9f874c3eeef863e25f88acb1394046cd5105a9d27e34c9104114de1f9d58c0c44e6d542e4f517e8bebdbed682bbbc3ee82bd5dac153e2b174c5cf40bcb9ac0958d22958d198f2f6bdd735bb6ae334a6589692b3ba98993879fce11b7a94f455c65c3bfdf7", 0xb5}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="917ada89c5ecdfafc043fe359410608a9c87f27c8254208628a24b81a7f584316c50d98a04afdf09642e38f4bb3289edc13d3c27ed18b5cbee7c169cfc76fb9996ef86105f41213e35a7c76628868e72f706bd66355ff0158bec9d85301c8075ce184388ce4c08aa1d7212115bbee7dcc146c7cbdf2bf963720b43b596008e731b76648470030a277eb8b559f13bd2b1d880d74dc358763507d2626c54d43ca8e820d229969d785752a4c0d791ab054753459bc4e28ddd81ee7b9df6a04bb2dd7fb7c8e9a9bd59a02a28cdf3c4222d170d6fbb232e88b3751c644f408c30b8544c7b1b2eb6f462347187bca22c710dca60ffc6bf679c8435f6917499f2b085344fa12db5eb2c86d5f7756beee15f6a2cc473ecb12184b70ea2bb0bc52d2594170631b5c5a92233cb9b55cc564c4a05b3deb44f1f999ec2f45edf88f73f468a4ce6585863eb273f7c9e984ed9bdc30853c47a31cd960005861e67883cb103a6b82805b44c56c5c91f6f1e5bdad8c7577904045e7a818ccb86c7eff9d01f4c4c5dfdad07fd71a16398fe3051e5150344eb761027dc943e521e5a108617faf3021c8fe49d00c011c5fc4175e728e5bdb5f30e46a26967c53c43259ce1a7b04c566146ce412acff7c2f0c102e91e9ddd80076b0db761733e9e2cf7467ecda9d17976634c262612d740ef776899ce6898da23c8117246d749fbff29fea4fd2752b29bc20e2677d8d43f6398669bddd18a1efd88c59ab62a31b0e6c94fcaa88f7702d221ed532812f483b304b360b9561e76d41f971b6fe2b16619db2a40ac1bcca7807fe0c6ba1b1d594520e5c8b84a164cafda2c61fef1b6f369538474b66c3bcd99cd9e03f6b975afc6ca1c9d1c4c128d42401a8236a0764bf2c2baa002d05cf8c4c9de8f622961962fb4ffe3b402a83a0e9b3ad5f515266c511414cc4d5c109cdbdbfc21861db67c87c52276af9e8865f9234c4bd360b12750e8dffb18456633830b52cf70b570705ab537ae3d65972917a80d9a2155c85a35fb04b87f1f2c519c7dd09228657e661de4ada070097b8351f73a99e97f890d47c1dad5eea2a540c2439b3a09e350a04ea4ead536a82c9906e15ed30805b5552edf365d3b2884689eb550ae447383d2db0e96438fcabc8f0f42dd1081b0c56aa01754f3edea0f72c2503bc6d26344e5d8a197cd6d1e29960780459f2d579f534fd6947ebb69cf4a9b5107e14d2a778cebdfbe725516d767910db950257b70845281d5e2ca42e1299374f5e02b58d442e7478e11ec4dd510d77918fd2801eb55f50f3df723fb8cf52066f39dc11d55a30ae963ee8a10646361550cc9b787223c9aef4e5e28b244418effd799a19829d0966f43b9d3df9de0388869cc51fd81f63749ae07cd89b2f526c5af0a0bc2b86059654ceacd826317c7ada5ac2666b79dc02d6bc49a640b981236943b5afa44854ebca903baac57984f09e504a2ce2093c6eb85918582fe8ddfd42388a200c7a51630c955fb19a98bd4ac6cb2228212afc9228d64ec614433f35c68032359f1b4e208b1235c85c4323bd4c2829d1b5f430fd64594f4bfd0c55916a6bd77029602ecb672724f4587cdd261ecbe0b7fdb5d563aaa6601cd19a9897e60e26319ff248906e28f38e8b9b5492b9064c2ddbfed1d12883a2cb9f45690b740d319465a3076dad8f64139473cd04cc7f18e7810bef68f5e195bc5ddfe31005903822c37e807b78c6aab3a3f8781a9810e3918e41b92500f458a30d861a91617ccf6b394b1ab372d630a76c3c090609aa420322f0a756e329946de1f3ef2c4ce2cc9dce33f62e3a31a6323ca05bb5f81679b0b21956d2eb8c14921dfdba4a1d956ba123f7a48fd99c2f71dac1636ed6e44de6a5bfda01be94974276a4609a43e9518a1e82f9476c2fd6d68e4962a2ef65283ac663876bddd9fc501c58775d60fcb65edbcade7faac7b3d2159d6a6b7e9afc22c57c5e22314ad9bd4ae2682230f30328f51b76cec7d3931be5d29ec668fe29328849f3bdefacf79475b7c0584f163c807c3978eb4dff5595550fcd6d5566e2ab89aaa070a58935f1183e38dd82d151c0605fb9db401b330322d6f0bea517f7ff3b18a6adc9956ad8c64d3fc7789ad660d5acb632162fc926040afdbc21440cde10989c1e82e505e966ce32683fe5bc275d53af4d95dbdaaab418094ff8d85b3ec197e2eb042cccca764590493f822ffc5dbb804b1e88ba0e60118630e6e2b543b0976c4f705674ba912d2dbe5f77a0797cbb463ed06b6ccd83e32f3ae5065fbcf3ea95cff3b5d627900f7ccbe69504dc732b5f51fc0984b1d9914915adbb19a868082986d8c32fe3baf39abc9408baf8ad16ef5ab780fc6456083d2efd532b3443e1ad9f9516a9b75f15085546ab23c84dd66a8ec0156543e799650c7068e7e284bd36ed348d4b4291aa9127d93cd70c1bb8661797da8d9e7de554479973994f8645b36471b038049dcb6ed6ccdb4997e173a904d6cd23f6641adfe8cdb4c8a26fb77ddeb5b8fb587b6d1671b952d8628127f6399df6f8aa5d33c30ee758dd3d333cbc952f3b88388aa7380ed030fb2ebd52035ba1bed070c2fe60286a1323be3e06e0814f772bb7948aa2e7bda64dfe8ecb4adf25a0fdd0f6aa333768a18ac37a1402396874d95eb1731f6c1db1a41df0ea18c00199e802d7fbc564d26045b6e5ca0e3ade00ab92bf93eb66bb195c4d901c9803230844faa51e526190e1ef60b87728adef4ed36318b6a281084edd39b73d2919cf7bfd2800b1b7e7ba7ee5fa2bd5423868cc6571ac6ef6d5f936c7c3bd532cd1a4f86f60d00c161fc2d55fac7869da97527197c880d617854aac9c8e5afd048b4814cc1dd72c81d7d4f60dd1d1e53188a1ce5199be24732efefa4534ebd892cbde0b5e406838da7bd89c0e620d21a8abc2d3e800d8861155d039293d9ced180cb0623ebb0f7b55ed16d8203647640fdcf11c87a6bdf2b5d8c33073f95af438f6b108ad2fc28236d43bba846e872ae9ddb43b8a64af2902632d14c8d8171961a805331f8d76cab3084478e065b5d3d51cecce546e486834f4f7025c937266151cc3981f0ba435c4c249705d0cd50c5c185997b2e627d2dcb1e9415b6c1bfeb609095c0c575647e18797580bd1245cfd1cdf95938d377d8dae7cbf4b69158b274e41fd8e4f12f584a48112ef2fdbd6ea05a4c4dc1a547ac8aa188dddfcc367c492284ee5edd0bdf504e865d0e070088c9991e1cc2b32ef71d88308be4ba83c7401ae071249331330f397e6ecc9e212c5d759295dfffb0960b3a8bf982a2a73393086506255f63ccdbac97978af83405199bce866cc767e5222b8606011a9e068d69a1512fbc18deb839d9be2d3b0d8c2febfac61189cd903f037141d05868d6477c4bcd5d7987227f9cbfa51fc14d3be80d39d6b9a24aec993393fa7adc7c93f86dbcd3f275cb890af081ab09aaa62f75493ef4fa396572d8268976eebd82fdb71b95778b9805b0a35536404c5802e281e7dd2aacdda65a40f393b75fccb3d2d0eb6c7986b790ce2600ec276312323c6054eed804dd2fe5c3fbddd507f3c63da0d0de9cf7138a6dc699c07ee8673ec05b3e0fba1fea4733f0d43c5af981d99125c058f19ccecfac73c4778f2ea20fa64ecce0388beb839f92a2a5faa9a2d1ef46acfb88a3dfc01192388f86c1094051a8bb21e28e33c0dc208576607c39c87cb99be79064de8f8562718c6323206eb791aa4fbbec11034acda7de2d0debc4394910a1decc9517744dc9c35762a372f39275bbcbdbe6da9c80822e537eee92cd06ee302487b058a8be06b6975ef01c7a620936363ed1a029153ef8c141b8ee369a85d311f0235cd2b693cfcf5f606b1fd9fad43bc17d292ce275a2c3c1beee1c63d419d6021889d7df87829a13bd0905a09cd0b25e0d3bdf1d9726b55e8974830899d6de93473a7b095b01aea258b987c3394c0cfe7441558b5aae7640a7529f50f1fed52f846960ac6654f96c3e51ab5f1e1a91c514a6a9943fb82d218754838a6da5c52aba43cde7a3d198f86710724993fabd2dea8c4bb31a156f52f78589732da980bf9a12102aa7e284677cc29115d8b7a94393d6ac0e92fd701ea7e7aed1721b744f1e4412834c16abcb2e1722aedca580de7c2b22aed9c246fa0ad606fbf77be02a3eb2b5491819b94bb3f4ac68d5759decee967ad3440db7b1fdf7a9e3045b65f257af5962effd26fc4e451d21944ce49bbeb39cd527d59f27c736b39c24c831b548a0a8c9a21bc1840ff9d72a9cabd2794c05220b7282fd76905001735d70c3282a9646d09f42306004b9e9cc478ed117f8ba12a293d1ef6c255571a358b0d7a50425e4abc19afbcf428ad4862e1cabb3d6deaa54401db4c520102196cb98a14955e2ccaa80661b4053c3b5d87846a9a259a007c9c579d98cbfa4b1422830f2d0b85852e47398fed790b8e1c783e7c96b06cd02e56601db06410ee7526eca5478123f4a7185222b132d4d357bb2aaa75fd2bed7b52947c04d9d1e5ecfa96449609f8ebd5b3e5f844f3a5b7fc11dd90a13ea1ad23bc07996f2132fae474f65da7b7b73f8ec5fa730d71fb5885333c04777f5a27d01411c0a12c1888f2dc273197ab2330165997f37439abac92857f0a3178fe5212bf7f59ab017dc00c55ac13283d1f4c329c10ae0ee930ab30ba993af94c953ab84c96184e94e3a546fa0587ff474cb70a571623050d8452e6c77937255ce30085a4d855cb9bd5feda99f041ec33cadbd32d7da3171ce25b1be677ef6ae84340064d036c5a5b4d7cc4fae57d9f1dcd5aa62ca741c31464767ea8f342f67120ee3ac93ead9a62a3009d2c659174dd4667a693a606e1a58ed6e066d008f681ebcd38929b243b268b0d8a32077d562a3a0a57b86c23f275e1067f2c9669234eceb41d871aeb17cd5c3cfac6a9d99a526fb45791d44e113b4a54586fff9a86d5228828be9d0c6d7bfce86fb6fa70f66bc0825ca17ece8382ae4366bd3435296a5d5e2db28e0794219a0b6c1a4381be1ca452f3945b0414da4c444d53bf8ad21194cc8083679bbdde53deeb8660f86064422b69a81ef5ed32e6b5ce9bc85f33da710a1987a1189f8878ce15334a948bbf577f9aa750f0a6bb2948a8a54727e6ac85fb830b4d451c1c2d0980e2e2aa62044ca05a0a70196ca5f9ea413dd7f6fd2abee783d34bae04186b7eac09b66da338cf7baa5468eba1b30feb637ee710ced2c7ebaba87ee258e2a79843a9e0e49e44beb6654f045f296761d8950e9c91a2f02aa696bf45f4efecb0f528f22bc374b8c3ed0b5716f864234b68b539433099f7229e0ac7bf94a23229cf8b4505371bbad9c9a07ad15e3f325f54939a61606e22494bd4f11d739855689b3e0cf1ca3f2246330213aac2fb39e9962d39baf4c06fc9d80efb2dba3557d530b943a16732994123828b06751db926e912178ae877ca8c223f7b68b021f5bbd991f5cd5ffa670a9753b17b25423b351b43943d7c1d8a117a2f1a00fc02247b35ae54b86f54f5f8c88793b94c3e4cc76dc42a2debf6f74f04fce012beae505b30e446c5c74e49e1c93e99f640bb886b52462540ebba9649551072ba348777b1ea7563c0d35489beab09194b860f4b4db38ebb894bdce194c4f378ab6eba66e426c37a8c2baf604ac0d34df1091954633fae2c45223495970ea63a04a15b0723e8951adac81dd06ec921a0ce913a21090a266b4dfbc90778126c3b9f0c74ba4fd986ab17b79a982ca0f441151fe9796be7c7d4662518fdd663ca2", 0x1000}, {&(0x7f0000000340)}, {&(0x7f0000000380)="46cc713454730142179e3494ef58fac2d90a8ee383c652179d22f9763f10aa196a00c987154384ce8c3ae39fc42c0491296c62af6ba57b53849d1b91f46ec4691359725eb98b1ed051e7a2e15d65e68c8896ddf8a70f9b2895bff3f672a922ba2e435128e404922a8ad0be5ffe19", 0x6e}, {&(0x7f0000000400)="cac9609a1bf53fb40efb295d92446809580b9cc9b1205e3fc717350efb0c05a8fcc8ba77fea8531b6566e67a22c54dea67165fb501991eecf63821804a4512554ab7189566e57dea41eec051174d30f396489f85af41131531f25a6646af297577c3b99aad5cc1a7190932773e1c94cb4074fdc4087cddd51709ac873d692d4e8233cbaa7b54eb3603a46050caa7e94e9e397eadddcdae1bad12562f", 0x9c}, {&(0x7f00000004c0)="c1db", 0x2}], 0x9, &(0x7f00000028c0)=ANY=[@ANYBLOB="101000000000000006000000426200005e009e3162ec1e4a37dd6a6506f3521017d06939d7421d9e121c251bb6b871f88906a19008ac74bf4a4b459208263cae08be64b6299fc004c34637dab8f220c3ac50223c21d450462744d20418b3dca6f2d8a48dc6b521415cc17f59d7ea81f99fc9060bc56a7accc0504d10e4f9a24c30cd756ac8c350e0d7d75856ae67eaf383be0ad78b30cd56f929cb4698a18f8c45d6cf29f1e8edee21230685fe5357c2a72bfc3382786689a6fa79d8cd719247a40448ea44921b41d43ad2e164577fb284f80235970d533bd269272c1a558083d531cbdd54cb1460cdf453f680d665f745eec1af286120151435f596fea2cb13f15dc8074db711bbf72707a29c44546e878158dab42ffdfc7bac21c7a297592b0a1b9115ff837e3c73244510629f5d048c9079ec03e7862ff011b4bbda3235b85bda957ff6444e44ac734fbc014ef3ade35d3166f9403df498b29e319d91fdafa630167453bef64abc67557c1e82b3a52e071c285b53ef04e021ed83eb0056e4a80b6e825e4908965db5be1179f75314abea59933b19aaf3c2343d3fe236fec7ec2acda6ff20f0c04d6bd2ed00c6e4e1b42ada61547cb9ac4e203c57e79a1d21224147f172378762b2038cbe40d6ca9ee46eb5684884593377e335dee70d54486cfcf7aa88b272b9224c8cec7904bc97e38b3364fc41c24d814e3e9809d5201d0fda55a62c12a30ed6664d43c7f23813b2760c091b63e904165d6eb7cc11bc1828222fb49b5b49062ef3ea3e5c6dd8ce29ce230df387a0b984c33c923cb12191cf360cced739eb2b9040dc5ca428d16f3608b7622d11f2609adbd10bbfc229f427b724ce48e8d2d6734fc4932514bc5baf4561796172092d2726cd5b707192cb759840f46b79f10221063ca33b5cf9e0ea4a9b762ed20853e1a248c638b5a55cd210a08233fc1e6e39f90ef53103f9ab180f67ee7a506618041f70eba0dc6dd6b959b7a01675be156dcd7914416994bdea294d0c5ced0348b2ff1371b8e323fa6c5ad97e2b9965300bcf39e446d101d70677d482db55086ce3ed92248d0890016db2b5244dea30e47087d43ceb6098c8480b0dd81f939b49094f3e1bb45a3add18fa61519b36a4bd3fe83fd30f4cc441112b57c6c2ef971b70561f0493ddf1aefff4ac78d808e76eaed7b9bc69a2a8668091e63430f74fff6085d7dafe6f3cc2ccfe10051a3fcde988a17e6d4f1331b1767f92d8fd45e54e829517672b7e3fc676405a1403114a442c503530fbce751f5bef8444dbf1a8e113d6c116d6711554ba7fc991bb7d17b4c6315f49152b6389b903779ac271f0b621d82bac872fb2a0db2f84bbad719a237f5a9c8e6d54829cddd68213f406799f365b516514984e3dc859abac55658460fd70118d680bf7cfe5c5ee1598d68c2765480e1c1a4599ed01d31dd4a3cc1555d8b6da92eb72e9452b481409a106977e04addebcd70982ba0a90fd800fa7f54e4d960e7ff27ef81f4cce63aad6f56a1ca075c726e06394303e08d6e07935a8b967fc4299095075d4393359a9b99a5569bdec70c29289bfb740d6371247d3062665aec99ecd3783ee39d9082b690343e347f7584a7f0c2b5ad3a5342e33464c14426dd474d4034c69959a4d4e9ba4cbcf0868e272e11c5f445567bd5c7ec61d3822ef32653fa7e04c5d72e2f6a3adddb190983c1e0c3f1f8b41ddd2bf8295476405e56c50c0438a62e53da9e52eb69ec24a4cb60cff001ff7341ecaed8ce5089ba573ff8cc10e78398764cfd97f5eb86603453749430e67c9df86472111b645c521733d401f14f0b2fd69c297240ae41a7548a17a6f5949a39ee3e92b7e5f1c044b7ec220256cc66ce3579c5a6e12efa84d6007c66215796479254c8f433b2675ebda590ef8e13a9ba8128bb13681a28ca6f921cfa19952e387ee57a793e97ec6f091295b232a5208c34eae57a5e31d0f76a4c97df807159be99a2ba3620ec183cc87ca6897434d3c852b6cf71dca61bd6a62726851c6b24c5d41122656831279a7c1254c148982e0d53b9cee54cec67dbef9ca31d47b69ad4a6d78fd35719766530f068c323df0960ad3b5cf0567e3caf91c4c97cf000a01a24051acf778fbcb12807cb1db751f7ae7b863a5df35c71c71668ad5fed76233b950f68b5696137f97638f4c74a69720cd57200992016d669e4d20c56fd2b4cce181256f09bf2e647411d70fcef1f5277921f6dd31f8ff53609ce3d6b874a98fc58f03f2bff373ec195eed6fd259e45e29683ae566cf638bbdfaf6745392cf3c6fc5e62e7e4bd77a43818c0d428adf7e2b9cf8f9ad2a678374cf4d0164a5e55c98c1cfbdfe9b316aa68424bbfbf12661694d440199cc2a62f893aeaacb2b748b455c0be52dc684c8b9acfb7bb8c79beb7fb7eacbc1aceccf661784b8d5d441c3b60d4ee3c15bf42c2c87989768576aa2875298e1017955df5dac5986985e98c43b3f02e915527b2637ce90219b1c699f9cf08eed50c2480334f5f25ecd3ab975e2a515e16cfc6eea0ba3cbc97cde23c0a69b4799393447a318d4829b8b9431d8fe9f16a39ed966724b0a9de008fa3499098a665325a78178b12b1ed70fede92945430e82c33a93a4c65f29a5e431ad30f3956882517859773250a8317d3923c4e471894b9cab9585fffb3b15884344cca5315d0b3962664cc3e4fcfb668b2e7e6114c77658ca2fb30136ef736d2b12c8b4351b3dd0ed437fcbad4b86d17455a086b5dd883dc041163c52a1a78c05c71d9ed00e4166cf532bc2db7c9c140aaa22dad75e7eb54073dd619072a7e228dc05116465f4c6df6b6ad0f605909e7ef2543db2f6fbefc2fc21672714f0cae69b1ef0a83620b4770fe688a936e2e74d69c7e1ae17e570633cefc5594107e8501b8fb17f9369b0327a2de4d6d5a045e68c6e2d1e997c0bd09a9ab21f60b4d97c2a3cacb36e1c0b82a4608f98a16de113fcd7d95b375dcc217394f82ddcf94c2f68d0e2a9e8edb88b56050b5135277c47646681ea21bf1964f7f0dac19d1cd7155af11b057b1c4d091133d21fc0aae73c0f264ecba166cb67c6db5e9af3cbec5bb2a79f57f2f86f571d8f50e40da8e716bbd758b828db3043da5cdeb91c1de0b6d37f08c19b4358a14cff1033c6f53a5c4136e285ff8c8d3e4996ac4ee8be27f488d6bfd2d00ca91dc3e7adae91d74dc88475c6e0226390f74a11eff4b20081c5df5ba182b490c71925f4b515d2df1c3f72e17afc8d63e63840c9928424efa98339e97fcc7ad8915d32a3064a1117db2913d19dff6255c4a45ea6b47c6d3df8b08913c1c6ff9af560b0f8470ca5f9137140667bae9d846e87a9db2e20ba3d894ab398c7684887201424a78aeb8ca93406a44b75f78a54e9267562a8d71bb2069f070a01c9835af4600810c45c5d28b109ed589032a81af6b37b5d3e7000c9a51cd619b1b41ec60e4de077067c7203b8d685f8eaaedab53302fce4ef7989f2d99447af6dc03b795389bb0cad86ea9a56047bb8f1920c37eeee264cfb4c494e387e29e7683f9138eef48a0c7aa94a4f4a5572eaeb864929d6d8d0c41e9d22fe035f9139abe11ef251d37715be3a7b8375d76665117f0af2500930624757bd5fe4e45c11b1893ef433396403a40e2139f954a613c0de4b2f18043b943379f2f43fb82e253602f42934300f2f9cba0c0bbceb04c6c6b7c1ef5df282171f5bfd70dfaf8f310eb2ce51fc7e6d31856402a28bf2129546de4db9ea5d04ea00cbf274f94f9656ca08613b86635359387d776098920d34299a458f2b8ffbba2f251136a5db45990cff4fb39c9a130bf5e0dde1dda1f3b074e812eae881e2d9a5e276be3221a667a1d39b92408907073524a005393efac9998f8054de4a7a96ce4aa2c2afb1f597bd6caf5a410022f96bbbf7318b48a577b209a55da0b5d0e8a76e7436abfcfd1241dd7eb881f36821a92c450915be37e9f1d3bc4f362c3055cfda575c3a49576f26adc263939d0941950d4cf7bb261a3e96b015cc327cd011518dcd482d822a65e691eaf44ddbece943c5513fbcc42df506586684217e41fe244ebb8ed19b47a6487a48880982e7372df23a1aaf52900a2d9b16b58a3c47ffb6a953ac25c4db9162c1b7df171d000b3412e3ce9e0d2133562d5e26dfe50a08d5a5bb701121a6cefb29353befdc8742c7d51f25a8e642c148a984be3b4576422baf1d672c903abb18bc6f33ff0c286cc4318cabc5d76d1c5f2c2785b8b6ecb0de50d6a7a54149fc921ce974b4e65b3ff32b7354cb9c0985ca6686a50ebd5d60696c859c4d6262562cd0d0b4aa802dd66519722d0d30f5e7c01c93b1bb7dd8579a321e1f9e5d6da5aa2c4d10d9f138dedbb975ae60b501480133e4b151bae9048ddf5c8576e40d837e28e904c0bc894bba9bdc179ea06d15eb2fbbc0cd1ea00b8665c3559e4dfed8d7254ab8589894ff399fd2306637015926536c999239e52e8fea521ffe0c6341936b9049efee3feb0ed7e34d00cbd89c6fadf0cfe452b1338526072386cd3257364a569256ef14a6c2e2b1775b16e86c86bc18922e72f3a79ec545fed43717517417fa803ca877fba62e51a9593e25819a66765a9004f72938b7a686fb5c2d3725c167aee90c0f252e56b16e39b2767297d8ac1503b0a18a640562182f11361585191a233f21c85340464d623e4012d63e3fbbb8358c59d2b9dcd8a54eb39896ba5caed43bc3850d7b3b38585d992606342a812c5b538807287e7c245f554dbfb5b08d26b273b355c08410e8ce1b5cbf8c248589ba90a530b92ed287149cb3aff36ae73cb4353f4937cc6fd913d637efac947481e489ed63da90fc0d7abea62706e8b6ff369b7a7b3bdbe10d45194bf9f2a837c2c6bfff9179dc2011d02b30be2e59a23eabd13bf4f8d665c4e8b4c239b09dcf771198ee38f57d718313a3bd31e6ce45221515aa2099d9dff551644244ed8acd84bd83a82da4fadb766d35d0884251458d77910f2b3b1b8644941c8f836483e84794f314e5cbeac6c390e081719bcd149bf18bf3695f832a0afe72d27fbe0ad85569b664f4025eae7af378fc2b93ae72bbc55ef91e0446879d7dbbd0f8c3e2e1678a2873635e51e2de99a695b9231e9f3613b6927b339bd247c168db17253b569be30fd31dc145205e4a307188905dd83009e7670b492c5bdfb80a8374cb861ca2ba8c8cd97b56eb0d36817be11cfaa44d731d67c91d4f3e5cc37b07a85beb9a08ba1fa0085a986057f2539cca22dbadf87e4f0ab92d55f3beb23d411cede91a6f5c4bdcc25abc2c0412e68d995efb55270fa69727d8c8aed7ba14fce3845368d75bfb43390becf9de02b4a6d5b07dd4bc73fd6fb6048848dc4246d23f3533212adf29c49452433f0c11c774c6ceba153e36a89ad7c87c6222d9794d082db45f420ee532912ea582fe4215c34697b98a14fde0b10a23540708b819f99691090803bfbc8731d6aacc82f9aaf3f5b92a91ca739a4da2ba10c01c910f192d92cf33a3e6b440f78095b30258f77e61313f5e96bdab6214640fa75e9f5c06b0c74c150ebc63ba20e721d2aa9351a03ed07a5a5765409a0715b4ae49a65d87af0b9d26ffa1fb2590489a749eb2103abc59e9114c7b6e75608c6b802e734e1328eea7656788247fc4e7ffdd085a65ed3486d526cfa49b94148ec9963fda49d63a2dd27c3ab1fd0a72b8d4d52895603c02cb3b539e73d6767f15ecf93ef74dae987ee83f9a7c728fe8922599180773040099d771ccfb1b1ebd6bb80727c1d30024639d3227d625e1905439ff75c596aa3478000000000000000100000057ac0000845ab1d1643e4898a60e5605fecb753d88a13be8d7968094cee8c34d5cef609f892e5778a17125bd887f188d80d351fc1280b4faa76b252eda1ea07baba0b2752b773d6b0994c74c229f657212899ad79b879a5f3a07da6cb682be666ebf4f65634963000000000070000000000000000000000003000000f79247f03c17abcdabd33ab53477582b1be135078e2860f7af85f45c4f8b37a5adc9cb5fe5d7a386c7d76f4eef2fc8f142df9612dedab8bba278e05b3175106a7ad6cdc0562af334d220ef5718c727c2f73199a49c0997ee6600000000000000a80000000000000018010000010000809317d0742be0bee9872bbc3e86e34b56498ff2eab447ce18d7dd787a97bc190e4e6d5e20b9c541cd6e4cba580311ba89c27a2f873f4a32709bf211b864ec9d8809590a2ea521b146085d13de4dda0dbb10c8d66e090176a959633a068c6900271350fc128ee0a8ce585f4895efa3adca491aae695ae9790a606b4c45fda9e2c739710ef6f61e92a8fd2cc2b97a1a42b3d03100000000000048000000000000000a010000fffffffff1b9f95959038eb27d557fcd7c5d081a142456096aa97a014ebaeef62cf7eedf1e3a2d85ef59a05646439fbf63f0464c0c68280000000000c800000000000000170100001ffe00001daa3316fadd21f5398bc518c37d2a480635905bd1c2eb7da810c13695e4a9df596280ffb2bf7c34736b3c98a4b73ba5bc0678d99368e2684c13bc1c8f3eb0447d15c81083ec6aacec6c4110d79762e4899b319cf3763fd7e1048e2e2ba71ac5c4466bdadebd09e71a07fdb2a3e3ea36a1d8f36e409e23d5f0ef387766e281c01161aee0d6fc92c816cef20db42ad42838b49a44b6b7cdb0e8b48294656843757ef1203fcf4132102dd75ae0d10d6622ea437200000000006800000000000000254f89d206000000ca540c19f03ae8d3957fb635b45893904328b1d1a5ffd83bdefee509dedc6b1036d7be6450e6267d940c97a7a28e929365a4c35b63341d92653f24d602d0e7e303b000f4d9f776414a55c77785aa1252d630173e5d15fb79080100000000000011010000ff070000d4e1649587f762d5d42ba36c9c72d13f501105f30f0f076b18180563039c124842cd4f48e25811313d569bb2a21d8afc39b840f1de1ddfbd56e617dd98ee8cd8be6d528c4b8f07ffa4fbc0c7d044245db3acafe89dd0e7b8317d429e357602071604d32c29254f912f761cc2bd2b10b2fb16f5aeeed470409066af27c3794187586d5f8683261a6a41b7934eef2bbda405316b7240dc2421e53b467e5916c02d19e894e585be95ca317f9c92aa68932b7b23f1b1922cf8b9bdc21d58bba49325c36085a8a7933d477af88189365a518527bf3a6031de0059dda54c7059ccd6b2b95181c7c6909102de501d129bb435c9a45d18bd00000000"], 0x1420}, 0x800) 19:35:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:19 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 257.572416] Y­4`Ò˜: renamed from lo 19:35:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x88) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x10) getsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000100), &(0x7f0000000240)=0x4) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)="eae058627c77c839e73614749de2854a2cebc731e77a095a25c375f8629123fc60d856c9085e735cc4ac6d654c7a7c93d0b69976b22e3340d5ba749618a58671f8611362e75b25cff11e13e63c6fb36f2c13bc4be5f075efd78ffb3cbbca29b28c0abbf59b8e157f59007df81f2c10a38e0945144107017cbfaa43d72a787a94db7b68c0b9ce4ea50ba4faa4ce1d7b46557159afe20455b387e947b512e88c800f05d36569d8c9c88a3e0b9fa7eb6d67d38e0ac1f641104cbafd9e93f1", 0xbd, 0xfffffffffffffffc) keyctl$invalidate(0x15, r2) 19:35:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) lseek(r0, 0x0, 0x2) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:19 executing program 3: perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:19 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x480, 0x0) r1 = gettid() fcntl$setown(r0, 0x8, r1) ioctl$TIOCCBRK(r0, 0x5428) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)={[{0x0, 'rdma'}, {0x2f, 'rdma'}, {0x2f, 'memory'}, {0x2f, 'pids'}, {0x2f, 'pids'}, {0x2b, 'rdma'}, {0x2b, 'cpu'}]}, 0x2b) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000080)=0x800) mknod(&(0x7f0000000000)='./file0\x00', 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)="1eacdc619fac25bc3aa19336bf74117d0b137a806665a31cebb3a811b00e2a57a808350afc6ffa54916dd40fdc815fbd9612d664d2570a9d0a4135e00cf1a67523f47aacc39d3b9722d8ade012fe590563dd10", 0x53, r2}, 0x68) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0x3, 0x2]) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000000004, 0x10001c, r2, 0x40000000000000) ioctl$FICLONE(r2, 0x40049409, r0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={r2, 0x0, 0x6, 0xebd72d5, 0x1}) 19:35:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:19 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x1000600) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) 19:35:19 executing program 3: perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:19 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x200000d6, 0xffffffffffffffc0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) 19:35:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="799bee7531ce041f087da182bc2df5093f2696124edab23e529f1e830a83c4183bce3f0ac9cb8654f32685ecfe99c430bcb9db2a7bb77a099ebdd2fd0a8b9074499199ebe24069c25591", 0x4a}, {&(0x7f0000000080)="762b0daf77b0", 0x6}, {&(0x7f00000000c0)="ea8d862bc51026eca3b8802b949a96e7e817ed0f2e48ae21cefec008579b6364ba46a3b142cd6c09ab96940d2266e716c5c0d77527fb4656204cb6140bac14ea4e6bdf4727fd7ef9e5d5e42a1316c7c033eb1a7eab0bae62934356b5", 0x5c}], 0x3, 0xd) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000280)) fstat(r0, &(0x7f00000001c0)) 19:35:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) write$binfmt_elf32(r1, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x6, 0x0, 0x3, 0xfffffffffffffff9, 0x2, 0x3f, 0x7, 0x2dc, 0x38, 0x6e, 0x1f, 0x5, 0x20, 0x2, 0x1, 0x4, 0x4}, [{0x7, 0x5, 0x6, 0x3, 0x7, 0xfffffffffffffff9, 0xffffffffffffffc0, 0x9}], "59d77cb71a25ee9038007de4c4c4633f75ddf0c04fb9de45eb528dec67628a3e06a7345d02d9a5c91649792c3c01d319a7b38e7c883c55fcadb39115cafc5246dd423de5be8e14c4eaaed3f249fa824d08723b6a278b2f54e52e70b3e0adc61396e5ca6d7893454b2cd5d7c2eaeddbcf5d4e4ad5c8a3", [[], [], [], [], [], [], [], [], [], []]}, 0xace) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}, {0x20, 'cpusetvboxnet1puserem0'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '-'}, {}], 0xa, "ac56cef6c145338d8454db380f77f0957e66934575a5e1f6af122cc2a51845083a36c77afbd5b86e4e6f19e3f8c64f4336668df841f2467ea25c9ba3195189bcd4c2181e4ac8a1f98cdf263ef53c1c9baaa87189d02a8e5cc1aaf07432b942fcba6122dcdc7ad5ed5b06101d26f43ecd13503a6af5b6a52e18b4589782c870801b561e6630a8ee65479d2b4a5d7bcec279a2a9881acc71306eaf30d98e32fbe077e4aaeafd49d2359cf2aedd1e408c66d043441b6d34f38808"}, 0x116) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) sync() chroot(&(0x7f0000000000)='./file0\x00') ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 258.317521] binder: 6380:6384 ioctl 400454d4 20000080 returned -22 [ 258.356077] binder: 6380:6400 ioctl 400454d4 20000080 returned -22 19:35:20 executing program 3: perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000040)=@buf) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) fcntl$setflags(r0, 0x2, 0x1) 19:35:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_pts(0xffffffffffffff9c, 0x2c00) fdatasync(r1) ioctl$TIOCNOTTY(r1, 0x5422) ftruncate(r0, 0x9) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x308, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 19:35:20 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_GET_SECUREBITS(0x1b) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x424002, 0x0) 19:35:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:20 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") signalfd4(r0, &(0x7f0000000000)={0x53}, 0x8, 0x800) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x6abf, 0x20, 0x100000000, 