f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') lseek(r2, 0x20400000, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x2000008f) mprotect(&(0x7f0000210000/0x4000)=nil, 0x4000, 0x1000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)={0x0, @aes128, 0x2, "9b0187e199881e81"}) [ 220.993857] binder: undelivered TRANSACTION_COMPLETE [ 220.999125] binder: send failed reply for transaction 127, target dead [ 221.028762] binder: send failed reply for transaction 130, target dead 23:46:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x20d}, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x2e7, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x0, 0x0) [ 221.136477] binder: BINDER_SET_CONTEXT_MGR already set [ 221.155671] binder: 7765:7779 ioctl 40046207 0 returned -16 23:46:43 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x10008) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x620c00, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) r2 = gettid() ptrace$poke(0x5, r2, &(0x7f0000000000), 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)={0x2000}) 23:46:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0x8) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sched_getattr(0x0, &(0x7f0000000200), 0x30, 0x0) 23:46:44 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) finit_module(r0, &(0x7f00000001c0)='/selinux/mls\x00', 0x3) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="c2f65cffbd1ca82c05b8730551870b64258bed6b31573923a034c23057c2af69fa5b31bdbf1bfb3a49139dadae1671a2f3c090564576553ff2a1a3c8ed0fd688742d8f26aba913822016361a7b990e0779cd9c0305ded69fefa3af72e549a0ad6a858d4dbc9626da84a8468c138155aa65bbde0eaa271869793fb4ce852da1589e84f7b947fcb7a96d9cb1c778113b5895acab88bc4cfa7ed59733f7ffa5fe9d83910073eb9ec18eb26f2c457102b532f809c33b8b02ebe3ea5b2cf75ee2ad95d96324447a1ce31655949077cb00aeb5ceaa0f6ce0a47e5d412dd20ff48f4ebffc") syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r1, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000180), 0x40000000) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000140)={0x1, {0x100000001, 0x7, 0x3, 0x100000000, 0x6, 0xba1b}}) 23:46:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0xffffffffffffffff, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x650040, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev}]}, 0x24}}, 0x0) 23:46:44 executing program 3: socket$unix(0x1, 0x80005, 0x0) clone(0x4800200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0xf) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 23:46:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1800008912, &(0x7f00000000c0)="0adc1f123c12011d80b070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x2d}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 23:46:44 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 221.810869] binder: release 7764:7766 transaction 134 out, still active [ 221.838663] binder: unexpected work type, 4, not freed [ 221.878466] binder: undelivered TRANSACTION_COMPLETE [ 221.927560] binder: release 7765:7779 transaction 137 out, still active [ 221.972441] binder: send failed reply for transaction 134, target dead [ 222.019855] binder: send failed reply for transaction 137, target dead 23:46:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x81) request_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='ppp1vboxnet1vboxnet1@lo[vboxnet0+vboxnet0keyring\x00', 0xfffffffffffffff9) r2 = request_key(&(0x7f0000000280)='rxrpc\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='proc:(cgroupkeyring\xfc(posix_acl_access@*:trusted]]vmnet1vboxnet0trustedbdevposix_acl_access-mime_typeuserwlan0\x00', 0xfffffffffffffff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(0x0, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = dup2(r0, r3) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req={0x7fffffff, 0x54648c50, 0x1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) ioctl$PPPIOCGDEBUG(r4, 0x80047441, 0x0) syz_genetlink_get_family_id$SEG6(0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x0, @random="5fb0a987ade6"}, 0x8, {0x2, 0x4e22, @empty}, 'dummy0\x00'}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) shutdown(r3, 0x1) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0x1f, 0x100, &(0x7f0000001880)={0xa, 0x4e24, 0x0, @local}, 0x1c) r6 = syz_open_pts(0xffffffffffffffff, 0x1) ioctl$TIOCLINUX5(r6, 0x541c, &(0x7f00000000c0)={0x5, 0xffff, 0x4, 0x5, 0x800}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x200000000) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'lo\x00@\x00\x00\x00 \x00', 0x400}) 23:46:45 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:45 executing program 3: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000001010100140000f33e2c11090061000000e100c0f1a8dc3cd6ab107817966015c862e200000000000000000000000000"], 0x34}}, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x19c, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x634b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfced}]}, @TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa6c9}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa645}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8094}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd9e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf5b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xda5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x196}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) write$9p(r1, &(0x7f0000000800)="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", 0x600) sendfile(r1, r2, 0x0, 0x10003) 23:46:45 executing program 2: accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000280)={0x100000001, 0x0, 0x0, 0x0, 0xf3, 0x80000001}, 0x0, 0x0, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x10200, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000100)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000140)=r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000009078ac2814aaac14140000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='x\x00\x00\x00\x00\x00\x00n'], 0x0) [ 222.736879] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 23:46:45 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 23:46:45 executing program 2: unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='devpts\x00vh\xd2p!s\n@ha.\xc1\x88\x05\x89\x1d\b\xb3Xd\x92Y\x1b\x8c\xc0\xd0\xf4\x952\x8c!JC\xd1]Ul\xa2\x80\x19\x88 \xd4b\x0f\x87\x89P\xb4M\xf7]w\xa9\xb6\xc3}\x16\f\x87ueg$\xd9,\x8c\x9b\xbb*\xfe\x95\xb8\xa1\x9aVA\xb73w\xdf/\xa9\xc5\x8e\xe1\xef\xc5\x8d\x168\xba\"\x83\x8b\xe2\xf7*\xfa\xd20a\x94\xc7yiF\a\v\x14\xd2\xc1z\x94\x9d\x9d\a*\xab\xea\xd9Ee\xac\xa28p\xa2\xa1\x9a;\xb4o\xa0\xf1\xd7&[2\xf2\x82\xbc\xc2tu\xfb\xf5\xb1Y\xd6\xa9\x1b\xbec\xdeA\x8d\x94W)\x93,\xac\x02\x86\xd1\r\x00\xefZ\xf3Y\x84\xdbF\xf2u\xa1\x8b_\x9fe\xfe[q\xb1\\\xcen\bC \x81', 0x0, 0x0) poll(0x0, 0x0, 0x84d8) mlockall(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@initdev, @in6=@empty}}, {{@in6=@empty}}}, 0x0) getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000840), &(0x7f0000000880)=0xc) fstat(0xffffffffffffff9c, 0x0) lstat(0x0, 0x0) lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000b40)) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x1, 0x1) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000240)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000400)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'teql0\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89b6, 0x0) unshare(0x2000400) tee(r2, r1, 0x8000, 0x5) munlockall() rmdir(&(0x7f0000000580)='./file0\x00') 23:46:45 executing program 3: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) [ 222.780777] binder: send failed reply for transaction 141 to 7838:7840 [ 222.812148] binder: undelivered TRANSACTION_COMPLETE [ 222.851723] binder: undelivered TRANSACTION_ERROR: 29189 23:46:45 executing program 4: setrlimit(0xf, &(0x7f0000000000)={0x9, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0xa0}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) [ 222.904396] binder_alloc: 7890: binder_alloc_buf, no vma [ 222.918881] binder: 7890:7916 transaction failed 29189/-3, size 24-8 line 3254 [ 222.938653] binder: BINDER_SET_CONTEXT_MGR already set [ 222.948974] binder: 7906:7909 ioctl 40046207 0 returned -16 23:46:45 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) pipe2(&(0x7f0000000040), 0x800) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="190002d07d01000000cd4a102777a5ac48a7f2b21663b9ac6c3a429d5bc606e7112f07000000142636e15c2e3ec88eece11df4921aaace28702123d67fe36474499d0b7dd6853957e25ba741c18920bc5c5943e9ba99164c8640ecd21ddf9228511b140da811939b0fc6be558c55cc4e12ae4a2a8f57e6f58b4a50959b67f72fc8a736683532b68ab3c6ff2b0211653406692b8a5c6747de481fca4fa0a6c892cbc5002cfabc32e3b213d47f7c901daac542a86fafaebf0208a0eeb2ec0d6537756b"], 0x39) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 23:46:45 executing program 3: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) [ 222.963957] binder_alloc: 7890: binder_alloc_buf, no vma [ 222.972223] binder: 7906:7909 transaction failed 29189/-3, size 24-8 line 3254 23:46:45 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 23:46:45 executing program 4: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 223.164284] binder: BINDER_SET_CONTEXT_MGR already set [ 223.169852] binder: 7935:7937 ioctl 40046207 0 returned -16 [ 223.171297] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.180338] binder_alloc: 7890: binder_alloc_buf, no vma [ 223.206597] binder: 7935:7937 transaction failed 29189/-3, size 24-8 line 3254 23:46:46 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:46 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 23:46:46 executing program 3: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 23:46:46 executing program 4: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 23:46:46 executing program 0: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 223.803263] binder: BINDER_SET_CONTEXT_MGR already set [ 223.809534] binder: 7954:7955 ioctl 40046207 0 returned -16 23:46:46 executing program 2: unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='devpts\x00vh\xd2p!s\n@ha.\xc1\x88\x05\x89\x1d\b\xb3Xd\x92Y\x1b\x8c\xc0\xd0\xf4\x952\x8c!JC\xd1]Ul\xa2\x80\x19\x88 \xd4b\x0f\x87\x89P\xb4M\xf7]w\xa9\xb6\xc3}\x16\f\x87ueg$\xd9,\x8c\x9b\xbb*\xfe\x95\xb8\xa1\x9aVA\xb73w\xdf/\xa9\xc5\x8e\xe1\xef\xc5\x8d\x168\xba\"\x83\x8b\xe2\xf7*\xfa\xd20a\x94\xc7yiF\a\v\x14\xd2\xc1z\x94\x9d\x9d\a*\xab\xea\xd9Ee\xac\xa28p\xa2\xa1\x9a;\xb4o\xa0\xf1\xd7&[2\xf2\x82\xbc\xc2tu\xfb\xf5\xb1Y\xd6\xa9\x1b\xbec\xdeA\x8d\x94W)\x93,\xac\x02\x86\xd1\r\x00\xefZ\xf3Y\x84\xdbF\xf2u\xa1\x8b_\x9fe\xfe[q\xb1\\\xcen\bC \x81', 0x0, 0x0) poll(0x0, 0x0, 0x84d8) mlockall(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@initdev, @in6=@empty}}, {{@in6=@empty}}}, 0x0) getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000840), &(0x7f0000000880)=0xc) fstat(0xffffffffffffff9c, 0x0) lstat(0x0, 0x0) lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000b40)) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x1, 0x1) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000240)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000400)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'teql0\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89b6, 0x0) unshare(0x2000400) tee(r2, r1, 0x8000, 0x5) munlockall() rmdir(&(0x7f0000000580)='./file0\x00') 23:46:46 executing program 4: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 23:46:46 executing program 0: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 23:46:46 executing program 3: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 23:46:46 executing program 4: r0 = socket$unix(0x1, 0x800000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x6) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x428) 23:46:46 executing program 0: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 23:46:46 executing program 3: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 224.480570] binder: release 7947:7952 transaction 149 out, still active [ 224.489134] binder: send failed reply for transaction 149, target dead [ 224.496031] binder: send failed reply for transaction 152 to 7954:7955 23:46:47 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200400, 0x65) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, &(0x7f0000000100)=0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) unshare(0x400) sendmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) 23:46:47 executing program 3: futex(0x0, 0x800000000008, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000040), 0xd, 0x0, 0x0, &(0x7f0000000000), 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000000c0)) 23:46:47 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:47 executing program 0: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 224.556561] binder: undelivered TRANSACTION_ERROR: 29189 [ 224.662749] binder: 7986:7994 transaction failed 29189/-22, size 24-8 line 3117 [ 224.689348] binder: 7990:8000 transaction failed 29189/-22, size 24-8 line 3117 23:46:47 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="240000001a0025e0046bbc04fef70f1c020b49ff00080060801108000800100001000000", 0x24) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@loopback, @rand_addr, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000000c0)={@empty, r2}, 0x14) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) 23:46:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'ip6gretap0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x2, 0x4, 0xff, 0x10001, 0x6, 0xcfae, 0x6, 0x3622}}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000014, &(0x7f0000d06000)=0x8000, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='\b\x00', 0x10) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x80, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000280)="9d8ad9f24d145e37cef7a0c96a62b60da93b399f65d72ed457e061fbdf05a266ee4cb5eacad75ff28d66bd7a0bb930f7d8c08c278cd81070097d99c933780797753a1919d4484c8ac787fd8c2a02fc2ec24f006d2c4025e6bdd018d400814e76cb24581ce9a8bfd04e75213600d6f1f28cdf08b70a3b1de1a21af62df93abdc745cd7bf39e74184e5bd9241fbbddeea1f45a79776f80f413f18ef461a6333265", &(0x7f0000000340)=""/118}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 23:46:47 executing program 0: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 23:46:47 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:47 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) unlink(&(0x7f0000000000)='./bus\x00') io_setup(0x8, &(0x7f0000000200)=0x0) unlink(&(0x7f0000000080)='./bus\x00') ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0x4, 0x6, 0x2}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x2000}]) 23:46:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xd, 0x0, 0x1535ba6618953378) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)) 23:46:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00007d9fc8)={0x0, 0x0, &(0x7f0000a40000)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000140011040000000000000000e0000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c0010000000000000000000f3009bdbd56a0c327e90206e07bc5b0088e83eddac482679fff93e9bf33d16ef5a7823edc8393939ef0200385c4ad917d88802429839b7ceaef57c0ada555535873597000000000000000000000000df3bde919a5f2e1bb8e7fe209d29330e8591833bacd7f538799fec4536bcb4757dccf1358d09b379f8ca0f0ae2812e529be58a9d6ccb3036468dc4abf012d812ac39084485b660d23e7ed6dde655e6ad3dead0edf4dc4c33d441cbd4c291a60a2b4e73eb74a76134517dfc4c6b67297412a74c252ad95292ec"], 0x5c}}, 0x0) [ 224.954909] binder: 8010:8021 transaction failed 29189/-22, size 24-8 line 3117 23:46:48 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:48 executing program 0: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 23:46:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f0000000200)) openat$ppp(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ppp\x00', 0x400000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') getdents(r0, &(0x7f0000000940)=""/188, 0xbc) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000014c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) splice(r1, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000002640), 0xb33, 0x8) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x40, 0x0) write$9p(r3, &(0x7f0000001540)="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", 0xf71) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020d00000602000004000000ffffffff030006000000000002000008e000000100009f000000000000080012000220020007000000000000000600000000000000f52b023e2c74e7038448c15ca74ba6016e47bb2c6724b4d602c8"], 0x5b}}, 0x0) mkdirat(r3, 0x0, 0x4) fcntl$getown(r2, 0x9) getuid() lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000700)) getpid() getgid() sendmmsg$unix(r4, &(0x7f0000000480)=[{&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000680)="b999f6b9862cd5eb6d601be02d8f46a80b690c7dfd567902fb2b1e9626fb80fdfc663ee6e4c236aa503e361feb1acd9ca3849c0786420ec190cf4b22f0aab00095a16163955661d6e719879b7d5a887cc5d469a463b50c", 0x57}], 0x1, 0x0, 0x0, 0x4040000}], 0x1, 0x80) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100)={0x0, 0x7fffffff}) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000240)={0x4, 0x1, 0x0, 0x6, 0xfffffffffffffffe, 0x8}) ptrace(0x10, r5) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002680)={@remote}, &(0x7f00000026c0)=0x8) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000002bc0)=ANY=[@ANYBLOB="03005f005880d234b5d0baea4ee84da2207a38f4b0f96e2a61c82bba4a3e69b72e862301ca7afd647570154c07acb844fb1575fbe995875ba9eb729c4d78725c54dd4f90aba3a47e0e13f4719417c90ae166c6b1cdfa4e0100010000000000457ba3559dbd99eeb04b28090f17264b6eec1edeaa153428bea825906f8778d0d37bb61cb623f10fad5ffbf390143897fb4c6b043e2058c390c08995375ee29893a2e65952545cca"]) wait4(r5, 0x0, 0x8, &(0x7f0000000300)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x50, &(0x7f0000001440)}, 0xffffffffffffff76) ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff) add_key$user(&(0x7f0000002700)='user\x00', &(0x7f0000000880)={'syz', 0x1}, &(0x7f00000008c0)="78dce5fee7f45364ac84258c4b4ff643744853da93c47ace373d3b2f9e48bf1b3ed99c73e69c1df00b3cc29f05e39aaee05cc02af6ab9112f2e06b5eb0c8221accb6f501cbbdd3e60dbd8ef2107308c224c83aa91e", 0x55, 0xffffffffffffffff) 23:46:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RWALK(r1, &(0x7f0000000040)={0x30, 0x6f, 0x0, {0x3, [{0x80, 0x0, 0x7}, {0x2, 0x1, 0x5}, {0x20, 0x1}]}}, 0x30) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x10}) 23:46:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0xff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x14}, {0x6}]}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80001, 0x0) exit(0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='netdevsim0\x00') prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0xfffffffffffffd55) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x5) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000140)=0x5, 0x4) ioctl$int_out(r1, 0x2, &(0x7f0000000100)) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000300)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000000000000000c1acd770"], 0x12}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) 23:46:48 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:48 executing program 3: keyctl$set_reqkey_keyring(0xe, 0x6) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x1}}) 23:46:48 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/223, 0xdf}, {&(0x7f0000000540)=""/149, 0x95}, {&(0x7f0000000600)=""/20, 0x14}, {&(0x7f0000000640)=""/7, 0x7}, {&(0x7f0000000680)=""/73, 0x49}], 0x5, &(0x7f0000000780)=""/66, 0x42}, 0x2) r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000e80)=@abs, &(0x7f0000000f00)=0x6e) r1 = accept(r0, 0x0, &(0x7f0000000e40)) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e21, 0x8, @ipv4={[], [], @multicast1}, 0x6c9a}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000400)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x64b3cb7426d54726) r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r7 = add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x3, r7) write$9p(r5, &(0x7f0000000800)="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", 0x600) timer_getoverrun(0x0) sendfile(r3, r6, 0x0, 0x1) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000001340)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x6100}, 0xc, &(0x7f0000001300)={&(0x7f00000011c0)={0x130, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffe}]}]}, @TIPC_NLA_LINK={0xec, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x107}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a0d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2fa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d559cf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6d92}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0xc001}, 0x20044044) io_setup(0xc24a, &(0x7f0000000340)=0x0) io_submit(r9, 0x2, &(0x7f0000001100)=[&(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, r5, &(0x7f0000000f40)="674ba89d9ceba84e45717dd547dae7c6311aa30b7dc9d972c66c7f3c", 0x1c, 0x4, 0x0, 0x0, r3}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x6, 0x0, r1, &(0x7f0000000fc0)="ea661236d9d6b627bb9f4ea2acd9f9327c7bb9d12688a259f2a451529f433b12e63e5944984b571c98d6ff8801e2f1747806e2858e196edaf30ec837e0256b0eb58f5762f289c266d48760e3f5b138f79dc356741801d8b4995da414324a3e8f2b0a1e2ba908ebf110e857aad14223a550fb3a5b0559b9d5905386998dbdae0890a6aacd3ea8e34c1f2b1557df7bcc9b898e210dc78723fc49c4c88ceb150e4113cb49a5946308b9c8f5d7ea838c47f569e6875beb53d3cb477b1b06a006e0fff9d6c6258f8aace386cdc80a50742c6c2a44c202954a8203909cbd88d18154f60f598387bfbb69", 0xe7, 0xfffffffffffffda7, 0x0, 0x1, r5}]) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x1, 0x4) accept(r6, &(0x7f0000000100)=@nl, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 23:46:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000600)) r3 = syz_open_pts(r2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000000b00)=0xe8) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0/file0\x00', 0x3, 0xa, &(0x7f0000000900)=[{&(0x7f00000001c0)="4511b7985c0b25828cb1cce9163cacfe616f0aef10438643e70434a999bcca7d7f55489e5e92244915409646ff665c1266bc5678a547dd7167a1d07607a82e5f02a6a811fa05137264edfa24474ff1b9616fe0bb5a18f8753925ebe6b880f4c135e4de950b2eee5de8bd082ea3a2c70f6347a219004a34606306d7312cedc1ddc0629f2c5e9de3df46e5989392e6567ca7e437977c7d9bc55552b80ce1b497d43e6f6ab5abcd226757e9e20ac924becf58ae260b44ef9324e268937a48900a87c672f32fce2511c5f8b1d76d36d86bfa036d4b5190fcddb47193d989ebbfd4a63d98f0524a3ff1bf1324a6c46ef06441c57e24", 0xf3, 0x9}, {&(0x7f00000002c0)="a53ada5818a62d6a067597252affbf036d255ddf6a7474948883bcb4270f2a4c821b5e3772acd4526196cf18fa907f05e5d6c48feac4b83d1c8d6bda85c3be2d8ff21f238518ef555d4ad31fbe4cf15cb4c204fc09d592350bb4ea703c800c0e7137746a120b21ee97774f6f0df719f4c35074c34719d6e8df2c42922ca3db7b476350ed0f524237665ee37d04eadc83cc23dcf4d4f774b2b2b0f6a6532f5154602560a10dced32d7c15e7fdebfc1f7a57f667d2bed8dee7145cf859c3eee853f09bdfabcb9452a067247796f171219d00f24422246ad739752907c7746e5353d718dc9e", 0xe4, 0x7fffffff}, {&(0x7f00000003c0)="669067db1b587764ead58102507ee26256cf6967b53ddf60b9c734383abb930172a81436957bf6bcd58db4fdf2e8f746ad02d659e4", 