0x4}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) keyctl$session_to_parent(0x12) r1 = epoll_create1(0x0) flock(r1, 0x2) flock(0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{&(0x7f0000000200)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000006c0)=""/136, 0x88}, {&(0x7f0000001000)=""/54, 0xc}, {0x0}, {&(0x7f0000000840)=""/158, 0xffffffffffffff29}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r4, &(0x7f00000000c0), 0x200000000000014c) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rename(0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x24000800) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x1}, {r0, 0x200}, {r0, 0xeb82d20619db3196}, {r0, 0x200}, {r0, 0x2}, {r0, 0x8013}, {r0, 0x420}, {r5, 0x4001}, {r0, 0x1532}], 0x9, &(0x7f0000000180)={r6, r7+10000000}, &(0x7f00000001c0)={0x10000}, 0x8) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) 19:35:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) r2 = dup2(r0, r0) write$P9_RLOPEN(r2, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x0, 0x1, 0x8}, 0x8}}, 0x18) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x800, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) write$9p(r1, &(0x7f0000000080)="511e7a60d6c01a5c687d62e6ddd357a8d07dfb1b9ca021295f83aadd20a452dd84a5028e88482b19ee2ad1abe5a5a879fc4ea52e0178b0e1d60f0ea1fde24fd77f8e261b339f40faef6a315b601d6e99307034faafe6c5aff7bd70aa221c9b259cc4e3473549b9023b2ec31d6f8eebc687a84a03980590aaf1bf21a83b208a6ea9365fb3cf657ea3a532b572246cddd98fb018d577f978ae9259ca91f99995069564", 0xa2) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xfffffffffffffbff) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000000)) 19:35:20 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) [ 258.880764] binder: 6456:6462 ioctl c028660f 20000000 returned -22 19:35:20 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, 0x0, 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r0, 0x111}], 0x1, 0x3) r1 = dup2(r0, r0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hwdata_t:s0\x00', 0x1e) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000080)) 19:35:20 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl(r0, 0x10000, &(0x7f0000000080)="da0e4d5663db866c2e86b729d9e9da8a21f9769de41c86ac5ea8631d14f0550f2d2d7e3eb6d3f2ca5b11efd37517bd352fc3e5c9bc392b027bdea5544b9880a5b02383828f1c756ba27ce2c44c242b17f554f56aafba2c8d98c802068e5fbe843a55f64fe38288f124a5612830c9572bebdd70a71c4bbf2ade0a545866f6986c99d3335b12f375a1c810de88831928799b") 19:35:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40002, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x54a6}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) 19:35:23 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'ifb0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0x6, &(0x7f0000000200)=@raw=[@map={0x18, 0x3, 0x1, 0x0, r1}, @alu={0x7, 0x2, 0xb, 0x3, 0xb, 0x38, 0xffffffffffffffff}, @alu={0x4, 0x4, 0x9, 0x3, 0x4, 0x80, 0x4}, @jmp={0x5, 0xffff, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x12}], &(0x7f0000000240)='syzkaller\x00', 0x400, 0x10, &(0x7f0000000280)=""/16, 0x40f00, 0x1, [], r2, 0xf}, 0x48) ioctl$TUNSETLINK(r1, 0x400454cd, 0x313) getsockname(r1, &(0x7f00000002c0)=@l2, &(0x7f0000000340)=0x80) r3 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="0bbbbfd5c16919a9214f6fbb2f9b639b43d2207d8fea6ad18c2692766d01ea6698947ff471ea6b4a31e60ac5e873a2e6290cbcec3a7d3a85e4ea1406dedeb4d7d73c1114693e27be35ee408fc0e47dd5e51f7ea842ae7144f5ae75724f58027f00c64277aaf995bfb38aafcc9192c004eb08b8db6098f5d06583780664df10e150a8bcd8845710ba8474c9d3b223ee9c4c9fe051a9aabf8a20a6311a69fd241145892787866bf6ba452bedf51755d2ffd0d22312f02c884731db13a689", 0xbd, 0x0) r4 = geteuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$chown(0x4, r3, r4, r5) 19:35:23 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, 0x0, 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) r2 = dup2(r0, r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r2, &(0x7f0000000280)="075e049a34d98d72d97cf7bfedca8f40f007c9806fc82bd2539f17d7b93384f93e9f46fb8db02c0a1497fb73999a80a1c659fa30b40869851d3538fce459dbda0e2f3b5f711098daf5faf02b8ca85fe1c459ddf7a7c293dd636b2cc7737ebdb0e60f4051b655c97dd18cf17cb78a512dd314aa2681cdd975eb530bacd4fc7eab9abb9b22ce20f0f2fe12494ce6f5afc4e5a978752229abf4dda320baf6121db01bdb9a52b5f341d7936385972fadc45b215016ca746441185614a93f1d873033b9d6778ce3bf05c411f9f6cebc0b7e43375c86186b2acd892e72cd71"}, 0x10) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x6) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 19:35:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af50e1687a3373188a070e3f501006a7de4551be400d57706f95482fa087437b1f30052c2b30daec07a3607a42e81ff457b7fe9002f10273b42e2fe681cd2e2d6f3617e9636234330b9e0c9d7d60ddbe4f007d18f50a4bf965d06776cb3c3ad2af05a23a09d0136ba9dfea95db236d980bb9e6f9cc7984915c22f8928721ac2a9a711d26abb2e8c6a067f") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x8) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x88000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="03010000", @ANYRES16=r2, @ANYBLOB="000728bd7000ffdbdf250f0000001400060008000100800000000800010000100000480006000800010001000000080001000100000008000100f9da226f0400020008000100020000000800010001010000080001002000000008000100ffffffff08000100090000001c0006000400020008000100000100000800010009000000040002001c00060008000100040000000800010001b4a162080001000300000014000900080002000000000008000200060000002c00090008000200020000000800020001000100080001000700000008000100070000000800020000000000"], 0xe8}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000000) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$KDENABIO(r3, 0x4b36) write$P9_RWSTAT(r3, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000180)=0x11a) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 19:35:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0xfffffffffffffffe) 19:35:23 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 262.078238] binder: 6556:6560 ioctl 40086602 20000000 returned -22 19:35:24 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, 0x0, 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000180)=0x8001) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, &(0x7f0000000380)=""/181) ptrace$getenv(0x4201, r2, 0x3f, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000040)='timers\x00') getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_netfilter(r4, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400000302000327bd7000ffdbdf25070000098801040008005900", @ANYRES32=r4, @ANYBLOB="e635980f0b74274bf22aafa77cfc9a9cc79fe0d37db236db77453e4c349ad530d6f458eaee8145bc8d8d47515a337508d577674d6f5a53b2c239f30a1c4fe5a4fa63e7d4981e0acf77324374bc8ef1328e5b93c64ebbae1fc77d56eac0f4acd9bb630a681d90b83074e72b523f2ab26b0801a96e929ed9774ff953bcfce24e06c5f766b75c1220c3351cda58208e8de42335369017c2371942758df99f62ce679c831b0b1cb7f475cf83ef29214543175d0d126ce00ca608000600e000000114002a00fe88000000000000000000000000000174002b001a57b1981828136601e26e9bcaadf670bae6b032884ba634b8f306cdc6f35794d5788c94f4f83cb35393742e6fc746a10b7a5eb54805920b3dfa2acc06f7030319d171f071a12b7b3654bbf5faab928c87f523c6d2a7b4472c6c7051847ab5df12ccaae01cf2dd804d1ae62efed21a0008000000", @ANYRES32=r5, @ANYBLOB="bd47870ccca5e3aaeac75115e8c60719ed6581cb63734327e4d1e22ee704bd2aee83681481c876805ff10c00348f008800", @ANYRES32=r1, @ANYBLOB="d55026bc02a8a5577c23091f1c463fda1e660baf9668402e920dc7bbdf0fadf89361641b4f0a14bc1d7746877a2ab7853cb1405fe1056138b1260d62273f92a90e1e4ccbe468a6558ca6deee58a2c8d20260ac0607c3b9e034b33d6dbbd1f71663df67f64b3b331dcb231dbc99556bfa2f9ca96818d685db5f31b2606612d95d7ab8ae9654c1c0b5b98728d3842f20538a95d6eec203128647aaf85b00001da14f29e76034b5f201cfc7f0d1a4bb8198473b7eb4ae9193affb5db6f8c6763221f7d1aa08f0acc64c5f0754e535ae31a0a2ba4a8fd967001aec7f622f9f844219badc26598be7b359e72148b8b6c7050ec4110d00841352cbae154c4a8ac50357247ad2b30e13e065095630ead4f797a6d575271defae6cbd3f82ff90bbfc2b755bcd81d7756454a68227506ce56cddab042baaaf60489cffe959a156935bd814f575feab5a9dc6c513c29b6858d077d1eaf54b65b434b30e0756bb65f3b267a397e94b9b94a3e00d7387856603bf8fc834f6eb242419abb1039cdaf05341874ba0ccb717abf1868e1faf79c25c8a62b0f8e2ba3562a89f31c98ee2c8d0d9799e3eced38c9411998cdd3af3a9e362c94b0370c99dda47bcaed85d9aa6fe61cfca3767a3c2224d90dfeaa0029c3e53d4552a1bb7dd6379cd0f2b9b13531ddf2db829424b9261c366d5c354585d0171ded0aa837f0e2fc17570a9a027f82c0f91f95d35a336038314def1c2b63c328884071d73be6ec692c69eb8f7a09d7b50c03d7932d77474d72ce8815b1f706f9c409f63055c6911d070abb8806735532c641cf7b471489284b68d7d99f5d2782b457aaa6e30eeed82166a40c0d4f481f1063c8b3fd39bbebe9dbefb9486bf2e5e77f8f89327054428c29199222036d64faf20a3a961caeb10e4a23c28056895aec80c4ac1b910d25a03182018e931419e5085820864094c37d1529ba908005200", @ANYRES32=r3, @ANYBLOB="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"], 0x1458}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) 19:35:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000038c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000003900)=0xde, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@remote, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, r4, r5) 19:35:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000040)={'security\x00', 0x10, "5279c058198543684c2bf23b1ef2687a"}, &(0x7f0000000080)=0x34) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) clone(0x1000400, &(0x7f00000001c0)="45a8811b4d7ac49c0fd78e6d741ca6f5be7b3cf31f19f3ec23f9eaecad024263075b74bad8eddd7885012f50f2bc22dc09824de82d5646c1a52c5f3c210e4c4cc04a236e679b7ec0f04f0b7fe01685e6bb11c687eedb7fea93bc6c020afed4813735280b9ee09abd92", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="b5eea5480f6101d77449c3204e576ae0c6a69c8ce5c3f96297c680b95a382d7588f9201f070ff4b2dc3bca4ceae8b8c75ab7aeb23ef9693c4679e09d30a6704a883b0633cb0d4d") ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x280000, 0x20) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r1, 0x0, 0x2, &(0x7f0000000100)='%\x00', 0xffffffffffffffff}, 0x30) ptrace$pokeuser(0x6, r3, 0x80, 0xf1d1) 19:35:24 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) finit_module(r0, &(0x7f0000000000)='user-,usereth1\x00', 0x2) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7, &(0x7f0000000180)="7ff473136f37d09681a21130304c95e1fc76836ea7045e4062648b92bb31f42a61d7a474de798e7154e1e91cfc011db1e436867009822098765000f99c81157b5b4088a108d12015371e6f0ff072c700000000000000000000000000") ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x2) syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) 19:35:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x20000000000002b4, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sync_file_range(r0, 0x400, 0x3, 0x1) 19:35:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/checkreqprot\x00', 0x40000, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000780)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='schedstat\x00') ioctl$KIOCSOUND(r3, 0x4b2f, 0x7) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)=0x0) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000800)={0x2, &(0x7f00000007c0)=[{}, {}]}) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x7, 0x2, 0x6, 0x6, 0x0, 0x171, 0x400, 0x6, 0x4, 0xf2f, 0xfff, 0x4, 0xff, 0x3ff, 0x200, 0x0, 0x9, 0x200, 0x6, 0x6, 0x0, 0x3, 0x8, 0x9, 0x0, 0x6, 0x0, 0x800, 0x1, 0xff, 0x1ff, 0x100000000, 0x7, 0x81, 0x3, 0x80000001, 0x0, 0x3, 0x4, @perf_config_ext={0x1ff, 0x5}, 0x4000, 0x0, 0x200, 0x8, 0x4, 0x3, 0x9}, r4, 0x5, 0xffffffffffffff9c, 0x2) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000700)={0x2}) r5 = getuid() syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000200)="d42e9e09028cb8f695080da87193fbfb1890e6ea19518ed3d0fb8ac84fca5582f5ab064d9db5b8572f6d7732ec527811f49d2ebbdc6bbaf2f6b7c3851ccb308eb73dcaee5dd1d8e9930aa6281c319ed468c54da57b49ec47dcbc19b6fa17c76165d1e58a9c5c38c1d7e70581037d990cadc082142cd473b879207cbb1bca0298a72b0a6fe931a8fc712119fdf7704bc4ea5bfa507605ac7d2380d04bf602fcf2a8ec41fb767f55c9b6592ca759e7887c310ca3", 0xb3, 0x8773000000}, {&(0x7f00000002c0)="357b9de5896738f36896a42ce2bb0fd30eebb9faaca15d1a81503f3054fdc4b8cfea1363c7f1231b4dca66beb54b19c0e2979580041b5e91db53611d34b1c23c061bc9074739653941649e0e0cccacef68ae60269d50a0233b456dd595df0b7896a883af5dfde73cafa399", 0x6b, 0x1}, {&(0x7f0000000340)="02a67aff20527fb27f5efbd1c0ad98e2db7d3f1031d73681375b52b9c7635fcaf1ec9ac1ef56af0aac314244548408a12a92aee5620c0bc925ccf7d8ada7348d8be8c98bec0e4b425b3625b1d59f26dd6e934f5011b888680b50b826ba40f05b946834648de20c189a396a9b8b7b30935fc0ce15db0a5677165d809cb6d9add2b1f903", 0x83, 0x90}, {&(0x7f0000000400)="93a8f7741880f2be3a9f9fd32eb31b3f529eb57acec56405f07105364a88d19cb6a62dc850837dc34a7d775bea79a263813e18c51a5f869144be54d7716a10ac0ce6f5ad1e44f99c4af83886e7a206708084e81009f9037af058bf3e5f81e86e76cfcb9464d89809fbd0fccc05a1172d167e3c58b284a67007aed5916d5d81a11ae13eb9efcbbfed32f8622f96dccab69e33cc934e931c6772e55dca", 0x9c, 0x2}, {&(0x7f00000008c0)="fed4f47852b8855ebdb21dc53d406c14ef8b43e33db83207959275974d5aa2523bdb289e81e31b7bc37447889ec2c93c55984aff094207704bee271be9b5727dba4af13a0d4d21ecb241b76b0870f4407d39da09bb5db8c7702d107547fd1caa935c4e563c1bb49664647f3ebda94168798844546677b4bf1b8e4a7e1dd8facac0e9b7f60c0162921e3441f81c61a0012719c6882a406dfd48a6e07b9f552a2b59c191dedc5afa18807fca5299293ef29861437588afd4d46864a5fba6dcb5ff85f692613c6d59ee636a413df74185ba858f1179f5237d203bfd5a9fdce6e6684fbb7975ca8c54793b4f23a89b62fc79d439f3e71e7f0e4bc34cca8e8cf2a54e969b95cc82a0b34afbd8617d9850d44af22471441976f4cacc9348fdd0b6d715989ee841cb7967d5a191dcbd4a223c2654e15528bed363cdfa216f18494b5aab17d3d85b30e07888a8a641e0e24c143d6fa7e4b32963fd2c99e483fcbf8d79956a0fe8c06bc76881ed3c25e822ef31a9367c25d9424a67f6f29a8a30135ccf1ed70cd795651fff1cca6b4771395ec8565e281e1b84ee0e7a2d589edd8497913461e8e7dc643597e513a5277c327903fcdc52c4ebbc8bb8dd9340a367e54120b20a185402b0284ea7021c7fe54d45912fce4a5a9852ad738f39ec3cdef39d6f4d0b090cd4c4739bd80bb49fbd201affab83af420aba88e02ceaa560d0b58157aa971933903116b8953366523b0e10dab657909e0fbddb5ff1a97dc1d0f4681b69afcbbd7a40e972c0cf6daa76144ff22fc71d4459487a4ef843fe127ed82c61f51520a1435ab6369264d7eb26b77c18eefaabef3fcd153e43de5992a14d7ede1211631f376caec2badfb6a9c13c2ca26821aef326789ecffe1362d37243c5416c855f1aa7bc5dc52b6b392228f3dc9825b7210be1d86d8f4b0bf2873026abdb83a04f622b69a5dbc0bce4c3a64e78d70e6e3cf2a23a1cfc0713231b6f7a4e2397582ba8000771221c42137e601027aa9a3b4f6dba7965e86a364c9a9dbd480f51198641669ab43f91c47be4583f949f9766d29237153270e37feb2f3f134a45586c148e1f65b4a060abb5f7fafaf474f00cdb8ebc3f05ea20fad862f918c41060aceaf2da7d17c9c35ceabab8117923a1f8c045b29ebd0aaebd2a0c875dfab842eb41930ee59df38a4866a6ade0d5a5352f0907bfc26902f9df2e6578195dcbaf898f7772df805f3a1b40d72bf221c9d13782a739ad60788e4d27b4797714413a0609efbe9fe074708ff0201e957feb964eda87d97b202bbf4cdb526b734d88b0f88f7c3cc151f538f24cd36a7d3be84a2a84038b8f66d174a440e08233c70e421e57fc5d6aa29eea43380c3e5eacf859137d04ea4a6e6714b6cc4392bddf4681a612e4d3da7982b3d67ebed3fb859e6d7a37a2c555a82f6dea625869f0d0c9017f4eaff66cac178489a66862b8174722aa31ff4aab1d9234a14e1cdd3b1ba77f0960dd3fe48eaded3d79bdaf3ea9f4deaa06824487f0a603af99c8ae5680c72eaa05950926399615625de82da25ca53bf12d4b4d96c6c9de30a9375c2f377f3d4e629938d67afe3560326a7389f413223f289f354d3f7209b7dd10cb930e8b789cf4fde822202148fcf89dc8c86a4308584b633839eed9b76fa26ff84af67401b6ef1ee28fb1b28f9638010ae78c3c825be7cf49520094d49284ee20e85b4dfaae4abb6f3a5121b02b4e011daed5302ff1117d74fc3aa1b24c17aa4f03a0187db92d25c148109ad34ed8f4376f5604fda3b2f3bc406ac48da55daee47fd7083ebddd630b6b3168eb51ad09a6e1c8de373d71f1e91369b32aa8a415e2b0dbae9f4d533206bbcd3ad54720af2c04e5b5e2ce761b56a4ccf8e43ad7177bf84dfb0d65eb6d1cf8c7826b7e94f20742f6182e013c3daa3c971d1501929dfc78e8b41250804db1023727759328a33150a3288b18dd1fd93ec19bf80ec22b82379954c00d31021d4c1703cff372962145b6af8339e2a79ca52dcedf720880fac280ac2f49eb5949d62c78221e15504fcef02ca30bbdaee04b91ab92befbb01a67b23bc612d35aafcab23ab01469b0e042b22d857d568369cfb2df6fd8dfc77831f0103639e1d01d5471ab31a36c353fceef3667584007a0e173cfe6aea0436885f706fc8d1fefb50d36a2b6d979c72b1f682233c2c069f2723ca60d2b322f3c6ef00bfc8f39cf5c8bb153f762b4e2748ea935c21d523e7d7523e2f0a28bb36c0c4a675bf4b349f5cf267fce62f8ab120096bb754407b1c3c428346ccdd6fee2d80bf7977cb032a956531ba6bc69f45513bf0b5f444fcaf8ce946bc8c4b005df4cf72231ecf61d0468ecaed872cc726a2c2b78fec78f768a0ef31ab368bc20eda20ce55989ceebcdd63c43313c5b36235668bc9e5d9538f00fa00ba8cb56727f874d2e7a06a4f6845b4ac70bc5286f3a0e7bd57aeeb208a7ee3cbbf28d243443eecd2aca797b3ea689f1fadc6775a890e375f868819c19090b2e291ad31265803643f1ed56762296529403661fb0aa2bf4c17a62e45c6941b5a20a343bc799b0876d62d07d7e2fa34393edd15c2d4fde129e1ffc0e0caecc962d64a00e0d04e614a727eff04214878d0ff630c997c222c211480a0ee86f8a5f94b4252c11dd2bea09d47853a8121cf42d13861ad67de0aab74335096d9946130a7ec44bd24ca531c25e58b2765685c5096ab2e974dc0ac501daf1a8074dc1d061d1e9b089476ab82739ddea34ab6f52915e98475ac462e3ba3ae696c6792764f35144c3d957ae0b0b7b0c1eaa463b2736159ed06f87c223afd94758257e3545f642d6cdf0aba7d3633ce2acf1cf55bef20caf6423457afa9e5163ac2117e4d358d06de5e8706b108fa44254dbe6f036835048302362337162e6fcab04576e28fd27c161d0cb12de30878d363f0c34f4f0521e9eeca8dc62b4f2e02600e7ff552302c6b123a581cf23d558ddde2a033d415e070c444dd2d64b0e7f2ff7e3f5fb5cf6a5d10dff471ac90ed62afe9e7dc0024b8d9ef33cfc930c3d9739bc9a85599a3b3fb94a13ecd0b5b4d36ed8ca25f76601e0792e46da4e67847cabf1f3cca9a8f90c3e9ce0e8552c5dcfa4f1fd1de8503033e25c9c4800739d7ee59cf7709787fd2b6f453d9c6edb52b797c96fd07b809a0eaeb82f6b6e166abf5ce8a215cf93ffda4ed64fd4ba45e1c53d752ae621f4cfb5a2405bd7d24c610372237bdd48d8a5746b8410e886dff7da3298eeee2017890dc81b0bc6d3cd2d01d88ccbf590412c1c9ea2a3e9819fddeda1a189b3b8f008ecead10ada8eb4aa763f3fe6fa71afe2e042d32f97aa8d7e6c5b65a770f050ff6a3c5ab488f7c78c57f5f7e73531665b311972c58415c83864f6528d358afec315567b39f409952cf2339340541fca37865538a4c369f6dcba15695fdd18476c976c0828268befb2c2e01ca460525b0710ee7d155a81765674bebf7880dba0d8c3a301bfa3fa9e366cb7147c5cb19c765c44bf878752d5ecf126f7b8ec9eab0e1802ed25e754b2105b25300f83daf945e6e0fa5d602dcc6f1d35b36e681e3a46e84e2be114d6943689cd8a37fa48f2de7f3feaaa13ff0c2a4c381e92ce6ea671edcf30e6f4a3c1c68da0abc053e1725b4de720ca16d24fd94cac1fc7f32ba6dffd8c2665c6995be6361320d7cfa9fbc6d6dd9578de3dca9657670f94a5ed7d5f4603884d2a35fbf12b8d73497ac9c1bee452acc5c5189c0ae032dbe71db981ae8b557ca536e6fcc5e3694ec1b633b1bf24e5218e1724912262323fc7344472e8d572fe1507785cd603bbfc68b5011b0d1ebb128af84960488fa00a1fe2a2b06313553c50eca690f6856ba2b573ddd245a9d0a348d96c0874606a55913c5efd2a145081bc1b938f6c25adc07c1287d9eac76215d9f69d08857e34ef5606eadbdabe1526d5acc7b1481b0e297f1810184684852f1436403363da7bcaa8204b7826c0dbdc32aa869d8a0fe92f8e29556cd2e0330ccd55d0f6785d56107c3bd47c800a05168b382d3c0e36354e3597862b802ed3dbfa1f0c7b2124ab3d07f8c479b06816386d4a2a9fcd087ae3ecdd7e92f1cbca1470d3092dd624c37c61699152ce86005d739992469ee36dfed0775fe59e4d2ef86627d5c4e96685f30179a73b9daaf5f0fb1ccbcf0762a1183a38e427522ba8a295bf94f6c83269626d590500854978709b81c0d6b83d87883f5048fde27d851ac066b4def5ecd8f9d84071a0e79c250998526f99fba8f3aaaab1069684804df4452512704a818e0d9e9559f47156cf8b3c65e550cb659bd94fa962f1ecc83b2a8157221d2607da86aa5ab8e8dcea8545d20ed576a01beef7275abcc1d46b8063638480728eb007a11c2dd46384d5ce59f42107e0529d8e66945634196360056377b9049d5944e9a4b654d1cd14ce59b4efd0b44204eeafe3384feba2f8f052c14b6d5755ec05260db15b83ef80c0fbb1091495d0bb77cf83d043dbed9fb5a7ca7445e86c924a0234f2fc1d3fe32a7393beff82bcfafd875cc3ab756d127a406ece39e762276f7136bd27b6436d56b3f5cdcabb862256a5b2dd361ac3e5d8f63e35b31dcab6ea196ea6f9d2f78937f92b51a66279c25e3a99b00bf131c5cdbdb421bde391fb2de7bbdfee23ef6bf77e62fbbd82e874057ef7c29fb066132d695a8386c52edf6c70babbf25ac60541058b1627e718a391a990f9872cfe92ac8dce1e3f1649d60a7180338657e7d624ed3c7ef614ec983c7084b3a406bf2ae7eaa84f922a8d5f868ce56c7e320fd77887da0f3e6b4db8676e68bcc76d185199fd6deb3004181d7fb9570383c71263d4cc856cd20be165d535b53706c856d0b3ccc907d90a0d2d12884bbea5bf5cf8a4cc3302a282f6a2c89837cc79279e6db6066eb3ca7ba3e0a63a8e55872425d629b3adb8f9d8b56ba2525e133bbaa70e386b24c9d6f891aae5d3061c6f89e84ae53669d7c7fabbad23e9eae605df7044b7305f53276b4ce048523c1357478fdbbbbdb9d0ed8cebf39d4522f4c315761a1399132290b44b1bdd68ec50c8a035b08b9d04dc435c7e6b66f4b00b04ef3c438b5cc5f1cb06dc057c8b81d06a28149ab8b625208dd811f2cab51b323a1cdb672419326290675e6e26490f190d987816fa72270d35e2f5f2fb60dc8ecf6f1ed813a20831325c915593ee18c374af4902d7ded07cc0a6a4330c77e0b1c0459c7de4372f0aec459a916c7652e20c6a4c2b9e0dc1ea0eba5cabbc781ca2f3be23bcfd0843ec073fdb3b8b6c4f8b9e463b6cc76bf53f670d7f928f8972dd412a1d1629eafe1b0f4fc4ba92af04b9972b3a680aea74385ea7b3097a68a449f85d289ef2afaaafbf348d06b058dce60345c29bb84bef5fd6e3654967a515e788c4590a1b298cf2b84fb45b65d30349aa0683cccd0966dedd16d6a2c09045236b8c860ea6cad2b8f90e126985d59ba9ddfc79743db6ae6c5444c93b40153b8cc29ceee2576cd7e2041fd33ed9869509552a87d2e68615f0e479db64ed1d0baeca73aba67f54f5add363c26163b61ccee8957460dd9eb930194b0022ff23e79ff07342f590a5fd0f920a7dafa48dab6608a71bc06a21b6261ed8ddd602f12af6e9cb943316465c53149b1ae338a1e49bd402969b44d817825754f843a9f42816f8b698d56a355725437f2bff4be68df6a5538ef1e2ae56d126f1b499f047e70b81edfbee35d3f14e426cd4c591c62749095455cd6a25b24d31b6d6559ee725550ea2b278a126feb9da7ac40b84", 0x1000, 0x11b608aa}, {&(0x7f00000004c0)="cb6dbb56aec3e63f045215bc37f2d23dd76fc0bb75c7acb5ad54d76b4410a19ab2b5bb36526fbba1884e4031a49c0ad5d7a025118d7c2992d35277aaa0113dc56ff0137184fc7b581fcb449b6cf9a8a5a43094b9ccda6ed34f002437438430390a51cf285513c120be25d9ffbda2908436f5517cad80f452c8040dfaacb5c68be8a3fc4765", 0x85, 0x7}, {&(0x7f0000000580)="da9d83478d7c47031f110b378f62e18fa63e549135098e1643152fb40bf3daa93e4d094adfe8a98b31c1b79dc641b96fb43ab118cce7b337772b984e3b41d1", 0x3f, 0x2}], 0x840001, &(0x7f0000000680)={[{@shortname_mixed='shortname=mixed'}], [{@uid_gt={'uid>', r5}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_user={'subj_user', 0x3d, 'eth0-'}}, {@obj_user={'obj_user', 0x3d, '/dev/binder#\x00'}}]}) 19:35:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$void(r0, 0x5450) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffe) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 19:35:24 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240), 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x3) poll(&(0x7f0000000140), 0x0, 0x5) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000000c0)=0x80) setsockopt(r1, 0x45, 0x1, &(0x7f0000000100)="76358c159e7ef5a8ebb9ecd186fc1920d60b03678ffcf4df6a44045c46fbb26b", 0x20) 19:35:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:24 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x3) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) faccessat(r2, &(0x7f0000000200)='./file0\x00', 0x10, 0x200) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000180)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0x10) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x53, 0xf0d3, 0x43, {0x81, 0x12}, {0x20}, @const={0x3, {0xfffffffffffffffe, 0x1, 0x9}}}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xfff) 19:35:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/124) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = dup2(r0, r0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) 19:35:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) 19:35:24 executing program 2: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) read(r0, &(0x7f0000000500)=""/112, 0x64bed052775e3b72) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000180)) poll(&(0x7f0000000140)=[{r1}], 0x173, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') accept$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000340)={@mcast2, r3}, 0x14) openat(r0, &(0x7f0000000280)='./file1\x00', 0x8000, 0x400000000000040) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4028}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x44, r4, 0x300, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x89}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 19:35:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 262.924478] binder: 6650:6653 ioctl 80404532 20000000 returned -22 19:35:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000), 0x4) 19:35:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40002, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000280)=""/166) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') write$P9_RREADLINK(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="10f2ffff16020007002e2f66696c653054087232d4acccc76453206f6b2f8e70a8643d32b7ddb8673eda2de6a25578d23647cabfbcb518b037cb183be1470e520009aa09f47a69c4858082cb759d38ce85272b96b28b060fad3a0b65caf8f0d636f8a835482b9562a34ad599b042075027ac7523e79f05d81d7e7c8c07eee5ec7ab46927f5a79b7b35af392ebd436ccf1d9e3f78a5eb6da77a057dcd6af1bbcf026d1feca2c0da95b3a60b570d70bac87ea39c129884229e16c4588eaad5aad039d48d4df1b8218becb90a1cd48e32831c07d5cc6c639856fe3b9a56438baa3b5b7810300ab6e46a66b22f56789ba8f7"], 0x10) [ 262.988082] binder: 6650:6653 ioctl 40045567 2 returned -22 [ 262.995777] binder: 6650:6653 ioctl 80404532 20000000 returned -22 [ 263.010427] binder: 6650:6672 ioctl 40045567 2 returned -22 19:35:24 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240), 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20840) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0xd, 0x7fffffff, 0x5}) 19:35:24 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:24 executing program 5: openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xcc, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x40, 0x38, &(0x7f0000000040)=[@fda={0x66646185, 0x5, 0x4, 0x18}, @fda={0x66646185, 0x0, 0x2, 0x16}], &(0x7f0000000080)=[0x30, 0x20, 0x38, 0x0, 0x0, 0x38, 0x28]}, 0x2}}, @clear_death={0x400c630f, 0x3, 0x4}, @reply_sg={0x40486312, {{0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x30, 0x48, &(0x7f0000000100)=[@flat={0x73682a85, 0xb, r1}, @flat={0x73622a85, 0xb, r2, 0x4}], &(0x7f0000000180)=[0x78, 0x20, 0x30, 0x68, 0x0, 0x40, 0x40, 0x58, 0x30]}, 0x88}}, @clear_death={0x400c630f, 0x1, 0x3}, @dead_binder_done={0x40086310, 0x1}, @increfs={0x40046304, 0x1}], 0x37, 0x0, &(0x7f0000000300)="597bf3876e04c3b8f6cb726c32b8b2f561448ed662ed1026276edd9396f161fb8cc0bda28556a29c6c50d270c64db8680d57274c83a758"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r0, 0x80001000000}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000400)={0x3f, 0x4}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r2 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xa8, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x2, 0x2}, @enter_looper, @register_looper, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000040)=[@flat={0x77682a85, 0x1, r2}, @fda={0x66646185, 0x2, 0x4, 0x2a}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f00000000c0)=[0x38]}}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000100)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000000180)=[0x48]}, 0x7f}}], 0xcd, 0x0, &(0x7f0000000280)="f484e3a9e85f8e726d9436cdb5db39158186b15f7685ed5c9990ddfca420ef6202d2d59b65e2efee464b37ab6e0bc6ec96e09a6b8672942b9e867a2b697fa498676afc3f825c444d3c3a6a7f4e89efefe5fd20f26d31bb9c59c90b79f973b08da5bcebc55ba193d0b6fca0b055caf72387199cbfa39e37d7cc3d24ee7a408ca7f690557dc0f31fc468eb9ec8f16541a33959b3abe59b28ebcca7667b80186f83ed491768db6f3343145f29920147422fc3c3b66b1312755e65758a2420d9288b6bc288c03f4b6628bd4c3b0ab1"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x139c) execveat(r3, &(0x7f0000000440)='./file0\x00', &(0x7f0000000580)=[&(0x7f0000000480)='md5sum/\x00', &(0x7f00000004c0)='/dev/binder#\x00', &(0x7f0000000500)='/dev/input/mice\x00', &(0x7f0000000540)='mime_type$locpuset\x00'], &(0x7f0000000800)=[&(0x7f00000005c0)='/dev/input/mice\x00', &(0x7f0000000600)='/dev/input/mice\x00', &(0x7f0000000640)='/dev/input/mice\x00', &(0x7f0000000680)='(trusted\x00', &(0x7f00000006c0)='trustedcgroup\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='/dev/binder#\x00', &(0x7f00000007c0)='&\x00'], 0xc00) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000003c0)) [ 263.138431] binder: 6695:6700 got reply transaction with no transaction stack [ 263.148997] binder: 6697:6702 ioctl 127f 20000400 returned -22 [ 263.149220] binder: 6697:6702 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 263.149228] binder: 6697:6702 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 263.149235] binder: 6697:6702 got reply transaction with no transaction stack [ 263.149243] binder: 6697:6702 transaction failed 29201/-71, size 80-8 line 2921 19:35:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:24 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0xe8, 0x0, 0x0, 0xe8, 0xe8, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, &(0x7f0000000040), {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0xe}, [0xff0000ff, 0x0, 0xff, 0xffffffff], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'ip6tnl0\x00', 'lapb0\x00', {0xff}, {}, 0x3c, 0x0, 0x2, 0x58}, 0x0, 0xc8, 0xe8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@remote, @ipv4={[], [], @local}, [0xffffffff, 0x0, 0xffffffff, 0xff000000], [0xffffffff, 0xffffff00, 0xff, 0xffffff00], 'veth1_to_bridge\x00', 'team0\x00', {0xff}, {0xff}, 0xbc, 0x5, 0x2, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4dd, 0x1f, 0x2, 0x7ff, 0x1, 0x6, 0x2, 0x8]}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 263.187134] binder: 6695:6700 transaction failed 29201/-71, size 64-56 line 2921 [ 263.208741] binder: 6697:6708 ioctl 127f 20000400 returned -22 19:35:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)=0x7) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 263.213780] binder: 6695:6700 got reply transaction with no transaction stack [ 263.213788] binder: 6695:6700 transaction failed 29201/-71, size 64-56 line 2921 [ 263.248491] binder: undelivered TRANSACTION_ERROR: 29201 19:35:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000080)={0x4, 0x321, 0x601, 0xcd5, 0x6, 0xa}) r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x400402, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)='\x00', 0x0) keyctl$clear(0x7, r3) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:24 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 263.250378] binder: 6697:6702 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 263.250385] binder: 6697:6702 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 19:35:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, 0xfffffffffffffffd) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200440, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440040000000d6300000e630c400300000000000000000000000c630000a12b97783abd860aff00000054c73751c7cfccbd4298048ed9d01b48e0487676671806fc2cf9f041805a615a8f43116b87c7919b7d47ae29af33e02b4c64502e6971f571b23dd81fff85c59c2b488fe2329674a7cb91b16d6615306f33f2ebf8c485a006d1d815c8033909a429294652240462cbb83684dc075c06224cbd951ccc78f7b7b012f9fd4f780ed73127e97a0b530e6a2f1ce73f51822a8ae8fe48c8f1c412cd74ca169f8575"], 0xc0, 0x0, &(0x7f0000000180)="d7f4c9c027a1edace8b231fd84323e7a0521c4fec0467c84665d105343cf1299d8813d30ed87256b961918c8c279c66ff84ec7ad4afa7f8d8171392f644d24f8973a5ac7c25746cfe6097b37e5a062f7b8e4a38b098d0377ce96f43400ca8031eff17598fffced2eb43630058fe6b08378d6206448903982b9f6493a89ca613b019990ac7f096e3425f3bae5c6289223c59a8145a2c341463736e74b9bbb9cef5f284124e9bdf01a14389cd97043cae6f5ba282d87bf12a073e6fbf4e3b9345a"}) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/87) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x40000, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000340)=0x80000) 19:35:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffe6d) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:25 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240), 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r1 = dup3(r0, r0, 0x80000) read$FUSE(r1, &(0x7f00000008c0), 0x1000) poll(&(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000000)=0x4) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 263.250393] binder: 6697:6702 got reply transaction with no transaction stack [ 263.250401] binder: 6697:6702 transaction failed 29201/-71, size 80-8 line 2921 [ 263.291884] binder: undelivered TRANSACTION_ERROR: 29201 19:35:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {r1, r2/1000+10000}}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000180)={0x3, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e22, @rand_addr=0x3fc0000}}}, 0x108) eventfd2(0x0, 0x800) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x1, 0x2e8, [0x0, 0x20000180, 0x200003d8, 0x20000408], 0x0, &(0x7f0000000040), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0xf6, 'bond_slave_1\x00', 'vlan0\x00', 'bond_slave_0\x00', 'vxcan1\x00', @dev={[], 0x11}, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @random="8505411b079c", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0xb0, 0xf8, 0x228, [@mark_m={'mark_m\x00', 0x18, {{0x5, 0x2, 0x2, 0x1}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x4, 0xffffffff, 0x81}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:audisp_remote_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x360) 19:35:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) getsockname(r0, &(0x7f0000000080)=@can={0x1d, 0x0}, &(0x7f0000000000)=0x80) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)=r2) prctl$PR_SET_FP_MODE(0x2d, 0x2) ioctl$void(r0, 0x5451) read(r1, &(0x7f0000000180)=""/137, 0x89) 19:35:25 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:25 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x78) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:35:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{r0}], 0x200000000000010f, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000080)=0x80, 0x800) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000004c0)={0x2}, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x29c, r2, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6f911823}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff30}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4e88}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5824}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x504b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x58}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x104, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x73}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe419}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x441}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf994}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x29c}}, 0x0) 19:35:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x9, r1, 0x0, 0x7) ptrace$cont(0x1f, r1, 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:25 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200141, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={[], 0x1, 0xc0, 0x4, 0xffffffff80000000, 0xffffffffffffffff, r1}) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x100) ioctl$void(r4, 0xc0045c78) fsetxattr$security_selinux(r4, &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:tty_device_t:s0\x00', 0x22, 0x2) fsetxattr(r2, &(0x7f0000000040)=@random={'system.', '/proc/self/net/pfkey\x00'}, &(0x7f0000000080)='/dev/binder#\x00', 0xd, 0x2) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000100)={0x5, 0xeb5a}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008952, &(0x7f0000000040)="0acaeddb9787cbf1d4a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x42, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x25f) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:25 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x30001) r2 = dup(r1) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000080)={0x3ff, 0xe5b8}) r3 = accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x80000) poll(&(0x7f0000000180)=[{r1}, {r0, 0x14}, {r1, 0x80}, {r0, 0x4}, {r0, 0x1280}, {r1}, {r0, 0x105}, {r3, 0xe0}], 0x2000000000000130, 0x861) r4 = getpid() ptrace$setregs(0xd, r4, 0x40, &(0x7f0000000000)="e738c1a92bc97cc242497d6e6890ce1391bb3d8f86f5febf0965dca62a71a8150f53ae2e595b7c5b7de6bbdb9210f6") ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 19:35:25 executing program 5: lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xffffff1d) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x10000, &(0x7f00000002c0)={[{@mode={'mode'}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0xff}}], [{@fsname={'fsname', 0x3d, '/dev/binder#\x00'}}, {@obj_type={'obj_type', 0x3d, 'wlan1:\\:^'}}, {@euid_gt={'euid>', r0}}, {@uid_eq={'uid', 0x3d, r2}}]}) r3 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r3}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 19:35:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x88000, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000080)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:25 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:28 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept4$inet6(r0, &(0x7f0000000040), &(0x7f0000000080)=0x1c, 0x80000) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:28 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = geteuid() sendmsg$nl_netfilter(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80040}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0xf, 0xb, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x7}, [@nested={0xc, 0x4b, [@typed={0x8, 0x25, @uid=r2}]}, @generic="fe5bd2184ad2a14a3d8f722c53c74dd01a467a2c71", @typed={0x8, 0x2c, @ipv4=@multicast1}, @typed={0x14, 0x58, @str='/dev/binder#\x00'}]}, 0x54}}, 0x4008000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x4) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 19:35:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") shutdown(r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) r2 = dup2(r1, r0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x5, 0x559, 0x1, 0x4}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:28 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) [ 266.602307] binder: 6853:6856 ioctl 5414 20000000 returned -22 19:35:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x100000400002) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) poll(&(0x7f0000000080)=[{r0, 0x18}, {r0, 0x2281}, {r0, 0x860a}, {r0, 0x40}, {r0, 0x104}], 0x2008, 0x80000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) fcntl$setsig(r0, 0xa, 0xc) 19:35:28 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0x3, 0x3, 0x9}) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) tkill(r2, 0x24) prctl$PR_SET_ENDIAN(0x14, 0x1) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x401, 0xe0a}, {0x4, 0x2}], r1}, 0x18, 0x1) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xc2, 0x4) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000080)={0x7, 0x5}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 266.653421] binder: 6853:6866 ioctl 5414 20000000 returned -22 19:35:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:28 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xd41) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) pipe2$9p(&(0x7f00000000c0), 0x4001) 19:35:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) 19:35:28 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r0, 0x8}, {r0, 0x2000}, {r0, 0x84}, {r0, 0x9010}, {r0, 0x102}, {r0, 0xa}, {r0, 0x10}], 0x7, 0x7) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000002c0)) r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000280)={0x16, 0x7, 0x2, {0xd, 'cpuacct.stat\x00'}}, 0x16) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000001c0)=0x5) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) write$eventfd(r1, &(0x7f0000000200)=0x36, 0x8) 19:35:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000080)=[{r0, 0x4200}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x102, 0x1, 0xffff, "bf144c256e70de54941ce88bb085aff4", "07cdd1ab750dd1f77e469fe437e6dbaa04852ecb9f1cb27355e7a5010d5a44234075dfc1bc6c11d40497cdc746e62dd29918687735cf79464ad2c600e7c9c59bbf60251150219d1733f7c467fccf7c4a420cd9191d6be4499dde3f9814772f466e3280575a3e154ffbc8347942983c77a743441e2bd2db4280aade4f75d68e29d5c5348c96a0aa17bcf3f54ce98d31ee70095f5bc377a6b92a0dafc391c24e0f947fe5f562e4b22a8b11706894efd52e5ea56da510178b5f3229f4de41fe3032e9af29ad6ebb8c3c8e23309f3f2877112eaf319cbc5706dd8fec77314ca024f17186ed4592f3927f82691334df"}, 0x102, 0x3) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) r2 = getpid() pipe2$9p(&(0x7f0000000100), 0x4000) setpgid(r1, r2) 19:35:28 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) getegid() ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = dup(r0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x16ac) 19:35:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_GET_TSC(0x19, &(0x7f0000000200)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x124) setsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f0000000100)="6299183d51e2a6a7df66caee76cae792194fd7a396082195a5ebb845559609697bd46fb64a188b6207e961b6d6ca7c92c5318d9763240874fc2af96d179a77734cb555868e1a83dce85f4940d77624176ab16260635469de8658d77a5115031ba049be4e5fd2016cc818e225f9a59f253967be62335c44e0747a8bdf25f88353ea0a1cf3bcc200724f9f839998e00d3a377aa9fcfa1731210d318ea0fd9e89f1b2478a222d1b408a0de22e4b26fa84f94536b8634a4c445568a77cf27ade599b95eea8874b27af2a45e7ec1cbc", 0xcd) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 266.880160] binder: 6904:6907 ioctl 40086607 200001c0 returned -22 [ 266.903173] binder: 6904:6907 ioctl 40086607 200001c0 returned -22 19:35:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x200, 0x7ff, 0x0, 0xfffffffffffffbf2, 0x200}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:28 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) rmdir(&(0x7f0000000280)='./file0\x00') r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_buf(r1, 0x29, 0x14, &(0x7f00000000c0)=""/19, &(0x7f0000000100)=0x13) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a9100000d35b7b", @ANYRES16=r3, @ANYBLOB="000825bd7000fcdbdf25010000000000000007410000004c0018000000006574680000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4044001}, 0x4) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 19:35:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0xffffffff7fffffff}, 0x28, 0x3) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000100)) [ 266.969826] binder: 6926:6928 ioctl 4008700c 16ac returned -22 [ 266.993861] binder: 6926:6937 ioctl 4008700c 16ac returned -22 19:35:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x4d0a00) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000240)={'broute\x00', 0x0, 0x3, 0x23, [], 0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}], &(0x7f0000000080)=""/35}, &(0x7f0000000100)=0x78) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x40, 0x0) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f00000000c0)) 19:35:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:28 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) poll(&(0x7f0000000000)=[{r0, 0x1000}, {r0, 0x103}, {r0, 0x401}, {r0, 0x100}, {r0}, {r0, 0x2000}], 0x6, 0x100000000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000380)=@nfc, &(0x7f0000000400)=0x80) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000440)={@empty, @empty, 0x0}, &(0x7f0000000480)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000009c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000840)=0xfffffffffffffd56) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@empty, @in=@empty, 0x4e20, 0x0, 0x4e21, 0x3, 0xa, 0x20, 0x20, 0xff, r2, r3}, {0x4, 0x0, 0xbd39, 0x9, 0x10001, 0x8, 0x100000000, 0xff}, {0x4, 0x7fd5, 0x46, 0x8}, 0x9, 0x6e6bb3, 0x0, 0x1, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4d4, 0x3c}, 0x2, @in=@multicast1, 0x3501, 0x1, 0x3, 0x668, 0xb0, 0x100000001, 0x3}}, 0xe8) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/enforce\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000500)) r5 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300000b, 0x110, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xa4, 0x0, &(0x7f00000001c0)=[@register_looper, @acquire={0x40046305, 0x3}, @reply={0x40406301, {0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f0000000000)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x4}, @flat={0x0, 0x101, r5, 0x3}, @fda={0x66646185, 0x6, 0x3, 0xd}], &(0x7f0000000080)=[0x78, 0x60, 0x40, 0x48, 0x18, 0x30, 0x40, 0x20, 0x0, 0x38]}}, @increfs={0x40046304, 0x4}, @reply_sg={0x40486312, {{0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x38, &(0x7f0000000100)=[@fda={0x66646185, 0x0, 0x2, 0x38}], &(0x7f0000000180)=[0x78, 0x38, 0x60, 0x28, 0x28, 0x38, 0x70]}, 0x9}}], 0x9c, 0x0, &(0x7f0000000280)="3a0f89b3eb1ac269a49e7230a907bf832fe27ee85c8e00b4fe18bf5840ff8a623fa0d2e4be8082f52bcae56091b29ed80b858121e0a923585925ce249dac0a715ea1e614c0832e57d8e81a2cd88654aab19da7bb302ceff903b17e30028606e1e01b3e12a647b36107dc2a5999c336ece8ef234f7681bee8577bd2aaca39caa3b896aaf923d60718ca1f7aabda5cc9580db68f96c647b555e0a095d5"}) prctl$PR_CAPBSET_DROP(0x18, 0xe) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000700)=0x7) ioctl$RTC_UIE_ON(r4, 0x7003) 19:35:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) poll(&(0x7f0000000180)=[{r0, 0x200}, {r0, 0x20}, {r0, 0xa000}, {r0, 0x1009}, {r1, 0x2}, {r1}], 0x6, 0x3f) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = dup2(r1, r0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) 19:35:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x280080, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000040)={{0x11, @dev={0xac, 0x14, 0x14, 0x19}, 0x4e21, 0x1, 'wrr\x00', 0x20, 0x7, 0x48}, {@multicast2, 0x4e22, 0x3, 0x101, 0x2, 0x7f}}, 0x44) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7000fedbdf2501000000004b1b93fcce29ced8d5062a1cec0000000c4100f0000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:28 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @empty}, &(0x7f0000000080)=0xc) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 267.151071] binder: 6977:6979 ERROR: BC_REGISTER_LOOPER called without request [ 267.170371] binder: 6977:6979 Acquire 1 refcount change on invalid ref 3 ret -22 [ 267.227050] binder: 6977:6979 got reply transaction with no transaction stack [ 267.247196] binder: 6977:6979 transaction failed 29201/-71, size 80-80 line 2921 [ 267.258405] binder: 6977:6979 ERROR: BC_REGISTER_LOOPER called without request [ 267.266305] binder: 6977:6979 Acquire 1 refcount change on invalid ref 3 ret -22 19:35:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x3, 0x3, 0x1, 0x65d6, 0xfffffffffffffff7, 0x9, 0x10001}, 0x1c) ioctl(r0, 0x9, &(0x7f0000000000)="d5450022423d42d0582bad842a37b0212b6aa7d471e50103401cf354c84c978dffe8dd3e0da96c83d0") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)={0x0, @speck128, 0x1, "99543b88576b62b4"}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r3}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 19:35:28 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r1, 0x8, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x3, 0x3, 0x8dc}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8040) r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, '-md5sum..)em0vboxnet0{\x0f('}], 0xa, "11b38d61cec88d2b9a5a81505d1579998cb6f831bc1ace539bfdac47dc345c4f87135f5b5164a871088460d0c56ccea00f751f949c6c88810c37c667518afc329fb5de81d34c66abd3ef65767c8524ec341c6db2f558f5b621420e6c203c0c137a009d556fa0a24422a33d570a8f0009975aa9e6ebae0bfd3c5046e1dd91aa2472c9541c3e5a095ead4eb3338d99737be2c8f7a82f3157301d2a236f73ef605d423cc1dc60bf2178a4a3c78cd7dde405b4b94dd66683f606d4728e4a26b758ff66a029bb0262fe3262610189cc33fd2e46af4b56dcab57c0be6511713d43461cbbd921051f518a7bc1604b590a"}, 0x111) [ 267.274680] binder: 6977:6979 got reply transaction with no transaction stack 19:35:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@getsa={0x178, 0x12, 0x314, 0x70bd27, 0x25dfdbfd, {@in6=@remote, 0x4d5, 0x2}, [@algo_auth={0x13c, 0x1, {{'sha3-224\x00'}, 0x790, "0ee4ca58d5f3168b73102d589fbff3fef5187e03d8ce0c703149eca6e7b3d5f96e4b9cfffc2dfaa84fc6707f5bedd8c598fb2e8d760e0b97379a0cc11865272cfb21e679fefa4545cf6884e1af4ff311a8e74d395d49b17f97c9b05ea2bf8ff348f4ba1791e50ac44a41041cc287b16e4dafd781d7134bcd831552ce6fcd6161ccdb62a1320492fd7b82572cbaa27850fab72e3fa79653d1f839395ae55e157a14aff2d8d304a67d27c2e0d0888d928e4a8e5dc7c4f1d1b44698f8b94c630a0f57290018f6962fce94f9b3f1feaf4f890b6051367932ef616b10682d0e33bd722f82abf7d1dd4aea6efcd37aaae289328e56"}}, @coaddr={0x14, 0xe, @in6=@local}]}, 0x178}, 0x1, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) rt_sigpending(&(0x7f0000000100), 0x8) [ 267.300954] binder: 6977:6979 transaction failed 29201/-71, size 80-80 line 2921 19:35:29 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:29 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r2 = geteuid() r3 = getegid() mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x1002000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[], [{@appraise_type='appraise_type=imasig'}, {@dont_appraise='dont_appraise'}, {@appraise='appraise'}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) ioctl$int_in(r0, 0x0, &(0x7f0000000080)=0x1) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r5 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r6) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r7 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r7}], 0x1, 0x0) r8 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x10) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x1) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) 19:35:29 