0x35}, {&(0x7f0000000400)="ce76a54f5bf527d18476f9bbdaa64edc155f02530ec739f63c71d2dc60515dbe36dde3fa1dde3180ea7e9c4ef2f0a29d8207a69e9dd459e87b5878ef4fe64acd68bf10f2c832d8f788732168747b2bdda7bbd6b3f4fb4e9e5d0d3f41c76e1e873dbe67dc41e471c147c9adff750f99af0ba6c1ee6c8badf9d4cc0b53d79d1dc4adb60a18b81c4c79a875525b6f3eb3e9d62edf7325210b6010765b94f4bdbc7d208be6b7abacf082943ea6bb2fdbf5ba676eabf75578f8cf2ce00500e4cc7665d4c6eaa6ba53ece76aff321a2a4d06ce7b1875248bb849", 0xd7, 0xfff}, {&(0x7f0000000500)="ad1ea049b93fb17330dafcaeb967ee3f7c294fb7e3da3c8e7f26857d834881e4cc17f9bc3f5fd9448fbd0172e0a3a42868ca545ac0eece", 0x37, 0x8001}, {&(0x7f0000000540)="265450c267336efe642cd514a2de7577796a452f6202836c5a4397437c5cf71835a732a65ea0417f465bc3ec64e36fcd891de61f1d14b5f455bfe6ce3dc6dcc1acc0b66633f9e12562ecf703fa048aabf217442b9b6e7464e16a4ec5eeca6de3832a650ee0c8406ffed0d6e0e60ca8d1af1df38b24c68d83ee12885d7c5dd52b39463bd68d19e45bd5d3be756add9ce8c0b2b78a9226f453d2814df9fe664153", 0xa0, 0x1}, {&(0x7f0000000640)="1cab21b4fc74977e275c7a1a19f80fb412480b0d01ed58c91cb579047144060f3fdb8f8ec82a8b6e9b3007e18f320c304d53dca691015ace13b7131bc1d881db2ed2a24af0", 0x45, 0x400b}, {&(0x7f00000006c0)="f1202d406a4118a23f02c600baea28cae90a34a835757a75e71e08b7a791d09a243c438d8edcd616af330d6bb8d8773919e851006dd030", 0x37, 0x1ff}, {&(0x7f0000000700)="2615be38f9463cbb3d432f6c421445e5396a4f7bc1748ba2f221af13c42e6def1d9635c9575457c2c088d6116209cdee5ee37db940b69168efeb2ac902e23ab0bcc777c025c731d91191bf10bcbdfdbd16f70f7bfdd9a83a7ce60ff92fd1dcb84169141485e38964daa7288ff86f04e83b1c7f80c30897164dfa5fd3df2181d319e9b7758b99915b2bde6692d33544895c889a677c3fa141a04a95ed29924f6720b637238386e6088e2717bf8c3b228ec48bf998d66cf6143682630a7139d150080fd8a22fbccc229171d63a46bcfd7aa1f153486bb848e61d5878ea8b72339c86b9fa804b8fb5b22305bf5270e64344cafe38f247f6cb1693", 0xf9, 0xa9fc}, {&(0x7f0000000800)="83b551152600f9ea2c3f817889e31631199cea65230898892c30e3f6a27db5f073340c2bc94672717bf79c6b544a6c496b35c9ce3c2ace0574648d3a49a27bc1359dada99d961dd027a224b9f7178b64240836ff632e78de2ed073f113d5dedeb8c3b56ae73c9c762d29b2021a2e60180e8a6d3557f2eb532a67e368c9a56b456f8d757b9a785f6db4a762f1d1e9bf975c9842630a49d1f1b699c3c8776f11f8e3d914cc7ae6856b7a4377ab3cf374ac8e6022cfc841dea151b330766146d8f2973dae4ab21af5f9df4a7eeefc2ac3", 0xcf, 0x5}], 0x2000c00, &(0x7f0000000b40)={[{@dots='dots'}, {@nodots='nodots'}], [{@uid_lt={'uid<', r4}}]}) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0xa}) 23:46:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r1) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0xcf) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, r4, 0x9, 0x1) r5 = gettid() r6 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000200)={@loopback, @dev, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000940)={@empty, @loopback, 0x0}, &(0x7f0000000980)=0xc) getpeername$packet(r3, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a00)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000a40)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000b40)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b80)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000c80)=0xe8) getpeername$packet(r3, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000dc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000ec0)={0x0, @local, @local}, &(0x7f0000000f00)=0xc) getpeername$packet(r3, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000f80)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000fc0)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000010c0)=0xe8) getpeername(r3, &(0x7f0000001140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000011c0)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001200)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001300)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001380)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000001480)=0xe8) accept4$packet(r3, &(0x7f0000001580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000015c0)=0x14, 0xf36add429fc0a866) accept$packet(r3, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001640)=0x14) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001cc0)={&(0x7f0000000000), 0xc, &(0x7f0000001c80)={&(0x7f0000001680)={0x5cc, r6, 0x320, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x1e8, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x61}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x118, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x9, 0x9, 0x3, 0x3}, {0xffffffffffff0001, 0x7fffffff, 0x3, 0x3}, {0xd0, 0x3f, 0x8, 0x9}, {0xcb, 0x0, 0x4, 0x31b}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x2a0, 0x2, [{0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0x8001, 0x7, 0x3, 0x8001}, {0x0, 0x3, 0x101, 0x100000000}, {0x3, 0x3, 0x4, 0x5}, {0x9, 0x2, 0x3f, 0x80000001}, {0x26, 0x1ac, 0x7, 0x9}, {0x9, 0x6, 0x2, 0xffff}, {0x6, 0x3, 0x3, 0xffffffff00000000}, {0x6, 0x2, 0x8000, 0x1}, {0x3, 0x8, 0x200, 0x81}, {0x64, 0x9, 0x1, 0x6431}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8d}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xd4f}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x74}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xa35}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r21}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x81}, 0x40000) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x2) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3b) fcntl$setstatus(r3, 0x4, 0x42803) 23:46:48 executing program 3: r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0xff, 0x4) fallocate(r1, 0x40000000, 0x10000, 0x9) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendfile(r0, r1, 0x0, 0x10001) recvmmsg(r0, &(0x7f000000a100)=[{{&(0x7f0000009f40)=@can, 0x80, 0x0}}], 0x1, 0x2001, 0x0) [ 225.617844] binder: 8037:8042 transaction failed 29189/-22, size 24-8 line 3117 [ 225.651216] binder: 8038:8056 transaction failed 29189/-22, size 24-8 line 3117 23:46:48 executing program 3: r0 = socket$inet(0x10, 0x2000002, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000110007041dfffd946f610500020000001f000002002808000800040004000300", 0x24}], 0x1}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x17, 0x16, 0xf, 0xe, 0x3, 0x153b, 0x6, 0x11c, 0x1}) 23:46:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x1000) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) 23:46:49 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:49 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3ad}}, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x9, 0x401, 0x7, 0x9, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d5, 0x2, 0xffff, 0x83, 0x0, 0x20000000}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@loopback, 0x19, 0x10}]}, 0x48}}, 0x40080) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020f0000100000000000000000000000080012000000010000000500000000000600000000000000003e110000000200e00040010000000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) write$UHID_INPUT(r0, &(0x7f0000000280)={0x8, "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", 0x1000}, 0x1006) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 23:46:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x3) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs(r2, &(0x7f00000000c0)='schedstat\x00') 23:46:49 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="054fcff8f1a02fc73cb000ff286a00000002000008000000fa4b46299e7591b7814bc64b5375529cf200e51761077bfd3dea00000000000000000000000000000000000000"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:46:49 executing program 4: socket$inet(0x10, 0x3, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r2, 0x0) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x20002000005) listxattr(0x0, &(0x7f00000013c0)=""/21, 0x15) ioctl$LOOP_CLR_FD(r1, 0x4c01) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={r4, 0x1, 0x10}, 0xc) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, 0x0, 0xbfffe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) bind$unix(r5, &(0x7f0000000240)=@file={0x1}, 0x6e) bind(r5, &(0x7f0000000380)=@in6={0xa, 0x4e23, 0x3, @loopback, 0x4}, 0x80) r6 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x6946) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r6) write(0xffffffffffffffff, &(0x7f00000001c0), 0x7ba27d3a) ioctl$PPPIOCDISCONN(r5, 0x7439) 23:46:49 executing program 2: r0 = getpgid(0xffffffffffffffff) getpriority(0x1, r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbc}, [@ldst={0x7, 0x5, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x265, &(0x7f000000cf3d)=""/195}, 0x48) 23:46:49 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r0 = socket(0x40000000000010, 0x802, 0x0) syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='.\x00', 0x4, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200), 0x0, 0x7fffffff}], 0x4400, &(0x7f0000000280)={[{@uni_xlateno='uni_xlate=0'}, {@fat=@errors_remount='errors=remount-ro'}, {@utf8='utf8=1'}], [{@permit_directio='permit_directio'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, 'nodeveth0wlan0)((.'}}]}) write(r0, &(0x7f0000000000)="fc0000001c00071bab092500090007000aab08330200000000004c93210001c000000000000000000000740000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000036c6c256f1a272fdfff7f512fd633d44000007600008934d07302ade01720d3d5bbc91a3e2e80772c05defd5a32e280fc83ab82f6eff60cec18444ef92e475ef8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201dee515b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a60467b4df7155870258a103f9c780ac801fe4af3d0041f0d421f8ffffff6f0000080548deac270e33429fd3110175e63fb9d38a873cf1", 0xfc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={r2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:46:49 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x8000004004e20}, 0x1c) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x80) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000100)={0x8, 0x0, 0xffffffffffffffc1}, 0xc) listen(r0, 0x24) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60d8652b00140600fe8000000000000000000d00000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200ecaea85957746886a88cabe8ce2d88"], 0x0) io_setup(0x6ba41d75, &(0x7f0000000140)=0x0) io_getevents(r2, 0x0, 0x2, &(0x7f0000000180)=[{}, {}], &(0x7f00000001c0)={0x0, 0x1c9c380}) 23:46:49 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000180)=0xd14b, 0x4) r2 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_int(r2, 0x1, 0xc, 0x0, &(0x7f00000015c0)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='timers\x00') ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) flistxattr(r0, &(0x7f0000000240)=""/168, 0xa8) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000040)=""/220) write$evdev(r3, &(0x7f0000000300)=[{{}, 0x15, 0x0, 0x200}, {{0x0, 0x7530}, 0x4, 0x3, 0x76c000}, {{}, 0x17, 0x1, 0x2}, {{0x0, 0x2710}, 0x2, 0x8, 0x7f}], 0x60) 23:46:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x300, r0, &(0x7f0000001400)={0x2000}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x5) fcntl$notify(r0, 0x402, 0x30) 23:46:49 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r1, &(0x7f0000000540)="2f541c361aa9c9967fd40d91ddb0ef214af4f6242f72d6ba8355960c5b0f6d4aa31574689cc1fbad932a2db30b92458e59ea45a0d487d43de059e46c45fb7b6a780f8ec2c4a9ea9a1f8c8bd06b8248888e1156aebe2d0e0ff9e8ddc1d4017f0afb6bfa8aa58bbab82840950803a3146c55d8ae19d82bb837af64aaa79d65b5f803d1f835c76d0cb4c93177d0358a58e5c106000000e664d7b8a3000000000000", 0xa0) r2 = socket$key(0xf, 0x3, 0x2) keyctl$clear(0x7, r1) vmsplice(r2, &(0x7f0000000080), 0x1000000000000092, 0x2) keyctl$read(0xb, r1, &(0x7f0000000140)=""/53, 0x35) ioctl$sock_ifreq(r0, 0x8971, &(0x7f00000000c0)={'ip6_vti0\x00', @ifru_data=0x0}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 23:46:49 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 226.568800] binder: release 8087:8107 transaction 161 out, still active [ 226.585902] binder: send failed reply for transaction 161, target dead [ 226.598465] binder: send failed reply for transaction 164 to 8091:8099 23:46:49 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = open(&(0x7f0000000100)='./file0\x00', 0x800, 0x120) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 23:46:49 executing program 3: openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) prctl$PR_GET_NAME(0x10, &(0x7f0000001500)=""/197) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0xfffffffffffffffe, 0x6, 0x9, 0x9}) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f00000000c0)}], 0x1, 0x0) fallocate(r1, 0x11, 0x0, 0x100000001) syz_open_procfs(0x0, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200080}, 0xc, 0x0}, 0x4) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 226.734568] binder_alloc: 8133: binder_alloc_buf, no vma [ 226.741117] binder: 8133:8145 transaction failed 29189/-3, size 24-8 line 3254 23:46:49 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:49 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYBLOB="00052bbd7000fcdbdf250a00000008000600020000002800020008000500010001001400010000000000000000000000000000000000080007b8050000000800060006001427416e050040000000080005000300000054000100080009001d00000008000b00736970000800050003000000084901000a0000000c00070404000000089ff3391976af8b33bc12a10800000014000300ac1414ff000000000000000000000000080001009408427c7b703fe046c17ab070f9cbd08b8485b683ddaff236840e08436a188c2e734e98b55088d1a82ae3c7e1ee1e5e8816d8660c1917fa1c9accc3f499b0e57736965fdc53baddcf5dd467f76e"], 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000500)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) geteuid() bind$packet(r0, &(0x7f0000000000)={0x11, 0xff, r2, 0x1, 0x0, 0x6, @local}, 0x14) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="e1", 0x1}], 0x1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xc0, r4, 0x403, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2dc1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4c1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80c4}, 0x40) 23:46:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) vmsplice(r2, &(0x7f0000000200), 0x0, 0x4e1b1ff0386ab288) setitimer(0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f0000000180)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x5001}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x100000306) r3 = dup(r0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10, r3, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.opaque\x00') ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000200)={0x4, 0x0, 0x6, 0x7, 0x2682e05}) 23:46:49 executing program 2: r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10) r1 = socket$inet6(0xa, 0x4, 0x1f) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x10) dup2(r2, r1) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000300)={'vcan0\x00', @ifru_names='gretap0\x00'}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x400000, 0x0) accept4$inet6(r3, 0x0, &(0x7f00000001c0)=0xbcd866126471e41f, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000280)={0x100000001, 0x0, 0x0, 0x0, 0xf3, 0x80000001}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 23:46:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) lseek(r1, 0x0, 0x0) r2 = fcntl$getown(r1, 0x9) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000001c0)={0x3, 'veth0\x00'}, 0x18) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) rt_tgsigqueueinfo(r2, r3, 0x2e, &(0x7f0000000140)={0x2f, 0x200, 0x1}) 23:46:49 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 227.310407] binder: undelivered TRANSACTION_ERROR: 29189 23:46:50 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28, &(0x7f0000000080)}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x6}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x404c014}, 0x40040) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) [ 227.347026] audit: type=1400 audit(1553644010.010:44): avc: denied { map } for pid=8157 comm="syz-executor.4" path="socket:[21450]" dev="sockfs" ino=21450 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=unix_stream_socket permissive=1 23:46:50 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0xe, 0x10000004, 0x4, 0x80}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000100)}, 0x10) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c, 0x80000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_hsr\x00', 0x10) 23:46:50 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) munmap(&(0x7f0000551000/0x4000)=nil, 0x4000) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000340)={0x7, 0x7, 0x40, 0x1, 0x17, 0x8, 0x2, 0x7, 0x1000, 0x3, 0x4, 0x10001}) chdir(&(0x7f0000000480)='./file0\x00') lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x6ea) lstat(0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000000c0)={0xffffe, 0x0, 0x0}) socketpair$unix(0x1, 0x100000000005, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x28, &(0x7f0000000100)}, 0x10) ioctl$TIOCEXCL(r3, 0x540c) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x2) fcntl$setlease(r3, 0x400, 0x0) syz_open_procfs(r1, &(0x7f0000000240)='net/arp\x00') get_thread_area(&(0x7f0000000200)={0x4, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x8, 0x8001, 0x101}) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) [ 227.453795] audit: type=1400 audit(1553644010.040:45): avc: denied { setattr } for pid=8160 comm="syz-executor.3" name="NETLINK" dev="sockfs" ino=21452 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 227.482459] binder: BINDER_SET_CONTEXT_MGR already set [ 227.487987] binder: 8167:8178 ioctl 40046207 0 returned -16 [ 227.488342] binder_alloc: 8159: binder_alloc_buf, no vma [ 227.524272] binder: 8159:8166 transaction failed 29189/-3, size 24-8 line 3254 23:46:50 executing program 0: ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4003ff) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4006, 0x0) sendfile(r1, r1, 0x0, 0x8800000) 23:46:50 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x800, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000007e2d492298b33acf314bda0000000000000000730a00ff00000000950000000000000019be20bcec23f3b7b00eb0c48acf9b5313a2c712e0e9b42a0a876c6f406c8dd1a0ed98a930271b10984b797e760473e3e87c8178bd34a664ca79076e1e7e2883bee9ddfabaaa2d40c6b1821c13b8f9f58d2178745efc91e1b2cdd2e8d8dc6cf676a05b5529cbcca4fe1da0258c811da68b8cf94de67cc5eb9b119b74ab0789e672eceedc2eda967d191395c060af9c389d0fbe454dbbd3b80576e454af700ecd1a7904a28ac839ed3ea6d95e942c9f9ddcc74a46cf9a474850d664cf2abc3ec0e616fcb3117d9366873819dd5a97185f819f80d3b6a77ae9bab5a486e0a80bd211301e898be34e87e0a960add8c4de4da7d27c5ef6f3e98cc9aff1d5f8b2a036870893f99b"], &(0x7f0000000000)='\x1dNL\xc0\x00', 0x20000, 0x436, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x4, 0x0, 0x2, 0x1, 0x4}, 0x2c) pipe(&(0x7f0000000140)) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x10000, 0x0) accept$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x7, 0xb, 0xf, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff}, @generic={0x10001, 0x1e4, 0x3, 0x3, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4e73}, @alu={0x7, 0xfffffffffffffffd, 0x8, 0xf, 0xd, 0x0, 0x8}, @map={0x18, 0x3, 0x1, 0x0, r2}]}, &(0x7f0000000100)='syzkaller\x00', 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x1, [], r4, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="40b259c23070e45aaf005ca991fe", 0x0}, 0x28) 23:46:50 executing program 3: socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x200) write$UHID_INPUT(r1, 0x0, 0x0) set_thread_area(&(0x7f0000001700)={0x2ac, 0xffffffffffffffff, 0x4000, 0x5, 0x80, 0x5, 0x2, 0x8, 0x1, 0x800}) r3 = dup2(r0, r1) fgetxattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00', &(0x7f0000000100)=""/249, 0xf9) r4 = dup2(r3, r2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001740), &(0x7f0000001780)=0x4) sendmsg$nl_netfilter(r4, &(0x7f0000001680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8040000}, 0xc, &(0x7f0000001640)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x142c}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000004e40)) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000016c0)='/selinux/status\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2400) [ 227.562051] audit: type=1400 audit(1553644010.040:46): avc: denied { getopt } for pid=8160 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 23:46:50 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 23:46:50 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:50 executing program 3: setresuid(0x0, 0xee01, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x1000002192c04) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") setresuid(0x0, 0x0, 0x0) r2 = getuid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r3, r4) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r0) 23:46:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x4, 0x3, 0x3025, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000032c0)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000033c0)=0xe8) stat(&(0x7f0000003400)='./file1\x00', &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000035c0)) getgroups(0x0, 0x0) getpgid(0xffffffffffffffff) getuid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000038c0)) getpgid(0xffffffffffffffff) getuid() getgid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003900)) getuid() lstat(&(0x7f0000003940)='./file1\x00', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getresuid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) lstat(&(0x7f0000003b00)='./file0\x00', &(0x7f0000003b40)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003c00)={{{@in6=@ipv4={[], [], @multicast1}, @in=@empty}}, {{@in6}, 0x0, @in=@multicast2}}, 0x0) lstat(&(0x7f00000041c0)='./file0/file0\x00', &(0x7f0000004200)) getgroups(0x0, 0x0) getpid() fstat(r0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000005b40)) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000005b80)={{{@in6=@initdev, @in=@multicast1}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000005c80)=0xfffffffffffffe18) lstat(&(0x7f0000005cc0)='./file1\x00', 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000005e80)) getegid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) stat(&(0x7f0000008340)='./file0/file0\x00', 0x0) getresgid(&(0x7f0000008400), &(0x7f0000008440), &(0x7f0000008480)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getuid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000009c80)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000009dc0)) lstat(&(0x7f0000009e00)='./file0\x00', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000009f00)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f000000a100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f000000a280)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000a2c0)={{{@in6=@loopback, @in6=@local}}, {{@in=@local}}}, &(0x7f000000a3c0)=0xe8) getresgid(&(0x7f000000a400), 0x0, &(0x7f000000a480)) sendmmsg$unix(r1, &(0x7f000000a540)=[{&(0x7f0000000900)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000780)}], 0x1, 0x0, 0x0, 0x24004044}, {&(0x7f0000000bc0)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000003200)=[{0x0}, {0x0}], 0x2, &(0x7f0000003640)=[@cred={0x20, 0x1, 0x2, 0x0, r2, r3}, @cred={0x20, 0x1, 0x2, r4}], 0x40}, {&(0x7f0000003680)=@abs, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000005ec0)=[@cred={0x20}], 0x20, 0xe0ac3b15eb0cb208}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}, {&(0x7f0000008840)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000009c00)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f000000a4c0)=[@cred={0x20, 0x1, 0x2, 0x0, r5}, @cred={0x20, 0x1, 0x2, r6}], 0x40}], 0x6, 0x1) ioctl(r0, 0x2, &(0x7f0000000140)="0a65fe036061ba48a68acc967ba855dfdc3fff840ce750b755a5aa3008bd9c26") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) chdir(&(0x7f0000000580)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) 23:46:50 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000180)) ppoll(&(0x7f00000000c0)=[{r0, 0x4}, {r0, 0x20}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={0x5}, 0x8) ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070") perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000080), 0x8c, 0x1, 0x0, 0x0, 0x1) 23:46:50 executing program 3: r0 = socket$inet6(0xa, 0x804, 0x5) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x200, 0x0) sendfile(r0, r1, &(0x7f0000000200), 0x10001) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe, 0x10, &(0x7f00000000c0)="6a74eeefdc5b55fdf44c89293534", &(0x7f0000000100)=""/16, 0xa6a4}, 0x28) r3 = socket(0x1, 0x80005, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r4, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080), 0x121}]) 23:46:50 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x3d) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000540), &(0x7f00000005c0)=0xc) r0 = getpgid(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x1) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x20) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f00000004c0)=""/7) fsync(0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000280)={0x6}) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000580)=0xe2e) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000003c0)='trusted.overlay.nlink\x00', &(0x7f0000000400)={'U+'}, 0x28, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000340)={0x800000001, 0x0, 0x5, 0xffffffff80000000}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='syzkaller1\x00', 0x10) ptrace$setregset(0x4205, 0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000680)}) io_cancel(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) geteuid() setfsuid(0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) eventfd2(0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xf) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f00000002c0)=0xc) get_robust_list(r3, &(0x7f0000000200)=&(0x7f0000000180), &(0x7f0000000240)=0x18) 23:46:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00@\x00', 0x101}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa78e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) splice(r4, 0x0, r3, 0x0, 0x1000000000000003, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) r5 = openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f0000000480)) getgroups(0x0, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f0000000640)=0xfffffef2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) splice(r0, &(0x7f0000000980), r4, &(0x7f00000009c0), 0x8, 0xf) getpgid(0xffffffffffffffff) fstat(r1, &(0x7f0000000740)) getgroups(0x5, &(0x7f00000007c0)=[0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0x0]) sendmsg$unix(r2, 0x0, 0xc040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendto$packet(r4, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x4, 0x18, 0x9, 0x8, 0x1f, 0x2, 0x1, 0x62, 0x6}) [ 227.888362] binder_alloc: 8218: binder_alloc_buf, no vma [ 227.893265] binder: BINDER_SET_CONTEXT_MGR already set [ 227.908513] binder: 8224:8251 ioctl 40046207 0 returned -16 [ 227.912600] binder: 8218:8250 transaction failed 29189/-3, size 24-8 line 3254 [ 227.925667] device lo entered promiscuous mode 23:46:51 executing program 0: socketpair$unix(0x1, 0x400000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setreuid(0x0, 0xee00) r1 = geteuid() setuid(r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x1f, 0x4, &(0x7f0000001380)=[{&(0x7f0000000100)="e271696b36a369ae1198df92836830f176998d47118a20484971bd91f6e2d9d47c3ee8a113e4d592cc763c1ed27f25a741d1bd9add25d1990190174969b7fa9af4005155db9915e8a9320f8a018fd9e711b8ec3bc76905889ea219dd71c0432479b830fc9fc89a06a57953bfc6a9", 0x6e, 0x6}, {&(0x7f0000000180)="7bf6ebe77a5e347d6db9672bbc4e22779dd42ea79328bcab67aeeac3cbfa63c4eff910df6922c2539d0f564108e194ac113af963b018ac2b0d384c9a4c52f41f318b218cb127bcdf4ede9d8437ffeae1e5b59f0e21f686ce5a2a89f55ebcfa340a108e5e98d30500efa8c61215d189243d66527ffc076f41ad703c779f8943c0df59a0ff598a839173d1b736c841b4add01555cae221d4db23455e9dc21ed1811bc5ab37dacb7d446706957cbfaa45d4327d70a5f3264a18133a4fc78b7b6b2c403944525d0f", 0xc6, 0x1}, {&(0x7f0000000280)="432b028e8fbb6cc155eaa2f528ae958e241c1c6fb96c396b477dc50f2c14c6c65c765ac1be15ec9f5e2c14793b0f157d64383ec6c017831c15e2697cf2b9bc1c5329ee7dc5abb6a420ba299147c7bccdfc4f0937c0485af376dbfc55f6831902949981a90f322a78442f95084569412ca0d713788790723c6b9b2ea3d1b033a2897d35c7a50b105239624f7f4118b7fae68b1e9ef857a8354c75b45500cc312ae7e6662b104ff7e93c9bfb95f8eb428d8511696bffe003f0f5d240cc32f6f2fa7c3936f66468a843c3a20fc0e6204feb18ca8556fbf91dac", 0xd8, 0x7}, {&(0x7f0000000380)="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", 0x1000, 0x101}], 0x10000, &(0x7f0000000080)={[], [{@smackfshat={'smackfshat', 0x3d, 'nodevvmnet1.\x00'}}, {@obj_type={'obj_type'}}]}) 23:46:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000240)='net/wireless\x00') preadv(r2, &(0x7f0000000280), 0x0, 0x0) 23:46:51 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:51 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:51 executing program 4: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900), 0x1, 0x10000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r0, &(0x7f0000000140), 0x22c, 0x51) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x100000000000039, 0x0, 0x0) 23:46:51 executing program 4: clone(0x2302001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=r0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x26) ptrace$cont(0x18, r0, 0x0, 0x0) gettid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x7, 0x20000000, 0xca}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 23:46:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") clone(0x10013102041ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x3d}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x8, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x20}}, {@mode={'mode', 0x3d, 0x2}}], [{@dont_hash='dont_hash'}]}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 23:46:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x2800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x3, 0x85, [], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f00000000c0)=""/133}, &(0x7f0000000040)=0x78) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x82) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) sendmsg(r2, &(0x7f00000017c0)={&(0x7f0000000240)=@l2={0x1f, 0x10000, {0x48000, 0xaa, 0x10000, 0xfffffffffffffffb, 0x1f, 0x1}, 0x8000, 0x3}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001800)="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", 0x1097}], 0x1, &(0x7f0000001300)=[{0xf0, 0x1, 0x62, "a62e2324f0a33fc0aa7ca20726940d17780ebd19ad999fd9598158913f8f48cc2eb5faa5a0b5045d3bf28559b73c3eae03383b3ee198a45ac3f62af00959238fee3310cfed4c2d4fcdd13a003efdd8f9f0fead2c7418a0e5a4f912d3b70630a19b10003cc7fb7ddf47ab82e32abd8f588a42a01bb2f0245163222b36b4064ddb58c28e0909f8dd81d40a5a6ff9be5e47cf3448a939b8e647c56a90866da481cd5a069c3142abd2c88655460c24036d5a02931ae67d5a7f820c8bb2f1514fbc38d4999ece7c19f039ca22e4d26b69f04c5c1ade09d10523fc90a1cd"}, {0x98, 0x13f, 0x0, "0a76399128effee02c4f58f03cba895b198bfe2a271dc9b674402512ec44f828b009ed1eb78634aca20ff6f3a0ae1b765000e52b8c20c4a34f0f47bdd51084c9f6c5decc17d757a6634dfef8a15e0afc94ab7e6ec9f8530520d057a4f1061c8e8371f36fd5ff3c9cafa3c948e2321ed4ba7fe5cf41fd875803186165415f14adfc388898fcc7"}, {0x50, 0x10a, 0x35e9, "dc1acb707d0c6f16f59e7d1d7fbaca6602fe296dd26130f927c1a577f33d2c37f40ad4c0cece6c7d84828efa2621a9138ad1cd10e5299c6cc9c073d6"}, {0x18, 0x102, 0x8, "a32fc9fc"}, {0xe0, 0x1ff, 0x44c5, "fb4669f8c450a1b398e3860998256c7e2edd30d8f9a3e054320cf71253723f590afd5c026f37bd291028b8b0e997811929e3ca41eedd445158080e34a27c9e2218204a303658ceee6ca2e6434b17a9127f93d9f5ca5dcad56297ae5b42406b2ad5b978cd1f5009596277a8fcc55b866c04e3eb818de97cb3e338d80ed56afd6b21479e75804d999ef9242d3fef6473c5843a4469c7965ddefe1634f2a3f2bae69af0543d4404b74df66c1c83b000aca3325988679eb53f14550a5216b1c9daecc86d26d8dd5a54360ff95a1e8f7f"}, {0x80, 0x187, 0x401, "51217d9561b22c514aae9ad209d8e1a67bb474435601772425b77c6e4ef3cfff550652f5329f10e3f80eb93fce2ea32dc7029a296b4028570c1fd5fb421d3eefe0ead60fb44bd45ac6fde7f0634ea2e51bf8959f17215f70ca3a5044f7a5122f6ba40dcb1a351afe26b1ddf0268428"}, {0x38, 0x0, 0x2, "82b4e9cd7674eb6647a84ae0454cab12019fc2e447d05c466b09f4b45bc3ef07b1"}, {0x110, 0x1ff, 0xf0, "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"}], 0x498}, 0x24000840) 23:46:51 executing program 0: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080004001000080000000000a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000e2d4ec6bab91d4", 0x55}], 0x1}, 0x0) r1 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="594fd4ad47983b5d23983290ea926eedfba9d58b74e4780d4cda46351d7d3f3ec81b642a1370cefd62151f81c72323fa34e39bdb59da9f1206a2fa8f26b3f22cdc92105bed639ab0b51a5ce737a54f58fc2bd5c90266025642dcaccde6ae43158d9a3ff848d338b7e11fc2c0ab45ed4c5c490b06ec1032332dfa3dfb1d5a9ee7e4ab25251f4f2e12ea86bfcf3edc227a677d", 0x92, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={r1, 0x7fff, 0xfff}, &(0x7f0000000200)={'enc=', 'raw', ' hash=', {'sha3-384-ce\x00'}}, &(0x7f0000000280)="9ca40e1f09a98afa02bb613b2a7eefb7616f61e7a1e912e32f1a18f51e8fb2da801897405e6554aefce5a5faaebae0f917f8566e5e823b386e1611860c960c894b088b8d77698d797485d053c515f316e9d8c7f241229fbf035d7a4017d62a758fdcf81b0061f056b3f78774172efca1734ee250757b0a6168cc5ca516d21cc2088ced1a3487bed602fc7895cfa7425371d9822fd4dc718caaab95ea7ca49505f10aa7d71f99803f3e675de602e7b06744b622", &(0x7f0000000340)) 23:46:51 executing program 3: r0 = socket$packet(0x11, 0x40000000003, 0x300) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.L'}, 0x15) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000800)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x26e, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000007c0)='ip6tnl0\x00', 0x10) [ 228.483772] binder: 8265:8268 transaction failed 29189/-22, size 24-8 line 3117 23:46:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x3f, 0x4) bind(r1, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80) r2 = dup3(r1, r0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x55e5}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe7f}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffffffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x78}}, 0x40000) shutdown(r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10) recvmmsg(r1, &(0x7f0000000180), 0x400000000000370, 0x0, &(0x7f0000000100)={0x77359400}) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000000)='nlmon0\x00') 23:46:51 executing program 0: r0 = creat(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000180)={'ip6gre0\x00', {0x2, 0x4e23, @broadcast}}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) wait4(r2, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x3f, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xffffffff, 0x80000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 23:46:51 executing program 2: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000040)=0x1e) 23:46:51 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:51 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:51 executing program 2: syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) futimesat(r4, &(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)={{0x77359400}, {r5, r6/1000+10000}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ftruncate(r4, 0x2007fff) sendfile(r1, r4, 0x0, 0x800000000024) syz_genetlink_get_family_id$fou(0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20000, 0xee34994730e228e2) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000000)=0x6) 23:46:51 executing program 4: syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300030, 0x3a, 0xf0ffff, @ipv4={[0x2, 0x2, 0x543, 0x0, 0x60], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff87, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x80000000) dup3(r0, r0, 0x80000) 23:46:51 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x44) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000100)=""/233) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) accept4$unix(r1, &(0x7f00000003c0)=@abs, &(0x7f0000000080)=0x6e, 0x80800) read(r0, &(0x7f00000002c0)=""/169, 0xa9) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000380)=0x1e) [ 228.796009] device Y­4`Ò˜ left promiscuous mode [ 228.813277] binder: 8310:8332 transaction failed 29189/-22, size 24-8 line 3117 23:46:51 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r3, 0x706, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100000001}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xcfd}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1f, 0x9, 0x40, 0x8]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1ff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100000001}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x26}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4040004) flock(r1, 0x2) close(r0) 23:46:51 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:51 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid_for_children\x00') r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) r3 = fcntl$dupfd(r1, 0x406, r1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4800080}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r4, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000001}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) r5 = socket(0x3, 0x2, 0x1000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in=@loopback, 0x4e23, 0x100000000, 0x4e21, 0x1, 0x2, 0x20, 0x80, 0x3b, 0x0, r6}, {0x40, 0x80, 0x8, 0x8, 0x81, 0x80000000, 0xf377, 0x1000}, {0xe08, 0x4, 0x1000, 0x6}, 0x0, 0x6e6bb3, 0x1, 0x1, 0x3, 0x3}, {{@in6=@remote, 0x4d5, 0xff}, 0xa, @in6=@empty, 0x3507, 0x4, 0x3, 0x1000, 0x5, 0x9, 0x20}}, 0xe8) socket(0x5, 0x805, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000540)={0x8, 0x5, 0xfffffffffffffffd, 0x4f6, 0x81}) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) sendmsg$nl_route(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@RTM_GETNSID={0x14, 0x5a, 0x400, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x46c0238bf1ac09b}, 0x4008094) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000680)=""/42) r7 = openat$keychord(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/keychord\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/relabel\x00', 0x2, 0x0) fsetxattr$security_smack_transmute(r1, &(0x7f0000000780)='security.SMACK64TRANSMUTE\x00', &(0x7f00000007c0)='TRUE', 0x4, 0x3) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000800)) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000840)) sched_rr_get_interval(r0, &(0x7f0000000880)) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000008c0)='/selinux/create\x00', 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x7fffffff) ioctl$IOC_PR_PREEMPT(r7, 0x401870cb, &(0x7f0000000900)={0x4, 0x1, 0x86, 0x1d8}) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000940)=""/233, &(0x7f0000000a40)=0xe9) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000a80)=0xfffffffffffffffd) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000ac0)) [ 228.865129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8325 comm=syz-executor.2 [ 228.898033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8325 comm=syz-executor.2 [ 228.948859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8325 comm=syz-executor.2 [ 229.001963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8325 comm=syz-executor.2 [ 229.032546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8325 comm=syz-executor.2 [ 229.064044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8325 comm=syz-executor.2 [ 229.083764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8325 comm=syz-executor.2 [ 229.103607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8325 comm=syz-executor.2 [ 229.122308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8325 comm=syz-executor.2 [ 229.135663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8325 comm=syz-executor.2 [ 229.156264] binder: release 8345:8358 transaction 180 out, still active 23:46:51 executing program 0: pipe(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e21, 0x80, @ipv4={[], [], @dev}, 0x2000000096a}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'ifb0\x00'}, 0x18) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x4, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x82) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000140)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000020c0), 0x15e, 0x0, &(0x7f0000000000)={0x77359400}) 23:46:51 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x40000002, 0xec1, 0x100000001, 0x9a6, 0x0, 0xffffffffffffff9c, 0x10001}, 0xfffffffffffffd62) fcntl$addseals(r0, 0x409, 0x1) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x740000, 0x0, 0x40020820000, r1}, 0x2c) 23:46:51 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:51 executing program 3: r0 = socket$packet(0x11, 0x40000000003, 0x300) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.L'}, 0x15) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000800)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x26e, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000007c0)='ip6tnl0\x00', 0x10) 23:46:51 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x402280, 0x0) sendmsg$netlink(r0, &(0x7f0000000400)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000140)={0x1c, 0x2e, 0x4, 0x70bd28, 0x25dfdbfd, "", [@typed={0xc, 0x57, @u64=0x3}]}, 0x1c}, {&(0x7f0000000180)={0x18, 0x30, 0x0, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x41, @str='\x00'}]}, 0x18}, {&(0x7f00000001c0)={0x1f0, 0x40, 0x300, 0x70bd29, 0x25dfdbff, "", [@nested={0x90, 0x19, [@generic="6108d2831f4cfc8a3148d17b33ad6fafa2b220799a963a1ffe6b338ac2b4c2c397f0870a266b85c27e216f064dad6b9d2eff6cb2c77cba6c1d6f1d5748f7916e0f18dfa27b16339fa3b6c6caffe4bbc3c290f50e53043e237a9629fbb60873772aef343fa3f80d20", @generic="663b9ab7229717cad34ed90701a4690c6908a2fc6cd35399f63b9ee170440a233193"]}, @generic="1c5a8c9669121e546bd59b162650db3ccab93b052d1fd50be8e9235b04a2044859bf50cfd36ab79a05c9fc8e7f31a482d73e81c62f29c8eb2a9968749974021600f089af22d86f625ef8a0cfcde91950d0c3ba3bdeae379b6c6564221fdcef87d3eddb3084aff5555db99e6786052f6f0b12ca3669442dfab7907b94b6718315892c551ed50e3bb3af7e95bbca140b58a4b628be3c32f61000236dfa1125962d04cc2eb6c13c6cb8427aaa9f25d3863976372a", @typed={0xc, 0x1e, @str=']/,user\x00'}, @nested={0x90, 0x6c, [@generic="42228d8e48f8d30a075f5699b326f6c29d81e3f49f185ed3478cd15fe6ea7764db95b52a09bdfd3a5717c122ce52c28e52e246ddade8d0cea442a7780e7a14eaf84f8447faac72e07eb2ad223e992df97651336eb26a9c7c0991f09b4687bb02d3d70fb2e8896c100cd4702060f03c40c0f9201ab71d50bd2e27f021c5", @typed={0xc, 0x4a, @str='system\x00'}]}]}, 0x1f0}], 0x3, 0x0, 0x0, 0x4000000}, 0x4000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffff7ffaad8d986dd6050a09c00081000de80000000000000000000bbfe800000000000aa00004e200000000000"], 0x0) 23:46:52 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:52 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() sendto$unix(r0, &(0x7f0000000040), 0x0, 0x8000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) nanosleep(&(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) 23:46:52 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x1}], 0x100000c7, 0x0) r0 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='net/packet\x00', 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', '', 0x20, 0x9, 0x20, [0x0, 0x36, 0x61, 0x33]}, 0x31, r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000209, 0x10400003) 23:46:52 executing program 0: r0 = inotify_init1(0x0) r1 = dup(r0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000001100)=0x3) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0xe2a, 0x9}) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x1}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/4096) 23:46:52 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:52 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) munmap(&(0x7f0000551000/0x4000)=nil, 0x4000) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000340)={0x7, 0x7, 0x40, 0x1, 0x17, 0x8, 0x2, 0x7, 0x1000, 0x3, 0x4, 0x10001}) chdir(&(0x7f0000000480)='./file0\x00') lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x6ea) lstat(0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000000c0)={0xffffe, 0x0, 0x0}) socketpair$unix(0x1, 0x100000000005, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = open(&(0x7f0000000540)='./file0\x00', 0x8040, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x28, &(0x7f0000000100)}, 0x10) futimesat(r0, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)={{0x77359400}, {0x77359400}}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x2) fcntl$setlease(r3, 0x400, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x40100, 0x0) syz_open_procfs(r1, &(0x7f0000000240)='net/arp\x00') get_thread_area(&(0x7f0000000200)={0x4, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x8, 0x8001, 0x101}) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) 23:46:52 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180), 0x0) eventfd2(0x0, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x6544, 0x2, 0x6, 0x9}) [ 229.638937] binder: send failed reply for transaction 177 to 8319:8328 [ 229.647971] binder: send failed reply for transaction 180, target dead [ 229.670614] binder: undelivered TRANSACTION_ERROR: 29189 23:46:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x480a00) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x87d, 0x0) write$smack_current(r1, &(0x7f0000000440)='{md,\xa3uM\x00\xa0\x0eY\x13k\x1d\xaei\n\xb3P\xe1zA^b6<\xcb`\x89\xb0\xa7\xecD\xd9B\xea\xf17\x90\n\x85\xc0R-\xbdt)\xa4\xab>\xa1\x81h\x00\xcf\xc2\xee\xdf\xda\x10\x7fDPb\xa8\xf7\n\xe0\xac\t\x9b\xfb\bW\xe2\xf2!