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000180)=0x814e) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) fsetxattr$security_smack_transmute(r2, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x2) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000040)={0x10, 0xfffffffffffffff9, {0x56, 0x7b, 0x100, {0x1}, {0x7, 0xffffffff}, @cond=[{0xff, 0x3, 0x4, 0x53c10eaa, 0x101, 0x400}, {0x0, 0x2, 0x8, 0x1000, 0x200, 0x6}]}, {0x57, 0xff, 0x3, {0xffff, 0x8}, {0x800}, @const={0x8001, {0x5, 0x80000000, 0x9, 0x6}}}}) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) fsetxattr$security_capability(r0, &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0x4, 0x400}, {0x7967, 0xf00}]}, 0x14, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x80000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0xbc, 0x2a, &(0x7f00000003c0)="72dd0fd7171281defebb6f12d5ff4e3e81ebf0ee5311b11aebf6d9e982394a6bda0cfeadc35a279a71dcddca890b6b96a7588860ff0d67a42ae8d50d8097ae84e9ff0f0cefaf52a0dc370dd469a73048f0225f62497969d4b2947788a1f303f7be53689f30509f7f44a5724872fee4cfcb416ade92945ec883be3ee94971c2b5105a9925044427ce842df1c3bfd6e18a5cd5ee7387004683d6ceb5ae070d6341bfb4d49b650c9f944da427ff0cc7bb3e7f571ab5687b22f65035e02b", &(0x7f0000000480)=""/42, 0x4}, 0x28) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2082, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0x96, 0x63, &(0x7f0000000040)="7861a6c51fe59008bfee9268a33a36fe438640bf868fb8e844afc22eb577f8cb8a5a61e7abb0dd87462314587e939f46e52d537f199a0c7050f5aabc7beabc6827b44cbb953d98ae06bcd2ca04978141a94ccf6f91ddab012ae061ee49795770040a2add84fcf924f92f6c029fe75d46559e82c12a5d1ce373cbefed842b9eac82b8a4b54f798460798b1fab916d15dfffd74db2f103", &(0x7f0000000180)=""/99, 0xd0}, 0x28) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000e00000/0x200000)=nil, 0x200000}, &(0x7f0000000240)=0x10) mremap(&(0x7f0000e15000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000f44000/0x3000)=nil) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x602203, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={r2, r2, 0x0, 0x3}, 0x10) 19:35:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = dup3(r1, r1, 0x80000) execveat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='\x00'], &(0x7f0000000200)=[&(0x7f0000000100)='/dev/binder#\x00', &(0x7f0000000180)='/dev/binder#\x00', &(0x7f00000001c0)='\x00'], 0x100) 19:35:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x20802) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) clock_adjtime(0x2, &(0x7f0000000180)={0x586, 0x7807, 0x5, 0xffff, 0x7, 0x100, 0x813, 0x785, 0x365b, 0x1, 0x3, 0x7, 0x5, 0x80000000, 0x10001, 0x5, 0x2775, 0x10001, 0x4, 0xb14, 0xaf2f, 0x300000000000000, 0xffffffff, 0x9bef, 0x2, 0x80000001}) 19:35:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x4e23, @rand_addr=0x100000000}}) poll(&(0x7f0000000140), 0x0, 0x6000000000000) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), 0xc5, 0x0, &(0x7f0000000040)="05c38009f94c942360d6653464fe4d76988f9a20202f7b3fb7eb88af0e331c3982ef883569e5454f88a25aab0df3dbac665ee9d8f3ff23a1ce3446274fb4dde546f72d1197fed3bb7755a48b734c2fb1b75fa5fc290c8ef6216436129788b73ed56cdb8b326a08e094ee1c9d0544bde6ef02c5a5180eace89e280addc5f52e9f00ad8b0237f5d54ec5603a2cc227358478ce03c6af6d126416663b031ca73d219cf6c881b8f162df8b06b3ff728b47a959ff516ce27d61b9408492b9ec811e8b8d8b7fd0b7"}) socket$inet(0x2, 0x3, 0x101) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:29 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:29 executing program 2: pipe(&(0x7f0000000000)) r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:29 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:29 executing program 5: clone(0x400, &(0x7f0000000000)="fabf2d23be7071d913118edbea32ef69", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="4184c2648ae17cb38aac") r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0xe6, 0x2, 0x8, "4fce5a4646de14a0c95c65c25dd866d7", "d83e5b860baf4b6fe162c0ec02ecca0c8aecd44b3efca4a118bf6bff0e6fee38b3b4c5d73490d14b555f1f79458973ab67e7c20b6a1da04d42e4c09eaa24977269f74f2539a7d51338eb25c036419ad75ef8d238770bbd917bcd8c12ba2695529a4533cf519130a9f93498c25937491f0d55ba7fda6c6035ad855f7b1ec22bf8a03c3ca5dd9fe571601d9779c3b5672d74cf93f25a8ee4da039b1309bb93c4ea9e4cc56e84265348e8324c8f6ea645b6944d187c5f6d3aada3820c22a6c0293bc370eeb664475322ef4d353d3be3c4748b"}, 0xe6, 0x2) 19:35:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) signalfd4(r0, &(0x7f0000000000)={0x7}, 0x8, 0x80000) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@mss, @timestamp, @sack_perm, @mss={0x2, 0xfffffffffffeffff}, @mss={0x2, 0x80000000}], 0x5) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x1, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0x7, 0x4, 0x5}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = socket(0x1, 0x3, 0x734) getpeername$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 19:35:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:29 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:29 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x100, 0x0) fcntl$getown(r0, 0x9) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:29 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r0, 0x2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000200)=0x70ff24e9cf266be5) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6f73322e2f48668b618e0000000000b49f6eb6aa2411171bdfcf58dcd0ed19084719c6a3e5e342ff41468f501c2ed34ce3c7dbb68e832137280b889c81882a506c3c632d8de28f08eef00ac743683fe35aa5140f3a3ad9e817e157c366a9d372e03f4dfdc3ac2dc2c9cb08054b58f9a19125c2258f23be3c1f1cf5fbec6c9880bbc75efbb3412b401438f1e35ed6cde7be5d0aa1870bb53e4e2aecab6c471949e2998058dd87000000000000"], &(0x7f00000000c0)=""/58, 0x3a) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) dup(r0) 19:35:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'team0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) timerfd_gettime(r1, &(0x7f00000000c0)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) write$selinux_access(r2, &(0x7f0000000040)={'system_u:object_r:v4l_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x8}, 0x65) fchdir(r0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) fcntl$getflags(r0, 0x0) 19:35:29 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, 0x0, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x200, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000180)) r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xa268db4ce97753d8, 0x0) openat(r3, &(0x7f0000000080)='./file0\x00', 0x2, 0x1) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x4500) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x800, 0x2, 0x3, 0x5, 0x5ec, 0x7}, 0x20) [ 267.940018] audit: type=1400 audit(1549395329.576:23): avc: denied { getopt } for pid=7129 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 19:35:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x1) poll(&(0x7f0000000140)=[{r0, 0xfffffffffffffffd}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000080)) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) 19:35:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x41, 0x8, 0x1b6, 0x9, 0x9, 0x601, 0x5, 0x8, 0x0, 0x3a, 0x5, 0x1f}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0xfffffffffffffff9) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080), 0x4) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 267.989531] binder: 7129:7153 ioctl 6685 0 returned -22 [ 268.030199] binder: 7129:7153 ioctl 6685 0 returned -22 19:35:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0, 0xfffffffffffffffc}], 0x1, 0x6) ppoll(&(0x7f0000000040)=[{r0, 0x2000}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={0x80000001}, 0x8) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) finit_module(r0, &(0x7f0000000000)='/dev/binder#\x00', 0x3) finit_module(r0, &(0x7f0000000100)='\x00', 0x1) 19:35:29 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040), 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x100) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @speck128, 0x2, "da1966d18239b2f0"}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)=0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x103, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r3, 0x0, 0xa, &(0x7f0000000280)='/dev/ptmx\x00', r4}, 0x30) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x202102, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) 19:35:29 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, 0x0, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0)={0x0}, &(0x7f0000000900)=0xc) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000000a40)={&(0x7f0000000740)=@proc={0x10, 0x0, 0x25dfdbfb, 0x16800000}, 0xc, &(0x7f0000000840)=[{&(0x7f0000000780)={0xbc, 0x22, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@nested={0xac, 0x43, [@generic="a4d5212e3e47dde81ddc38a1b1dff9509c", @generic="4bb945054d7db722b28062015fa71c7367c2ca8fd51d3b86a891ee41ccb0e86aa4283c118b4681f1d908cd57f2bf840b4080dd1bdfb4d7c7362c9f30e18881f817efbebe535aaea48cf1f79fa36dd7ac4637aee9d7fb54680593ddab73875b10dc29a5828547ff16a4e106ac324b8b6053e1ecb9aab7d39de13acbc0be8f86fb6239b0a15e82bc7929900eb7", @typed={0x8, 0x8e, @ipv4=@multicast1}]}]}, 0xbc}], 0x1, &(0x7f0000000a00)=[@cred={0x20, 0x1, 0x2, r3, 0xffffffffffffffff, r4}], 0x20, 0x40040}, 0xc4) 19:35:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 268.175517] binder: 7185:7187 ioctl 8903 20000200 returned -22 [ 268.194085] binder: 7185:7187 ioctl 660c 0 returned -22 19:35:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000300)={0x60, 0x0, 0x6, {{0x5, 0x7, 0x8, 0x1, 0x80000000, 0x0, 0x100000000000cc1b, 0x8}}}, 0x60) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000240)=[{r1, 0x4000}], 0x1, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000280)=0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x7fff, @local, 0x3}}}, 0x88) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0xbea0c680586ad80c, 0x0) getsockname$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x6, {0x7, 0x1c, 0x9, 0x1008, 0x10001, 0x4, 0x401, 0x3}}, 0x50) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000380)={{0x2, 0x4e20}, {0x307, @local}, 0x6, {0x2, 0x4e20, @local}, 'ipddp0\x00'}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000080)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 268.243578] binder: 7185:7187 ioctl 8903 20000200 returned -22 [ 268.268846] binder: 7185:7187 ioctl 660c 0 returned -22 19:35:29 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000300)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x3, 0x200000) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={[], 0x4, 0x4, 0x400, 0x8, 0x66, r2}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/176, 0xb0}], 0x10000000000001e0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000380)={'nr0\x00', {0x2, 0x4e23, @local}}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x400, 0x1) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000180)=0x716d9f49) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000000)=0x9) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000003c0)) 19:35:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af50e1687a33f3188a070") r1 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) dup(r1) 19:35:29 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20000000) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x80) fremovexattr(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='security./dev/b^nder#\x00']) 19:35:30 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:30 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, 0x0, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000040), 0x0, 0xffffffffffffffff) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000005c0)={{0x73, @empty, 0x4e20, 0x1, 'sed\x00', 0x1a, 0x1, 0x69}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x4e24, 0x3, 0x8, 0x1, 0x8}}, 0x44) 19:35:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x133b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x0, 0x100000000}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 19:35:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 268.417569] binder: 7226:7229 ioctl 40086602 20000000 returned -22 [ 268.425131] binder: 7226:7229 ioctl 40086602 20000000 returned -22 19:35:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4000, 0x26) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x70, r2, 0x221, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x44044}, 0x4000040) 19:35:30 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5) 19:35:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f00000003c0)=""/66) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:30 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb8e6}, {0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, [], 0x13}, 0xb3}, 0x40, [0x7f, 0x3, 0x800, 0x7ff, 0x21, 0x80000001, 0x0, 0x4e1e]}, 0x5c) [ 268.645325] binder: 7274:7280 Acquire 1 refcount change on invalid ref 4 ret -22 [ 268.658744] binder: 7274:7280 got reply transaction with no transaction stack [ 268.689490] binder: 7274:7280 transaction failed 29201/-71, size 88-16 line 2921 [ 268.767493] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.773133] binder: 7274:7290 ioctl c0c0583b 200004c0 returned -22 [ 268.790446] binder: 7274:7290 Acquire 1 refcount change on invalid ref 4 ret -22 [ 268.798957] binder: 7274:7290 got reply transaction with no transaction stack [ 268.806241] binder: 7274:7290 transaction failed 29201/-71, size 88-16 line 2921 [ 268.867547] binder: undelivered TRANSACTION_ERROR: 29201 19:35:30 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x8000, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40000, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) 19:35:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x0, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xdc54, 0x2, 0x8, 0x100}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x10) r3 = openat$cgroup_ro(r0, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) write$P9_RLINK(r3, &(0x7f0000000080)={0x7, 0x47, 0x1}, 0x7) r4 = getpgrp(0xffffffffffffffff) sched_getattr(r4, &(0x7f00000000c0), 0x30, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r5 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) poll(&(0x7f00000002c0)=[{r5, 0x4004}], 0x1, 0x1) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) 19:35:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x4) poll(&(0x7f00000000c0), 0x0, 0x100) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000340)=0x4) read(r0, &(0x7f0000000200)=""/245, 0xf5) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) sendto$unix(r2, &(0x7f0000000100)="218d12e10c9be9c5d7e9fecb80d0f6dececadae595e7eba7fdf469f64cd121ae35c33f7f2017ca9423f49c5fee45fccf7df7b16a7c8588c5d12caa9ac9b6bcd88daa80de772d513801ab37692728c0a5bf3b54ea0a52357a448fc36e2c4af850a4e2ddcc77535067c7bbffb5f82346f06ac3e7c4023087f3af3836263ea082d8bfe1ed012461e9ee", 0x88, 0x4, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) 19:35:30 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:30 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:30 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) memfd_create(&(0x7f0000000000)='-\x00', 0x6) 19:35:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r0, 0x5}, {r0, 0x400}, {r0, 0x4000000000000401}, {r0}, {r0, 0x1}, {r0, 0x2}], 0x6, 0x200000000000000) 19:35:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0), 0xa9) 19:35:30 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x80, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000008c0)=0xe8) r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000900)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000020c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002080)={&(0x7f0000000940)=@newtfilter={0x1734, 0x2c, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, r1, {0xd, 0x2}, {0xb, 0xf}, {0x2, 0xfffd}}, [@filter_kind_options=@f_matchall={{0x10, 0x1, 'matchall\x00'}, {0x1f0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_ACT={0x88, 0x2, @m_skbedit={0x84, 0xe, {{0xc, 0x1, 'skbedit\x00'}, {0xc, 0x2, [@TCA_SKBEDIT_QUEUE_MAPPING={0x8}]}, {0x64, 0x6, "c5b63a773b3406a4ed146dd17d52fa7c256568b0c7eb72a93bca6206c670886f1bb9247d2f3f2fe9f4b95c2275ba9aa177621a4c9103ae372ce4253c8b27f18852c55137ba6469dc3c3a6ae39bb967a58a8fa3d8624edaa4b6fb5b3d46a80719"}}}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_ACT={0x14c, 0x2, @m_tunnel_key={0x148, 0x8, {{0x10, 0x1, 'tunnel_key\x00'}, {0x40, 0x2, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, {0xf0, 0x6, "0642230027b35768fafd54579edbedc43389ecad22ec0b95359708f31e70dcb6f659f5337d27ef4dde09b2b8a1fc309f23bb9ca39cd39daac439d74cd737398b2ab88933c87d9bce17c1b1dbaec4fb740c1b77451c1de5265673c3f9eba2b473b7dde91e97a4fee5dbe87b74f02d8617390ddce6c31518ef41e1be30ac7fb445c40aeb03258337c8ebcb5526385661fbcabb18a4d0aae5bb5d555439c17742a43430b54e02d70d4d78476e6006f3784d90b2febae07cb039d596862a4f17e186297ed5300cdbdff690c8feb08de8088e17965001bc13fc36598f11c3403431cb02561682754bcea886c5"}}}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x149c, 0x2, [@TCA_CGROUP_ACT={0xdc, 0x1, @m_csum={0xd8, 0x1d, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xffffffff, 0x6, 0x7}, 0x3c}}}, {0xa4, 0x6, "d9e1b7097aa5b315aa5358df4f76280e3f7c104c8f511824911a3e149c66074b02187a32494dfc7e186a8b171d245de2b2a350a0e5b07540e070fb58ac481a8670105fd5fd266bf0086bde890926fed718f5488c5d39d2351825cbae849afac6cdfa8476a27285e3772cfe89effcdc8f13f57f7c913368f83b976480b95eca81edf6738d913cf9de722ff1fd9bb75c4a319b93082f7804ac53e005783d"}}}}, @TCA_CGROUP_ACT={0xb0, 0x1, @m_nat={0xac, 0x1f, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0xc9f, 0xfffffffffffffff7, 0x2, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x1}}}, {0x70, 0x6, "052bcbfb80c0e535a0bb8b1f07cf7dc53a6767eb09d609e780202c59329b5353b7470ad2c03be11b12c3f914ffd15fe2d07aa2f0d751f0520fe97123356d09e2d101ca6759b51f825b8ae52de6aa0ff68ad26cb72efa8ddb20c2a62fb2edf322026dcf89f3b2b706ccb8"}}}}, @TCA_CGROUP_EMATCHES={0x20, 0x3, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, @TCF_EM_CANID={0x18, 0x7, {0x1, 0x7, 0x4, 0x0, {0x40, 0x8}}}}]}, @TCA_CGROUP_POLICE={0xc, 0x2, @TCA_POLICE_RESULT={0x8}}, @TCA_CGROUP_ACT={0x54, 0x1, @m_simple={0x50, 0x8, {{0xc, 0x1, 'simple\x00'}, {0x18, 0x2, [@TCA_DEF_DATA={0x14, 0x3, '/dev/binder#\x00'}]}, {0x24, 0x6, "193f46238e3b65d5d6c734151b3eae08af5ab103c65359165b6823c6f6f912ea"}}}}, @TCA_CGROUP_EMATCHES={0x1074, 0x3, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_IPT={0x20, 0x5, {0x0, 0x9, 0xffffffff, 0x0, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x7}, @TCA_EM_IPT_NFPROTO={0x8}]}}}, @TCA_EMATCH_TREE_LIST={0x1014, 0x2, @TCF_EM_CONTAINER={0x1010, 0x3, {0x0, 0x0, 0x40, 0x0, "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"}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, @TCF_EM_CMP={0x1c, 0x8, {0x2, 0x1, 0x7, 0x0, {0xc9ff, 0x8000, 0x5, 0x4, 0x800, 0x0, 0x1}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc529}}]}, @TCA_CGROUP_ACT={0x108, 0x1, @m_bpf={0x104, 0x5, {{0x8, 0x1, 'bpf\x00'}, {0x60, 0x2, [@TCA_ACT_BPF_OPS_LEN={0x8, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x14bee30c, 0x4, 0x1, 0x7f}, {0x10001, 0xc9, 0x6, 0x2}]}, @TCA_ACT_BPF_OPS_LEN={0x8, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x8, 0x4, 0x3, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x401, 0xd6, 0x20000007, 0x100000000, 0x2}}]}, {0x94, 0x6, "b60eaf90c23f84ffbec1f37388df751e20f2b644eb0bfe1d40fa87506edf61796eb28a0e48f4bd7df6bc9a25844ec63e677eaea087f5276be7405eadd23bf26f28be65aa99bd80070928f031d73404c2d71f81716f1436719fb738dec6165304bc995ef336112278e553970b422b62c7ca04bafaa6eca57043b2dd9b8043c5648d7154b572a98e60e2d004fd152d9f"}}}}, @TCA_CGROUP_ACT={0x110, 0x1, @m_nat={0x10c, 0x18, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x200, 0xffffffffffffffff, 0x5, 0x9}, @rand_addr, @multicast1, 0xff000000}}}, {0xd0, 0x6, "018db4af76f02492f431e19364ddc4ed2c8982f16bdcb83880f5d2f62c56d8320d7d9b7388e0028354a40c2f9ae7dcb150c0c6b2355b30c36fa5920af7a4d1d52a3a69bbbcc8bc8c38c6ae1ea527668879fb01ce1dc3b9c39a63c131683cb2b5e0131e73578763f7fb08c1c81f7760df6ec896737f8c58ed4fe409c64e8360ee92f211a56c644507e1cc15b5bc95d438ef1b3393c1051bf2933f4206a5143b125e84f3e0c423f7efbd78d6bed35c4c905d578bda2bb9da9ef53c95af66f722653610c0369c00cb648de965b5"}}}}]}}, @TCA_RATE={0x8, 0x5, {0x401, 0x3}}, @filter_kind_options=@f_flow={{0xc, 0x1, 'flow\x00'}, {0x4c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x527}, @TCA_FLOW_POLICE={0xc, 0xa, @TCA_POLICE_AVRATE={0x8, 0x4, 0xbca}}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xc000000000000000}, @TCA_FLOW_POLICE={0xc, 0xa, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffffffffff8}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xf, 0xfff3}}]}}, @TCA_RATE={0x8, 0x5, {0x80000000, 0x1}}]}, 0x1734}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r4 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r4}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 19:35:30 executing program 0: r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)='vboxnet1\\\x00', 0xffffffffffffffff}, 0x30) rt_tgsigqueueinfo(r0, r1, 0x3f, &(0x7f0000000080)={0x33, 0x9, 0x9}) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 19:35:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x10000000) read(r0, &(0x7f0000000000)=""/55, 0x37) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)=0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x5, 0x4}, {0x7f, 0x5}], r1}, 0x18, 0x2) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_timeval(r0, 0x1, 0x4000000000000014, &(0x7f0000000240)={0x77359400}, 0xfffffd52) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fchdir(r0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xffffffffffff2512, &(0x7f0000000100)="d500224403d417e4a5c2ef0a4a1c944b3d1db7ad06eded41184565fb2ea0335182f800000000e65e000000000000") syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x2000) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = dup(r0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000000)=0x4) 19:35:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) 19:35:31 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:31 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:31 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x3) getitimer(0xe9b0da2975aa0724, &(0x7f00000000c0)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000340)={0x81, {{0x2, 0x4e24, @loopback}}}, 0x88) r2 = getpgrp(0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x101000, 0x40) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="010009000180c20000020180c20000020180c2000002ffffffffff01abaaffffffff000000000000aaaaaaaaaabbffffffffffff080ea969145c531829d671995c2f13b45a8b9c01611c361e2882c3d24199ae9822694147330ae57a5a42390128f79d9f63c1a2fd444b342dd1be16106b2b63c670c035d505c9bfaca746f20a3e32b7d642cba20cb8a34088cdff12e24ffce12d367a0d3fc0a22eaa9952cd6af8966c1c262750deafe2bb8df2c117ef6f3fdf22cc33b1fc5c1ae4b96f3102f926e9d0e191f3950141876bae10cccaf56842e7a6aa4b"]) fremovexattr(r3, &(0x7f0000000100)=@known='trusted.overlay.redirect\x00') ptrace$poke(0x5, r2, &(0x7f0000000000), 0xf784) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1512, 0xb, 0xc, 0x1, "1d44836aaf36f60c808ce22440bdd10a53c10bcc865cb6b12dcc1ba3db59605ae2bc7cc0b638a42cb1f0905f17060818806223acb15bc25635a942a06a01569a", "518b9fc441a4b736a402ee029e322df6d69c405d4ae87c00177dd8a69ed85e20", [0x81, 0x1]}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 269.478746] binder: 7347:7349 ioctl 40047438 20000000 returned -22 [ 269.487825] binder: 7347:7352 ioctl 40047438 20000000 returned -22 19:35:31 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:31 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = gettid() r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x80, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000002c0)={0x0, @empty, @initdev}, &(0x7f0000000300)=0xc) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000040)={0xff, 0xfd6, 0x7, 0x5, 0x100, 0x5fbd}) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000180)=""/124) fcntl$getflags(r3, 0x40a) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x0}) r6 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x6a070, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x34, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b63000003630c40", @ANYRES64=r5, @ANYBLOB="046304400200000008631040", @ANYRES64=r6, @ANYBLOB="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"], 0x3c, 0x0, &(0x7f0000000240)="a7d0fdaac360d1546c28796e560cb5494b6c420a0d602f4ab774d2f19cb512e821741591bcf62e46a97c12875a6aded7e6af99d1b6c844b285d75875"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000004c0)={@remote, 0x21, r4}) clock_nanosleep(0x7, 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f0000000480)) 19:35:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x3f, &(0x7f0000000080)=0x2, 0x4) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 269.630504] capability: warning: `syz-executor0' uses 32-bit capabilities (legacy support in use) 19:35:31 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x498, 0x140, 0x0, 0x0, 0x3b0, 0x3b0, 0x3b0, 0x4, &(0x7f0000000080), {[{{@arp={@rand_addr=0x963, @remote, 0xff0000ff, 0x0, @empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}, @empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}, 0x10001, 0x9, 0x1, 0x7, 0xffffffffffffffc1, 0x8, 'tunl0\x00', 'gretap0\x00', {}, {0xff}, 0x0, 0x4}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={[], 0x15}, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}}}, {{@arp={@broadcast, @multicast1, 0x0, 0xffffffff, @empty, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x4, 0x4, 0x4, 0x4, 0x9, 0x5, 'ipddp0\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x80}, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x4, 0x8000, 0xa29}}}, {{@arp={@multicast1, @rand_addr=0x10000, 0xff, 0xffffff00, @mac=@dev={[], 0x20}, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}, 0x4, 0x1, 0xe2d, 0x2, 0x2, 0x4, 'bridge_slave_0\x00', 'ip_vti0\x00', {0xff}, {}, 0x0, 0xc0}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @multicast1, 0x4}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4e8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = getpgrp(0xffffffffffffffff) ptrace$setsig(0x4203, r3, 0x9, &(0x7f0000000680)={0x7, 0x2, 0x3}) 19:35:31 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:31 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000080)=0xe8) r2 = getgid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) truncate(&(0x7f0000000100)='./file0\x00', 0x20) r4 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010005000000000002000500", @ANYRES32=r1, @ANYBLOB="040004000000000008000000", @ANYRES32=r2, @ANYBLOB="012ba8f819ab0996b3ea3074bae70209ebb832d6ca46b40e6ac9a7e117773fe9bb1d55f6fc5391d93264878cb4e604237156120a6f9c", @ANYRES32=r3, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="10000400000000002000060000000000"], 0x44, 0x3) 19:35:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) poll(&(0x7f0000000000)=[{r0, 0x100}, {r0, 0xd}, {r0, 0x4200}, {r0}, {r0, 0x80}, {r0, 0x24}], 0x6, 0x9) 19:35:31 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:31 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x4a8, 0x1f8, 0x1f8, 0x128, 0x0, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@unspec=@cpu={0x28, 'cpu\x00', 0x0, {0x6}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x2, 0x7}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @local, @local, @port=0x4e24, @icmp_id=0x68}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, 0xffffffff, 0xff, 'sit0\x00', 'tunl0\x00', {}, {0xff}, 0x0, 0x3, 0x11}, 0x0, 0x98, 0xd0}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @multicast1, @multicast1, @port=0x4e24, @gre_key=0x7}}}}, {{@ip={@broadcast, @loopback, 0xff000000, 0xff000000, 'syzkaller1\x00', 'bcsh0\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x8}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x1, 0x40}}, @common=@set={0x40, 'set\x00', 0x0, {{0x863c, [0xdf, 0x92, 0x74b9, 0x4, 0x2, 0x7], 0x0, 0x10000}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv6=@ipv4={[], [], @multicast2}, @gre_key=0x101, @gre_key=0xba}}}, {{@uncond, 0x0, 0x98, 0xd0}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x15, @rand_addr=0x3, @loopback, @icmp_id=0x66, @port=0x4e21}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0xa, 0x15, 0x0, 0x19, 0x6, 0x6, 0x6, 0x59, 0xffffffffffffffff}) r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 19:35:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00') ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0x6f, 0xa8, &(0x7f0000000040)="f3b157a24c072a83a075e1fa9d17fc8f3c341dd8af6994b1738f1fcb11b72cc5edce3ef4ce011d689153269fc138fde922afd6ccbc0c7e2d763536b95270bf10b718cdeb80e497330f0a6da7cd67951090ba667e77e75d964cc60975c73a1b113b772491ea5e4f06c20185d7251c15", &(0x7f0000000180)=""/168}, 0x28) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:32 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, 0x0, 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000080)=[{r1, 0x4000}, {r0, 0x284}, {r0, 0x2260}, {r1, 0xa001}, {r0}, {r0, 0x1000}, {r1, 0x14}, {r0, 0x8000}, {r0, 0x21}], 0x9, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={0xacef}, 0x8) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101040) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:32 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:32 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, 0x0, 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:32 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, 0x0, 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:32 executing program 5: r0 = dup(0xffffffffffffffff) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x80000001, 0x9}, {0x0, 0xe5dd}]}) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0, 0x2000}], 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xd1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x5, 0x70, 0x1ff, 0x101, 0xffffffffffffffe0, 0x1f, 0x0, 0x37b, 0x8000, 0x8, 0x7, 0x6, 0xe971, 0xf83e, 0x7, 0x4, 0x9, 0x1f, 0x3, 0x357000000, 0x8, 0xfffffffffffffffc, 0x8, 0x4, 0x6, 0x1, 0x5, 0x1, 0xf0, 0x0, 0x6, 0x0, 0x4, 0x400000000, 0x10001, 0x2, 0x2, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x2}, 0x801, 0x6, 0x9029, 0x9, 0x9, 0x3, 0x6}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x20000000000000ce, 0x8001) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:32 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0x0) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:32 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0x0) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x10000, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000180)=""/208) 19:35:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x4000, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000100)={0x7, 0x1b, 0x2}, 0x7) poll(&(0x7f0000000040)=[{r0, 0x2000000000}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:32 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x402) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) ptrace$setregset(0x4205, r1, 0x205, &(0x7f0000000380)={&(0x7f00000002c0)="81f56dd6b9b30549a3bcf9a26b0be7db5382fa3cdf1725cd687e978c66d59ffa33c0dc4a43bfc724b6d42190db935abc1ffb4e7bc4aeba8b4bda4b5ba43dc6f5f721051dc1cad0c732fd9762a75817771eadae659f64a7e7a016c6fa67acb3b6780433847b8b4bf9027a45300de926c57a6e44c6cddf0bbb298b7f1f3a3b5feb2f67b5de513b719b8155b3f856cb396ea1d6", 0x92}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x7, 0x4) readahead(r2, 0x5, 0xee2) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000002a40)=@buf={0xf1, &(0x7f0000002940)="16b19263e16b6df0873792408a4a834a248eede91c6c394dbf73eba87b851abd444ff40a178bd50eddb7b2212630293646afa0ab407934a0fd896ca3cbf4e9f60b047d73b1b27d64c8efd16e86ebdd851a601013c0c92017aeec3d52507f03fb061cd76c0b9b5ae427dbca62087c735d8e66941b758c6ee93611ed3d1d6350ca89305a8bb5d866858d8e7477e8a6e551ccf9565e0439fa1c5af6c7d8defbd9c751c38bfd8d5f487dd055c7d2d4cc7a0b844453d87add8dabc87da3104bfa3c631732eb88340bf12b46578fa504338547685df6f73059cbf950263255407498045428865fd9591c7e1f3d3dbaf4fcd03c18"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r3 = socket(0x5, 0x8000a, 0xffff) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xf4, r4, 0xd20, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000800}, 0x4810) 19:35:32 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0x0) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:32 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0xd0103, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000080)={0x8, 0x5}) r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 19:35:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, r2, 0x620, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40000000}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}, @TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48000}, 0x200008d4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)={0xfffffffc, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setpriority(0x1, 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') ioctl$VT_RELDISP(r0, 0x5605) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9a6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x10) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1ff) 19:35:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:33 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = dup3(r0, r0, 0x80000) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x100013, 0xffffffffffffff9c, 0x49) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000005, 0x5030, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0xcc, 0x0, &(0x7f0000000180)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30, 0x10, &(0x7f0000000000)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000000080)=[0x20, 0x78]}}, @increfs_done={0x40106308, r2, 0x1}, @decrefs={0x40046307, 0x2}, @release={0x40046306, 0x3}, @free_buffer={0x40086303, r3}, @exit_looper, @clear_death={0x400c630f, 0x2, 0x4}, @reply={0x40406301, {0x2, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=[0x38, 0x40, 0x30, 0x38]}}], 0xb9, 0x0, &(0x7f0000000280)="cd391b96cb10c7b8a4d4023eac45d7d90f0f7aad2e7e81259a7de7af75c4860e5b8f2e7d5cab10a149c83390d49232aad919ecb9fc7289633c59a1164828ddd8af8cb4766dd3419cd3d7f6d6410c9881ff36f0420945419f5e5b147e39a95a60c2fb83058979949cb932b9ca7341673e97269f715a4ad2e3f65bde9cf5791f39a34b9dcb05d5a0640eec990cafb4db699301d88efef3d9f72686ca4a2577ec580fc439d6c414c758d5684e03cb3aa5d26f84b56304c467a978"}) r4 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x1c, 0x0, &(0x7f00000000c0)=[@exit_looper, @increfs_done={0x40106308, r2, 0x2}, @exit_looper], 0x1000, 0x0, &(0x7f00000008c0)="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"}) poll(&(0x7f0000000140)=[{r4}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 19:35:33 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) 19:35:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0, 0xd100}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 271.414348] binder: 7536:7542 BC_INCREFS_DONE u0000000000000000 no match 19:35:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0x6, 0x4, 0x1, 0xef, 0x7, 0x3}) 19:35:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x4001, 0x0) accept$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast2, 0x4e24, 0x4, 0x4e22, 0x0, 0x0, 0xb254dd145b072973, 0x0, 0x11, r4, r5}, {0x0, 0x11, 0x5, 0x9c5, 0x6, 0x5, 0x3ff, 0x10001}, {0x8, 0x7, 0x44d, 0x3}, 0x2659, 0x6e6bb9, 0x1, 0x0, 0x2, 0x3}, {{@in=@empty, 0x4d5, 0x2b}, 0xa, @in6=@local, 0x0, 0x0, 0x1, 0x1ff, 0x8, 0xff, 0x4}}, 0xe8) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r3) [ 271.472870] binder: 7536:7542 BC_INCREFS_DONE u0000000000000000 no match 19:35:33 executing program 1: ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e20, @loopback}, {0x306, @dev={[], 0xd}}, 0x20, {0x2, 0x4e23, @empty}, 'ip6tnl0\x00'}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="801215a2fb09a500ab8719fc3adc2bf87311bffbf6086b378ba4708e9dbde8e5e3097d12f59d94a3e359a2c870e78a765e3cfcf57f0ff50c3aee2a00a99f36e175c0e4714c63ff5d1d0b0b2df32284437a38639ac2728c63ce6068e5d8abe9f24267a92d8bfa34efc1b0ca4f8588d28c3e3fe29d24fb532ed3f3d26849333b0e32bdc959974c835a3e71cc6075f58ff8e95d94aa382b5b35316afc80dc7c54") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000040)=""/37, 0x25, 0x40000100, &(0x7f0000000300)={0x11, 0x17, r2, 0x1, 0x4, 0x6, @remote}, 0x14) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x67, 0x2, {0x0, 0x1}}, 0x14) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 19:35:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101c00, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x68, r2, 0x304, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x4, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) 19:35:33 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:33 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:33 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000100)) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'security.', '/dev/binder#\x00'}, &(0x7f0000000080)='/dev/binder#\x00', 0xd, 0x2) 19:35:33 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x18280, 0x0) signalfd(r0, &(0x7f0000000040), 0x8) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000080)=""/124) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='veth0_to_bridge\x00', 0x6, 0x100000001, 0x7}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80262a14}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x6}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x48000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x4) poll(&(0x7f0000000000)=[{r0, 0x1000}, {r0, 0x1001}], 0x2, 0x2) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) lookup_dcookie(0x9, &(0x7f0000000040)=""/128, 0x80) 19:35:33 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2a) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000080)=""/64) 19:35:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) poll(&(0x7f0000000140)=[{r0}], 0x1f4, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x180010, r1, 0x0) 19:35:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x8c402, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x203, 0x471f, 0x9, 0xc224, 0x8, 0x27c}) 19:35:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000), 0x0, 0x100000000000) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:33 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x802) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) poll(&(0x7f0000000000)=[{r0, 0x411}], 0x1, 0xfc) 19:35:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2d8f) 19:35:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup3(r0, r0, 0x80000) sendmsg$unix(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)="d80181c8effcb7aea925a37007a983a5dfb03abe6c83cff7e050a5a0ac676cc4cb8c40ad1d8dc3579ead2e5227863c38f30aefa3a1702674421b43393cead50cc442268f7d45c14f6e2c054df565fb1d6a3dc66335305dbd855ce3e1a998e1d9b7f0355f71712522f3c400a031872f246329f3f5d2c17aba3d5422f53f0d4668ce8d20b1d8f89369369edb7201f3106b11d249c86c900eb8f63fcef019932809af0244d6cd6937851c2c8144d217434fa7de0baceb", 0xb5}, {&(0x7f0000000100)}], 0x2, &(0x7f0000000280)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}], 0x20, 0x800}, 0x240400d1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) 19:35:33 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28000, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r0, 0x6, 0x1, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/129) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x100) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r0, 0x1, 0x1, 0xf0ec, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x87, @dev={0xac, 0x14, 0x14, 0x2b}, 0x4e23, 0x0, 'ovf\x00', 0xc, 0x8, 0x48}, {@remote, 0x4e22, 0x2, 0x400, 0x9, 0x3}}, 0x44) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000100)) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0xfaba, 0x7, 0x7, 0x7ff, 0x0, 0x7ff, 0x8000, 0x5, 0xd802, 0x8000, 0x1f, 0x7fff, 0x7, 0x0, 0x87, 0x7, 0xe3, 0x6, 0x85, 0x7, 0xffffffffffffff81, 0x7, 0x3, 0x8, 0x62, 0x7f, 0x7, 0x6, 0x3ff, 0xfffffffffffffffd, 0x7, 0x5, 0xa51, 0x6, 0x6, 0x8, 0x0, 0xfffffffffffffbff, 0x3, @perf_bp={&(0x7f0000000180), 0x1}, 0x1001, 0xffffffff, 0x6, 0x1, 0x3, 0x6, 0x8}, 0xffffffffffffffff, 0x4, r0, 0x9) 19:35:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x200000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSTI(r1, 0x5412, 0x100000001) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000000c0)='veth1_to_team\x00') poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x49) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000080)) 19:35:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x34e2e77a1957a58, 0x0) 19:35:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x100001) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40002, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000180)=""/231) [ 271.968381] binder: 7641:7651 ioctl 40046205 2d8f returned -22 19:35:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) syz_extract_tcp_res(&(0x7f0000000040), 0x1, 0x1) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00000000000000000000000000", 0x58}], 0x1) 19:35:33 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:33 executing program 5: r0 = socket(0x0, 0xa, 0x1) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0xfffffd03) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x40001}], 0x17c, 0x570) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800000040, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f00000001c0)) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x20) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000180)={0x7, 0xe18c}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000280)={0x0, 0x120e000, 0x1000}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) 19:35:33 executing program 2: personality(0x80000000600000) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) 19:35:33 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000180)="a44c774e5963e8353fe8b0066ce0b02a08d83d793023d71694a738236aa7b79eef4d13913875a6534dc72cc0a49bc5a17cf93fad915314fd4d5127a96ff31a1dee445a63471231210e71f31871b434966940c48027203e538335acf1b3d0d9665c030392e12966638bc3b989b4cefac2291809b6ef556128f0e8b558", 0x7c) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000000000) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) r2 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0x80) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/validatetrans\x00', 0x1, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000680)={0x11, 0x0, 0x0}, &(0x7f00000006c0)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000007c0)={0x0, @remote, @broadcast}, &(0x7f0000000800)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000009c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x11c, r3, 0x602, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x80, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x78, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 19:35:33 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=ANY=[@ANYBLOB="0f"]}) 19:35:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x80800) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080), 0x4) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getresuid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) r5 = getegid() sendmsg$unix(r2, &(0x7f0000000580)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="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", 0xfd}, {&(0x7f0000000300)="8cd17a5d294857f1845622722c5c489a51023d318081134af415a2bfd0294bcf4d6012a66a819438e3239ea911f9a5d1b9a6a8d99dc8564f9944d73c639011195af6d24440d1dc4f057aa0c94fc4af36e1128ab419bdbc6ee22c787a7c99dcbc0efdc6917b79afb37aa9062246eb60a7d19a462965c45b97373171ec76e18c149c4036ed8391f166ab5628475e64d2e47ac55d8869390f1f3df593e7b079d141cf76365d3808b1d9860671754ac65c46d50989a88e1172363ae70395e460bb034ed5014b825a0e07edce8d9a5b075b3c50c69f026975138e318cc4dc7f46df72cca1a1d9a220baf11842", 0xea}], 0x2, &(0x7f0000000540)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x20, 0x1, 0x1, [r0, r1, r1, r0]}], 0x40, 0x4000001}, 0x24048840) 19:35:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890f, &(0x7f0000000080)="0af50e1687a33f3188a070") finit_module(r0, &(0x7f0000000000)=',security#procwlan0\x00', 0x1) r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) sched_yield() ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 19:35:33 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) [ 272.321394] syz-executor2: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 272.349349] CPU: 0 PID: 7735 Comm: syz-executor2 Not tainted 4.9.154+ #23 [ 272.356286] ffff8801ca617978 ffffffff81b47411 1ffff100394c2f31 ffff8801c9cd8000 [ 272.364369] ffffffff82aa9840 0000000000000001 0000000000400000 ffff8801ca617aa0 [ 272.372448] ffffffff814fe225 0000000041b58ab3 ffffffff82e3e700 ffffffff81428580 [ 272.380522] Call Trace: [ 272.383106] [] dump_stack+0xc1/0x120 [ 272.388469] [] warn_alloc.cold+0x76/0x93 [ 272.394194] [] ? zone_watermark_ok_safe+0x260/0x260 [ 272.400866] [] ? avc_has_perm+0x164/0x3a0 [ 272.406661] [] __vmalloc_node_range+0x363/0x610 [ 272.412978] [] ? check_preemption_disabled+0x3c/0x200 [ 272.419810] [] ? check_preemption_disabled+0x3c/0x200 [ 272.426643] [] ? check_preemption_disabled+0x3c/0x200 [ 272.433481] [] ? task_has_security+0x130/0x270 [ 272.439708] [] vmalloc+0x5c/0x70 [ 272.444722] [] ? sel_write_load+0x119/0xf60 [ 272.450686] [] sel_write_load+0x119/0xf60 [ 272.456478] [] ? sel_read_bool+0x240/0x240 [ 272.462358] [] ? trace_hardirqs_on+0x10/0x10 [ 272.468408] [] __vfs_write+0x116/0x560 [ 272.473937] [] ? sel_read_bool+0x240/0x240 [ 272.479815] [] ? __vfs_read+0x550/0x550 [ 272.485435] [] ? check_preemption_disabled+0x3c/0x200 [ 272.492272] [] ? check_preemption_disabled+0x3c/0x200 [ 272.499109] [] ? rcu_read_lock_sched_held+0x10b/0x130 [ 272.505941] [] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 272.512518] [] ? __sb_start_write+0x161/0x310 19:35:33 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) getitimer(0x0, &(0x7f0000000180)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=""/239, 0x183, 0xef, 0x1}, 0x20) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) setxattr$security_smack_transmute(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x2) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000000)=""/108, 0x7}) 19:35:33 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x549f5645390469d9}, 0x8040) socketpair(0x5, 0x1, 0x100000001, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x5c, @local, 0x4e20, 0x4, 'nq\x00', 0x11, 0x2, 0x72}, 0x2c) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:audisp_var_run_t:s0\x00', 0x26) 19:35:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom(r0, 0xfffffffffffffffd, 0x0, 0x10020, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 272.518654] [] vfs_write+0x185/0x520 [ 272.524010] [] SyS_pwrite64+0x13f/0x170 [ 272.529625] [] ? SyS_pread64+0x170/0x170 [ 272.535327] [] ? do_syscall_64+0x4a/0x570 [ 272.541117] [] ? SyS_pread64+0x170/0x170 [ 272.546821] [] do_syscall_64+0x1ad/0x570 [ 272.552525] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 19:35:34 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:34 executing program 1: r0 = epoll_create1(0x80000) read(r0, &(0x7f00000000c0)=""/93, 0x5d) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0af50e1687a33f3188a070") r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = dup3(r1, r2, 0x80000) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) write$P9_RLINK(r3, &(0x7f0000000080)={0x7, 0x47, 0x1}, 0x7) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x10000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4020}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000814) [ 272.587767] Mem-Info: [ 272.593674] active_anon:64133 inactive_anon:37 isolated_anon:0 [ 272.593674] active_file:4518 inactive_file:10794 isolated_file:0 [ 272.593674] unevictable:0 dirty:102 writeback:0 unstable:0 [ 272.593674] slab_reclaimable:4877 slab_unreclaimable:59113 [ 272.593674] mapped:58688 shmem:65 pagetables:1014 bounce:0 [ 272.593674] free:1444323 free_pcp:452 free_cma:0 [ 272.639522] Node 0 active_anon:256632kB inactive_anon:152kB active_file:18072kB inactive_file:43188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:234656kB dirty:408kB writeback:0kB shmem:196kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 272.664955] DMA32 free:3019432kB min:4696kB low:7712kB high:10728kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020108kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:676kB local_pcp:32kB free_cma:0kB [ 272.710545] lowmem_reserve[]: 0 3505 3505 19:35:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000d80)={'yam0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="cd5f3a8d822a"}, 0x14) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 19:35:34 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 272.715447] Normal free:2758108kB min:5580kB low:9168kB high:12756kB active_anon:256832kB inactive_anon:152kB active_file:18072kB inactive_file:43188kB unevictable:0kB writepending:408kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:19508kB slab_unreclaimable:236436kB kernel_stack:4544kB pagetables:3996kB bounce:0kB free_pcp:732kB local_pcp:624kB free_cma:0kB [ 272.761079] lowmem_reserve[]: 0 0 0 