\x8fpx$\x06\x8a\x89>Q\x91\xdd\f\x19\xa6\x8c|R\xf9\x066)\xfe7\x101S\xaa\xf6OV\xb6\xbf\xde\xa3W\x03\xed\xdciC\xbe\x06\x8a@\x14\x1e\x93&\xcb\xdc\xa9\xe6\xa2\xb9\xa1\v\x00\xf1I\xd3\x96@', 0x8b) r2 = perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x100000001, 0x0, 0x1d, 0x0, 0xff, 0x4, 0x0, 0x0, 0x80, 0x77f, 0x9, 0xffffffffffff774b, 0x0, 0x1, 0x8001, 0x1, 0x3f, 0x3ff, 0x6, 0x3f, 0x0, 0x81, 0x8, 0x4, 0xfff, 0x5e376577, 0xffffffffffffffff, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x2}, 0x1c8, 0x101, 0xb8, 0x3, 0x2, 0xffffffffffffff6b, 0x6}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x4) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000640)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000680)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@loopback, @in=@multicast1, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0x0, r4, r5}, {0x0, 0x5, 0x4, 0xffffffff80000000, 0x0, 0xfffffffffffff800, 0x7f, 0x8001}, {0x4, 0xffffffff, 0x3f, 0x5}, 0x8, 0x6e6bb8, 0x0, 0x0, 0x3, 0x1}, {{@in=@multicast2, 0x4d6, 0x3f}, 0x0, @in6=@dev={0xfe, 0x80, [], 0x25}, 0x0, 0x2, 0x1, 0x400, 0xffff, 0x81, 0x2}}, 0xe8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000340)=""/57) r6 = socket$inet6(0xa, 0x3, 0x9) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x94, r7, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nlmon0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xfffffffffffffffe}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x3ff, @dev, 0x6}, 0x1c) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_ifreq(r8, 0x8937, &(0x7f0000000040)={'syz_tun\x00\x00\x00N\x00', @ifru_map={0x1}}) 23:46:52 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) unlink(&(0x7f0000000940)='./file0\x00') mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:52 executing program 2: capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) r0 = socket(0xa, 0x7, 0x88) r1 = open(&(0x7f0000001440)='./file0\x00', 0x22400, 0x20) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000001480)) r2 = socket$netlink(0x10, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, 0x1c) syz_extract_tcp_res$synack(&(0x7f00000013c0), 0x1, 0x0) recvmmsg(r2, &(0x7f0000005840)=[{{0x0, 0xffffffffffffffc0, 0x0, 0x34b}}], 0x1, 0x0, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000001400)='/dev/uinput\x00', 0x802, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001380)='/dev/zero\x00', 0x101000, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f00000014c0)) writev(r2, &(0x7f0000fb1000)=[{&(0x7f0000000280)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) sendfile(r2, r1, &(0x7f0000001500), 0x8) vmsplice(r3, &(0x7f0000001300)=[{&(0x7f0000000100)="8daa468100c1019fc2c270fd3c08ba719a2396c2fb299360ff94af1680ce65fb75f8f82310bed1fa5321ce2963a7862e6784ed5500bd5303dd790515bfc04c4669f060be89d4f8c503fa4e94eabd42f282e01383f47513c2afbd75fc14fef9327486b0d1118b6aeae5dac99c72f447d1dd86cfb6cb5aad93b9a0ea8ecdc9", 0x7e}, {&(0x7f0000000180)="b0e2bbb4ad7a666bcdb2a3644eb742502e66234b4977293b2b373d", 0x1b}, {&(0x7f00000001c0)="2af94cb03e77479bd4cc0194087133479525f4daf9431d0258a1f2b1f409358f5f3303b97af58e9cffaa8413397ed2ea140af4", 0x33}, {&(0x7f0000000200)="cb62434e0da8b1096dbd3267af1e31c2c7babf743a02c0db9a5f360523b0436ba8a6534507b40669daef84240f4ee8", 0x2f}, {&(0x7f0000000240)="4081bf2d38dd855cdf121fde7e37cdd4bad62850e97d3a0cda5ca5917cafc15f3a", 0x21}, {&(0x7f0000000300)="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", 0x1000}], 0x6, 0x3) 23:46:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000000000}, 0x0) 23:46:52 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1e1) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0xfffffffffffffffe) fchdir(r0) pipe(&(0x7f0000000080)) 23:46:53 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) [ 230.550510] binder: release 8396:8417 transaction 184 out, still active [ 230.564465] binder: send failed reply for transaction 184, target dead [ 231.480434] binder: release 8446:8448 transaction 188 out, still active [ 231.493360] binder: send failed reply for transaction 188, target dead 23:46:55 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000005080)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001240)=""/202, 0xca}, {&(0x7f0000000140)=""/148, 0x94}], 0x2, &(0x7f0000001380)=""/93, 0x5d}, 0xfc}, {{&(0x7f0000001400)=@rc, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001480)=""/163, 0xa3}, {&(0x7f0000001540)=""/34, 0x22}, {&(0x7f0000001580)=""/166, 0xa6}, {&(0x7f0000001640)=""/160, 0xa0}, {&(0x7f0000001700)=""/81, 0x51}, {&(0x7f0000001780)=""/10, 0xa}, {&(0x7f00000017c0)=""/213, 0xd5}, {&(0x7f00000018c0)=""/213, 0xd5}], 0x8}, 0x739c}, {{&(0x7f0000001a40)=@tipc=@name, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001ac0)=""/172, 0xac}, {&(0x7f0000001b80)=""/188, 0xbc}], 0x2, &(0x7f0000001c80)=""/176, 0xb0}}, {{&(0x7f0000001d40)=@llc, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001dc0)=""/188, 0xbc}, {&(0x7f0000001e80)=""/185, 0xb9}], 0x2, &(0x7f0000001f80)=""/4096, 0x1000}, 0xff}, {{&(0x7f0000002f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003000)=""/86, 0x56}, {&(0x7f0000003080)=""/181, 0xb5}, {&(0x7f0000003140)=""/67, 0x43}], 0x3, &(0x7f0000003200)=""/11, 0xb}, 0x1b6f877a}, {{&(0x7f0000003240)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000003500)=[{&(0x7f00000032c0)=""/130, 0x82}, {&(0x7f0000003380)=""/68, 0x44}, {&(0x7f0000003400)=""/201, 0xc9}], 0x3, &(0x7f0000003540)=""/218, 0xda}, 0x10000}, {{&(0x7f0000003640)=@rc, 0x80, &(0x7f0000003700)=[{&(0x7f00000036c0)=""/63, 0x3f}], 0x1}, 0x7f}, {{&(0x7f0000003740)=@sco, 0x80, &(0x7f0000004ac0)=[{&(0x7f00000037c0)=""/50, 0x32}, {&(0x7f0000003800)=""/229, 0xe5}, {&(0x7f0000003900)=""/78, 0x4e}, {&(0x7f0000003980)=""/77, 0x4d}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/150, 0x96}], 0x6, &(0x7f0000004b40)=""/201, 0xc9}, 0x9}, {{&(0x7f0000004c40)=@nfc_llcp, 0x80, &(0x7f0000004d00)=[{&(0x7f0000004cc0)=""/41, 0x29}], 0x1, &(0x7f0000004d40)=""/242, 0xf2}, 0x8}], 0x9, 0x2000, &(0x7f00000050c0)={r1, r2+10000000}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000005140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x802040}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x3c, r4, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x20, 0x17, {0x1f, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40041}, 0x40000) connect$inet6(r0, 0x0, 0x37b) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x892, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/34, 0x10000017a}], 0x2, 0x0) get_thread_area(&(0x7f0000000000)={0xfff, 0xffffffffffffffff, 0x6000, 0x41, 0x0, 0x2, 0x4, 0x9, 0x0, 0xa14}) 23:46:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) 23:46:55 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:55 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) syz_emit_ethernet(0x1ad, &(0x7f0000000080)={@random="7636b40ade47", @remote, [], {@ipv4={0x800, {{0x33, 0x4, 0x8, 0x100, 0x19f, 0x66, 0x400, 0x1, 0x2, 0x0, @empty, @local, {[@timestamp={0x44, 0x3c, 0x2, 0x0, 0x3, [{}, {[], 0x9}, {[@local], 0x1}, {[@empty], 0x1}, {[], 0x5}, {[], 0x1f}, {[], 0x683}, {[@local], 0x3b53}, {[@loopback], 0x9}, {[], 0x2}]}, @generic={0x96, 0x7, "260ece367d"}, @end, @ssrr={0x89, 0x2b, 0x15, [@local, @multicast2, @dev={0xac, 0x14, 0x14, 0x23}, @remote, @broadcast, @remote, @multicast2, @broadcast, @multicast2, @empty]}, @ssrr={0x89, 0x1f, 0x7ff, [@loopback, @empty, @empty, @loopback, @broadcast, @loopback, @multicast2]}, @timestamp={0x44, 0x28, 0x6, 0x1, 0xfffffffffffffff8, [{[@multicast2], 0x8000}, {[@remote], 0x7}, {[], 0x5}, {[], 0x3ff}, {[@local]}, {[], 0x80}]}]}}, @dccp={{0x4e23, 0x4e24, 0x4, 0x1, 0x2, 0x0, 0x0, 0x4, 0xa925, "c2339f", 0x9, "23d0aa"}, "004bfefb6f33cdd272a5f6fa79b2dfd53fbc71e27d07b0ea0121f91c857bf45614d64903648cc665fecc3f0d7e70d3d56080ac9de24f0baeed249c0fa560d1b4acf8c27186ba4bae3b5afcdbdc53075fcd58fd8f426e5c539e92c284a2e5c46db6ee62edb54823f079dd7d01e72326ce63ea6fa7b95d93b85bbcb43997bff5876cee0c95793b950d835d6f934495c4d44733bd1d30758cca669812f171a6be5e00d6c7c1fa134dc93458072a9c5b173458ddc1c53a04e901a9dfe2c92a76f14e207f0a"}}}}}, &(0x7f0000000240)={0x1, 0x2, [0x5c1, 0x36, 0xb84, 0x495]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x6, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 23:46:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x100000000000000b, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) prctl$PR_GET_SECCOMP(0x15) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000340)}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x3, 0x0, 0x3, 0x78, 0x3, 0x0, 0x5, 0x27c, 0x40, 0xd9, 0x1ff, 0x10001, 0x38, 0x2, 0xe8c, 0x0, 0x10000}, [{0x6474e555, 0x8b9b, 0x8, 0x101, 0x6, 0x633, 0x401, 0x8}, {0x6474e553, 0x4, 0x9, 0x1, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8e7e, 0x20}], "b8a02a075ca5ec6da3824afcae05bf4783bf146ee95c236527ecefe5496c8bf7783eda02ab0da40de33c56c301b983917f19bdd933845b94085cab9f9e8e6483f2c7fbc64a77dbe8a28e20f6938d2063301d7558fec11b2ce1e65a45faa0deb21373156cb48a4d4b44621a03315515ee3c35397bcdd5270c3cc44424852664548754dd7082fdf604948bff16c1075a039df14a1aa77e478fdbbd3db547120402d1bf54b34f8d0b6617da51798ab030991ee615d57da2ca8fb7cb52c1bdc688ae3718f7b2589ca300fcbcf8ec2e1fa55e37e9a77254e710355a659c3b08ecad52a27ca3957d7d26df1f008575e15ff65465ffe0f4b4", [[], [], [], [], []]}, 0x6a5) 23:46:55 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:55 executing program 0: clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x1ce, 0x0, 0x0, 0x0, 0x59}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 23:46:55 executing program 3: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000000)={&(0x7f0000000240)=""/4096, 0x1000, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r0, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') preadv(r1, &(0x7f0000000480), 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) 23:46:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept(r0, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f00000001c0)=0x80) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000200)={0xc863, {{0xa, 0x4e20, 0x2, @rand_addr="47e3a56534ff8efdb34fe13a30e14f76", 0x6}}, 0x1, 0x8, [{{0xa, 0x4e24, 0x4, @mcast2, 0x5}}, {{0xa, 0x4e20, 0x80000000, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9}}, {{0xa, 0x4e22, 0x4, @loopback, 0x33}}, {{0xa, 0x4e22, 0x40, @local, 0x7ff}}, {{0xa, 0x4e20, 0xffffffff00000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xff}}, {{0xa, 0x4e23, 0x2de, @loopback, 0x7}}, {{0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}, 0x8}}, {{0xa, 0x4e20, 0xfffffffffffffe01, @empty, 0x5}}]}, 0x490) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000006373eb308f00080095000000080000009b64fc9f996345fafe905a71b59fd0a12074126ca4df4fa0ac191f6f71cfdd3500f7ce5d2d6709061ab93c14d6a19f801b253e1b78f228aba40a2a826daf5d322ac7fb79f23f2c0000e28adf0528c0d03aab1f8a2355c2c675be97e5d3a42f4b46ab96a3cbe178bf912b33aeada323dd4ed1c7ac1d287456745a38fbb26fd839da9fb90c50854bcf2155887a12d963f30249c7a039a97606727fe5fc30348e19"], &(0x7f0000000000)='G.\xdd:@\x83\xb90PL\x00', 0x8000, 0x1000, &(0x7f000062b000)=""/4096}, 0x48) 23:46:55 executing program 4: setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000200)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f000006a000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f0000aef000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x0, 0x0, 0x32, 0xfffffffffffffff7}) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(0x0) ftruncate(r3, 0xbb1) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x82, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000640)) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x645, 0x0, 0x80000000000, 0xffff}) flistxattr(r4, &(0x7f0000000080)=""/109, 0x6d) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000040)) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x6, 0x2000000000000000, 0x0, 0x0, 0xd, 0x20, 0x400, 0x1, 0xfffffffffffffffa, 0x0, 0x4, 0x85}) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000180)={0x4, 0x2, 0x7ff, 0x2, 0x0, 0x0, 0x6, 0xff, 0x2, 0x6, 0x7}) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x240301, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8008700b, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) 23:46:55 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$P9_RREAD(r0, &(0x7f0000000200)={0xc3, 0x75, 0x2, {0xb8, "3212ebab72f57b07a93df3406e30e6f00f3044f6dfe16da45228b3a259f91db393f5a0e37adc48c0837119787b3fe6cff17e2f394aea581290a4830555bb96f13549aadefdaf8b3e0793da441efa2bac2eb9e1f8e57f2e32b35b3cbfcf91777d80c7594e80cfcafddd25d34f48a85695f0ec08b28a3a7597201169c32299f90936685523c8d5b2378b8f45550922442188c0061058b6ab7fc39e5f0a5f35fff019ecdb379bf6e3488fd2997f345d9f96806a5bbab1beb3e2"}}, 0xc3) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000180)={0x4, 0x9, {0x57, 0x0, 0x4, {0xfffffffffffffff8, 0x9}, {0x8001, 0xa0}, @period={0x59, 0x0, 0x7fffffff, 0x100000001, 0xfffffffffffffff7, {0x8, 0x8, 0x7fff, 0x9d4}, 0x4, &(0x7f0000000080)=[0x4, 0x48, 0x4, 0x0]}}, {0x57, 0x5, 0xc9, {0xfffffffffffffc01, 0x47f12367}, {0x5, 0xfffffffffffffff9}, @cond=[{0x3, 0x0, 0x3, 0xeda, 0x7f, 0x3}, {0x6, 0x8, 0xfff, 0x9, 0x8, 0x1}]}}) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="39da000400ffffffff0000008b41f5ba003ea3428e8100000000f6a0d0f52b5e0a65d5065131b942921daeaa131d74fc7b9c9a97c2213e507c"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x6, &(0x7f0000000000)=""/25) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 232.759882] binder: 8453:8478 transaction failed 29189/-22, size 24-8 line 3117 23:46:55 executing program 3: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x0) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x213, 0x4) splice(r0, 0x0, r1, 0x0, 0x8, 0x40000000200004) 23:46:55 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f00000001c0)='./file0\x00') clone(0x11012000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) close(r0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000200)="0a60a2c7bdf4edf06ec3300d872de495a11ee4616215702c8ac53e368c1da0f86c9723293cd2456c4b694c5a2d8f9239603f5b3c487dcf66a3fea34de6ef6cfe1afd75dde88e46d4b910c9f4") creat(&(0x7f0000000140)='./file0\x00', 0x0) request_key(&(0x7f0000000380)='syzkaller\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000300)='md5sum\x00r!\x92a \xc0\x0f\xeb\xd4\xf7\x11U\xa9U\xeb\xc3\x0f\x125\xe6`3#\xf7\xd5RM\xf0\x01\x00\r\xef\x9e]\xc2\n{\xdd\xa7\xeb\xe4\xf6\xce\xae\xd6\x8e\xc9}\xd5\xf8\xce\xeaJ]\x92(\xd6\x90\xce\xbe\x9e\xab\x83\x13\xbe\x15\x16\xc7\xbc\vf&\xe4oD\xd6~\'\xe2\xc5\x81\x15c\xd4\x00\x00\x00\x00\x00\x00\x00', 0xffffffffffffffff) 23:46:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xe, 0x4, 0x0, 0x5}, 0x2c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x101400, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x2}, 0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x2df, 0x80000000000) 23:46:55 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r2, 0x40284504, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:55 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x4b8, 0x150, 0x150, 0x0, 0x150, 0x240, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x8, 0x3, 0xffffffff80000001, 0x2, 0x2}}, @common=@frag={0x30, 'frag\x00', 0x0, {0x0, 0x1, 0x3, 0x2, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={0x90, 'srh\x00', 0x1, {0x2e, 0xfffffffffffffffb, 0xe5c, 0x3ff, 0x9, @local, @remote, @mcast1, [0xffffff00, 0xffffff00, 0xffffffff], [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], 0x400, 0x980}}, @common=@eui64={0x28, 'eui64\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x5, 0x1}, 0x2c) 23:46:55 executing program 0: openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1}}], 0x400000000000098, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffff9c) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x100081) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x480000000, 0x0, 0x8001, 0x7f, 0x0, 0x8, 0x0, 0x3, 0x5, 0x7, 0x3, 0x5, 0xff, 0xffffffffffffffff, 0x2000, 0x8, 0xfffffffffffffffe, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x7, 0x2b, 0x0, 0x8908, 0x0, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffa, 0x200, 0x6, 0x20, 0x0, 0x6, 0x0, @perf_config_ext, 0x20811, 0x0, 0x0, 0x5, 0xa69, 0x100000000, 0x4864}, 0x0, 0x9, r0, 0xa) r4 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfff) syz_genetlink_get_family_id$tipc(0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0x1, 0x16, 0x100000000, 0x0, "c46d50e1de37980525e6af5c97fab35f50e922daf7d2cd4ff156dd22c955f9b4"}) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) fcntl$setflags(r1, 0x2, 0x1) sendfile(r3, r4, 0x0, 0x20000102000004) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, 0x0, 0x40000) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x0, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) [ 233.070308] binder: release 8508:8519 transaction 196 out, still active [ 233.440207] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 23:46:56 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:56 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000280), 0x10) openat$keychord(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000480)='/dev/input/event#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000000180)="84e854c498aeb566f57db8e0e1366e3ab0ec9e4eb678bae0b06af50ab8726a074ba3960d5952cfdeeb3fdcf144d83c2c44e76bf1519cb03c4029d12fddf3dc7db26dbbef6157ef935d78ef3c360ef14bd74288c73e24cd682d4519595d1596e716d4f6dddd72", 0x66, 0x40800, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x29}}, 0xfffffffffffffff8}, 0x1c) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) io_setup(0x7e, &(0x7f0000000240)) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xfffffffe8010201f}) timer_create(0x6, &(0x7f0000000000)={0x0, 0x1e, 0x0, @tid=r1}, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:46:56 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x10000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) syz_open_pts(r1, 0x6c100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) accept(r2, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000100)='./file0\x00', 0x20) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) renameat2(r0, &(0x7f0000000280)='./file0/bus\x00', r2, &(0x7f00000002c0)='./file0/bus\x00', 0x4) 23:46:56 executing program 4: setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000200)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f000006a000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f0000aef000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x0, 0x0, 0x32, 0xfffffffffffffff7}) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(0x0) ftruncate(r3, 0xbb1) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x82, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000640)) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x645, 0x0, 0x80000000000, 0xffff}) flistxattr(r4, &(0x7f0000000080)=""/109, 0x6d) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000040)) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x6, 0x2000000000000000, 0x0, 0x0, 0xd, 0x20, 0x400, 0x1, 0xfffffffffffffffa, 0x0, 0x4, 0x85}) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000180)={0x4, 0x2, 0x7ff, 0x2, 0x0, 0x0, 0x6, 0xff, 0x2, 0x6, 0x7}) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x240301, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8008700b, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) 23:46:56 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:56 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socketpair(0x4, 0x80007, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$tun(r1, &(0x7f0000000680)={@val, @val={0x3, 0x81, 0x4, 0x0, 0x5, 0xf9e}, @llc={@llc={0x42, 0x0, "dc27", "b4"}}}, 0x13) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000540)) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20040801) r3 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000580), 0x18) r4 = socket$inet6(0xa, 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x2040, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000600)='/dev/urandom\x00', 0x200, 0x0) close(r4) ioctl$RTC_AIE_ON(r5, 0x7001) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') socket$netlink(0x10, 0x3, 0xa) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x100) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x60001000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x1, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4080) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) [ 233.550413] binder: release 8456:8459 transaction 193 out, still active [ 233.575502] binder: send failed reply for transaction 193, target dead [ 233.601113] binder: send failed reply for transaction 196, target dead [ 233.651028] binder: 8543:8553 transaction failed 29189/-22, size 24-8 line 3117 23:46:56 executing program 2: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:56 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:56 executing program 2: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:56 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:56 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) fcntl$getown(r0, 0x9) r2 = open(&(0x7f0000000280)='./bus\x00', 0x10004000141042, 0x0) fallocate(r2, 0x1, 0x0, 0x10000101) write$tun(r2, &(0x7f0000000080)={@val, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @empty, @broadcast, @broadcast, @broadcast}}, 0x20) ioctl$int_out(r1, 0x5460, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='em0\x00') 23:46:56 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) read(r0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r3 = geteuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r3) listen(r2, 0x9) [ 234.007925] binder: release 8574:8576 transaction 204 out, still active [ 234.171115] binder: release 8584:8593 transaction 207 out, still active 23:46:57 executing program 2: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:57 executing program 4: open(&(0x7f0000000140)='./control\x00', 0x20000, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000340)='./control\x00', 0x0) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./control\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000700)=""/80, 0x20d) unlinkat(r0, &(0x7f0000000400)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000200)='./control\x00') 23:46:57 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x100, 0x9, 0x800000000000000}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) sched_setscheduler(r1, 0x7, &(0x7f0000000100)=0xfffffffffffffff9) r2 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20100, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) 23:46:57 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:57 executing program 0: clone(0x28000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_GET_TSC(0x19, &(0x7f0000000200)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:46:57 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) [ 234.478866] binder: send failed reply for transaction 201 to 8544:8550 [ 234.501924] binder: send failed reply for transaction 204, target dead 23:46:57 executing program 4: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000540)='/dev/keychord\x00', 0x0, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x1) dup3(r0, r1, 0x0) [ 234.538297] binder: send failed reply for transaction 207, target dead 23:46:57 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x28, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r2}, 0xc) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f00000001c0)=0x9) syz_genetlink_get_family_id$tipc(&(0x7f0000002780)='TIPC\x00') fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000340)=0x0) sendmsg$nl_netfilter(r4, &(0x7f0000002740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002700)={&(0x7f0000000380)={0x2380, 0xe, 0x6, 0x400, 0x70bd25, 0x25dfdbfd, {0xf, 0x0, 0x2}, [@nested={0xe0, 0x34, [@generic="a8583b193cb1a3f4f12b5c8c5ec39426f41b94843b3ab76868def8deab1f9337759694516a975f3bc561e26edfaeca488ae9ccf864ff8dcd196122c0c6af692472a1fc2fcd28f731356452a2e8e1b489e44403067df3cffb5b50290d6eb133a707be5dcfaa1abd590be456c4a005766c845ff058b6cb6c66720edbceaa59d7c6ee6b01d798a730b4f43c0dcd6e2da7e9a9b645d516db046f8e757225992bc79916b18379ad7bea9a1e780b11d83a47da4aa16330563901345e0cf3b5d5704a8c54d0a87d94f1", @typed={0x14, 0x79, @ipv6=@ipv4={[], [], @multicast2}}]}, @nested={0x115c, 0x22, [@typed={0x20, 0x4b, @str='security.SMACK64TRANSMUTE\x00'}, @typed={0x8, 0x5, @uid=r5}, @generic="2ada5ffd101830f454c0f3864b54764620f6d80ae43a8fc8c8417304e2f3b4802ea6a5cff9d35bc9d12b0092d8b556fc8d995e6a03a222ef811a6b05b200378a4e9a4182a3e3c22b2c23c158c0b7c855ffa93df31315b7cacab599b0427e621ee59ef5c1ba60d5e21f41ab95cacf1cbe40d975c433a9e6c1b9d432e053d44802491bbb0631c7688e4ac67192ae24b2522538b2b6291144baeff12e4dc9afca509ab2dba5dd33b2153010d8cdbae596070b4e33f940e383c68cda0a334ff07b2824", @typed={0xc, 