19:35:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'trusted.', '/dev/binder#\x00'}) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x820000, &(0x7f0000000200)=ANY=[@ANYBLOB='mode=00000000000000000000137,mode=00000000000000000001777,mode=00000000000000000000005,mode=00000000000000000000003,mode=00000000000000000000005,mode=00000000000000000000001,mode=00000000000000000000007,mode=00000000000000000000343,mode=00000000000000000000001,mode=00000000000000000002000,measure,subj_type=wlan1[(\'wlan0-,rootcontext=staff_u,defcontext=staff_u,smackfsfloor=/dev/binder#\x00,audit,obj_role=trusted.,hash,fowner>', @ANYRESDEC=r1, @ANYBLOB]) [ 272.765340] DMA32: 2*4kB (UM) 2*8kB (M) 3*16kB (M) 1*32kB (U) 5*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 735*4096kB (M) = 3019432kB [ 272.826702] Normal: 804*4kB (UME) 2475*8kB (UM) 1315*16kB (UME) 293*32kB (UM) 104*64kB (UME) 55*128kB (UME) 11*256kB (UM) 15*512kB (UME) 22*1024kB (UME) 8*2048kB (UME) 645*4096kB (M) = 2758456kB 15387 total pagecache pages [ 272.873953] 0 pages in swap cache [ 272.878049] Swap cache stats: add 0, delete 0, find 0/0 [ 272.888934] Free swap = 0kB [ 272.892003] Total swap = 0kB [ 272.895059] 1965979 pages RAM 19:35:34 executing program 2: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f00000003c0)=""/66) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0, 0x2}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000008, 0x10010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={r1}) 19:35:34 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:34 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 272.899005] 0 pages HighMem/MovableOnly [ 272.905774] 313623 pages reserved 19:35:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}, {0x20, 'cpusetvboxnet1puserem0'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '-'}, {}], 0xa, "ac56cef6c145338d8454db380f77f0957e66934575a5e1f6af122cc2a51845083a36c77afbd5b86e4e6f19e3f8c64f4336668df841f2467ea25c9ba3195189bcd4c2181e4ac8a1f98cdf263ef53c1c9baaa87189d02a8e5cc1aaf07432b942fcba6122dcdc7ad5ed5b06101d26f43ecd13503a6af5b6a52e18b4589782c870801b561e6630a8ee65479d2b4a5d7bcec279a2a9881acc71306eaf30d98e32fbe077e4aaeafd49d2359cf2aedd1e408c66d043441b6d34f38808"}, 0x116) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) sync() chroot(&(0x7f0000000000)='./file0\x00') ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 272.946831] binder: 7799:7802 Acquire 1 refcount change on invalid ref 4 ret -22 [ 272.963166] binder: 7799:7802 got reply transaction with no transaction stack [ 272.972209] binder: 7799:7802 transaction failed 29201/-71, size 88-16 line 2921 19:35:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f00000003c0)='fdinfo/4\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f00004ee000/0x1000)=nil, 0x1000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r3 = memfd_create(&(0x7f0000000500)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r', 0x200000020) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) unshare(0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000000c0)) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xd, 0x0, 0x7fffffffe, &(0x7f0000000840)={0xffffffffffffffff}) finit_module(r5, &(0x7f0000000340)='/dev/uinput\x00', 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00\x00\x05\x00'}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') socketpair(0x1, 0x7fffc, 0x7, &(0x7f0000000480)) r8 = creat(&(0x7f0000000440)='./bus\x00', 0x400043) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000380)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x80000000004) ftruncate(r8, 0x2008200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xf2, 0x0, &(0x7f0000000200)="cdfbc072d9b632e85d76d76862be4a564ed6068d2e0596694f159e7e7897e02f0942a44ece4131a5983ab1e66a05aa824be8e34d177d312d9d6e0ffdfb9de6c3adfbb7db9cb55d169161644d92f15ff247fb6f1b727b943dbd7adb75d0317b141febb0df1e04f9fb064f73de3833dda6897e6352227da70680b9ce1e6ed24bfaca347810474682203b21d18ccdc276ec0ec9fc6eea59722e467688a2c9fbdf6b77dfb01016c6fd07609f6495d2e077ad8c808814921804a91c649977b686e7cc9988f5bddd1837ee7778c23ad6eb9c2b7f2a9a89b637f4c52fb2a022fa2ccb7485bc2a407e473e54b2fdd628e1fa1b9cf94d", 0x0, 0x1000}, 0x28) r9 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0) sendfile(r8, r9, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) 19:35:34 executing program 2: openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:34 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:34 executing program 5: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 273.056624] binder: 7799:7817 ioctl c0c0583b 200004c0 returned -22 [ 273.063252] binder: undelivered TRANSACTION_ERROR: 29201 19:35:34 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f00000003c0)=""/66) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 273.150225] binder: 7834:7835 Acquire 1 refcount change on invalid ref 4 ret -22 [ 273.169356] binder: 7834:7835 got reply transaction with no transaction stack [ 273.176723] binder: 7834:7835 transaction failed 29201/-71, size 88-16 line 2921 19:35:34 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 273.231174] device lo entered promiscuous mode 19:35:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) getuid() pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) clone(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000200)="1bb4d98e4e2aaf07a1ccb13290106b76b0d8244f955cdce9cff53e45012327fc2eafb1d75d7375603a3b68a6edecce0fac8584218ff8ac") r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x4}, 0x10) r2 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x400, 0x110) write$nbd(r2, &(0x7f00000008c0)={0x67446698, 0x1, 0x3, 0x3, 0x1, "f826adde93a23a872c24f6b9dd1c97197d29bee3407b46c972542164ea7ec643c585d1539fb203dba666d26901415c12e92c63b93db9e0811a5bffc4755a8c98e1a2b3046dcec1fdb969106d38e6a53c42b949bf86d6b8afea28d732143554d3b63a06f6f60830e01e65b6da8cb61fee15e28aacfcd1bfc924185951a72de8944e8d63ac75ed900e8d95d1dc7cd64f40d14b9d820c0a2b21905110c05a224b75dd4384ed424f35e031f0d18f771e9507dd5cb8a2ddd7032c7b5bcaa5ddce8cc0a9274070f6528fcb4af2729ab8008863b07a1986b7b8297ec46023ad96f6d6debacad0bffaef00023fa857a03fadb6101298747873980f9f4e1ac31bb6f9d1210668b63e60af78f9b9dcef66949372c1fcdca1f7369b0a144c37d568d27e2e6c57fc266f28eb861e31cfd86814cde2d13b3dbaf5410d4f0d28303a2b987c416f4a7dd436d89e095307608385868a66ac682899f5f0b95d1ca8c00e53e4f08d8c57ce854c4f900db412071e1139fa2db7fa1ae1f091c6c9bb0f06c37b21961fc4dc986fa6da184798a074c7ddfc1162c8db855d1f2e83d88323ab717c8053b7f126094b28085d4b81190e3333dda03e24ccefc42b7eb4a6bf027cd6729c25daa4e3d488d59837c82cc7f44facd64f44c651130c3a0a3c1101b7b10d212a04baeec86bf91ff222dcefe6a3d94941295975dcc20a9e80e4b9a61c119cbe23cdc592cd4a1364dd4716a17b888ff7c711ecbed414cd9cee444016802cfcaee2979ee3c169bc71422a7219332d64ab6ffd3cc0248375cdcec241636720a90cb393fdf0fc078a3d9a97a23a938bae2b1265e5fd6326af7994f25c95f5cc4bf0be4bc05ed215062c982b4189419f7aeb707c0a0ab615b2c6c8955a8008346b0890003ef23dcb6d80a394a16f22e16fc4bc7ea808f14052ac60bb9962f39f383d3889a9446a8e8acbeef08091ed3319aa63258ff9aa70c9d2fec10c36a9f04048693274f45fd2e5bb33af95c425b8566228bc14f0876d8184a75800ed452146f6dabfe49254b4c082279a4a9f96898e89f879458b3a65ed062a1d436c41f664336c8c9e37b860b04ceeb5c5ea97eda113dcb9d5a3ee86ecf03be07492fc452e6dc554d196e51585c3ee7d0f8a09f2c6b5ae6bfb4f5ddbef732a6ba8367957dafaa246dcf78bf5436fbccec5810cbfc1e8b969a40f88717ffed5a936f05456a66424e387ec651a6510290cec1572e532df83310dbc3a740d3cc7a2408dc116074d6a9ee86107dc85dab14fb38b4fe09d80d572d1792ff8c1ae8df2a2caa05c0d0741feeef385c5772b4b6a0fa1c27625bfc79e35126c04847a854b0c2952fb87fd9bf0b2e7c82fbc18630c751e3dc7027a4296ea6e0e40c37782fd6ba4cae83378f84780f188f6145c9deef0a1610cff43073c87bf18b2d4ee05ff1e6d4a08060fddaf6b6c94868ef563759f5d7b742a42d4aab16b267d8c2e019475c7666d603e39b75db878775c8528030d3b864bf205bc091b23a9f24f8fff007fc73c1614f1ba685ac3ba56fae196065b8fda53a01c24fcbbb8b99593c3547675e193a97de4b67ffb71599cd55c46ec4ab279e44d6e7511a25c0132b6545569236d426f9315772214cf26f7e54f663abc74bb25c2774aa65e0de57daa539cf2b31babf8ed5014d363ce80ba355b46302d35554e871f6d26fb511a353f0c1da700046d0e66e40a87fd082772301ca6c6d54ec8cce7f779a6fb68fc7af585adbd8c7d53a9d0927a8088273a7cc1660c246d8d853aadf0f6a1507131dba375173750e441994937ccb180f24ea27ec3df86910ca164b369356da915dc5e598cb66fab484ebbbd9375489e103d0c38c0de96599b80bdd088fa4ea7e526f9fb03de28f0525dcd42ccc4a09c6fd86974772a499f1551caa00d6afff39429a75d24ffda739c853f870da9c33374196ae282791a610ccf34bd5a9d8b22eaf7468d113dba7f47f8a75113c247a7887186f5a5d165f42c6008254180737171aa156a0fba0f7036cb951f64bd279de90228ec67226174bfdb6ce1a7bab8e2ec4000b80b047d21828cfbb3ab03f512616b7f4568190abd72eaa0eeea151844377c34aef8bfe6549764d0195196620703458254a6d56149dc5ef12aa6054cfab820fb2b4e59aeee0de99342eeefe595d637a906eedf26d8135a665811d502c3ecf6d21d030febb0e30828624e5ae75471459976bc982c8ee9105036ff295fb7ad510183bbbd493a2484b435c9d07b3f30db3a5599f2cec9525e5c104a094c5fb421ac587a7749b7ea1e57d97ebcd66c881bb79dc09a9e37ee11af815bb75a2e59f1a699e316efe2c87a2f72f612fb449b6153ccb5154af60593eaac0e1dde6a517ac116f5a5502c304374f9dfaada372bc8a5f70116169e4b896bb2446078e0577f96ec41dd9843076859519827b5293b88155dfff74f309a66da6a29bda551149322d39ad23c78ffe27db5660d2ae76a2f628415327b5a0fbc274764f8f46fed80efd5f199887df4d54c413e79681a7a725557727f87e4435b71b2b014eb36af0b76b52496df2b4622c14a6398d20aeb5f27efc4cae43a79afef20dcf4555051eb3a1f247a25a9e192e1e2b080b287f12912678fdf2ad7c05e31a42c6a20ed710b7fb06dd043b20aeba893dcfc8a3fae579f6f37010855584fd1c00eeb66eb48e67444542f46e785aace43f6a3566b6c652a66777a6f8a62854ab86d44bae06a945d57aade069d53d3d5b770aeb94d42baef38403f45667efbe38164de9e6f61d325c9f7db8ab3248a10795b0793ecf9c16118665b3ea4133c25b3ef244a9f218216279ab976962841b8ed2c71642dc39a89c7a500c668d80807bf36da7f9b917f9a713f25a2b126a5dc8b058c95de72166d56f8530e485861b7f3fcf65c545a7b2b605befa009703f0f1db5a5274ca22f51decf2f545215e711ac607bdd0a86200e1faeaa1f7c9f4ac941b63efc5995d340e1f485c30108d3bc88e7fd7a6aa7ed5561c13ecd38c154a01f9411fff7241a126e8f94a9570d7144b969debf77358075a37f23b2eb5d81b1201bf640d831e25d30dd80be2ff8d5e0ce6c565b04bd6de9e524c1b4930f17bb1388e884eabca5eaf64a79a758fcafe320c1bc0e6e6fef136ab089f63085d5d4613e3b4b268a1971e564961279c4d40c6c31b635edde9f5a442e553e071f42af1cc6ea69e501754ecb3ce5af7c2a13edc60b0adcb5a884b07e6cf62df6ab4d02e6691111aa6436779b8855c4ee3b925820ec7d6ced5d0802af34909615b1b1b2501bb22098dd70d82a58ab1f3b6f4ba938da5af73bdfc503ecb00ba75335939c77b98a634739e9a424522a052f38c6912e39abaeead985a9317b7c02b8d75415fb015018f5dcfc44c7e148231194320650347f48ae029ad036046fc0ef79cebba7523ce9abd65d70396e635d2b9b4da28e15704691c46b0181ab022aa0c2d9b8914f1fdd4d2dcfd579c44f9875f140bbe77ea9d5f5f63b5557c78e2cb244a443bf1c4bfbbcc60e5f4b6cb8de4e7f5696e34da526940dfe5dc615ab7d9823931703108721a1530806d2be9ee0a18c6afb1c6180cbd4795ecdf8a94382034f00cb5e74c5581f7097bdf1bdb25dabf28fce67c50880737e89006e761209e9784c0bb328806a66afbe20680b7334aa52d665a1746551421af39872e4cf42487c2839d6aa3e88bad6698ca8ec77747f5c3c52d3513825f5c7d35be349f5dc2bd5155196bacf89200047dca18489c55a1a8e4811f15da47370085da0b681529450a350bcf65ccbebde54799f6558c1d5d68a7b1c232f4770cce47d1fe48edffc75658e58cc12c9dc65044df5066f0432737f62a08ec989853a823197b8928759c992604ff97da0f91008a9e5ec70e53923885ead9edcc2313d3bb2de6f1ea43cd03077b1da8d7d58766a2f3a46d3db766d036284596b8bde0f3ded2a937331efb8487d8304e56b887964541771519b7eb333208c1a8233c70e84026d7ab4e2e281c6f10da2102e0a8cf06f6504898bcebd84b83c695d6d48060a034fbe497a54ed01f32b8cde4a53b768bfd557944c6c5b6aee44e186f4303f87e8f99f196e20cc5e23bce463e3892c3e6fe3390ee317bd2d353d1427bce62902f610311b9e760cccde63c312f681e44833b54bd6bcc2dff9dc2a17ed98abb0e1402aaa0dacf669730234a6867781597008cf49e9bd18c30794c8047bfca3610e35c8720928db87887a63f0a6bf66827f4912dfdba31b8bd0e395cf412ca294e03fae54ac605f08df2fb1ea8787998fad742042cd493f8972bf8c22201f41c478ebdb3d71739e502695b1a337b8b9aee4b6b27a2ce92330742ffc2cdadb62c3cfbc1ba59e04df22f6f23cd7163ffad66ecf6e265903613917aa3fb2c9a53c09e9b684108221af61d487c8c38bffc1510cdcc2ee9eea06bee81d55ac57b2c4b184616918da979b6c26c8630939a565c8fd79a6abfcc460b09bc5e9c464d662132cace5f642f75b63c8e15dbd7f8d6ba54a6b018366c5f14d726e53c9155410757cbb17848d1e39ea18cf86699fa86f143c8a2ca11f8c0933bc46546dcc7b3f55b45452c42515932d149e4f978d9bfceb3eafba513764426acf996cc195192f6edf1f0094316ff4bfdb8ddaf29a2d0af60e7fa407168236ea83fb53e131f7547d0ccc58af22cabfa518cb8b9eecfd8445116df24a41a4e71db2c7237a2cbcf33ce07b6e450185b3b690c3297accd4eb6b6db4a88c8bd7286781a391199a487c35884d3f8dca96d392b0c984cc2f211ba73924fd58ecf88fb3c458e1344f6a0ffe3f377036208da24e3c6b223a18df2b29069cd3bab4584ace8cb3e3e63d00b4e9ca6bf45a8edf4627a1a867faf36f62528292b16f8211b5e01c054abb2bc89476a89a294bfdbab2f2409dfa3114680c79345113abd0fa7aa4d85db00c5dcfe7f6fd3629460f3f596757782bb75156a77dc4978e61a73dd2c06352b2765474c5ffe24ee0d5f0ad700f48335c7eb717fd78a1946bd751f34eed9b06a5c78a45ddec37392ab1b40cebaaedb8a1d959b251c586dc15426c3b8dc639e0cf069b905f927bdae0fc721d2b6f9816b7c93a933e7286f25b49e91d11849a26936ba66f68cbaa1c0854ecebe00797328e19a133d729aaa9900cd60a1f46513deca5eb70e5939214616ecc8a49b64875fb18ec0818f4b5f2b19c1f44be167e3897fd167aa3fbe5224271bf947b41c1c98bfa2538d722b939914e5def185ed1e05a309f30794c0807a3339031728a68e5c9d6bbec19a0526b88c73504789a10954a52e4d81990da9e6aed436c66a06c3c66eab2c397e570a3e1260b70eff52d403d908db369d42aa98ed15903a19ba1c10f3204c0190f6ae3d1469be1fbe27d9cfc72d2c88c7a34b919f9f68ade67bd226f4470f95a1a7664db4a3ebd40a7f141256e5598080519d9a03b57ff68a16488785da2977b9d41352b1860b587fa0804d84ce369011e9286868db9dddced1174182d98b166774b4f231ed622d66303ea14bf11f5b1e4f50358b2d696b03712dddbd9a270b6f601855ea312b3a7fb7d6bf028d5df45f86f2437b321d3fa4edaa8b264d101e511af8daece49e7fbfce553e22542a16d6070f8c65ce43182c92756ad8a52bad7b270055f8f2c20e436e249191840caeb58d8c3a1a855d853b50633d063321002202dad591e458e3bf2535022a4eb66ac625064fe6f055197919e953a31fff006ec66dc1810e20ee4bea1ec7d3bfa9836c2a9942ecf014ed43b8078ce10dade41c1"}, 0x1010) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0xfffffffffffffffd, @broadcast}}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) creat(0x0, 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, 0x0) epoll_create(0x7) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f00000003c0)=""/66) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 273.260325] binder: undelivered TRANSACTION_ERROR: 29201 [ 273.267965] binder: 7834:7835 ioctl c0c0583b 200004c0 returned -22 [ 273.332785] binder: 7849:7851 Acquire 1 refcount change on invalid ref 4 ret -22 [ 273.345150] binder: 7849:7851 got reply transaction with no transaction stack [ 273.353767] binder: 7849:7851 transaction failed 29201/-71, size 88-16 line 2921 19:35:35 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f00000003c0)=""/66) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 273.427379] binder: undelivered TRANSACTION_ERROR: 29201 [ 273.435734] binder: 7849:7851 ioctl c0c0583b 200004c0 returned -22 19:35:35 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) [ 273.514584] binder: 7858:7861 Acquire 1 refcount change on invalid ref 4 ret -22 [ 273.538787] binder: 7858:7861 got reply transaction with no transaction stack [ 273.554499] binder: 7858:7861 transaction failed 29201/-71, size 88-16 line 2921 [ 273.582813] binder: undelivered TRANSACTION_ERROR: 29201 [ 274.017910] Y­4`Ò˜: renamed from lo 19:35:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f00000003c0)='fdinfo/4\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f00004ee000/0x1000)=nil, 0x1000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r3 = memfd_create(&(0x7f0000000500)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r', 0x200000020) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) unshare(0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000000c0)) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xd, 0x0, 0x7fffffffe, &(0x7f0000000840)={0xffffffffffffffff}) finit_module(r5, &(0x7f0000000340)='/dev/uinput\x00', 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00\x00\x05\x00'}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') socketpair(0x1, 0x7fffc, 0x7, &(0x7f0000000480)) r8 = creat(&(0x7f0000000440)='./bus\x00', 0x400043) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000380)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x80000000004) ftruncate(r8, 0x2008200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xf2, 0x0, &(0x7f0000000200)="cdfbc072d9b632e85d76d76862be4a564ed6068d2e0596694f159e7e7897e02f0942a44ece4131a5983ab1e66a05aa824be8e34d177d312d9d6e0ffdfb9de6c3adfbb7db9cb55d169161644d92f15ff247fb6f1b727b943dbd7adb75d0317b141febb0df1e04f9fb064f73de3833dda6897e6352227da70680b9ce1e6ed24bfaca347810474682203b21d18ccdc276ec0ec9fc6eea59722e467688a2c9fbdf6b77dfb01016c6fd07609f6495d2e077ad8c808814921804a91c649977b686e7cc9988f5bddd1837ee7778c23ad6eb9c2b7f2a9a89b637f4c52fb2a022fa2ccb7485bc2a407e473e54b2fdd628e1fa1b9cf94d", 0x0, 0x1000}, 0x28) r9 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0) sendfile(r8, r9, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) 19:35:35 executing program 2: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:35 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f00000003c0)=""/66) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:35 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:35 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000340)="120000001200e7ef007b00005380a79a9e58", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000100)=""/246, 0xf6}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/209, 0xd1}, {&(0x7f0000001480)=""/245, 0xf5}, {&(0x7f00000002c0)=""/86, 0x56}], 0x5}, 0x0) recvmmsg(r0, &(0x7f00000020c0), 0x320, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg(r0, &(0x7f00000017c0)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x1, 0x5, 0x100000001, 0xfffffffffffffffc, "a8cb28c77a05348c48a3ad9193a7da3060974a3968afb703ec048ee17ddbc7773743cc28e074814038a2a9b1e8413274ca8732ffa9b0e2b10352e67bd5c76f", 0xc}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="1cc52ff2effadc6248bbb82ffc1469e810385478ce88ba6eebf22c5f7b99b7f8687004ba752f8d", 0x27}, {&(0x7f0000000200)="9aad09ac9926bf90136985c2ea6cfb7395de7a70e5c6df0005f8763d94af70afa4c6ae8dfe59f49848b9fe601a8e17d1068a0036c2db05fc0f118650ee0af66e0459f3c3524331924b6ad25daa3a220a187b8bfb34fb3fd740117127b3f8e264b1386555baf5af90fdfddbbbb4badd384a87643ecd5c1c561d35420541ac46485e95f1c50aecb5dc946c0263c5e73ee5e6a5236358a3868ab053339a9c92935e", 0xa0}], 0x2, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x220}, 0x10) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000001840)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_extract_tcp_res$synack(&(0x7f0000001800), 0x1, 0x0) 19:35:35 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0xfffffffffffffcda) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 274.088047] binder: 7878:7887 Acquire 1 refcount change on invalid ref 4 ret -22 [ 274.103330] binder: 7878:7887 got reply transaction with no transaction stack [ 274.119799] binder: 7878:7887 transaction failed 29201/-71, size 88-16 line 2921 19:35:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f00000003c0)=""/66) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:35:35 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:35 executing program 2: openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timer_create(0x9, 0x0, &(0x7f0000000240)) [ 274.157886] binder: undelivered TRANSACTION_ERROR: 29201 [ 274.197352] binder: 7902:7904 Acquire 1 refcount change on invalid ref 4 ret -22 [ 274.217363] binder: 7902:7904 got reply transaction with no transaction stack [ 274.239606] binder: 7902:7904 transaction failed 29201/-71, size 88-16 line 2921 19:35:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f00000003c0)=""/66) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:35 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) [ 274.280136] binder: undelivered TRANSACTION_ERROR: 29201 [ 274.288292] audit: type=1400 audit(1549395335.926:24): avc: denied { wake_alarm } for pid=7910 comm="syz-executor2" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 274.324195] binder: 7915:7917 Acquire 1 refcount change on invalid ref 4 ret -22 [ 274.324205] binder: 7915:7917 got reply transaction with no transaction stack [ 274.324213] binder: 7915:7917 transaction failed 29201/-71, size 88-16 line 2921 [ 274.352004] binder: 7915:7917 ioctl c0c0583b 200004c0 returned -22 [ 274.378816] binder: undelivered TRANSACTION_ERROR: 29201 19:35:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f00000003c0)='fdinfo/4\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f00004ee000/0x1000)=nil, 0x1000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r3 = memfd_create(&(0x7f0000000500)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r', 0x200000020) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) unshare(0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000000c0)) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xd, 0x0, 0x7fffffffe, &(0x7f0000000840)={0xffffffffffffffff}) finit_module(r5, &(0x7f0000000340)='/dev/uinput\x00', 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00\x00\x05\x00'}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') socketpair(0x1, 0x7fffc, 0x7, &(0x7f0000000480)) r8 = creat(&(0x7f0000000440)='./bus\x00', 0x400043) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000380)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x80000000004) ftruncate(r8, 0x2008200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xf2, 0x0, &(0x7f0000000200)="cdfbc072d9b632e85d76d76862be4a564ed6068d2e0596694f159e7e7897e02f0942a44ece4131a5983ab1e66a05aa824be8e34d177d312d9d6e0ffdfb9de6c3adfbb7db9cb55d169161644d92f15ff247fb6f1b727b943dbd7adb75d0317b141febb0df1e04f9fb064f73de3833dda6897e6352227da70680b9ce1e6ed24bfaca347810474682203b21d18ccdc276ec0ec9fc6eea59722e467688a2c9fbdf6b77dfb01016c6fd07609f6495d2e077ad8c808814921804a91c649977b686e7cc9988f5bddd1837ee7778c23ad6eb9c2b7f2a9a89b637f4c52fb2a022fa2ccb7485bc2a407e473e54b2fdd628e1fa1b9cf94d", 0x0, 0x1000}, 0x28) r9 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0) sendfile(r8, r9, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) 19:35:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:36 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) write$FUSE_BMAP(r1, &(0x7f0000000080)={0xffffffeb, 0xe9ffffff}, 0x18) 19:35:36 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 274.583137] binder: 7932:7939 Acquire 1 refcount change on invalid ref 4 ret -22 [ 274.590956] binder: 7932:7939 got reply transaction with no transaction stack [ 274.598653] binder: 7932:7939 transaction failed 29201/-71, size 88-16 line 2921 [ 274.620697] binder: 7932:7939 ioctl c0c0583b 200004c0 returned -22 [ 274.658079] binder: 7948:7949 Acquire 1 refcount change on invalid ref 4 ret -22 [ 274.667547] binder: undelivered TRANSACTION_ERROR: 29201 [ 274.690237] binder: 7948:7949 got reply transaction with no transaction stack [ 274.705401] binder: 7948:7949 transaction failed 29201/-71, size 88-16 line 2921 [ 274.710928] binder: 7948:7955 ioctl c0c0583b 200004c0 returned -22 [ 274.736345] binder: undelivered TRANSACTION_ERROR: 29201 19:35:36 executing program 5: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000100000000000000", @ANYRES32=r4, @ANYRES32=r4], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 19:35:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) preadv(r0, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_procfs(r1, &(0x7f0000000500)='uid_map\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f00000000c0)=0x9) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x10000000, 0x0) fcntl$setown(r4, 0x8, 0x0) getuid() capget(&(0x7f0000000100)={0x200f1526, r1}, &(0x7f00000002c0)={0xffffffff, 0x6, 0x6, 0x0, 0x5, 0x3}) fstat(r4, &(0x7f0000000540)) r5 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x0, &(0x7f0000000340)={&(0x7f00000001c0)="c401792b780041dd33cfc4e16e5285e800000066450f38020966660f6c2cd1c461265aeff04481060000002199c40211af19", {}, 0x0, 0x0}, &(0x7f0000000440)={&(0x7f0000000380)="8f6950014e1f36420f54dbc4a20dbfdb8f6978c11b8f885885cdf9c481ac5cc93e0ffd8bff2f027bf30f7ffcc441e55d1ac4217c118075980000", {}, 0x0, &(0x7f0000000400)="f243afc4c3d122641f1213660fe47cfd0041700cc44199d44006c463b5496f00fa66470f78c30056f3440f2cc0c4237122b5040000000d64410f0f7c81e1a7"}, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000940)=r5) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10b, &(0x7f00000004c0)={0xfffffffffffffffd}) sysinfo(&(0x7f00000007c0)=""/154) getpriority(0x2, 0x0) getuid() 19:35:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:36 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:36 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:36 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) 19:35:36 executing program 1: ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, 0x0) pipe2(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8004002, 0x100000000) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe50) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) sendfile(r1, r1, &(0x7f0000000140), 0x8800000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@ipv4={[], [], @local}, @in=@empty}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000044c0)={{{@in6=@local, @in6=@dev}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000045c0)=0xe8) getsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000003c0)=""/3, &(0x7f0000000400)=0x3) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="800000000100000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x4, 0x6, 0x9, 0x6}) [ 275.027152] binder: 7965:7974 Acquire 1 refcount change on invalid ref 4 ret -22 [ 275.046907] binder: 7965:7974 got reply transaction with no transaction stack [ 275.073316] binder: 7965:7974 transaction failed 29201/-71, size 88-16 line 2921 19:35:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 275.107388] binder: 7965:7985 ioctl c0c0583b 200004c0 returned -22 [ 275.129592] binder: undelivered TRANSACTION_ERROR: 29201 19:35:36 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 275.172125] binder: 7991:7992 Acquire 1 refcount change on invalid ref 4 ret -22 [ 275.191264] binder: 7991:7992 got reply transaction with no transaction stack [ 275.204409] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 275.204920] EXT4-fs (loop1): can't read group descriptor 0 [ 275.257056] binder: 7991:7992 transaction failed 29201/-71, size 88-16 line 2921 19:35:36 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 275.257894] binder: 7991:7998 ioctl c0c0583b 200004c0 returned -22 [ 275.293981] binder: undelivered TRANSACTION_ERROR: 29201 19:35:37 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) [ 275.335478] binder: 8007:8010 Acquire 1 refcount change on invalid ref 4 ret -22 [ 275.355064] binder: 8007:8010 got reply transaction with no transaction stack [ 275.363003] binder: 8007:8010 transaction failed 29201/-71, size 88-16 line 2921 [ 275.385036] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 275.403790] EXT4-fs (loop1): can't read group descriptor 0 [ 275.423422] binder: 8007:8010 ioctl c0c0583b 200004c0 returned -22 [ 275.477410] binder: undelivered TRANSACTION_ERROR: 29201 19:35:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x3, 0x0, @broadcast}}}, 0x108) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) setreuid(r1, r2) 19:35:37 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) r2 = getpgrp(0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040), 0xab95a) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet_mreqsrc(r1, 0x0, 0x23, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) fcntl$setstatus(r1, 0x4, 0x42801) 19:35:37 executing program 2: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c, 0x80800) recvfrom$inet6(r0, &(0x7f0000000140)=""/221, 0xdd, 0x0, &(0x7f0000000240)={0xa, 0x4e24, 0x1f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0x611}, 0x1c}}, 0x0) 19:35:37 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:37 executing program 2: r0 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x920, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f0000000240), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x200000023e, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x5) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000640)={0x0, @speck128, 0x0, "00e6f36e9920a640"}) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000100)) write$eventfd(r2, &(0x7f00000000c0)=0x100000001, 0x8) r3 = dup3(r1, r2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000280)=0x5, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000680)) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000300)=0x1) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) bind$unix(r0, &(0x7f0000000500)=@file={0x1, './bus\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r6, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 275.887029] binder: 8029:8037 Acquire 1 refcount change on invalid ref 4 ret -22 [ 275.899886] binder: 8029:8037 got reply transaction with no transaction stack [ 275.913500] binder: 8029:8037 transaction failed 29201/-71, size 88-16 line 2921 19:35:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_getoverrun(0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f00000003c0)='/selinux/avc/cache_stats\x00', 0x3) write$binfmt_misc(r3, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) flock(r2, 0x4) fcntl$addseals(r3, 0x409, 0x8) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffe03}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) request_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0) socketpair(0x0, 0x5, 0x0, 0x0) poll(0x0, 0xffffffffffffffab, 0x200) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000700)) fsetxattr$trusted_overlay_nlink(r5, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L+', 0x2}, 0x28, 0x3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) keyctl$update(0x2, r4, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f000039a000)=[{0x35}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f00000002c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, 0x0}}], 0x4000000000001c7, 0x0) socket(0x2, 0x0, 0x8008003) 19:35:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 275.933845] binder: 8029:8037 ioctl c0c0583b 200004c0 returned -22 19:35:37 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 275.977402] binder: undelivered TRANSACTION_ERROR: 29201 [ 275.994869] binder: 8054:8059 Acquire 1 refcount change on invalid ref 4 ret -22 [ 276.033084] binder: 8054:8059 got reply transaction with no transaction stack [ 276.056407] binder: 8054:8059 transaction failed 29201/-71, size 88-16 line 2921 19:35:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:37 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 276.084242] binder: 8054:8067 ioctl c0c0583b 200004c0 returned -22 [ 276.103152] binder: undelivered TRANSACTION_ERROR: 29201 [ 276.152381] binder: 8075:8080 Acquire 1 refcount change on invalid ref 4 ret -22 [ 276.191873] binder: 8075:8080 got reply transaction with no transaction stack 19:35:37 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 276.218567] binder: 8075:8080 transaction failed 29201/-71, size 88-16 line 2921 [ 276.243049] binder: 8075:8086 ioctl c0c0583b 200004c0 returned -22 19:35:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000480)) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 276.284639] binder: undelivered TRANSACTION_ERROR: 29201 19:35:37 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 276.338261] binder: 8098:8101 Acquire 1 refcount change on invalid ref 4 ret -22 [ 276.377461] binder: 8098:8101 got reply transaction with no transaction stack [ 276.411495] binder: 8098:8101 transaction failed 29201/-71, size 88-16 line 2921 [ 276.417668] binder: 8098:8108 ioctl c0c0583b 200004c0 returned -22 [ 276.489463] binder: undelivered TRANSACTION_ERROR: 29201 19:35:40 executing program 1: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)=0x2, 0x4) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x800) fsetxattr$security_capability(r1, &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0x8, 0x2}, {0x1, 0x7}]}, 0x14, 0x3) open$dir(&(0x7f0000000200)='./file0\x00', 0x40000, 0x108) r2 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x1000000000015) 19:35:40 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:40 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:40 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x8, 0x200) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000480)=""/167) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0xff1a, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f00000003c0)={&(0x7f0000de2ff4), 0x14d, &(0x7f00007a8000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000003037dff000000000080000000000000c03e64b55cc38f5ad34acec42ef0fe698dbc9ef210b6df9ec734bc127fe2293629da8595a922f190586c87e540b6e73302514c2b6bb951e7e3d13c39813f3ff96c7c1962fcfc3184024a8982d0"], 0xfffffffffffffe6e}}, 0x10) preadv(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/141, 0x8d}, {&(0x7f0000000180)=""/12, 0xc}, {&(0x7f00000001c0)=""/112, 0x70}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000280)=""/138, 0x8a}], 0x5, 0x0) 19:35:40 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000005500000000000000000000000000000005000900ed0000000a00000000000000fe8000000000000000000000000000ff000000000000000002000100000000000000050dffff000005000500000000000a00000000000000ff8200000000000000000000000000010000000000000000"], 0x98}}, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2000, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f0000000080)='/selinux/enforce\x00', 0x11, 0x2) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@dev={[], 0x18}]}) 19:35:40 executing program 2: timer_create(0x7, &(0x7f00000001c0)={0x0, 0x31, 0x3, @thr={&(0x7f0000000000)="64651b7e2b4b37ec0d211dd092260c2d98803d55a824543a76a54bc623404314cc796d50b87703ba6d022464e5df", &(0x7f0000000040)="022468243e158def54cd6c99b42083dd5e8e577b456a0c84f48e9f5bf49d64f8d10eaf3c5006408b4d51d3c7dcaad9cec134b613e787b1c93e1c158c"}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x1, &(0x7f0000000280)={{}, {0x77359400}}, &(0x7f00000002c0)) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746dc91b2fb830303030303630303030303030303030303034303030302c757365725f69643d674a83514e90804128e41bb0dccfd52e9a14b08edaea953ef3dcd332b44035d976b334e1745c69dc6d23a103dd8f7793213e2358b4ced4c1c77c9e2d25949ba68c422caf724a0b96076d0757a17c5058a6943bc57298f1caed2a71217ef315d718e16144f306000000000000000068f1f2a5b471da8325b62ff084e2038a4f7c25b3d7f75f59e8737b52305b95", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/72, 0x48}], 0x1) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 19:35:40 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 278.904618] binder: 8180:8190 Acquire 1 refcount change on invalid ref 4 ret -22 [ 278.927179] binder: 8180:8190 got reply transaction with no transaction stack [ 278.936505] binder: 8180:8190 transaction failed 29201/-71, size 88-16 line 2921 19:35:40 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) fcntl$dupfd(r1, 0x406, r0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x7f) r3 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000003c0)='/selinux/avc/cache_threshold\x00', 0xfffffffffffffffc) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)="7a326ea98cc710a81b9c2eb2aace7a88935841934061922295180ae81121d9d6e275a9f2acf0dcd0b166d71b0a5c97d45a12eb6763efbdd87a71490ff3a208328bee4fcba6456c18232d2bd0da199f81b0eab5b8fb223e9f") bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) uname(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x40) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 19:35:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 278.956388] binder: 8180:8190 ioctl c0c0583b 200004c0 returned -22 19:35:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1010000000013, &(0x7f0000000100)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000300)="14d7212207d753499d0beba40133d87ee212a69ebbe8a2934677e825010df27a3419efac1316d95066657242bba28f94a76fcc8be39f0114a1962e96d5f0e42b3234f0e6d8c01d937986db5161145293315d9e2dc8e5d2a206716da7d811898bf3dca494eb9e2a132d6205b93a5307eef50c9640cc1d23fe28622b353c6551e9d2cac37f8639cab37a322b32e5e864284a36740fb2d765261829640ccdfe44c2ce252ae697af22cd1927b197a734fcbe9270882d1728144c3930a464dfe9b53743b4fd5ecf8220e6a36504be9e5c5f3659c383c18254b6bf112acf04fc74", 0xde, 0x800, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000680)=0x100000001, 0x34a) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) r1 = dup(r0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f000000acc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16], 0x2}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x154) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) [ 278.998979] binder: undelivered TRANSACTION_ERROR: 29201 [ 279.012118] binder: 8214:8217 Acquire 1 refcount change on invalid ref 4 ret -22 19:35:40 executing program 2: r0 = socket(0x0, 0x80000, 0x1f) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) pipe(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0xbb1) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) gettid() 19:35:40 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 279.045178] binder: 8214:8217 got reply transaction with no transaction stack [ 279.067996] binder: 8214:8217 transaction failed 29201/-71, size 88-16 line 2921 19:35:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 279.092913] binder: 8214:8230 ioctl c0c0583b 200004c0 returned -22 [ 279.121352] binder: undelivered TRANSACTION_ERROR: 29201 19:35:40 executing program 5: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x7, 0x70, 0x7fff, 0x15, 0xff, 0x6, 0x0, 0x1, 0x80080, 0x1, 0x5, 0x0, 0x1600000000000000, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x4, 0x6c3, 0x7, 0x20, 0x0, 0x0, 0x2, 0x6, 0x4, 0x2, 0x100000001, 0x7f, 0x5, 0xef, 0x1, 0x5, 0xfffffffffffffffc, 0x1, 0xb40, 0x8, 0x0, 0xee9, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0x4, 0x8, 0x9, 0x1f, 0x7ff}, 0xffffffffffffff9c, 0x7, 0xffffffffffffffff, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000980)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x69, 0x0, "7c8d6def8778ff86604f359577da5dd74fbad7191ed5396ab0b2523c01188e88f2604f887625affe9929c6c871e1337c198a82f70f6c8a93efa1873f1a172c4da9e7cfef92a2a62fb735524dc204cb66"}, 0xd8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r4, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{}], {0x10, 0x2}}, 0x2c, 0x0) execve(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000380)='net/unix\x00', &(0x7f00000003c0)='}\x00'], &(0x7f0000000700)=[&(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000480)='net/unix\x00', &(0x7f00000004c0)='tmpfs\x00', &(0x7f0000000500)='^wlan0\'*}%$#,\x00', &(0x7f0000000540)='{posix_acl_access%\x92{\\+/@eth0GPLsecuritymd5sum\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='eth1)eth0\x00', &(0x7f0000000640)='\x00', &(0x7f0000000680)='net/unix\x00', &(0x7f00000006c0)='system.posix_acl_access\x00']) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) capget(&(0x7f0000000000)={0x20080522, r3}, &(0x7f0000000240)={0x5, 0x138, 0x10000, 0x3ff0, 0xd1}) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000840)={0x74, 0x29, 0x2, {0x3, [{{0x40, 0x1, 0x3}, 0x697, 0xe4, 0xd, './file0/file0'}, {{0x10, 0x4, 0x5}, 0x9, 0x7, 0xd, './file0/file0'}, {{0x20, 0x4, 0x1}, 0x5, 0xbea3, 0x7, './file1'}]}}, 0x74) getpriority(0x0, 0x0) [ 279.154614] binder: 8245:8247 Acquire 1 refcount change on invalid ref 4 ret -22 [ 279.177779] binder: 8245:8247 got reply transaction with no transaction stack [ 279.195795] binder: 8245:8247 transaction failed 29201/-71, size 88-16 line 2921 [ 279.222306] binder: 8245:8253 ioctl c0c0583b 200004c0 returned -22 [ 279.246664] binder: undelivered TRANSACTION_ERROR: 29201 19:35:40 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:40 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:40 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) r1 = dup3(r0, r0, 0x80000) ioctl$BLKPG(r1, 0x1269, &(0x7f00000000c0)={0x1f, 0x9a33, 0xb0, &(0x7f0000000000)="39dada4fa0b4f28b43f27f5af52999e284fc22d48f6f2aada50a082ff38168da45487e24f7ad2722f022e98617be6c920e19cd26d9379808b8d4afca319da5250f05880f27ea0e16f455b5c9128db9edf66c3ff215011b780b27549151731972199612bb75aaa422a5860f7e203d5747ef4ea71015c3a30149658df9287c862764ac51ee6e3f4df4ee0d5795f896830cd970d6ab6288c7988592e6f4e13bfae5f83f9d7f213f8c6a4564abfe1f750a75"}) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000100)=""/94, &(0x7f0000000180)=0x5e) getsockopt(r0, 0xff, 0x1, 0x0, 0x0) [ 279.331304] binder: 8262:8265 Acquire 1 refcount change on invalid ref 4 ret -22 [ 279.343735] binder: 8262:8265 got reply transaction with no transaction stack [ 279.352428] binder: 8262:8265 transaction failed 29201/-71, size 88-16 line 2921 [ 279.368845] binder: 8262:8265 ioctl c0c0583b 200004c0 returned -22 19:35:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 279.387773] binder: undelivered TRANSACTION_ERROR: 29201 [ 279.421511] binder: 8275:8277 Acquire 1 refcount change on invalid ref 4 ret -22 [ 279.436979] binder: 8275:8277 got reply transaction with no transaction stack [ 279.454728] binder: 8275:8277 transaction failed 29201/-71, size 88-16 line 2921 [ 279.478564] binder: 8275:8277 ioctl c0c0583b 200004c0 returned -22 [ 279.528091] binder: undelivered TRANSACTION_ERROR: 29201 19:35:41 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) fcntl$dupfd(r1, 0x406, r0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x7f) r3 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000003c0)='/selinux/avc/cache_threshold\x00', 0xfffffffffffffffc) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)="7a326ea98cc710a81b9c2eb2aace7a88935841934061922295180ae81121d9d6e275a9f2acf0dcd0b166d71b0a5c97d45a12eb6763efbdd87a71490ff3a208328bee4fcba6456c18232d2bd0da199f81b0eab5b8fb223e9f") bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) uname(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x40) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 19:35:41 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) clone(0x1000000000011, &(0x7f0000001680), 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000fc0), 0x4, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fchdir(r0) 19:35:41 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:41 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:41 executing program 2: r0 = socket(0x0, 0x80000, 0x1f) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) pipe(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0xbb1) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) gettid() 19:35:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") getsockopt$inet_int(r0, 0x0, 0x15, &(0x7f00006ed000), &(0x7f0000000100)=0x28e) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x8) [ 279.954087] binder: 8290:8299 Acquire 1 refcount change on invalid ref 4 ret -22 [ 279.972079] binder: 8290:8299 got reply transaction with no transaction stack [ 279.993506] binder: 8290:8299 transaction failed 29201/-71, size 88-16 line 2921 19:35:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @multicast2}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@rand_addr="7e4a3d7fb45d583b73dd853667c1f5d6", 0x61, r2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000100)) sendmmsg(r3, &(0x7f0000000000), 0x4000000000000fe, 0x0) 19:35:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) readahead(r0, 0xfff, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 280.006382] binder: 8290:8309 ioctl c0c0583b 200004c0 returned -22 [ 280.038387] binder: undelivered TRANSACTION_ERROR: 29201 19:35:41 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x84) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000540)=0x0) sched_setparam(r2, &(0x7f0000000580)=0x3ff) unshare(0x40000000) link(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./file0\x00') fstat(0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000004c0)={0x0, @broadcast, 0x4e23, 0x1, 'lblcr\x00'}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x80800) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x9, 0xfffffffffffffffc, 0x40, 0x16a1f19e, 0x9, 0x8, 0x1}, 0x1c) ptrace(0x4207, r3) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000140)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10880, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000240)=""/225) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x46000900}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x1c, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000001) tkill(r3, 0x3c) getpgid(0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) getrandom(&(0x7f0000000340)=""/236, 0xec, 0x3) 19:35:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 280.078240] binder: 8317:8319 Acquire 1 refcount change on invalid ref 4 ret -22 [ 280.085954] binder: 8317:8319 got reply transaction with no transaction stack [ 280.094910] binder: 8317:8319 transaction failed 29201/-71, size 88-16 line 2921 [ 280.105271] binder: 8317:8319 ioctl c0c0583b 200004c0 returned -22 [ 280.137406] binder: undelivered TRANSACTION_ERROR: 29201 [ 280.174641] binder: 8328:8331 Acquire 1 refcount change on invalid ref 4 ret -22 [ 280.185067] binder: 8328:8331 got reply transaction with no transaction stack [ 280.199396] binder: 8328:8331 transaction failed 29201/-71, size 88-16 line 2921 [ 280.215682] binder: 8328:8331 ioctl c0c0583b 200004c0 returned -22 [ 280.257941] binder: undelivered TRANSACTION_ERROR: 29201 19:35:42 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESHEX], 0x1a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x40000) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) getpeername$packet(r1, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000880)={@mcast2, 0xd, r4}) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 19:35:42 executing program 2: r0 = socket(0x0, 0x80000, 0x1f) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) pipe(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0xbb1) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) gettid() 19:35:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:42 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:42 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:42 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x84) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000540)=0x0) sched_setparam(r2, &(0x7f0000000580)=0x3ff) unshare(0x40000000) link(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./file0\x00') fstat(0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000004c0)={0x0, @broadcast, 0x4e23, 0x1, 'lblcr\x00'}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x80800) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x9, 0xfffffffffffffffc, 0x40, 0x16a1f19e, 0x9, 0x8, 0x1}, 0x1c) ptrace(0x4207, r3) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000140)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10880, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000240)=""/225) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x46000900}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x1c, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000001) tkill(r3, 0x3c) getpgid(0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) getrandom(&(0x7f0000000340)=""/236, 0xec, 0x3) 19:35:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 280.851502] binder: 8342:8347 ioctl c0c0583b 200004c0 returned -22 19:35:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 280.935986] binder: 8359:8363 ioctl c0c0583b 200004c0 returned -22 19:35:42 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000200)={&(0x7f00000022c0)=""/4096, 0x1000}) inotify_init() 19:35:42 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 281.015583] binder: 8369:8371 ioctl c0c0583b 200004c0 returned -22 19:35:42 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 281.063613] binder: 8380:8383 Acquire 1 refcount change on invalid ref 4 ret -22 [ 281.072014] binder: 8380:8383 got reply transaction with no transaction stack [ 281.086746] binder: 8380:8383 transaction failed 29201/-71, size 88-16 line 2921 [ 281.103342] binder: 8380:8383 ioctl c0c0583b 200004c0 returned -22 19:35:42 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 281.160881] binder: undelivered TRANSACTION_ERROR: 29201 19:35:42 executing program 2: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f00000005c0)) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000600), 0x8) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xc0000a01) accept$inet(0xffffffffffffffff, 0x0, 0x0) r1 = request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) keyctl$negate(0xd, r1, 0x0, r1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x4, 0x1, 0x3}, 0xa) statfs(&(0x7f0000000140)='./control\x00', &(0x7f0000000400)=""/234) preadv(r3, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f00000000c0)=""/18) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') setns(r4, 0x0) munlock(&(0x7f0000950000/0x3000)=nil, 0x3000) mkdir(&(0x7f0000000040)='./control\x00', 0x0) r5 = inotify_init() keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r1, r1}, &(0x7f0000000300)=""/177, 0xb1, &(0x7f0000000500)={&(0x7f00000001c0)={'xcbc-aes-ce\x00'}}) fadvise64(r2, 0x0, 0x0, 0x4) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000540), &(0x7f0000000580)=0x4) inotify_add_watch(r5, &(0x7f00005eaff6)='./control\x00', 