0x7f, @u64=0x3ff}, @typed={0x8, 0x1c, @str='\x00'}, @generic="b8a7f57c5b4a4166cce11af6b7d96f1d5877af040ca1699a166dbcc812d4fff714a90d054537caa9b4382b44446d86eefdf84f8bc600adb45e655345ac5387023af355fc50b5123fd7bef2ca866c567d86a002", @typed={0x8, 0x6c, @ipv4=@empty}, @generic="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"]}, @nested={0x1130, 0x49, [@generic="650eca1d70ebfae22ac6a12ed4e8be22046855865b50d81a5d1ee41576fefbabecac3dd3a76cae1b997aa11877dc76cca994d82b1119851d92f746f9a94156d2dfb73a66280f1c9df9a674079ca988c718ecc8c3", @typed={0xc, 0x1f, @u64=0x20}, @typed={0xc, 0x88, @u64=0x8}, @generic="61a1ab2393f400a436b4158fa898c4e355656d06fc38daec1814c699d27bbf0d870cd40339219b579156410b677e52be723535f662f4b4de7e2feed2b9592ca9713ae8fa5cd1ac96ba53109535014410521cd80f2d1b0a6787d4e88e6a2e72dab16f1172803c92439457b921ce2b7d", @typed={0x1004, 0x66, @binary="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"}, @generic="84b44180a35d8f1fd79877b14d05c321d6ce38f463bfcb71fc168f7907fa8a494bfc0b46459e778b3631fb5f603b95f6a0ac2fd9ff04bbc46eb39863a410f2bf887b438459", @typed={0x8, 0x80, @pid=r6}]}]}, 0x2380}, 0x1, 0x0, 0x0, 0xb7ecc63c2224446e}, 0x40000000040) openat$cgroup_type(r4, &(0x7f00000027c0)='cgroup.type\x00', 0x2, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000200)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x3) close(r3) [ 234.583359] binder: undelivered TRANSACTION_ERROR: 29189 [ 234.589177] binder: 8604:8622 transaction failed 29189/-22, size 24-8 line 3117 23:46:57 executing program 4: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:57 executing program 3: exit(0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x51, &(0x7f0000000140)=0x5) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000580)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x10011, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x192) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = geteuid() quotactl(0x6, &(0x7f0000000000)='./file0/file0\x00', r2, &(0x7f0000000180)="6dd4e8c4fb4975aeda89b9b740e60308ee873843b85e2e5c59df3616689d96fd500f7b75ec1903015c8f77fb5f3f1b48b2f8babf5a537676831600fe9925257e42e230ac864567f46bc61c14a518c60013532aa9c596adf1f01bbe6527f395fabd689a53591207f8d8de415d030769c8849b9f63637d2298c0ba5b40ef2d037d97f89522aaaef01fb04a8b20a222f6ce033711ef4ad86de3cb112fff1a307b582980765cfbac158178bce2") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x1) r3 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r4, 0x0) connect(r3, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') sendfile(r3, r5, 0x0, 0x800000bf) clone(0xfffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000340)={0x5, 0x6, 0x3, 0x14, 0x2, 0x6, 0x4, 0x7e, 0xffffffffffffffff}) exit_group(0x0) clone(0x40000004001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:46:57 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udplite6\x00') r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x102001}, 0x10, &(0x7f00000003c0)={&(0x7f0000000200)={0xd4, r3, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfecb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x704}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe41}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff35}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x790beb8a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000004c0)) prctl$PR_SET_SECUREBITS(0x1c, 0x8) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/policy\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r5, 0x5608) preadv(r4, &(0x7f0000000140), 0x0, 0x80000000100) 23:46:57 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/115) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x3f, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x4004743d, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 23:46:57 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:57 executing program 4: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x1c0, 0x0) close(r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x44, r2, 0x315, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') socket$netlink(0x10, 0x3, 0xa) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x8000fffffffe) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x400000000000f, &(0x7f0000000080)=0x80, 0x5ffa) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x81, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="5e2f1aea0d18"}, 0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0f8100006700000000000000000049000000000000dae776"], 0x18) pwrite64(0xffffffffffffffff, &(0x7f0000000240)="0559ea481b36bb1369ca003bbd0cfe191b5d622b7664668ac7796dff1da17f0568834c8c463f786693f5332085e0a227af395ffa7f44c68c9c628be0df3b4f66b587222029", 0x45, 0x0) 23:46:57 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000000)=""/86, &(0x7f00000000c0)=0x56) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @broadcast}}) [ 234.930220] binder: release 8652:8664 transaction 215 out, still active 23:46:58 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:58 executing program 3: r0 = creat(&(0x7f0000002500)='./file0\x00', 0x1) accept4$unix(r0, 0x0, &(0x7f0000002540), 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0x1, 0x4) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r3 = request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000200)='self}em1\xbdem1\\\xdb{eth0@\x00', 0x0) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) unlinkat(r1, &(0x7f00000002c0)='./file1\x00', 0x200) keyctl$reject(0x13, r3, 0xea6, 0x1, r4) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 23:46:58 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000080)='mountstats\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$P9_RCLUNK(r2, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) 23:46:58 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000080)={0x80fb, 0x2}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0xb1, 0x40000000000000}, {0x6}]}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x10000, 0x0) 23:46:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xfffffffffffffffd, 0x11011, r0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) r2 = request_key(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)=',)posix_acl_access]\x00', 0xfffffffffffffffe) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000300)=0x800, 0x12) keyctl$clear(0x7, r2) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ff7000/0x3000)=nil) r4 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fec000/0xc000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100)="329a96f62c4b23c9af473542a6e3f101b1826e567786186cd4ba6b486719ad502b62c7efc5454070f65d9f3d13511784280a6762821cc37f1971f13219c150e2febf3c26e52017d682af064bead3111f7b2d35e3d592108dc7a74d54251c859f2474f9ef7d2dcf64655651388de9a934ec09f76dc19cc6f323fed3551611c954b7d02dd2879e95ee2d77c3ac77875586f027cb035ea42b67110ddf31b2a2ba2469a1c04971c0", 0xa6, r4}, 0x68) r5 = dup(r4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1001020}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf0, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x44, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffeffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0x0) r7 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) [ 235.401169] binder: release 8607:8638 transaction 212 out, still active [ 235.409880] binder: send failed reply for transaction 212, target dead [ 235.426467] binder: send failed reply for transaction 215, target dead 23:46:58 executing program 4: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:58 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) futex(0x0, 0x0, 0x0, &(0x7f0000003ff0), 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f00000001c0)={0x8, "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", 0x1000}, 0x1006) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f00000076c0)=0x5b9b) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 235.494570] audit: type=1400 audit(1553644018.160:47): avc: denied { map } for pid=8689 comm="syz-executor.0" path="socket:[22962]" dev="sockfs" ino=22962 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=packet_socket permissive=1 [ 235.495590] binder: 8685:8701 transaction failed 29189/-22, size 24-8 line 3117 23:46:58 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x400) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x6e8, 0x0, 0x470, 0x470, 0x540, 0x138, 0x650, 0x650, 0x650, 0x650, 0x650, 0x5, &(0x7f0000000100), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x18}, @loopback, 0xff000000, 0xffffffff, 'veth0\x00', 'bridge0\x00', {}, {}, 0xaf, 0x2, 0x4}, 0x0, 0x100, 0x138, 0x0, {}, [@common=@unspec=@rateest={0x68, 'rateest\x00', 0x0, {'nr0\x00', 'veth0_to_team\x00', 0x15, 0x3, 0xdd11, 0x0, 0x100, 0x2, 0x8, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x18, @remote, @rand_addr=0x2f, @port=0x4e24, @icmp_id=0x66}}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 'vlan0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x62, 0x3, 0x4}, 0x0, 0x2f0, 0x338, 0x0, {}, [@common=@unspec=@bpf0={0x230, 'bpf\x00', 0x0, {0xd, [{0x6, 0x1000, 0x1f, 0x6}, {0x6, 0x9, 0x2c767c37, 0x4}, {0x4, 0xffffffffffff4d0d, 0x1ff, 0x10000}, {0x4, 0x400, 0xa, 0x9}, {0xfd, 0x8, 0x7fffffff, 0x5}, {0x3, 0x800000000000000, 0x3, 0xc7}, {0x1, 0x58a, 0x2, 0x9}, {0x20, 0xfffffffffffffffd, 0x28, 0x6}, {0x7ff, 0x8, 0x401, 0x4}, {0x100000001, 0x80000001, 0xe7c, 0x100000001}, {0x100000000, 0x5, 0x7, 0x8}, {0x1f, 0xae, 0xfffffffffffffeff, 0x8}, {0x7, 0x1, 0x8a99, 0x7}, {0x20, 0xb31, 0x1cc8, 0x1f}, {0x6, 0x5, 0x2, 0x1}, {0x6, 0xff, 0x6, 0x10001}, {0x100, 0x1, 0x9, 0x67c}, {0x7fff, 0x3, 0x0, 0x5}, {0x1, 0x9, 0x8001, 0x10001}, {0x6, 0x800, 0x3ff, 0x7fffffff}, {0x7ff, 0x80000000, 0x8000, 0x101}, {0x57, 0x80, 0x7f, 0x7fffffff}, {0x101, 0x8, 0x2, 0x26bc}, {0x4, 0x9, 0x80000001}, {0x6, 0x7f, 0xfffffffffffffffd, 0x255}, {0x91e9, 0x10001, 0x5, 0xffffffffffffff80}, {0x4, 0x8, 0x0, 0x8001}, {0x4, 0x5, 0x1f}, {0x8000, 0x4, 0x1, 0x10000}, {0x0, 0x2, 0xff, 0x4}, {0x2, 0x1, 0x2, 0xc1d}, {0x978, 0x7fffffff, 0x400, 0x80}, {0x0, 0x2, 0x8, 0x8}, {0x3, 0x0, 0x7f, 0x9}, {0x2, 0x20, 0xfffffffffffffbff, 0xfffffffffffffff8}, {0x5, 0x32, 0x598f, 0x7}, {0x1, 0x73, 0x101, 0x3}, {0xb2, 0xfffffffffffff409, 0x80000001, 0x9}, {0x5c, 0x2, 0x200}, {0x10000, 0x6, 0x9, 0xfffffffffffffffd}, {0x81, 0x8, 0x10001, 0x3}, {0x6, 0x77, 0x5, 0x3}, {0xfffffffffffffffd, 0x5, 0x8000, 0x100000001}, {0x7, 0x5, 0xbc, 0x100000000}, {0xc00000000000000, 0x2, 0x0, 0x80}, {0x7fff, 0x2, 0x101, 0x3a9a}, {0xffffffffffffffff, 0x7, 0x7f, 0xfffffffeffffffff}, {0x0, 0x7, 0x7ff, 0x3}, {0x6, 0x3, 0x1, 0x7}, {0x5, 0x5, 0x5, 0x400}, {0x0, 0x4, 0x7, 0x9}, {0x1000, 0x800, 0x4aed, 0x6}, {0xfffffffffffffff8, 0x8b4, 0x6, 0x1}, {0x0, 0x2, 0xffffffffffffff96, 0xffff}, {0x100, 0xffff, 0xa27, 0x1272028d}, {0x10000, 0x1, 0x7, 0x1f}, {0x9, 0x2, 0x200}, {0x4, 0x40, 0x81, 0xffffffffffffffff}, {0x3, 0x3ff, 0x3, 0x81}, {0x8, 0x8, 0x5, 0x100000001}, {0x296e, 0x1, 0x2, 0x8}, {0x0, 0x2, 0x5, 0x459}, {0x3, 0x4, 0x6c, 0x800}, {0x4, 0x1, 0x1, 0xb2}], 0x4}}, @common=@icmp={0x28, 'icmp\x00', 0x0, {0xe, 0x0, 0x2, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@remote, @ipv6=@local, @icmp_id=0x64, @gre_key}}}, {{@ip={@empty, @multicast2, 0xff, 0xff000000, 'veth0_to_bridge\x00', 'teql0\x00', {0xff}, {0xff}, 0x2f, 0x3, 0x12}, 0x0, 0x98, 0xd0}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @rand_addr=0x4, @broadcast, @icmp_id=0x65, @port=0x4e20}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x58baf0a9, [0x8, 0x0, 0x0, 0x20, 0x536376e, 0x5], 0x8, 0x8}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr=0x3, @multicast2, @gre_key=0x6, @icmp_id=0x65}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x748) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000080)) 23:46:58 executing program 4: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) [ 235.583873] selinux_nlmsg_perm: 6 callbacks suppressed [ 235.583885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8709 comm=syz-executor.0 23:46:58 executing program 2: rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0xfffffffffffffffd, 0x8, 0x1f, 0x0, 0x0, 0x0, 0x10000, 0x4, 0xbf, 0xb796, 0x0, 0x1f, 0x0, 0x3, 0x100000000, 0x3fe, 0x64, 0x0, 0x3296, 0x1, 0x1f, 0xbf, 0x101, 0x4, 0x2, 0x3, 0x5, 0x0, 0x7, 0x9, 0x8, 0xd4f0, 0x1, 0xda3, 0x80000000, 0x5, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x13}, 0x1000, 0x7, 0x2b5d, 0x0, 0x6, 0x10000, 0x3}, 0x0, 0x0, r1, 0x9) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000440)={'icmp6\x00'}, &(0x7f00000006c0)=0x1e) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = creat(0x0, 0x82) prlimit64(r4, 0x6, 0x0, &(0x7f0000000080)) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x80) setsockopt$inet_buf(r5, 0x0, 0x3f, &(0x7f0000000280)="b239ecc443388205ac055cc8da698f7951fb09496ae406acccb47f6f012f1bb19c7ec02129a933c74c79e3046e47a144fc5f34559e4fa918246695660016ab14227847390fc3af157234df90b603e03b54f4175109893d6875c014b97f24979845a2b88a82f84ab4d6bb903ddeec19d9b4", 0x71) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000340), 0x4) write$binfmt_elf64(r5, 0x0, 0x0) dup2(r1, r2) fallocate(0xffffffffffffffff, 0x0, 0x7fff, 0x4) getresuid(&(0x7f0000000640)=0x0, &(0x7f0000000680), &(0x7f0000000700)) keyctl$get_persistent(0x16, r7, 0x0) fallocate(r5, 0x4, 0x5e89, 0x20000000000fff9) write$P9_RREADLINK(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="1001000017010007002e2f66696c6513638f8cd1d6924976b4094a5490843d104db5b7e6b03fa80400000200e7717ca5eccdbf2912b6fb62dd9446127242b947993eb7793e36192e263c08c2463c881db6b6d3cec135780c511895c528d8446b73aa79ef23865f44dafb28e4a064ec84887eeb0b170487cb000c159bfce56c381c4a308ee6bfc0e2f1f3a86abfce40618ff7fc83811fec5fe5c12a76e8c8033640864695c5ae2deb74eb060e47b12dd0c65b4dc703c824f48a7d1fdd93629bf55c81ebcdba603589b86aa55692b64092a2d825ade1d48e6ca0a3a452177d30ef80209a1e46c469549cf367902099e0275dceb77b0d3027b02ab119bfd2455495a612c88a3dfc30ac9e748ee61e9b40acfc3238ca2eeed2c18df1ea4ae01ef5845fb04b1a21a2dfffc05fa9a6d42f2803"], 0x130) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000800)=""/10) unshare(0x40000000) fsetxattr$security_selinux(r6, &(0x7f0000000380)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:hald_acl_exec_t:s0\x00', 0x25, 0x3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x28, &(0x7f00000000c0)}, 0x10) getcwd(&(0x7f00000001c0)=""/103, 0x67) 23:46:58 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 235.744267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8695 comm=syz-executor.0 [ 235.841065] binder: release 8725:8726 transaction 223 out, still active 23:46:59 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:59 executing program 4: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:59 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:59 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1ee) chdir(&(0x7f0000000040)='./file0\x00') fallocate(r0, 0x1, 0x20, 0x5) fcntl$setstatus(r0, 0x4, 0x44400) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x410042, 0x41) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x33) flock(r1, 0x1) time(&(0x7f00000000c0)) fremovexattr(r0, &(0x7f0000000100)=@known='trusted.overlay.nlink\x00') ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000140)=0x4) fchdir(r0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000180)) symlinkat(&(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x7) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000280)="977752b416742dc5ac04d4ef6ed5e6c929eb0fe37d1729145af47e0e9039d6a26cdd0c74d40269c1446f6b691158098cbb21cd6f0220634e046e4e03df3678328bed9c4655d0c878fbe0f3ee6f049e0a1b03bd39b0b54fd8a6b25847f27d90ccb02a9f462c64726a9d8bdda9c87af87d7e93a388bd2b1bf7316ee6765f4c10ebe366eafb634861647ea27534031bec8be04f19b5dc1b6fef736e9dc0c6ff35b01ba8fd0252") getgroups(0x5, &(0x7f0000000340)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01, 0xee01]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) getgroups(0x7, &(0x7f0000000400)=[0x0, 0xee01, 0x0, 0xee01, 0x0, 0xee00, 0xee01]) r5 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000600)=[r2, r3, r4, r5, r6, r7, r8]) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x88000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r9, 0x100, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}}, 0x40) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000780)=""/119, &(0x7f0000000800)=0x77) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000840)={r0, 0x0, 0x80000000, 0xcd3e, 0x3}) write$P9_RREADLINK(r1, &(0x7f0000000880)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) syz_emit_ethernet(0x1e, &(0x7f00000008c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @local, [], {@can={0xc, {{0x0, 0xfffffffffffffffa, 0x7, 0x400}, 0x7, 0x0, 0x0, 0x0, "dd2e3253c68a779d"}}}}, &(0x7f0000000900)={0x0, 0x4, [0xdca, 0xc37, 0x401, 0x121]}) 23:46:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) getsockopt$bt_hci(r1, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) mlock(&(0x7f0000b9e000/0x4000)=nil, 0x4000) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1f) add_key$user(0x0, &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000002c0)="a01e1e7ce7a9175dde9caeb454a1c68c98de67ad830abd6183a3dce9d66bcc4364423fa56235a45fc15d75c9369e6e61c5ca7b539de4279eafddcee99be99043d9390d7cd78222ad75c80683e9fc5e872771c56991c16a5edb79c1e85111a647dd2a7a925c2dd9c456b327c08453b3a735d1b1ae3792541ff8c4ad1d51d9aa89e3cbed5bf8dd3077", 0x88, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000440)={@rand_addr="a4df8e72e322b7f48a9dc7f814c67f68", r4}, 0x14) socket$inet(0x2, 0x2, 0x6aa) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000580)=[@window={0x3, 0x86fb, 0x1}, @sack_perm], 0x2) r5 = dup2(0xffffffffffffffff, r0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000780)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x24000880) connect$inet6(r6, &(0x7f0000000800)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) sendmmsg(r6, &(0x7f0000007e00), 0x26e, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000007c0)='ip6tnl0\x00', 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, 0x0) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) 23:46:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x7b8e, 0x1000000000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xb, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000000180)=@known='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) clock_nanosleep(0x6, 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000240)) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) accept$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\xb8\xd2\x00', r5}) mmap(&(0x7f000060b000/0x1000)=nil, 0x1000, 0x1000008, 0x10, 0xffffffffffffffff, 0x2) unshare(0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x22000, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000500)=""/201) r6 = inotify_init() write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="870000007502007c000000fdf5aa3fbf3673a94bb40f3818300446a6786b71133a172a78bd91123fa28af2677a443ca329cd3d62f185a44916c5deea1b27992937007928fc171c204128f18dc5e9d7d8c2566104f0d35f7e2b1ae3cc8ea65d8ba8a5c58f41b1406bb1ab85ac3dcadf25462ae67b3642326315a36a719ac51de2b487007d8b6341"], 0x87) inotify_add_watch(r6, &(0x7f0000000080)='.\x00', 0xfe) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) socket$inet6(0xa, 0x80000, 0x3ff) dup2(r7, r6) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008000a000c00060000001900a30704000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000037f, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000003c0)='cpu&3!\x00\n\xc0\xf9*`\x00\xba>C,]\xa5\xe9\xea\xe0\xcd\xabK\x83\xcf\x8a\xc6\x9c\xe1V\x0e\xe1\'P\x8f\x15x\xd67\b\n\x06\xd4!\xd7\xfe\x10\xce\xf9\xdf\'z\x89\tI\x02\xa8\x03\x00\xeb\x06\xe2-\x8b:\a\xd2;d \xf8\x8d\xeb\xe4\x9f\xf8') ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x13a) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x5, 0x4, "fd7ceb2989cd0e6d6ffb9a4c0a01eff651a33320ddf883566c8ded067f170e20c8b1fa07b991cbe57a2b859bb87d9f28ce405a324d4458d25d4efac449204d22", "122da1bce277b9cce73f56968ba8f60b8de80ba183b9e6ac9f2e22c8c66d8b4c", [0x1, 0x2]}) [ 236.328084] binder: send failed reply for transaction 220 to 8690:8703 [ 236.343934] binder: send failed reply for transaction 223, target dead [ 236.366318] binder: undelivered TRANSACTION_ERROR: 29189 23:46:59 executing program 4: getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='rdma.max\x00', 0x2, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./control\x00', 0x0, 0x18}, 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) fcntl$setlease(r1, 0x400, 0x1) accept4$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x0) umount2(&(0x7f0000000180)='./control\x00', 0x1) fcntl$getown(r2, 0x9) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) unshare(0x40000000) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000f0000000000000000300000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 23:46:59 executing program 3: syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x4, 0x9, 0x200}) fchmod(r0, 0x0) [ 236.453452] binder: 8737:8752 transaction failed 29189/-22, size 24-8 line 3117 23:46:59 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) unlink(&(0x7f0000000140)='./file0\x00') r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fsetxattr(r2, &(0x7f0000000240)=@known='trusted.overlay.redirect\x00', &(0x7f00000003c0)=',\x00', 0x2, 0x2) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[@ANYRES16=r1], 0x303) timer_create(0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) inotify_init() openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8}) 23:46:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() accept4(r0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) wait4(r1, &(0x7f0000000000), 0x8, 0x0) tkill(r1, 0x17) 23:46:59 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f0000000200)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ppp\x00', 0x400000, 0x0) getdents(r1, &(0x7f0000002840)=""/188, 0xbc) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000014c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) splice(r2, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000002640), 0xb33, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x40, 0x0) write$9p(r3, &(0x7f0000001540)="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", 0xf71) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020d00000602000004000000ffffffff030006000000000002000008e000000100009f000000000000080012000220020007000000000000000600000000000000f52b023e2c74e7038448c15ca74ba6016e47bb2c6724b4d602c8"], 0x5b}}, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x40) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100)) ptrace(0x4219, r5) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000240)={0x4, 0x1, 0x0, 0x6, 0xfffffffffffffffe, 0x8}) ptrace(0x10, r5) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002680)={@remote}, &(0x7f00000026c0)=0x8) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)=ANY=[]) wait4(0x0, 0x0, 0x200000000000, &(0x7f0000000300)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x50, &(0x7f0000001440)}, 0xffffffffffffff76) ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x2a) fallocate(r0, 0x50, 0x0, 0x3f) ioctl$RTC_WIE_OFF(r4, 0x7010) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000000c0)={0xffffffff, 0x7f, 0x0, 0x8}) add_key$user(&(0x7f0000002700)='user\x00', &(0x7f0000002740)={'syz', 0x1}, &(0x7f0000002780)="78dce5fee7f45364ac84258c4b4ff643754853da93c47ace9e48bf1b3ed99c73e69c1df0b5706c2a05e39aaee05cc0ab8aab9112f2e06b5eb0c8225accb6f501c224c8", 0x43, 0xffffffffffffffff) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x102) [ 236.747365] binder: release 8775:8778 transaction 231 out, still active 23:46:59 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:46:59 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:46:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) fcntl$getflags(r0, 0x3) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000004c0)=""/248, &(0x7f0000000180)=0xf8) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'osx.', '/dev/vga_arbiter\x00'}, &(0x7f0000000100)=""/69, 0x45) keyctl$get_security(0x11, 0x0, 0x0, 0x0) [ 237.289949] binder: release 8741:8748 transaction 228 out, still active [ 237.306105] binder: send failed reply for transaction 228, target dead 23:47:00 executing program 4: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x209) r1 = dup2(r0, r0) sendto$inet(r1, &(0x7f0000000480)="6e17a003f00a118e736dab092e94be36f6073947223bce25baeb70e41ae88f8bc7335cb5f6f406ee6c4eeec5595960de49b557a907df30e61e6f636f7c7cc3dab683c89c15d1114bc923b2b9840df831fa1316d9a394fde692a00263", 0x5c, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@ipv4={[], [], @empty}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000140)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000400)={0x0, @dev, @multicast1}, &(0x7f0000000440)=0xc) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000880)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f00000008c0)=0x14) accept$packet(r1, &(0x7f0000000ac0)={0x11, 0x0, 0x0}, &(0x7f0000000b00)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c00)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000d00)=0xe8) getpeername$packet(r1, &(0x7f0000000e40)={0x11, 0x0, 0x0}, &(0x7f0000000e80)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8301000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000ec0)={0x2d0, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x2b4, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xac}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0xe9, 0x3, 0xfffffffffffff000, 0x1}]}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0x9, 0x0, 0x10001, 0x1}, {0xfffffffffffffff8, 0x7, 0x56d0, 0xfff}, {0x1000, 0xcdea, 0x3, 0x1}, {0x6, 0xff, 0x9, 0x9}, {0x9, 0xee7, 0x80000001, 0x8}, {0x200, 0x0, 0x2, 0xffffffffffff218d}, {0x9, 0x7, 0x5c27, 0x2}, {0x7fff, 0x8, 0xffffffffffffffff, 0x6}, {0x0, 0x1000, 0x3, 0x80000000}, {0x2, 0xfff, 0x4, 0xc2e}]}}}]}}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) write(r1, &(0x7f00000014c0)="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", 0xebd) setsockopt$sock_int(r0, 0x1, 0x200000000000008, &(0x7f0000000080), 0x1a8) sendto(r1, &(0x7f0000000500)="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", 0x16d, 0x20000001, 0x0, 0x0) [ 237.347795] binder: send failed reply for transaction 231, target dead [ 237.440859] binder: 8795:8800 transaction failed 29189/-22, size 24-8 line 3117 23:47:00 executing program 4: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:00 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:00 executing program 0: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x4102, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000180)=0xfffffffffffffff7, 0x4) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='gretap0\x00'}) [ 237.645499] binder: release 8824:8828 transaction 239 out, still active 23:47:00 executing program 4: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) [ 238.230573] binder: release 8798:8805 transaction 236 out, still active [ 238.246899] binder: send failed reply for transaction 236, target dead [ 238.258032] binder: send failed reply for transaction 239, target dead 23:47:02 executing program 3: ioctl(0xffffffffffffffff, 0x41000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) keyctl$revoke(0x3, 0x0) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) ioctl$int_in(r1, 0x5473, &(0x7f0000000040)=0x6) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') write$apparmor_exec(r0, &(0x7f0000000300)={'stack ', 'IPVS\x00'}, 0xb) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x2013, r0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r3 = dup2(r1, r1) write$P9_RUNLINKAT(r0, &(0x7f0000000340)={0x7, 0x4d, 0x2}, 0x7) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x208) flistxattr(r1, &(0x7f0000000080)=""/141, 0x8d) 23:47:02 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) creat(&(0x7f0000000640)='./file0\x00', 0x100) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:02 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000010201000000d0498fb2940c84db02000c00020008000100e0000002"], 0x20}}, 0x0) pause() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x2dc) fsetxattr$security_ima(r1, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) getpeername(r3, &(0x7f0000000240)=@isdn, &(0x7f00000000c0)=0x80) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000140)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000001c0)=0x41) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x30, r2, 0x0) 23:47:02 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x20002000005) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x3, 0x8, 0x1, 0x3f}, 0x2b, [0x9b91, 0x3ff, 0x4, 0x4, 0xff, 0x7, 0x3, 0x1, 0x7fffffff, 0x8001, 0x3, 0x3, 0x800, 0xfe5, 0x7, 0x8107, 0x22, 0x5, 0x32, 0x100, 0x5, 0x4, 0x80000001, 0x8, 0x1f, 0x9, 0x3ff, 0x0, 0x5f9, 0xfffffffffffffff9, 0x2, 0x8, 0xff, 0x80, 0x1, 0xffff, 0x3, 0x9, 0x3, 0x3a1d11fe, 0xb6f7, 0x9, 0x3, 0x6, 0x10001, 0x7, 0x2, 0x3f, 0xcc, 0x5, 0x8, 0x4, 0x5, 0x100, 0x10001, 0x9, 0x1, 0xe392, 0x3, 0x3f, 0x9, 0x800, 0x7f, 0x16], [0x6, 0x400, 0x4, 0x7, 0x2, 0x5, 0x3, 0x54, 0x2, 0x0, 0xff, 0x6, 0x401, 0x9c, 0xc311, 0x9, 0x3b29, 0xa1, 0xff, 0xffffffff00000000, 0xa3ab, 0x8, 0x800, 0x9a, 0x6c6, 0x80, 0x6, 0x6, 0xff, 0x6, 0x20, 0x3ff, 0x0, 0x7a, 0x1, 0x4, 0x78, 0x1, 0x0, 0x4, 0x6, 0x10001, 0x1000, 0x1, 0x6, 0x5, 0xe3, 0x101, 0xe51, 0x6, 0x100, 0x3, 0x80000000, 0x40, 0x2, 0x9, 0x0, 0x7fff, 0x4, 0x7f, 0x7, 0x3, 0x1f, 0x8], [0x6, 0x2, 0x40, 0x1, 0x20, 0x5, 0x5, 0x8fc, 0x2, 0x0, 0x7, 0x2d8b, 0x4, 0x496, 0x9, 0x3cbd, 0x8, 0x4, 0x0, 0x2, 0x6b2, 0x200, 0x9, 0x2, 0x10000, 0x4a5d, 0x3ff, 0x31ea, 0x6a513169, 0x5f, 0x2a9e4c2a, 0x7fffffff, 0x3f, 0x6, 0x9, 0xb8ca, 0x84, 0x4d5, 0x3ef, 0xdc, 0xffff, 0x81, 0x4c27, 0x2, 0x0, 0x4, 0x6, 0x2, 0x20, 0x8, 0x200, 0x8000, 0x40, 0x7ff, 0x7f, 0x6, 0xfff, 0x20000000000, 0x9, 0x80, 0x6b1d1601, 0x8000, 0x3, 0x7fff], [0x7, 0x3, 0x200, 0x0, 0xbd9, 0x8001, 0x7, 0x4, 0x3, 0x1, 0x10000, 0x7, 0xcf0, 0x140000, 0x4, 0x800, 0x80, 0x9a9, 0xf9, 0x1, 0x4, 0x3, 0xff, 0x8, 0x8, 0x1, 0xb9fe, 0x3, 0x7, 0x5, 0xfb6, 0x4, 0x10001, 0x9, 0x25c, 0x9, 0xfffffffffffffff9, 0x7ff, 0x6, 0x2, 0x345c, 0x100000001, 0x8, 0x5, 0xfffffffffffffff8, 0x9, 0x4, 0xff, 0xffffffffffffb014, 0xffff, 0x7ff, 0x80000001, 0x200, 0x8, 0x4, 0x1, 0x8, 0x7, 0x0, 0x2, 0x10000, 0x80, 0x1, 0x3]}, 0x45c) listxattr(0x0, &(0x7f00000013c0)=""/21, 0x15) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0xbfffe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) bind(r4, &(0x7f0000000380)=@in6={0xa, 0x4e23, 0x3, @loopback, 0x4}, 0x80) r5 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x6946) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5) write(0xffffffffffffffff, &(0x7f00000001c0), 0x7ba27d3a) 23:47:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/82) clone(0x8000, &(0x7f00000000c0)="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", &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="b9475d9670217e335027b401247061caad03644a2703a2380bcc91357767734645afc71ee7d3875be97688e38a1e03d5971f7ee924f56b54d53538a956cd65d99fe521a9d6612c32a8105b377537df58a86b241607dc42f8369a8ef9135d5059e80c8d6072e5cf8a4c08c5ffcb4f1fd8240e83c5e5b5e9360eb893a26264fa4c10291f83870acc7b0bd9cbf09fd23d893ffe94432a5f29cedd1cb92ecf41918b51967186b5b1da5b4e") setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000001200)=0x8, 0x4) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000001240)) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000001280)={0x5, 0x3f, 0x265a}) r1 = open(&(0x7f00000012c0)='./file0\x00', 0x80002, 0x1) io_setup(0x7fff, &(0x7f0000001300)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400)='/dev/ptmx\x00', 0x20000, 0x0) r4 = accept$packet(r1, 0x0, &(0x7f00000014c0)) io_submit(r2, 0x5, &(0x7f0000001840)=[&(0x7f00000013c0)={0x0, 0x0, 0x0, 0x2, 0x101, r1, &(0x7f0000001340)="f0967dc6a4dcad68f92c13b25bc2d348b46f88ff4f8ba6cfb2e8c15418ec9484fccf0f1967b0a4d9d238b7cc73fac6b5bae4074afa2a4e0054077bfe6518e754ca7be6b6a947eebb6dbb2a6e9453fa0b91ba20fed351750bb0c4db2874df4e4c3a3395f67399649e2bd1d53a9ca6bd21351511ff244ddad81dfbb722667dd5e4", 0x80, 0x9, 0x0, 0x2, r1}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x3, 0x5, r3, &(0x7f0000001440)="b5f579d94242a2a739f266dad0ee6ad237fbe99ceeaa334fdfc6b7ddadfebee596", 0x21, 0x0, 0x0, 0x0, r1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x3, 0x3, r4, &(0x7f0000001500)="5b810980727678217f13c637aa7e0cb8e849ccb173bd5b0a0ddb481abd2a4e1726bdfd11992c818bba9275db2c553113f5c8bb2f602b6b30bef772115ce657d68097b838ba18da5a258c4cc65ac301114f37f356ae0174eea92d49e64f6b492823da27581295baf3752538c2b877f95c364414b1ade9ce666bb209df495534dc66a3c4d817b66ef5cfa85cd779dd4de44018fa3e97e01e763c9caaf7630bb1041a0367e5dd2fe6f7d436c293839bac8581aa7cb0fa1b3ab978649c4b83f4dbe80bd0402a00022d", 0xc7, 0x5, 0x0, 0x3, r1}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x5, 0xba96, r1, &(0x7f0000001640)="ef323decb3cf417303c623d7b03237c5d35662f375aa05e5c10815b5a0d84a4df0e3f0d94d4e4a749b6222f9730de5682a18dadefd02b8d03438b09a50a28b5388c2efb52e7d8cdfbbef4ad3fd4113f42cf7177742ad29", 0x57, 0x5, 0x0, 0x2, r0}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0xa1dcc5f0fa87e0b2, 0x97, r0, &(0x7f0000001700)="34d3f55f16c79a3962f2e4ad3350e8e9c06ff779dc27da927751c57ccf64de1c91a51807251a134dd8674215c582911d2b91c9e2683ce70a57ff91c2500ed562c4d60578b9d4e86e2fd75934f7293d3d92e8b394d94b266267a4622975e61fc6ba1848d5f49d8a6028d454a2c0637ec508dcdd7a6ec3adf3571088aebd107145c7917aa16df04131069b4a3b6821d4e3f2e25a4f326e3aec2833b41e3665a23ab75892aa7185525c1d775e387407d2990e4b9d9760fa5e9a4b585847123db4cbb3de431f85465e3751cd2dc2ecab1f08c6d99de399babd16606a00708305fdd2135afb55712ae30f17713e4709908b2fcdef3f9e", 0xf4, 0x6, 0x0, 0x3, r1}]) ioctl$VT_RELDISP(r0, 0x5605) write$P9_RLCREATE(r1, &(0x7f0000001880)={0x18, 0xf, 0x1, {{0x20, 0x2, 0x5}, 0x2}}, 0x18) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000018c0)={0x3f, 0x0, 0x1, r0}) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000001900)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001940)={0x0}, &(0x7f0000001980)=0xc) fcntl$lock(r4, 0x5, &(0x7f00000019c0)={0x0, 0x1, 0x7, 0x2, r6}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000001a00)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000001a40)) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000001a80)=""/210) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000001b80)=""/44) splice(r1, &(0x7f0000001bc0)=0x1f, r4, &(0x7f0000001c00), 0x1, 0x9) ioctl(r0, 0x0, &(0x7f0000001c40)="2a3cc874f007e6c8a4760cdce7ed23439a4483ef3b5a51bbd6b138541e339ab3c5b18bd59ecbb62b62f4d0cae5ccc31c86a3ec514d89ceb68609f3c86c1bca6d7010cdfc87a00fbb249578a0398db34695a45dc882d714d0023573b9fab39a101e121062568d9b65907211178e2af8c26d15f0ed1a90ede897fe1f421aac65ac052110b380742512b2da32bb9b570f35f61ac98d064d0959ac8fa7dc3a66896b38285a7b7359446538d7d420caccab56f14f698e4305f6ba218a49af68474132334127201185") r7 = creat(&(0x7f0000001d40)='./file0\x00', 0xe4) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001dc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000001f00)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e00)={0xc0, r8, 0x401, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x89}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x626}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4449}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000001f40)) futimesat(r1, &(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)={{0x77359400}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000030c0)={r7, 0x0, 0x1000, 0xad, &(0x7f0000002000)="107e2532a02871c94497daaa7f4430968948efc1897bbb35a41dd3861c0c3024f45ebce43868e0d90cb55a3425e2eeb1a8296ef1d93809ae68c546d7914944ed02862992d88e9d572c190cd1aedf6dc3aa3841039e60f107c97a0de71b8807081049574e9f0ee26791db83d5f0ec4d716e3157aa56f276641a0c31a6e8eab89ade131b29e8ea6bb996be693ddb1df145be41a1f6148a661c8cb7ebcbdca1732ad7241ccd1fef7c482b5946a0028b562ab8f266b6c40f0a0df0f24a183768b412fcb459ab2cf3ba8fe91513f0b2b32deb83d439459f9cfa24cfbfc93487cbdc7752ef37fb757b9f156621c710f866444107fef97c3c0ec65636a9e4d62f2b5d7bf46f3d020035089ba3632db13f94b4db7bace3b6a4b13f00f43d5a48bf70314b26763187c0a9bdd5e109c9d8a82cc0b19819706ebe6a237b311bea504fef70f5ffb2831b8180154315f2317e00ecc4b74647eb616aacae6824d870fe21186db1c9a1f3638ee70f5a4e0aac402942a9198eeab3e3b0b3b17bd3d052ec0a2bf25f4896e64497ca629a54317fe781d4a86a4eea265f5e3743334bd2d8a3d5c9a9c9992fc190bc67fb628a0cf77925c57db51e3896a8ded55a2938bfabb73cc3a62838373767cf41ee800429b32412754b3e99af5e5d941bdfd961fbf3e53caa9d3bda1cb82793408cccd07420ca53e575432446bf5f05856c3a95dce68af1321750df194cfbaa6212965db39cc99a06cdc119caebf86871eb83fbce6555098c4dd3e95e57b0e5e4b43bada22139d3e93952cc9be2b95f69f4152f81f263206193b0eff0c00794dc131a1a71a5b8e6470ccb62ff7d456b2270de60a81fb5d185dad5366c798b89dc75f3fffe82f04251aff6f9b8627cde491cb3772191c94d5a669d774aceec4b918dbd312d0478cff9dc9b89b788bf7ca079cb5f9b091130c6c1abf0777dfeedfc8e6f4d58a48782438d5402db335ff0ad6ec4dc97f413022cce8efe758635b7c03deb05bc949ba48934155990e28e5946a6098c35cf9c0fcb102952b4d84647ffd47697cb38cf032eef5c7d7c12cdb1fa5d1984bb3ffc6cc70f4d684114de4e81cd9894dc7de816475dd04346d0100bb5700289a8ccd3314e19ca75737518eb2201d5990ebf17093777d1a822a3f74ddf0983fa76d6a805b0608c4204975734ff7e5a36f691eac965a29aafe96dfd155b3249c4ff48d4e344c3013b9f027d7b74bd13428d595f4a8561568119221e3dc8dc6a305a474160739cd66c2a4023259c1ffebd41fa39f50e0bffb7e8b88c566f0dbed91b7e54683fefdc4d0dd3094091e48ebe90190afdf47d08f2dcd9e8aa9c64b247be56c59feff456f6f63ec247ff07bdcf89d81d55ab465c78b15937e9683c10bb58a99fc697e97dac3fd57958bbe0fb3b0c1c5170b8365e137814377d8a3320496f6e0e98adf8898c3e0ccf34ac5ce7257c3564c2ea7c2e85fee9f2b4a8aa06573f94b9acbc6f96077bada052fa35742c3cccde497c8db279d3d00a33cbfc62d18df4fbc2a77252ee60493737d9acdaf71b412a8d7bf485d201639cdda13913371d81831de1b582b4fbe5175f27f290fd60c8e3dbb105dccb26976aef67f7b8e1a7e363eb98594ab4d8ca0802f104890d51941b2b9ac668714ee39f8c1ab14e80afa41b9b89befaf078ef4d686a8928307ed4659b750b51dbca533e2cb0704537de46ea90d7c9b3756c6863c4209064b1caae98174ee6ed0f59731c0b64b37fdf60522677bc49bea6469da4c876256d3ec0d07899a332733534ff521ad2874096441d4d17316327d6917702340cfa8178eef6f0512602fb64bf9efd7ca370397f198f389190787aa40b34a0b2f193afc3ecdb3843e1d1c927e90907e6f803c1a9fbd9dcaa5aa6df675219170a0841942d0a5cf82ab203efcf002efb3295f330953718adf19dc85cc6e7e0b11eaa39ceefb40697ca7bb1f9c9840cf0cccf2a7b38c934fa32f57b7b50413e828df13c91c7a1bfed9b6369016c58cf17e80c75ff00e3fa99cb8c26096c09a6189f0a75e844119a6e803e246de45d7505a99bb44d277953b8aa5f7646f1de48ceb2e9c3b2d3913d9070f12d4acd988aa52ca18bc1bff90b0e0cb32553184f7c99b92b6370c0d999483483bc00a75fd3f414d635fe89bd1439b889808080083e3fe4ff6145d1af4e1a41943a5603b079229e98bf423fceb496e0467cf8f1a281e6fc846040c35837e5e3d8edf12cfd421d08ef024f076c8ca2cf2c5f7d09fc6262c3c7f33ecdc64c4994e0b8ba577b8a97a23e288b039b18f5a5223b8f2edcd063a78f7c19adcb9cda976dcb4d5bb0d9955ac9b1910e846eb3543a12b97577245eea014456b805a87d77bfa7f54f204b724e89530d1ebb9d81940eb65762b69007f194e66d1a410d8714c012f90ad0a583b9d91eac05c694b84f36c1d869c974d42d9b2cb1aef05c2f69af3c416d89493835aaa2a55ab6f52828c93be22398a08d97302b9813531537a9d21c97a2fcef09b36b79e42064f534d2f37eac7997ad3c5f9dff657d5d22b0aec4db5b4ad3466bef54449823179adff20b48afc36b133e432ffc700ced66cbe5c6348c5264bf8d4aaf0440a0157eafa12d979438caa20b942e5c410fd8e52646029f94b2084e7d344a088983eb13637bf8078f4bcf7dbea39dbfa079fa8c6a1ba81da04fccd94d0618c8fc333c032e6b10e86f5890508c86ee79747ee9bcb194260439a27e7e0b57edc3ee5291e252d71d9e0f476838567a8f1d81177bb4c73498fe865890b1c39ce5c57ca433eeff24dc1dd8e1eb82c42ef3a70e610c5e5f3401308a5d75b941a45816657be2ea8e24e52b8c82ab0cd629723c694619a4908c92cba83bf3b089990d2f2b7b0dede1c3d0dc89a048148f132853bef6bad37573f6616209ee9c56d813eb26dfd115cc0f240acd3a93a2f954b307172a61a80bd0205616474d113fdfcef0bb6a18fc737f0a1a4cdccefd78b8ae20c41a3a5eb3325e2e3ef30cbfb6e2c92de5fe23129db0c683209cf148327c9690d939d10655f8b54f0b3fc5f21c5662dfff6f2e916db098a10e42d0b2d6d167588b546a22e7075801146d9bae597b893d81e00b8b8cdef4a40d3505e041d24b2c91b49edb773390d7f68bd100db94a31b211d30705ae96f282c6228f3595219fe7347410e856df02a7888ba80dc8de084b592cfbfb39a46baa50281d4a343e8aecf6a245f614dccda7aacce1e5a607d805a25e49b389e42e92d5ecbfaa11e7f7a4a6d899502a1d5c9e65945ccce6832d559848a7323ab34ceca2b7ec3caf204c599163b007e7c4b66775683cbd8a3f75961ce1f89d1d50b0379aee8daa86f0a67030f7f50a5469ca1bc48cbd8b0e4319240290f6f30a6b00ba7d5a1481e54e12fab4220d3c0618b22cef4e35c3887c02eb4f1d4b0f860416512765203354b53d3ececd6fa7634e424f373025efd86d5a7f9a1d21ac4159eec3adf0fa64287d8ca4d5ac532d18f7e8857168482158cdbd4af7cc80256703b2023c5088fa3785444951caa9b8b02071077f93c75f9721b1631b04b6f799555608209d94607cb0654029f4f8154d99e805d23818d2b9107d600604d76377eebdb22e3e52498ea7eff97d5d9abd0d19cc842bd108e9786e4fb1f7d5b89b9dfbeaeabd1dc0afac20f403665e3eaa724dbbf2b40e4c068220869407c01c92564a7d7e8236259f54adf60a07b72af1664a0b33e6d5e7174b69f36e311fc601376222641055d5bebd937ef88fbfc84e2260712149572f7213140070e7d58ede2e56c585c6196dcb1ec8ed759159ae08119b758ac608892e3043c0e3d05e9497a804e3100c2707b16aba69ac13300854d2243dde0469ec5880bb5bdc9706c63e298129e25495fb6ffab1cb50e81821dfb0cc0465fe8b725e6065853b3c3ad174c23a3165348ab134761cba76a9cd23377d2976acd1eb732c2900988350e2bdb60487eacb56204c36076be988b9f3cc4aac756e166f4e3c0b83c05a01cc845339540f9c92b6bb069e1b1855743608be1f6aa0937376552b897da46c5d306259685eddf81c1ad15880451d0d8d464db6216f13f2284b741bdba72ca3a868417ab4e584ece120967008ff330eaa36ca6ff02e940098087d12cc31eae9174136e1f3016f5d23e93593ce925f6d91e497ed66a2e4be4afdf2d6e80a845f0a6789f6cb58d1c3007953b3102ed6b401ebd558f8f17220a79cc9a215f483ee7c3d1a2302cfe2deab3828fbc1a693a6000ea442dc56ebae09308a6983dbfdad1a6e3327b7e3c71d2bdb2eced7139d9454089be234b3148978955a6a9991d09c4493db7964915bfd249dcc4f9ba9a5b56e2fb40fd6bded0d5c33ae5194f3b4b6d1454a29234e6e77aa76f8486380d809abcc764d1369c5070c268e0aadbfcc7b6078fd005774c0a8c4010ab59849e2f496522877970246d3da4433a401a0b28d13821db13e102cc610569dbdaa739716210602fe77ceb21908b2298ff8774ef4f68fff560dec097ebdb5c91cceed35fe5f658fe15430cd520122254c15ef28f37562013a33b11053408123922b86009e56c1828b5d156415a9d6606afe7a2244e511b1e6805b23d6310d72786fb9738c6e2bf55845633114280257ab1ee5a7148de58d7271232c6164229e55784cc9733e641c3b39435941d334645cff2ad48174a29d338a499624859fad0bd543fb7cbf749c204b88cf3a019e7a24d046f5724c64e5f22957e7df61f22f0e4c56cf05aef96729d9ef52d47625f956a8d9060335e6adeb0f5d9b2a3b86e7b280ca6a33153d9c347d70fb6d7aaf8436dea8d26645890fee7c2eed123a0a9069ab7d8a3b37174e686da37e43355e8299416add98e2b5694c42775b44dfb3c8c79b10ccb33b0f4e1ec0ae7f8cf502d1529a7359832eb1cee8303238d97cd27ab58122fca639b31822a947a3389eb49cff494839a8f6983c4770e1f255364056696a3178cc8bbf71a205245bbbdeae103eaa4a928adda51de869a4b064fd6d96263d6e43490925c2f41555e1676f66f976600c9bc3dac86ae7940b0669cb26f7747bd5ded66d59fb9634fc6a4dc15f41c2f0693277b9c9a79ef02e676a622a9a4bcb73fd0580e0b7c24904f5e10fec5ba2ea4a03e973d2111f0da10c8ebfa4f4d06a366d5a0bd1c8e29e13e703cf85e171546156bed6f0a700c5d97e100b36ef1fd0745e3085f988d69c693c4945d85c356d50346b70713071b6cc2b28ba2d96f61a1974896558f27ca6178e676b6dce7687678c3d3c280f95938147339e0fc8699c7d67ffd5572955fa8716032da0868c5643a0103857744642c60db39f3c724772d06e5abf0996b40622fb0b076fd05ee0a9367f4c7b158f8e1ea30961a7caef2bd048f1f05d8672292706c18712a9ac056661b8ab0a5ff6a535b931e882f9150c609ae2856d53b7fd0810b0402b91f5ee9e2ac3f81f308be158c2ab4b33c7a17c73e590a3af21fd0221329f7cb9c5a92162888aeb0e6328e575766a13ae41d3ffa3cd324d800d5a5266f2efb313f1f3fb4eb7e20c9905533c34386ca36c91c6c55fde16336310e29985037fbe855bbf66d5f6aaa57bfba23e74389e3b74e6a88c2c55d354e79b0a610990a15ea3744fcf202caa601333f1da4141b9fe43205f30e1aaa16ad85c8d168eeeb1d31236a7027ee3bd78e535a584e799500dbe0a2209d07ee72786cfd1f9c109331211c5c3b2406941001845d93b6167daced0277b6fad6c617e8a89d62dfdab980c32fa5552856367a3bf45c6b4620073a40", &(0x7f0000003000)=""/173, 0xffffffff8861b8d0}, 0x28) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6d) 23:47:02 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) [ 239.668379] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.702552] binder: 8842:8857 transaction failed 29189/-22, size 24-8 line 3117 23:47:02 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000f40)='/selinux/checkreqprot\x00', 0x10000, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000400)=0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x10e) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='|puacct.usage_pe2cpu_sys\x9e', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4002002}, 0xc, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], @ANYRES16=r2]], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@dev={0xfe, 0x80, [], 0xc}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x8000, 0x4e24, 0x1b7, 0xa, 0x0, 0x20, 0x77, r3, r4}, {0xffffffff, 0x1000, 0x3, 0x10001, 0xffffffffffffffcf, 0x9, 0x4, 0x100000001}, {0x0, 0x1, 0x5, 0x2c7b}, 0x7, 0x6e6bb5, 0x2, 0x1}, {{@in6=@empty, 0x4d2, 0x3c}, 0xa, @in=@rand_addr=0x1, 0x3503, 0x3, 0x1, 0x2, 0x21a, 0x5f3, 0x899d}}, 0xe8) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r6 = getuid() sendmsg(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000600)="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", 0x519}], 0x1, 0x0, 0x0, 0x800}, 0x44804) read(r5, &(0x7f0000000200)=""/225, 0xe1) shutdown(r5, 0x1) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r7, 0x7005) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil) unlink(&(0x7f0000000b40)='./file0\x00') lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)) setresuid(r6, r4, r6) geteuid() setresuid(r4, r6, r6) pipe2(&(0x7f0000000140), 0x4000) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) 23:47:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x798) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000000080)="08b77980ab867a15568d0be16aa887dc9ca25253bf82f3a4f9681f9bbe") r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) socket(0x3, 0x1, 0x6) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x13}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x400100, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x80000, 0x0) ioctl$sock_proto_private(r2, 0x89e5, &(0x7f0000000200)="b90c8ab1185bae794fa64b6d0f575a56dd6a71188f93f5453467649144a9e4234f0ef20cc23b0b2a8841d4") sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x800) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f00000002c0)={'NETMAP\x00'}, &(0x7f00000003c0)=0x1e) poll(&(0x7f0000000040)=[{r1, 0x6}], 0x1, 0x1ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) 23:47:02 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) creat(&(0x7f0000000640)='./file0\x00', 0x100) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:02 executing program 0: getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200)=""/153, &(0x7f00000002c0)=0x99) r0 = dup(0xffffffffffffff9c) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000140)=r1) readlink(0x0, &(0x7f0000000340)=""/166, 0xa6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x5, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x90) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x1}, 0x4}, 0x1c) recvmmsg(r3, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) getpgid(0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0), 0x4) [ 239.926558] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 23:47:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x84) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f5, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)={{0x77359400}, {r1, r2/1000+10000}}) 23:47:02 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$packet(0x11, 0x20000003, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'tunl0\x00', {0x2, 0x4e22, @remote}}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$inet6(0xa, 0x500000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xfffffffffffffffe}], 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00\x00\x00\x00\x01\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f00005b8000/0x3000)=nil, 0x3000) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) mmap(&(0x7f000060b000/0x1000)=nil, 0x1000, 0x5, 0x8000000000000033, r1, 0x0) unshare(0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000000c0)) r4 = open$dir(&(0x7f0000000200)='./bus/file0\x00', 0xfffffffffffffffe, 0x80) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') close(r4) getsockopt$inet_tcp_buf(r5, 0x6, 0x21, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') socketpair(0x2, 0x2000000080003, 0x100, &(0x7f0000000480)) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x804) creat(&(0x7f0000000280)='./bus\x00', 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x4) 23:47:02 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 240.060280] binder: release 8880:8894 transaction 247 out, still active [ 240.089424] device lo entered promiscuous mode [ 240.107518] Y­4`Ò˜: renamed from lo 23:47:02 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000f40)='/selinux/checkreqprot\x00', 0x10000, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000400)=0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x10e) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='|puacct.usage_pe2cpu_sys\x9e', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4002002}, 0xc, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], @ANYRES16=r2]], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@dev={0xfe, 0x80, [], 0xc}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x8000, 0x4e24, 0x1b7, 0xa, 0x0, 0x20, 0x77, r3, r4}, {0xffffffff, 0x1000, 0x3, 0x10001, 0xffffffffffffffcf, 0x9, 0x4, 0x100000001}, {0x0, 0x1, 0x5, 0x2c7b}, 0x7, 0x6e6bb5, 0x2, 0x1}, {{@in6=@empty, 0x4d2, 0x3c}, 0xa, @in=@rand_addr=0x1, 0x3503, 0x3, 0x1, 0x2, 0x21a, 0x5f3, 0x899d}}, 0xe8) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r6 = getuid() sendmsg(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000600)="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", 0x519}], 0x1, 0x0, 0x0, 0x800}, 0x44804) read(r5, &(0x7f0000000200)=""/225, 0xe1) shutdown(r5, 0x1) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r7, 0x7005) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil) unlink(&(0x7f0000000b40)='./file0\x00') lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)) setresuid(r6, r4, r6) geteuid() setresuid(r4, r6, r6) pipe2(&(0x7f0000000140), 0x4000) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) 23:47:02 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000010201000000d0498fb2940c84db02000c00020008000100e0000002"], 0x20}}, 0x0) pause() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x2dc) fsetxattr$security_ima(r1, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) getpeername(r3, &(0x7f0000000240)=@isdn, &(0x7f00000000c0)=0x80) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000140)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000001c0)=0x41) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x30, r2, 0x0) 23:47:02 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:02 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000f40)='/selinux/checkreqprot\x00', 0x10000, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000400)=0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x10e) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='|puacct.usage_pe2cpu_sys\x9e', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4002002}, 0xc, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], @ANYRES16=r2]], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@dev={0xfe, 0x80, [], 0xc}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x8000, 0x4e24, 0x1b7, 0xa, 0x0, 0x20, 0x77, r3, r4}, {0xffffffff, 0x1000, 0x3, 0x10001, 0xffffffffffffffcf, 0x9, 0x4, 0x100000001}, {0x0, 0x1, 0x5, 0x2c7b}, 0x7, 0x6e6bb5, 0x2, 0x1}, {{@in6=@empty, 0x4d2, 0x3c}, 0xa, @in=@rand_addr=0x1, 0x3503, 0x3, 0x1, 0x2, 0x21a, 0x5f3, 0x899d}}, 0xe8) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r6 = getuid() sendmsg(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000600)="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", 0x519}], 0x1, 0x0, 0x0, 0x800}, 0x44804) read(r5, &(0x7f0000000200)=""/225, 0xe1) shutdown(r5, 0x1) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r7, 0x7005) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil) unlink(&(0x7f0000000b40)='./file0\x00') lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)) setresuid(r6, r4, r6) geteuid() setresuid(r4, r6, r6) pipe2(&(0x7f0000000140), 0x4000) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) [ 240.260167] binder: release 8909:8910 transaction 250 out, still active [ 240.339749] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 240.419514] binder: release 8922:8923 transaction 253 out, still active 23:47:03 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:03 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000010201000000d0498fb2940c84db02000c00020008000100e0000002"], 0x20}}, 0x0) pause() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x2dc) fsetxattr$security_ima(r1, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) getpeername(r3, &(0x7f0000000240)=@isdn, &(0x7f00000000c0)=0x80) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000140)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000001c0)=0x41) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x30, r2, 0x0) 23:47:03 executing program 4: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:03 executing program 0: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:03 executing program 3: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4010, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8000000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0adc1f123c12a41d88b070") 23:47:03 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 240.465068] binder: send failed reply for transaction 244 to 8846:8849 [ 240.477043] binder: send failed reply for transaction 247, target dead [ 240.507405] binder: send failed reply for transaction 250, target dead [ 240.527353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 240.534020] binder: send failed reply for transaction 253, target dead 23:47:03 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x200500, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x2000, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x1f, 0x3, 0x1c0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000840)='/dev/vga_arbiter\x00', 0x200, 0x0) r5 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000880)={0x2, 0x0, @dev}, &(0x7f00000008c0)=0x10, 0x80800) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000900)={0x5, 0x2, 0x5, 0x0, 0x0, [{r1, 0x0, 0x40}, {r2, 0x0, 0x9}, {r3, 0x0, 0x40}, {r4, 0x0, 0x7fff}, {r5, 0x0, 0x401}]}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) r10 = geteuid() stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) r14 = getegid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000740)={{}, {0x1, 0x1}, [{0x2, 0x2, r6}, {0x2, 0x5, r7}, {0x2, 0x3, r8}, {0x2, 0x6, r9}, {0x2, 0x5, r10}, {0x2, 0x7, r11}, {0x2, 0x4, r12}, {0x2, 0x5, r13}], {0x4, 0x4}, [{0x8, 0x3, r14}, {0x8, 0x0, r15}], {0x10, 0x1}, {0x20, 0x3}}, 0x74, 0x2) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r16, 0x29, 0x41, 0x0, &(0x7f0000000000)=0xffffffffffffffb4) 23:47:03 executing program 4: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) [ 240.584782] binder: undelivered TRANSACTION_ERROR: 29189 [ 240.587190] binder: 8937:8941 transaction failed 29189/-22, size 24-8 line 3117 23:47:03 executing program 0: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:03 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x4000, 0x0) write$P9_RATTACH(r1, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x80, 0x4, 0x6}}, 0x14) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="7547451ee5bf52cbfffbfcc7dad1194571e1184c91706353a1983eccbcb2608f33b108d65947611d7d607ee0131444f567dda5ff9713ecc4a8b6a8595e13cbb6128359d3dc6372b92dacf7f10b78a728e3ffe2e5b56e6a7533dee5918e3b28a0a0f71ebe4f3e552d05446d85770c8440d8cd883079ca6aa34cc42f9a51f27d5e567fb727d4fd445b0f4cc59d222f875e8336df1c35eadbbfefbb4446a02b279e390ed02e30d5e3828a3084a5702aa85541467f323fb881cbbeae9db3fd531bf312722b2cf766a5d5f810b86f9001c8166c9bfaef6b9b8ea36c03fe2bf2", 0xdd, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000001c0)={r2, 0x81, 0x3}, &(0x7f0000000200)={'enc=', 'raw', ' hash=', {'digest_null-generic\x00'}}, &(0x7f0000000280)="0c0bac2c4063d18864da2904faf8bf148a116c5d71c75a1245011a7cc8cbc2b34d0bf16a0331c0cff5120d87ff90f6fe6b0a15fe41fe859d6171a8acc35a98ed44e4441d3956589c8d82b7e5da51c57fd6a35ac6aaaf08f6b737f8a0e0576ae91b", &(0x7f0000000300)="c85027f0561e7339509db8fc665d7a4233f8df2c55a01d200efd160f214c4b3e348e4f405bca0a53b5704804b474228c13a6c9a6ae66b24377a4429fd066eb78d20dc9b0c7abfd95cbf2") capset(&(0x7f0000000000)={0x20080522, r0}, 0x0) 23:47:03 executing program 0: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:03 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 240.910614] binder: release 8978:8980 transaction 261 out, still active 23:47:03 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) creat(&(0x7f0000000640)='./file0\x00', 0x100) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:03 executing program 4: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000012c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mkdir(&(0x7f0000001300)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, &(0x7f0000000900)=ANY=[]) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) write$selinux_user(r1, &(0x7f0000000240)={'system_u:object_r:hostname_exec_t:s0', 0x20, 'user_u\x00'}, 0x2c) setgroups(0x1, &(0x7f0000000340)=[0x0]) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) umount2(&(0x7f0000000800)='./file0\x00', 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000080)) 23:47:03 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) 23:47:03 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x5, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x3, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x6ba) dup2(0xffffffffffffffff, 0xffffffffffffffff) 23:47:03 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 241.300271] binder: release 8935:8952 transaction 258 out, still active [ 241.312373] binder: send failed reply for transaction 258, target dead [ 241.342215] binder: send failed reply for transaction 261, target dead 23:47:04 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x108) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) creat(0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000600)=""/98, 0x62}, {&(0x7f00000006c0)=""/90, 0x5a}], 0x3) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x10}) 23:47:04 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x404082, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x100) ioctl$KDMKTONE(r1, 0x4b30, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00000000e5002500000000000002004100000000be000100000000627c0500050000000000cf00200000731f65000000ff1700000000000000000000000011170000000000c6b1784afc26359c2c0591f9e464e2df87de1a689c49eadd3d4b2f472a769f45d8f447198fd120b54e5a2a3fa56474f6c541f027fa3e82190e7036269804ed63866e4f8eddaa3a7864de20cbf3d3273c71658ec97908d9d4570e61b36ac4617044bde7baef5b687fe3df0000000000000000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xd5a6366ada7ced, 0x0) [ 241.397509] binder: 8988:8994 transaction failed 29189/-22, size 24-8 line 3117 23:47:04 executing program 0: prctl$PR_SET_FPEXC(0xc, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f000039a000)=[{0x8009c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000000)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000080)="fd63e9c341633aa939595be190fcc4ca1146463e1a408e6bd91a6507a4a222229e1231163861161fb44abc56c18f5b8ba053b824d97a8d39d8351b33ee01f9aef318ba82412fb0ae9ca7a007987de63575e138064a3b379350c3f1404f6bad3ce6703347b647d0dd612dde6c129de3994891be2e99eeb576db0c36f8830f6bf48f2675425da8bda485d1fb3006716f59282f8d0f32027cd578", 0x99}, {&(0x7f0000002d40)="abdb583e25dadd5c486163d011d41fdfbdb07ffe83337294191a10d9e2ee0d9c136053760b8037694cff235ccd8f7e13daf6f815370f1f824ff321f3a223959dfc4aff62047bc0c6d61c48a2a29f1f573c2f634ee4415ca6a57d138b1ead1f41b640ab8266007de1431a6a484989a9af4a56fc2527281fab58d240e374e30fd381be53a53a87fbf6a8ff937090a1d1", 0x8f}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000000200)="36bab8d56540e2ed3ace089e8251999cc8035e62429481b71121eaf72f4bb632bc8d512c37b88370e44383f3795c9884789a11b64a43219683d01f5eed4097a80f32c5b40398a4f3e8731dbe8259071eddcb65ea219fbeff0aa42c1075d0737350f467cdc4d87366a3bae8faf8dd684098488cef7f8d332d6fe4d5ec446fb31c12b2aef599d6ad5f7eaa37bbccbf440a0d6dc44499a8726dc2a13f666a2d988e10c1dda2390307aa7e0fabf92047723a216bc26d5551be8b7eb632b6", 0xbc}, {&(0x7f0000001380)="fb1c211f58b2a148f83f6349d890454ce8386228592433bb013cad59c2dba05002b6a19085cf87678ef5377ec17cf313c84141620ca53f2e44ca639645fd801c579f440c2c7a9ad92f2f32acf597fe85b5a1dfc9a534dcf57d2c3ed001f9161d92ebd139f3a542f8d348b1dc01d828918d4e9deb6251ce02c037a4687aec5ad53a02ca39bbc337121265436b03e6501c60d5c30c7e9b32b7ef1d479f422ef9d3259feb32ee52a575570294524cdab8d632a90d02ecbff19621ce219a117a", 0xbe}], 0x5, &(0x7f00000014c0)=[{0x30, 0x118, 0x3, "85eea28d63493412f0a3ad9cc31169b91c4c3eddb07d93486b8fbbfeb6"}, {0x28, 0x111, 0x1f, "206ce1068b24e8564acef3f6e8da6b4d66"}, {0x1010, 0x18c, 0x1f, "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"}, {0xf0, 0x109, 0x8000, "199a419d1960660983e975819fbb61df3fa676d65d067ca1300ef25af76672d53b4a78aa3fb67f94cf39ee347d6abc56316ec50d7f7b74f0fbbbb01b7184aa0b5ee445cc253b3134c874aa19141d435116222a3d329f8bc394fba93085056a4c86e4dddae4f2298d4cd8b71dcae31f44b8e25ba7b3d6daeb06b19e3657efafb2f5aa938196cd657eb3065c55a106b6cf29c35b784702f609ff2639fa6e7ce65da25e9201a6d93c259c0293ee66785f268a20dd0391498b7ad53a77f7b20f5036351cb07d96984d123a909bc8ebd676f5769d27a8f213beae02"}, {0x68, 0x10c, 0x8, "3e51922a0c661c7689145c9e19a7cbc3b69198d7ab5d0d58dc8c1bb359d20f6a247cc128ef1b41f581e98254007a661ff01efa8c4a10b7b9ada9bd583e2f9ec775221cf6cca08f033042d0045b3a733bc58319b9e4cc"}], 0x11c0}, 0x4}, {{&(0x7f0000002680)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002700)="5383bbd80f2433dc920f1020f95e4f78d79cadcfa7d796aaa9978e6ffceb71c3a894f514567c737f0f89a1c557089494f971f333d2932643a16811486a90bd33e5855f40528eb6559a4c306d949e870af46f3b652c0c2ece009ec9", 0x5b}, {&(0x7f0000002780)="176a860c4b1f274f89880e6bf87c71c06bc29cca29a69eb55297359a0ab66037ac9017e528cba0af8dd88003f5f1fe8dc96fbd074e4ffe2d4e917c77519795691e345cc9d7d9684217b923937115cf7da6f380922bb84de74651f8fba71cff1f1d1ce8631d4291020f8df785971b779dc5cad838b7cc1cb75f35cf84c0bf6d7851eb0de26c019bc26031145d70fb122ea5866072e20fa2", 0x97}, {&(0x7f0000002840)="c06669382ebb2eb8dbc85480bf9d5d51d7dd23c24b5ac16d452c9c5619ad3d93439c92fa967bfe0ad9b6dc53457d349c274bc79c6256e3d7357ed0408d01bc2affa459dab38b85fe514fa262f8e013a1b89163ccf9850242def1e344851fb4f187cf14a518adb2a44d45865d8f693ece59c333c476b41c1dd4d2932ffd01337cb29bb8d0348f8a4fe1e1830c024669287221a1bb54978f9c3fcadbd25e21465a3efeb7fc4d532fcf25", 0xa9}, {&(0x7f0000000300)="aa76755187867778d18fd89b1ab96c356c69", 0x12}, {&(0x7f0000002900)="483074a9bee31e52a71c4c96517990dc73d0e193f7d12d6c1f983af20f99a8db0ac028b640889b40ceaf55f4c4aa73f47e8611ae43dd08c919f4c23fed558b3d7a79e685278b439f083ea6c533f87c541e74c115bbd7e212aed7bfa53c5f8540f21f184335dd166ebf92bb4737a7cadd53534ba83f3956490854a4c8689a2a69c7dacbcca427e73270f20b05111a750fcb774a91f048464f982b33e7e3c19f926a7a6fc4cfe055c599caf369b8fc470198f00e0468258a40fa152d342514e865e8332fb0e777c4b1cae7e9ac7081420553600fd9c82483c1d514569f288a0a9083690b4c12cb75219f0a2e601577e0a76f6c4b9ad4", 0xf5}], 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x228}, 0x101}], 0x2, 0x0) [ 241.464980] EXT4-fs warning (device sda1): verify_group_input:123: Last group not full 23:47:04 executing program 2: r0 = socket(0x10, 0x0, 0x0) pipe(0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000280)=0xc) getpgrp(0xffffffffffffffff) r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000840)='\x92 E\xd8%vy\x87\'\xb2X\xe9\x1a\x9c~\xa3\xf6u{6\xb8|\xadi\xdc\\\xc7\xe0s!G\x00\x00\x00\x00\x84\xc6O\xa2\xb1w\xb2s\xfe\xdd9\xa9\xd9\xc2[\x99\xd8\xacI\x06\x94\r\x14\xcf\xf6cu\x11gUT\x82\xc8\xf3\x1b`\x0f&\r\x87b\xf3\xabj\x04\x17U\x9b\xa0\xa2\x1f\xf7O\xfc\xe4\v\x85\x9a\xc3\xf6\xdaE\x82rg\xe3zL\xb2\xb7`\xb2\x1a\xfd\x1c1\xbb\x93\xfc\x1b\x8d\xe8iM\xbaT\xf3\x9c\xa8%~M\xaa>Db\x15\xe9\x17\x88\xc7(\x8e\xd0\xaf-\xc1\xb8\"\x857I\xc9\x12\x80\x85O3$\x95\x83 \x05\x89\xc8\xa0_\xf2\xc4\xaf)\xaf\xca\xd5\xa6\x9d\xa6 \x925\x1ch\xfc\x0f\xaeo\xa3\tmmT\xe3\x9e\xe9\x19\xecQj\xca\x9e|\x1f#?\xec\xc3\x18Y\x8bn\xf5\xee\xa0x\x10>\x19\xc6\xd9\b\xd5\x9f\xc3W\x7f8\xdf\x161\x02\x90\x80\xa1\x99~6\xd9\xd9\xfc\xcd\xda\xd62b\xb3\xba\x8d\xa8\x87{\x86\xb1\x14\xc4\x90\xd8\xf4ALjl\xd1h\xf8\xb9G\a\xe2\xc4\x05L\xddv\x0fc\xe7\xd5\x19I\xc7\xb0\x98\xc8V\x94\xb6\x95\x1d\xf5\x0f\xa1\xd0\xa7\x14y\xfa1\x90\xb4\xf9\f\xf6B\xce\xcb_\xc6\xdc(l\x91\\\xb1\x12x~c\x8f\x89\xf8X\xd1V\x16\xce^\xa9\xb3\xba\x82\xcb\xb9\xe0G\x0fa\xbf\xecl\xcb\xa1%\x8dY\x13\xce\xd7\xeb5\x94\xd4\xd3\"\xce\xb4|\x83\x96x\xed\xd8]5\r,Sd\xe9l\xd8\xfa\xaf\x83\xac\xfd\f8') r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r4 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x8, 0x6, 0x400, 0x80000001, 0x0, 0x7f, 0x10040, 0x0, 0xfff, 0x9, 0xfffffffffffffff7, 0x1f, 0x9, 0x7f, 0xfffffffffffffffa, 0x800, 0x4, 0x9, 0x2, 0x4, 0x101, 0x5e7c337b, 0x400, 0x3, 0x3, 0x6, 0xa6ea, 0x8001, 0xec1, 0x6, 0x7, 0x9, 0x7, 0xfffffffffffffe00, 0x0, 0x101, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000080)}, 0x4100, 0x6, 0x8, 0x0, 0x81, 0x4, 0x81}, r4, 0x7, r2, 0x9) ioctl$PPPIOCATTCHAN(r2, 0x40047438, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e20, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000002c0)=0xda8, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000340)=[{0x9, 0x0, 0x8, 0x4}, {0x366f, 0x7fff, 0x7ff, 0xfff}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x42, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x99e23cd5) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f0000000640)=""/69, 0x45, 0x10000, &(0x7f00000005c0)=@un=@file={0x0, './file0\x00'}, 0x80) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) 23:47:04 executing program 4: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000240)="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", 0xfc) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10018000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000000c47dd1bc16425c1e04c63f5ecc6013942535a8ef0cbdbc89847e9ddad83c6718c268daed6c40573a6df8ea6506ba4ece8a996b213e75b2ecb9fc9f38bffe4ffb9b1d706ddac1dd7088f2c7beac37f13aa225d62e7bffa208243c3a6dacd9d2f40ff3f575a0871cb5b300fc67de5971fa5203eeff9d687c1b83e40ab47704ee64afccea1e44970382a8befe7372a19c61f5aa6a365ecfb8af522a8469b9d2f50fdba58d361c8b68c5e39832755da4c7798fe6052cd39600d19db27a92368c91f1c39f46837f00f3b07e4b81a54650abf4e7b840accd45a35a52dac9a80251687941e1cbf834e4", @ANYRES16=r1, @ANYBLOB="200425bd7000fedbdf25010000000000000007410000004c00180000000c73797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:47:04 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 241.604057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9028 comm=syz-executor.4 [ 241.796823] binder: release 9031:9034 transaction 269 out, still active 23:47:04 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:04 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4010, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8000000000011, r2, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/checkreqprot\x00', 0x28002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000380400000000000030020000300200004001000000000000680300006803000068030000680300006803000004000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x498) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0xb, &(0x7f0000000340)=@raw=[@exit, @map={0x18, 0x0, 0x1, 0x0, r3}, @generic={0xffff, 0x3, 0x4, 0x4, 0x1}, @call={0x85, 0x0, 0x0, 0x46}, @ldst={0x3, 0x2, 0x6, 0x7, 0x0, 0x2, 0xffffffffffffffff}, @alu={0x4, 0x7, 0x7, 0x9, 0x8, 0x100, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x54}, @alu={0x4, 0x3, 0x6, 0xf, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x9}], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x8b, &(0x7f00000003c0)=""/139, 0x41f00, 0x1, [], 0x0, 0x1}, 0x48) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000b40)="0000020006be6edb9cd9bce61f0a7c0974e696be1c131cacc60ea523941449330b3b65dbd7efc631c54431080399e7c705085490ac7c1301f087452dc6ebc906b6f54865e00e226677749f1c574adb620b82964ab602f1fe90c187a4f875200d7cba4b6cfee817c6b8d969e884410705c619950d33dcb4835a0ed0034da02e09549ce94759022007ebb5a064c2d43122ebf0012848b8a02488c46c1e9cde1f00903835c04af8da0d98e2872521a3bdad688e30c20000000000001000000000", 0x94233e19f102b633) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @broadcast}, &(0x7f0000000040)=0xc) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) poll(&(0x7f0000000300)=[{r0, 0x2000}, {r2}], 0x2, 0x401) 23:47:04 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee01]) setresgid(0x0, r1, 0x0) ustat(0x7, &(0x7f0000000080)) chmod(&(0x7f0000000500)='./file0\x00', 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x210011}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x800}, 0x4001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'caif0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000400)={@dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x0, 0x0}, r3}, 0xc) prctl$PR_SVE_GET_VL(0x33, 0x29) 23:47:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/189) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0xebc94630cd0cb845) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001600)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000001700)=0xe8) sendmsg$netlink(r1, &(0x7f0000001580)={0x0, 0x172, &(0x7f0000001b40)=[{&(0x7f00000015c0)={0x0, 0x2a, 0x0, 0x70bd25, 0x25dfdbfd, "", [@typed={0x0, 0x73}]}}, {&(0x7f0000001740)={0x0, 0x36, 0x300, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x0, 0x94, @uid=r3}]}}, {&(0x7f0000001780)={0x0, 0x3a, 0x810, 0x70bd28, 0x25dfdbff, "", [@generic="1ddbc30f179233c8df94f5e001fa84ce50e248ff70f5d3e856972b21040c3924ba7176faaed09b24481c794228875c6474bd9f7f2da48ccf2ad467920569797a5bf163d38162baa16de1abfa9f22b5984b0dd181", @typed={0x0, 0x88, @fd=r2}, @nested={0x0, 