0x8) shutdown(0xffffffffffffffff, 0x0) 19:35:42 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:42 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(0x0, 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:42 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x20000000000002d2, &(0x7f0000000000)=[{0x28, 0x80000000000000, 0x3, 0xfffff034}, {0x80000006, 0x2, 0x4}]}, 0xffffffffffffff03) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=""/12, 0xc) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) socket$key(0xf, 0x3, 0x2) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) 19:35:43 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(0x0, 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:43 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:43 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:43 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x11) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x10000, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x2) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0xc1, 0x0, 0x17a}}], 0x1, 0x0) 19:35:43 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(0x0, 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:43 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x280000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'lo\x00', 0x200}) r1 = socket(0x18, 0x0, 0x3) socket$unix(0x1, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) connect$unix(r1, &(0x7f0000006000)=@file={0x0, '8\r#\xb5\x11%\xb9(\x8a+\xb2\xa1\bm\x05\xc8\x00'}, 0x12) 19:35:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000200)=""/190, 0xfffffffffffffe76}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000740)=ANY=[]) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) umount2(0x0, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x440, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffdd6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000002c0)) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x7) connect(r2, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @loopback}, 0x3, 0x1, 0x3, 0x4}}, 0x80) listen(r1, 0x80) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x9, 0x4) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0xfdd6, 0x0, 0x0, 0x1f3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000840)="e748dedf3de8cf8e03f690f46f7b670bc3ddea227cd5f90260a87fe0bfebbe1ee80bfa4a46f6157beb27c34fbacd373330b67ddb493bef6686b3c66fb517dad4e76dbac5d1", 0x45) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0x20000000000000ff}) r5 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 19:35:43 executing program 1: mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb) mkdir(&(0x7f0000000940)='./control/file0\x00', 0x0) 19:35:43 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:43 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = pkey_alloc(0x0, 0x10000000000001) pkey_mprotect(&(0x7f000039a000/0x2000)=nil, 0x2000, 0x8, r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) munlock(&(0x7f0000529000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x0, 0x71, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) write$P9_RUNLINKAT(r2, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) mlock(&(0x7f00002fc000/0x4000)=nil, 0x4000) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x1, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000040)='lo(^\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 19:35:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000002c0)=@buf) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x7, 0x1d) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400) getpriority(0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000000c0)=""/75, &(0x7f0000000000)=0x4b) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) pipe2(0x0, 0x2000000080000) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000480)) recvfrom$unix(r0, &(0x7f0000000140)=""/110, 0x6e, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:35:44 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:44 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:44 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 282.596926] binder: 8473:8478 ioctl c0c0583b 200004c0 returned -22 19:35:44 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$RTC_WIE_OFF(r1, 0x7010) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f85fa0)={0x2, 0x5, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x60}}, 0x0) [ 282.696840] binder: 8489:8491 ioctl c0c0583b 200004c0 returned -22 19:35:44 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) clone(0x100000001108102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) removexattr(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="854edb3e2daeab20b4d8186e8b6bb84c118ab61e40ceac52554f4d030f85136b89a64108c56eaffb46fa31e8f8a12b1a4db7a038999a485f176daac43a620f7be2e5c612c6b5dccb2b181cb22efe589bd24b4c1b16782704af1085ac99a9330efc3e4ac5e36ddb35eadf71105aa6b7d77706d9457792d2b367fab5b6cb3368d49b4384257a884aa973d6409316284acb1d4edbd476aaec60e0b199b92813c7170230418fcaff4cacb87386b2955f98609893e67ca59c82b73bff59133b992cb6a6130efc478d4e65af7222bafb018244074854cf1c4ebcf86d92821e337ff178d8"]) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) chmod(&(0x7f0000000100)='./file0\x00', 0x0) socket(0x10, 0x0, 0x7) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000080)) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '}vboxnet0@+GPL\x00'}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) 19:35:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64, @ANYBLOB="0400000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) r1 = getpid() capset(&(0x7f0000000000)={0x399f1336, r1}, &(0x7f0000000040)={0x2, 0x4, 0x8000, 0xfffffffffffffffb, 0x0, 0x8001}) writev(r0, &(0x7f00007af000)=[{&(0x7f0000000100)="480000001400190c20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ff9f510040041feff5aff2b0000000000e7069a00000000", 0x48}], 0x1) 19:35:44 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:44 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) [ 283.166083] binder: 8503:8507 ioctl c0c0583b 200004c0 returned -22 19:35:45 executing program 1: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x2, 0x2, 0x37, 0x4, 0x0, 0x7, 0x4, 0x1, 0x2880, 0x7, 0x3, 0x4, 0x421, 0x0, 0x1, 0x6019, 0x0, 0x4, 0x4ee, 0x100000001, 0x10, 0x80000000, 0x3ff, 0x6, 0x800, 0x2f, 0x7, 0x8, 0x8000, 0x6, 0x80000001, 0x8000, 0x7, 0x5, 0x8, 0x5, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000080), 0x3}, 0x1, 0x3, 0x172d7602, 0x3, 0x9, 0x0, 0x8}, 0xffffffffffffffff, 0x2, r1, 0x3) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="39005077523a9668ef409df1e611b53223e321ef597500002e1e00002b908b8e091d760ff88aa723ab43ebe97b4fa1a90fd0c3a7b44fc61848"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:35:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clock_gettime(0x2, &(0x7f0000000280)) rt_sigtimedwait(&(0x7f0000000980), 0x0, &(0x7f00000002c0), 0x8) r2 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x80000) sendmsg$unix(r2, &(0x7f0000000940)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000180)="0c0bb946f9c2", 0x6}, {&(0x7f0000000300)="e40ff02994aad2b9eac7e6f6a743237f99647634d4ebaefcb5012a0b2dfd59e7927bdc0a9c78e36eb087479a386c30535067e8c2c9c5408ca71fee60c22c3ab39c1620763dd2ca33f397b451cd3f160bb4b11cc1ed4e64f20adeba437b638ed9f094b34815679f889990fc8d6b1eca10ce983b7d53f7e3908ef9f0724eb3028a57c97aa97f0bc8559e05815a4d11efabaea0daab04ea0762071a28202e951226f583d605c02a84a039f539c37bbadf07656b6d620eedad4f551e9054cacfccf2956690a5", 0xc4}, {&(0x7f00000001c0)="d5971036821b89ac2918521c5481e79e88e1373957a0d414be59bef4ca67de76b32ddd29453a6f1ebbe38d7ac352b65bff76f0b52b7947d3be3636b0f012bae8aa96033060b5d04dd706520c63f41afd98ee886b280fbff6841e3433cab1e25048b94b968a44b266ea0a57209e2b41a3c1735382297d9144c4ae222774bfa5dd786ac6", 0x83}, {&(0x7f0000000400)="62199c7da2b9a85f70a5d3ac5730dda7260042e9e1cd33c11fd1c877f0fcb21453cf20a7e43bd676ba059a1646d2fc7fcc5931dd1757da684e4d8f657ba2879b46d96e05ac61c66534df22b2a9e273c848b1dd246f44c481fccc69962431e05d1a17678c49aa304db2cb7e19bb88e7b7df26f07b4a39d25fab9a6b45e17403bad40656e0d3a038c2944f124c7c778a9541a349d4de0cfecb865dacb2b8ee4cb71e8fadfd3a0f3faacef79cbb761219915a5dac4bc1ff4214fab5b993400e26bd387519c695556d9423c0cc8e1d86286293726e890b807d8d7dec4531c6df03bd18bb5c3d", 0xe4}, {&(0x7f0000000500)="0bfd4d379bca9166c55788712f20a70754cd40c3c812d9000883beabc734a38c0bc6b1e931b1c05f2de626feab6dcc4e5231298f9a934dd721caa69aa65f16a21f701c86c9a2fb29af6d3a629c83eed74f5a28b5215de00a69b020a999c5da209fa9daf5ae54db64b3d6fa758425239f992f68d3ba67fbb0b3de53658e40313212e5efd7475168ad43ecf3", 0x8b}, {&(0x7f00000005c0)="91bf98ed3a640f1648f30582eff488b6c78cc9433b28643654c3b6bc5e5e205b7d1f448ae9ed17ced6c59b85ed51e9af8a10e8d2e865c7dbd81ce2ca448430", 0x3f}, {&(0x7f0000000600)="692f6e3092f5398dd47161c217b9240e30c1490ad82495d9f68a2b0a7f573a923e17f858dcc4a0a1b10fbc8bc0a65f01652c06cd7c6b1d7fd7d1d7151b3140256a81b07b15c410cbd5e4136cfeaae4f9beb0ccb7b47e3d5248db42f5e27825b546f37048ec6111762f7bbe2d51b8d1c06850c9171806bb5d96184ec5ced929c7846fb8d5d25f2c3fdc165744b9bc221a18f21b9c08a3865e9cad74cfccc13a9ac67d2145bc4b3ec0c7cd7277183ecd82103e02152aea44a2d7b4213d475b74f251e4ad67c743037c00120d9bec3816", 0xcf}, {&(0x7f0000000700)="8750abe213c8c05fb4cd0cdf9130db17d2a1a307bdef0a902b640a8221e25323ac9c97fa419e0e4c6211c02e740b0db53b7f89f9bb3636fa32d0cddb048d8234ad87eb1adcf06cfa61dc0c508b84b9ca2d8eec4c274fadfce10bde208ffc268d2a45d5544f36e35459916acca42b87c2d9b9856ab7d49e677ed44f2b71ebf3611e6cf127dda12533905f2dfdedf8f3736a60f8c2a4fb8abdf5088a38e6", 0x9d}, {&(0x7f00000007c0)="c0ff667389740a", 0x7}, {&(0x7f0000000800)="38d1365e3d5496fbdef709797552748c3b8d6535c4d2a754a063c6f2976487876560c476e759b5e4aee2a48ee25b583c04704d4560786652f77cab6ca6eecc1ee5e48c20b33ace", 0x47}], 0xa, 0x0, 0x0, 0x14}, 0xc080) sched_getscheduler(r1) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000000), 0x4) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) fcntl$setstatus(r4, 0x4, 0x42803) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/validatetrans\x00', 0x1, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) accept4(r0, 0x0, 0x0, 0x0) tkill(r1, 0x17) 19:35:45 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:45 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) [ 283.461089] binder: 8531:8535 ioctl c0306201 0 returned -14 19:35:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) preadv(r0, &(0x7f0000000380), 0x2, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x4c0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='c\xce\xdagroup.stat\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r2, 0x40101283, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) syz_open_procfs(r3, &(0x7f0000000500)='uid_map\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x10000000, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tee(r4, r4, 0x418, 0x40) getuid() fstat(r5, &(0x7f0000000540)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x0, &(0x7f0000000480)={&(0x7f00000000c0)="c401792b780041dd33cfc4e16e5285e800000066450f38020966660f6c2cd164652ef3410f597308f04481060000002199c40211af19", {}, 0x400000000000000, 0x0}, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) io_setup(0x2, &(0x7f00000003c0)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) io_getevents(r7, 0xe4, 0x0, 0x0, &(0x7f0000000300)={r8, r9+10000000}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10b, &(0x7f00000004c0)={0xfffffffffffffffd}) pread64(r6, &(0x7f0000000880)=""/223, 0xdf, 0x0) sysinfo(&(0x7f00000007c0)=""/154) 19:35:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:45 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r2, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 283.505995] binder: 8531:8535 ioctl c0c0583b 200004c0 returned -22 19:35:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:45 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 283.565721] binder: 8555:8559 ioctl c0306201 0 returned -14 [ 283.605366] binder: 8555:8559 ioctl c0c0583b 200004c0 returned -22 19:35:45 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 283.678229] binder: 8566:8569 ioctl c0306201 0 returned -14 19:35:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 283.731953] binder: 8566:8569 ioctl c0c0583b 200004c0 returned -22 [ 283.825252] binder: 8576:8577 ioctl c0c0583b 200004c0 returned -22 19:35:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000100)=ANY=[@ANYBLOB="02c2460026f1fd7e546931e4c3115720dba8fb9899fa3b2e68ea901d1ea180bce2a40000000035259ee95e450553105e4129b23d477a0a14d15ba841a6a10c7435ee02ef6142b0a0c52068262af4ca4ed169f002b95ea233558fc6f21698d383d01fed644573cec45a3ee0674d1ae36debe8d3a3ca6c8c99d5c67458eadc17d2f56fdcaf9ecdb97006c0061c17d7c8e8c3601af1197a38d9eededb4a81202fb9e0f988f95b14b3f4220084b07001cb8766ef88356144e00cd0ba15dd1d"]) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x30, 0x0, 0x0, 0x120) 19:35:48 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:48 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000240)=0x20000000000080, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfefe) syz_genetlink_get_family_id$team(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 19:35:48 executing program 2: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback, 0x80000000000000}, 0x1c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000009c0)=""/180) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000b00)='./bus\x00', 0x4000000141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:35:48 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) mlockall(0x400000000007) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f000079c000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 19:35:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 286.489109] binder: 8591:8593 ioctl c0c0583b 200004c0 returned -22 19:35:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040", @ANYRES64], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x58, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff0100000000000008631040"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 286.536408] ================================================================== [ 286.543839] BUG: KASAN: use-after-free in ipv4_conntrack_defrag+0x2ae/0x2f0 [ 286.550921] binder: 8604:8607 ioctl c0c0583b 200004c0 returned -22 [ 286.557268] Write of size 4 at addr ffff8801b1b716c8 by task syz-executor1/8605 [ 286.564010] binder: 8612:8613 Acquire 1 refcount change on invalid ref 4 ret -22 [ 286.564018] binder: 8612:8613 got reply transaction with no transaction stack 19:35:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00']], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) 19:35:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000174d4aa3288711307dfc2b2d87a55e3dabe4c99b88736bc3a1597081529398bd", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000900000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"]], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 286.564026] binder: 8612:8613 transaction failed 29201/-71, size 88-16 line 2921 [ 286.570821] binder: 8612:8613 ioctl c0c0583b 200004c0 returned -22 [ 286.584706] binder: 8615:8616 Acquire 1 refcount change on invalid ref 4 ret -22 [ 286.584731] binder: 8615:8616 got reply transaction with no transaction stack [ 286.584739] binder: 8615:8616 transaction failed 29201/-71, size 88-16 line 2921 [ 286.591640] binder: 8615:8616 ioctl c0c0583b 200004c0 returned -22 [ 286.604530] binder: 8618:8619 Acquire 1 refcount change on invalid ref 4 ret -22 [ 286.604538] binder: 8618:8619 got reply transaction with no transaction stack 19:35:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x3c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400400000012634840020000000000000001000000000000000000000010000000000000000000000058000000000000001000000000000000"], 0x41, 0x0, &(0x7f0000000300)="479be2fa17226188f9469a24f74f93606b1c0da6b1c013cb2acb9d19a3c7b6d1a8e6d1fa08dc07ea6a96a1a48dbfce31fd1de0d5f3bc30fb262fef87e49c7db5a6"}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) prctl$PR_SET_FP_MODE(0x2d, 0x2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x5bb, 0x2, 0x1000, 0x5, 0x10000}, {0x1, 0xa92, 0x400, 0x5, 0x3}], [[], [], [], [], [], [], [], []]}) [ 286.604545] binder: 8618:8619 transaction failed 29201/-71, size 88-16 line 2921 [ 286.612139] binder: 8618:8619 ioctl c0c0583b 200004c0 returned -22 [ 286.624956] binder: 8621:8622 Acquire 1 refcount change on invalid ref 4 ret -22 [ 286.624964] binder: 8621:8622 got reply transaction with no transaction stack [ 286.624972] binder: 8621:8622 transaction failed 29201/-71, size 88-16 line 2921 [ 286.631887] binder: 8621:8622 ioctl c0c0583b 200004c0 returned -22 [ 286.644542] binder: 8624:8625 Acquire 1 refcount change on invalid ref 4 ret -22 [ 286.644551] binder: 8624:8625 got reply transaction with no transaction stack [ 286.644558] binder: 8624:8625 transaction failed 29201/-71, size 88-16 line 2921 [ 286.651765] binder: 8624:8625 ioctl c0c0583b 200004c0 returned -22 [ 286.708119] [ 286.709744] CPU: 0 PID: 8605 Comm: syz-executor1 Not tainted 4.9.154+ #23 [ 286.716656] ffff8801cb5c77d0 ffffffff81b47411 0000000000000001 ffffea0006c6dc40 [ 286.724735] ffff8801b1b716c8 0000000000000004 ffffffff826028fe ffff8801cb5c7808 [ 286.732848] ffffffff81502615 0000000000000001 ffff8801b1b716c8 ffff8801b1b716c8 [ 286.741466] Call Trace: [ 286.744047] [] dump_stack+0xc1/0x120 [ 286.749412] [] ? ipv4_conntrack_defrag+0x2ae/0x2f0 [ 286.755989] [] print_address_description+0x6f/0x238 [ 286.762654] [] ? ipv4_conntrack_defrag+0x2ae/0x2f0 [ 286.769233] [] kasan_report.cold+0x8c/0x2ba [ 286.775205] [] ? nf_defrag_ipv4_enable+0x10/0x10 [ 286.781819] [] __asan_report_store4_noabort+0x17/0x20 [ 286.788655] [] ipv4_conntrack_defrag+0x2ae/0x2f0 [ 286.795053] [] nf_iterate+0x12e/0x310 [ 286.800498] [] nf_hook_slow+0x114/0x1f0 [ 286.806117] [] ? nf_iterate+0x310/0x310 [ 286.811736] [] raw_sendmsg+0x1ccc/0x23e0 [ 286.817440] [] ? raw_sendmsg+0x1851/0x23e0 [ 286.823325] [] ? avc_has_perm+0x164/0x3a0 [ 286.829112] [] ? compat_raw_setsockopt+0xd0/0xd0 [ 286.835529] [] ? __lock_acquire+0x5e5/0x4350 [ 286.841569] [] ? perf_trace_lock_acquire+0x4a2/0x530 [ 286.848298] [] ? ip4_datagram_release_cb+0x970/0x970 [ 286.855029] [] ? HARDIRQ_verbose+0x10/0x10 [ 286.860890] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 286.868403] [] ? inet_sendmsg+0x143/0x4d0 [ 286.874177] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 286.880917] [] ? check_preemption_disabled+0x3c/0x200 [ 286.887733] [] ? check_preemption_disabled+0x3c/0x200 [ 286.894551] [] ? check_preemption_disabled+0x3c/0x200 [ 286.901374] [] ? inet_sendmsg+0x143/0x4d0 [ 286.907159] [] inet_sendmsg+0x202/0x4d0 [ 286.912760] [] ? inet_sendmsg+0x76/0x4d0 [ 286.918445] [] ? inet_recvmsg+0x4d0/0x4d0 [ 286.924225] [] sock_sendmsg+0xbe/0x110 [ 286.929738] [] SyS_sendto+0x201/0x340 [ 286.935166] [] ? SyS_getpeername+0x2a0/0x2a0 [ 286.941220] [] ? __might_fault+0x114/0x1d0 [ 286.947087] [] ? __might_fault+0x114/0x1d0 [ 286.952946] [] ? __might_fault+0x18e/0x1d0 [ 286.958814] [] ? __might_fault+0xe4/0x1d0 [ 286.964603] [] ? SyS_clock_gettime+0x118/0x1f0 [ 286.970821] [] ? SyS_clock_settime+0x230/0x230 [ 286.977029] [] ? do_syscall_64+0x4a/0x570 [ 286.982856] [] ? SyS_getpeername+0x2a0/0x2a0 [ 286.988889] [] do_syscall_64+0x1ad/0x570 [ 286.994584] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 287.001494] [ 287.003098] Allocated by task 8605: [ 287.006702] save_stack_trace+0x16/0x20 [ 287.010653] kasan_kmalloc.part.0+0x62/0xf0 [ 287.014952] kasan_kmalloc+0xb7/0xd0 [ 287.018642] kasan_slab_alloc+0xf/0x20 [ 287.022508] kmem_cache_alloc+0xd5/0x2b0 [ 287.026555] __alloc_skb+0xe7/0x5e0 [ 287.030156] alloc_skb_with_frags+0xb0/0x4f0 [ 287.034539] sock_alloc_send_pskb+0x5ec/0x760 [ 287.039008] sock_alloc_send_skb+0x32/0x40 [ 287.043224] raw_sendmsg+0x10ed/0x23e0 [ 287.047086] inet_sendmsg+0x202/0x4d0 [ 287.050863] sock_sendmsg+0xbe/0x110 [ 287.054550] SyS_sendto+0x201/0x340 [ 287.058151] do_syscall_64+0x1ad/0x570 [ 287.062103] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 287.067180] [ 287.068807] Freed by task 8605: [ 287.072079] save_stack_trace+0x16/0x20 [ 287.076027] kasan_slab_free+0xb0/0x190 [ 287.079980] kmem_cache_free+0xbe/0x310 [ 287.083931] kfree_skbmem+0x9f/0x100 [ 287.087625] kfree_skb+0xd4/0x350 [ 287.091077] ip_defrag+0x620/0x3bc0 [ 287.094688] ipv4_conntrack_defrag+0x1b4/0x2f0 [ 287.099244] nf_iterate+0x12e/0x310 [ 287.102845] nf_hook_slow+0x114/0x1f0 [ 287.106621] raw_sendmsg+0x1ccc/0x23e0 [ 287.110488] inet_sendmsg+0x202/0x4d0 [ 287.114270] sock_sendmsg+0xbe/0x110 [ 287.117966] SyS_sendto+0x201/0x340 [ 287.121585] do_syscall_64+0x1ad/0x570 [ 287.125451] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 287.130525] [ 287.132129] The buggy address belongs to the object at ffff8801b1b71640 [ 287.132129] which belongs to the cache skbuff_head_cache of size 224 [ 287.145278] The buggy address is located 136 bytes inside of [ 287.145278] 224-byte region [ffff8801b1b71640, ffff8801b1b71720) [ 287.157125] The buggy address belongs to the page: [ 287.162034] page:ffffea0006c6dc40 count:1 mapcount:0 mapping: (null) index:0x0 [ 287.170270] flags: 0x4000000000000080(slab) [ 287.174562] page dumped because: kasan: bad access detected [ 287.180242] [ 287.181848] Memory state around the buggy address: [ 287.186753] ffff8801b1b71580: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 287.194094] ffff8801b1b71600: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 287.201429] >ffff8801b1b71680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.208759] ^ [ 287.214450] ffff8801b1b71700: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 287.221794] ffff8801b1b71780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 287.229130] ================================================================== [ 287.236463] Disabling lock debugging due to kernel taint [ 287.243804] Kernel panic - not syncing: panic_on_warn set ... [ 287.243804] [ 287.251176] CPU: 0 PID: 8605 Comm: syz-executor1 Tainted: G B 4.9.154+ #23 [ 287.259314] ffff8801cb5c7710 ffffffff81b47411 ffff8801cb5c7800 ffffffff82e439da [ 287.267332] 00000000ffffffff 0000000000000000 ffffffff826028fe ffff8801cb5c77f0 [ 287.275335] ffffffff813f725a 0000000041b58ab3 ffffffff82e35b02 ffffffff813f7081 [ 287.283369] Call Trace: [ 287.285947] [] dump_stack+0xc1/0x120 [ 287.291292] [] ? ipv4_conntrack_defrag+0x2ae/0x2f0 [ 287.297850] [] panic+0x1d9/0x3bd [ 287.302842] [] ? add_taint.cold+0x16/0x16 [ 287.308617] [] ? preempt_schedule_common+0x4f/0xe0 [ 287.315173] [] ? ipv4_conntrack_defrag+0x2ae/0x2f0 [ 287.321736] [] ? preempt_schedule+0x26/0x30 [ 287.327687] [] ? ___preempt_schedule+0x16/0x18 [ 287.333896] [] kasan_end_report+0x47/0x4f [ 287.339675] [] kasan_report.cold+0xa9/0x2ba [ 287.345633] [] ? nf_defrag_ipv4_enable+0x10/0x10 [ 287.352017] [] __asan_report_store4_noabort+0x17/0x20 [ 287.358832] [] ipv4_conntrack_defrag+0x2ae/0x2f0 [ 287.365220] [] nf_iterate+0x12e/0x310 [ 287.370653] [] nf_hook_slow+0x114/0x1f0 [ 287.376263] [] ? nf_iterate+0x310/0x310 [ 287.381867] [] raw_sendmsg+0x1ccc/0x23e0 [ 287.387555] [] ? raw_sendmsg+0x1851/0x23e0 [ 287.393416] [] ? avc_has_perm+0x164/0x3a0 [ 287.399200] [] ? compat_raw_setsockopt+0xd0/0xd0 [ 287.405586] [] ? __lock_acquire+0x5e5/0x4350 [ 287.411628] [] ? perf_trace_lock_acquire+0x4a2/0x530 [ 287.418367] [] ? ip4_datagram_release_cb+0x970/0x970 [ 287.425093] [] ? HARDIRQ_verbose+0x10/0x10 [ 287.430954] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 287.438466] [] ? inet_sendmsg+0x143/0x4d0 [ 287.444240] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 287.450970] [] ? check_preemption_disabled+0x3c/0x200 [ 287.457784] [] ? check_preemption_disabled+0x3c/0x200 [ 287.464601] [] ? check_preemption_disabled+0x3c/0x200 [ 287.471418] [] ? inet_sendmsg+0x143/0x4d0 [ 287.477197] [] inet_sendmsg+0x202/0x4d0 [ 287.482801] [] ? inet_sendmsg+0x76/0x4d0 [ 287.488486] [] ? inet_recvmsg+0x4d0/0x4d0 [ 287.494267] [] sock_sendmsg+0xbe/0x110 [ 287.499794] [] SyS_sendto+0x201/0x340 [ 287.505230] [] ? SyS_getpeername+0x2a0/0x2a0 [ 287.511284] [] ? __might_fault+0x114/0x1d0 [ 287.517164] [] ? __might_fault+0x114/0x1d0 [ 287.523039] [] ? __might_fault+0x18e/0x1d0 [ 287.528899] [] ? __might_fault+0xe4/0x1d0 [ 287.534679] [] ? SyS_clock_gettime+0x118/0x1f0 [ 287.540885] [] ? SyS_clock_settime+0x230/0x230 [ 287.547100] [] ? do_syscall_64+0x4a/0x570 [ 287.552887] [] ? SyS_getpeername+0x2a0/0x2a0 [ 287.558919] [] do_syscall_64+0x1ad/0x570 [ 287.564607] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 287.571898] Kernel Offset: disabled [ 287.575513] Rebooting in 86400 seconds..