0x2f, [@generic="749b3de4577dd8069d8ac0ddc51700042be661c01cd04cc9", @generic="d801c42ae566ab1e103f27c44e58fee4512b19ad586de41020119ff66e0db3147171bb28b348ddaa1959380c1c43c5b2d228fc799283aa750e1ee8b2f933c5a1bdcab76bfd09c967b3a6adf9b10748550e0ccbdfc550b85a588edd100f3129e1e24f97af08634f463ef381ca4ea0af681f696aa4f5a04c63206d9bd7d0f3a8e6a9d72b3a7914876273f48f4adf4accbd09f8058450c333cbf25b7dd17e434abe26347825d3aa89de8b2c228fc028d70324180da430d171495fbdef8019de20e8eec0a47d8cc25357", @typed={0x0, 0x13, @fd=r0}]}, @typed={0x0, 0x21, @ipv4=@empty}]}}, {&(0x7f0000001900)={0x0, 0x35, 0x10, 0x70bd29, 0x25dfdbfd, "", [@nested={0x0, 0x34, [@typed={0x0, 0x31}]}, @nested={0x0, 0x6a, [@typed={0x0, 0x86, @u64=0x7}]}, @generic="d5be76e2a91dd46805f30af5b69331b504563d2a5f6ff3238d3390f52a93da8e897a10eac8b41e229ffa5675e95c67364643369f44ef66f8a9c81616a2521dd8b3821cfe4be591765490d433244e3287dada6b0ad686f043315467d882c8ceca2fcd7f886b5e4cced4e88e260b815339265be84a9fc6a2fde643dac1bd470379ac79a7dd27164322d5bd9d833219a11b91f0806e3a1841e2485c92524e269643fb4df908", @nested={0x0, 0x2d, [@typed={0x0, 0x6d, @u32=0x2d61}, @generic="b3f4ac1039123dde628af7e4825ab11d003e897e326d9e1c61bff1dea6eee20d3948fbcefc545d0954a98e60779b5f7116d90276995f920f9023e9a305b79d50d611ab656868c76beceebcd6ea7de7012ce5defaa7807770f6cc045b6810c0300ff3d9fcb5bbf36bdb52b45f7796e6c55d496449af74cdae924ff49ba383550f7898a03623cab7c38f93db3664dcf5ffebae61ac17f9d6215a84546ceeb44b940e2be34d9b9e248599819bcb8851d312f37cce99966f618f5f0406203903fa1e31daf7530cea9e2952115b820b2c6d5437a39f0b3e339b380a8535e621ba9e38ae7d202d86fb35", @typed={0x0, 0x87, @u32=0x3}, @generic="a966758a7c31ab42b2f4b107045ce0bf1b529958f8a813d6836c39111561f76f2e28b6f4a411daf0bfa35d52568ddd063d7da1fa46dae1d61a858d2ac4"]}]}}], 0x8, &(0x7f0000001540)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) shutdown(r0, 0x0) recvmsg(r1, &(0x7f00000026c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002640)=[{&(0x7f00000003c0)=""/238, 0xee}, {&(0x7f0000003700)=""/27, 0xfffffffffffffe1d}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/113, 0xfffffffffffffde1}], 0x5, &(0x7f0000002540)=""/97, 0x36f}, 0x1) 23:47:04 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:04 executing program 3: r0 = socket$inet(0x10, 0x20000000000002, 0x0) sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="240000001e0007021dfffd946f610500020000001f00000000000800080009000400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xa0d) [ 242.171171] binder: release 8996:9019 transaction 266 out, still active [ 242.180600] binder: send failed reply for transaction 266, target dead [ 242.196650] binder: send failed reply for transaction 269, target dead 23:47:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x8000, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000140)={0xa9, @broadcast, 0x4e21, 0x2, 'dh\x00', 0x10, 0x1, 0x72}, 0x2c) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x5) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) sendto$inet(r2, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184) shutdown(r2, 0x400000000000001) 23:47:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) close(r0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000847000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3801f7001a0013070000000000000000fe8000000000000000000000000000ff0006800000000000005268321d00ffffac14ffaa0db4662800000000000000000000458055a2794e59b1ff5b703310589e7681eacfaf9fd64fae234288c50ad86b42d6886533e4f4a7c7ced64eb9e068e648b5378f845deab83e10601b94b355afe91c50daa80f28f023e8428d9b344a3ab80cdc959196334eb0cd5fd231ccc99a172d5276040b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000ff000000002b00000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000100726d643136300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x138}}, 0x0) [ 242.220758] binder: 9043:9050 transaction failed 29189/-22, size 24-8 line 3117 23:47:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001180)='net/raw\x00') setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x5, [@rand_addr=0x1a, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback]}, 0x24) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x80, 0x0) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/138) io_setup(0x6, &(0x7f0000000080)=0x0) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f00000000c0)="64ba0c8810e8220bc05b994d09bee081b05d05dfb95662ab2a8b26b1c17fcb5ea86f2141bbd8782e78b20f139286943d6ff5b2edd34483f2d697d6a33ba6652869f2c8faf10ef55e0877ddd52d59cdf0bee3a9c778d3308d652313e5f040bca7abe26a03e4f8b04ecafffe3ceebe326cdc547c24c986992c009882b526f4063c2d7918ee1c73b1f90a7d085a66f87aaf9c1a7ed073079f52b230f3e7ef9d63ce35865a368311f283e999882bff46a0d541f2ef9036fb26df8cfcc8a0c3", 0xbd, 0x9b1, 0x0, 0x2, r0}, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000300)={0x3, 0x70, 0x10000, 0x6, 0x5, 0x0, 0x0, 0x8, 0x80000, 0xf, 0x8, 0xf569, 0x9, 0x200, 0x4, 0xf9, 0x20, 0x7, 0x200, 0x4, 0x7fff, 0xd893, 0x6, 0xffffffff, 0x28af, 0x100000001, 0x4, 0x800, 0x3, 0x9, 0x0, 0x9ca, 0xe2, 0x20, 0x6e88, 0x6, 0x100000000, 0x8000, 0x0, 0x200, 0x2, @perf_config_ext={0x3, 0x20}, 0xffef906c93b52b61, 0x1, 0xffffffffffffff76, 0x4, 0x2, 0x6324, 0x6}) 23:47:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1f, 0x100000001, 0x8000000001}, 0x2c) r0 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000080)={0x3, 0x3, 0x73fffc, 0x0, 0x20820000, r0, 0xbe7}, 0xffffffffffffff9d) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x200, 0x0) 23:47:04 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x3d) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) connect(r1, &(0x7f0000000240)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0xffffffffffffff6a) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 23:47:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000005c0)={0x0, 0x7}, 0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x6) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000080)={0x77359400}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xfffffffffffffd44) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 23:47:05 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:05 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:05 executing program 3: unshare(0x400) 23:47:05 executing program 2: syz_execute_func(&(0x7f0000000140)="cd8075fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965e23c3b744d408064797f41dfdf400f0189c1c1e59d7d2f2f1c0a1a63460fc4c161fccddfde9f") r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_execute_func(&(0x7f0000000140)="cd80c20000b0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b02db5d90000007cc4c4e3a95fd965ea262e410f0ff5bb408064797f41dfdf400e01efc4a1fd28d29d7d2f67450f483b1c0a1a63460fc4c161fc4d96040476789f") r1 = accept(r0, 0x0, &(0x7f0000000000)) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x54) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/151, 0x97) ioctl$int_in(r1, 0x0, &(0x7f00000002c0)=0x1) 23:47:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) dup2(r0, r0) 23:47:05 executing program 0: r0 = epoll_create1(0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = epoll_create1(0x0) clock_gettime(0x5, &(0x7f00000001c0)) getrusage(0x0, 0x0) r2 = timerfd_create(0x2, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000001}) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000240)={0x4, 0x659a, 0x1000, 0xcd, 0x6}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) [ 243.051453] binder: release 9051:9079 transaction 274 out, still active [ 243.059356] binder: send failed reply for transaction 274, target dead 23:47:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000080)="07860fc2f83800ff641e74c2378fc07511a29e33f8f19000b2a733e43fcb891e6bc5e25637f1e0419e8fd8a7d27204301ceb2d224ae1262e400a03eaf42b5d8616f4d337138518cdc6995ace712d557a1220a689782282fb6b405a5a834c1ed654742c33c69e4a9522004f4c9a704e01fc69c809a5427354921f", 0x7a) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000100)=""/159) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getdents64(r2, &(0x7f0000000240)=""/164, 0xa4) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000200)={'veth0\x00', {0x2, 0x4e22, @remote}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r1, 0x0, 0x14, &(0x7f0000000300)='vboxnet0selinuxeth1\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)=r3, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000001c0)=0x8) 23:47:05 executing program 3: r0 = socket$inet6(0xa, 0x8000b, 0x3) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, [], [{0x72, 0x4, 0x1000, 0x9, 0x542, 0xe1a1}, {0x4c1, 0x3, 0x9, 0x17, 0x7, 0x2}], [[], [], []]}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x7f, 0x5, 0x7fff, 0x80000000}, {0x1, 0x8001, 0xffffffffffffffc0, 0x200}, {0x2, 0x100000001, 0x2b95, 0x4}]}, 0x10) io_setup(0x41, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_getevents(r2, 0x0, 0x90, 0x0, 0x0) [ 243.121849] binder: 9087:9097 transaction failed 29189/-22, size 24-8 line 3117 23:47:05 executing program 2: r0 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0/bus\x00', 0x81fe, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x800000000000055, 0x0, 0x0, [{}]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='nlmon0\x00', 0x10) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x1, 0x1f) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x0, 'rr\x00', 0x0, 0x1, 0x7f}, 0x2c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000540)=0x8020002) rt_sigreturn() syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') getpgrp(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 0x7}, 0x4, 0x0, 0x9}) sched_yield() 23:47:05 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x4000010104002) io_setup(0x471b, &(0x7f0000000200)=0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200100, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @multicast2}, &(0x7f00000002c0)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00', r3}) getsockopt$inet6_tcp_int(r2, 0x6, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=0x4) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) accept4(r2, &(0x7f0000000140)=@nl=@proc, &(0x7f0000000240)=0x80, 0x80000) 23:47:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200100, 0x110) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x53aea11b1bda212a, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x1) renameat2(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x2) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000140)) fsync(r1) [ 243.269288] print_req_error: I/O error, dev loop0, sector 0 [ 243.389951] binder: release 9122:9127 transaction 282 out, still active 23:47:06 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x2e7) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote}, 0xc) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = socket$inet(0x2, 0x80000, 0xe400000000000000) recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/46, 0x2e, 0x0, &(0x7f0000000040)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x80) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0xffffffffffffff52) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000280)=""/144, &(0x7f0000000400)=0x3a0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f00000000c0)) 23:47:06 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xf, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = geteuid() quotactl(0x6, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)="9b1f4d6b4d6e3a45ba07f6bf85ffd697a48c8c2042abe7ad105eeed04f3404604654e01cc269a275b4b13a11b657532606eee35b423734323c87eb4e69c853b2bced1da1fda3d12e3c3349feff67972b2508e2a2e053cab7cf7eede0fb52659f7f5c60d6e47a3b78b38bbcb7c24c325146fa892a17178a3322090ff1020cd7566dd1a150412f7df81cac3e6bd2c246d62003abd60f55c2375c2ccfaf6c8355448f85c8f263aeb9364f83415face9ca45447dbc366fc6660184815108216a55a075eccc908592e14761af37f5c42813a24bf088ed") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/207, 0xcf}, {&(0x7f0000000380)=""/123, 0x7b}], 0x2) quotactl(0x2080000200, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1f, 0x0, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) getpgid(0x0) syz_open_dev$evdev(0x0, 0x5, 0x200000) getpgid(0x0) 23:47:06 executing program 3: time(&(0x7f00000002c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x102, 0x4) bind$inet(r0, &(0x7f00000052c0)={0x2, 0x80004e20, @multicast1}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f0000005580)=0x68) mlockall(0x2000000007) clone(0x20000000, 0x0, 0xfffffffffffffffe, &(0x7f0000005680), 0xffffffffffffffff) r1 = add_key(&(0x7f00000053c0)='asymmetric\x00', &(0x7f0000005400)={'syz', 0x0}, &(0x7f0000005440)="f84e0cad4f825044c5b3ce49e3b957cc3997c30212fea77bbce9f3d7851d4d53fc4b6e9f1d822a65d07444d2bcf953b6827a4d0cda715fb3a32c410404bc5d", 0x3f, 0xffffffffffffffff) keyctl$clear(0x7, r1) r2 = open(0x0, 0x7, 0x40) exit(0x7fffffffbffffffd) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/226, 0xe2}, {&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/173, 0xad}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/101, 0x65}], 0x6, &(0x7f0000000640)=""/231, 0xe7, 0xfc}, 0x1}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000740)=""/221, 0xdd}, {&(0x7f0000000840)=""/220, 0xdc}, {&(0x7f0000000940)=""/252, 0xfc}, {&(0x7f0000000a40)=""/173, 0xad}, {&(0x7f0000000c40)=""/223, 0xdf}, {&(0x7f0000000b00)=""/125, 0x7d}, {&(0x7f0000000d40)=""/219, 0xdb}], 0x7, &(0x7f0000000ec0)=""/157, 0x9d, 0x6}, 0x1}, {{&(0x7f0000000f80)=@nfc_llcp, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001000)=""/139, 0x8b}, {&(0x7f0000001100)=""/181, 0xb5}, {&(0x7f0000000b80)=""/32, 0x20}], 0x3, &(0x7f0000001200)=""/32, 0x20, 0x80000000}, 0x2}, {{&(0x7f0000001240)=@ipx, 0x80, &(0x7f0000001440)=[{&(0x7f00000012c0)=""/71, 0x47}, {&(0x7f0000001340)=""/226, 0xe2}], 0x2, &(0x7f0000001480)=""/148, 0x94, 0x3}, 0x4}, {{&(0x7f0000001540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000015c0)=""/212, 0xd4}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x20}, 0x946}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003700)=""/173, 0xad}], 0x1, 0x0, 0x0, 0x4}, 0x8}, {{&(0x7f0000003800)=@ipx, 0x80, &(0x7f0000003980)=[{&(0x7f0000003880)=""/42, 0x2a}, {&(0x7f00000038c0)=""/174, 0xae}], 0x2, &(0x7f00000039c0)=""/3, 0x3, 0x8}, 0x6}, {{&(0x7f0000003a00)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/74, 0x4a}, {&(0x7f0000003b00)=""/103, 0x67}, {&(0x7f0000003b80)=""/245, 0xf5}], 0x3, &(0x7f0000003cc0)=""/4096, 0x1000, 0x3}, 0x2}, {{&(0x7f0000004cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004d40)=""/12, 0xc}, {&(0x7f0000004d80)=""/16, 0x10}, {0x0}], 0x3, &(0x7f0000004e80)=""/38, 0x26}}], 0x9, 0x2, &(0x7f0000005100)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000005200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000005480)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000005600)=ANY=[]}, 0x1, 0x0, 0x0, 0x202}, 0x4000841) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000005180), &(0x7f0000000100)=0x10, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) fchmod(r5, 0x180) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @local}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000005300)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000054c0)={'bond_slave_0\x00'}) getpeername(r4, &(0x7f0000005500)=@xdp, &(0x7f0000005340)=0x80) r6 = accept$packet(r3, &(0x7f0000005b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004e00)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000005640)={@ipv4={[], [], @multicast2}}, &(0x7f0000005840)=0x14) accept$packet(r6, &(0x7f0000004dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005240)=0x14) getpeername$packet(r2, &(0x7f0000005900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005940)=0x73) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005980)={{{@in=@multicast2}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000005a80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000005c40)={'team0\x00'}) accept$packet(r3, &(0x7f0000005c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005cc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000006080)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006040)={&(0x7f0000006440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x2fb, &(0x7f0000000d80)}}], 0x4000000000001b4, 0x40400d4) ioctl$TIOCEXCL(r2, 0x540c) 23:47:06 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:06 executing program 0: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000240)={r3, 0x1, 0x6, @dev={[], 0x1c}}, 0x10) sendto$inet6(r2, &(0x7f0000000040)="73c3985e228a6f6d430f00425f1eadcfa942b2ca2a9a0aaa3913ab27df0f120c37e33ad541a155ba002d6764d4c488c67d9498a33d2af92b5df2989b9ad3841c2c70c12053a0d150099daebe862686ea7fe90f2225399d68939fe0fa1658f348121efa72efeb5cf185f8757350710b54c1c368cf36e9056ac4fb555a3e48fa82936b9c", 0x83, 0x0, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @ipv4={[], [], @empty}, 0x7}, 0x1c) poll(0x0, 0x0, 0xfa) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) 23:47:06 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) [ 243.891464] binder: release 9086:9110 transaction 279 out, still active [ 243.913411] binder: send failed reply for transaction 279, target dead [ 243.920464] binder: send failed reply for transaction 282, target dead 23:47:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockname$unix(r0, &(0x7f0000000180), &(0x7f0000000000)=0x6e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd/3\x00') accept$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0}, &(0x7f0000000740)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000780)={r2, @dev={0xac, 0x14, 0x14, 0x29}, @empty}, 0xc) r3 = socket$inet(0x2, 0x3, 0x1) getsockopt(r3, 0xff, 0x1, &(0x7f0000000080)=""/166, &(0x7f0000000040)=0xa6) [ 243.975281] binder: 9136:9143 transaction failed 29189/-22, size 24-8 line 3117 23:47:06 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000940)='/selinux/mls\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8) sendmmsg(r1, &(0x7f0000001e80)=[{{&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000024000000a6000000"], 0x14}}], 0x1, 0x0) fcntl$setflags(r0, 0x2, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0xff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00'}, 0x10) write$selinux_create(0xffffffffffffffff, 0x0, 0xfffffffffffffe18) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, 0x0) sendmmsg(r0, 0x0, 0x0, 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, 0x0, 0x50000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000a40)) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'sit0\x00', @ifru_flags=0x3100}}) clock_adjtime(0x1, &(0x7f0000000680)={0x400, 0x0, 0x200, 0x0, 0x1000, 0x0, 0x80000000, 0x4, 0x4, 0x7, 0xfee4, 0x400, 0xa8, 0x3, 0x0, 0x3, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0xb05, 0x8, 0x1, 0xa46, 0x7, 0x382c}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x4c, r5, 0x4, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x9}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x204774ac461d2cc0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) setxattr$security_capability(&(0x7f0000000a80)='./file0/file0\x00', 0x0, &(0x7f0000000800)=@v3={0x3000000, [{0x1, 0x5}, {0xfffffffffffffffe}]}, 0x18, 0x3) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000780)={'nat\x00'}, &(0x7f0000000000)=0x185) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x802, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@multicast2, @in6=@loopback}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000380)=0x14) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r4, 0xfffffd6f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1e, 0x8031, r3, 0x0) mprotect(&(0x7f00003a3000/0x3000)=nil, 0x3000, 0x1) 23:47:06 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:06 executing program 5: socket$inet6(0xa, 0x100000000001, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 244.260245] binder: release 9167:9170 transaction 290 out, still active 23:47:07 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000004c0)='/dev/input/event#\x00', 0x3, 0x8040) r1 = socket$unix(0x1, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000200)='bpf\x00', 0x0, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffffffff3e54}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x6}}]}) ftruncate(0xffffffffffffffff, 0x208200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1}}], 0x400000000000098, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000600)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0) gettid() bind$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair(0x0, 0x8000b, 0x5, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x401) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000580)=0xc) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/88) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) statfs(&(0x7f0000000340)='./file0\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syncfs(r5) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:47:07 executing program 5: syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 244.470343] binder: release 9173:9174 transaction 293 out, still active 23:47:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000280)=0x3fd, 0x269) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000240)=0x1d) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x101, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x40200, 0x0) getsockname$packet(r1, &(0x7f0000000340), &(0x7f0000000380)=0x14) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000900), 0x1, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x54) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f00000002c0)=0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 23:47:07 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pause() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x4, r0}) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x1) [ 244.640209] binder: release 9185:9186 transaction 296 out, still active [ 244.770947] binder: release 9139:9161 transaction 287 out, still active [ 244.788812] binder: send failed reply for transaction 287, target dead [ 244.813696] binder: send failed reply for transaction 290, target dead [ 244.830331] binder: send failed reply for transaction 293, target dead [ 244.851618] binder: send failed reply for transaction 296, target dead 23:47:10 executing program 3: time(&(0x7f00000002c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x102, 0x4) bind$inet(r0, &(0x7f00000052c0)={0x2, 0x80004e20, @multicast1}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f0000005580)=0x68) mlockall(0x2000000007) clone(0x20000000, 0x0, 0xfffffffffffffffe, &(0x7f0000005680), 0xffffffffffffffff) r1 = add_key(&(0x7f00000053c0)='asymmetric\x00', &(0x7f0000005400)={'syz', 0x0}, &(0x7f0000005440)="f84e0cad4f825044c5b3ce49e3b957cc3997c30212fea77bbce9f3d7851d4d53fc4b6e9f1d822a65d07444d2bcf953b6827a4d0cda715fb3a32c410404bc5d", 0x3f, 0xffffffffffffffff) keyctl$clear(0x7, r1) r2 = open(0x0, 0x7, 0x40) exit(0x7fffffffbffffffd) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/226, 0xe2}, {&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/173, 0xad}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/101, 0x65}], 0x6, &(0x7f0000000640)=""/231, 0xe7, 0xfc}, 0x1}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000740)=""/221, 0xdd}, {&(0x7f0000000840)=""/220, 0xdc}, {&(0x7f0000000940)=""/252, 0xfc}, {&(0x7f0000000a40)=""/173, 0xad}, {&(0x7f0000000c40)=""/223, 0xdf}, {&(0x7f0000000b00)=""/125, 0x7d}, {&(0x7f0000000d40)=""/219, 0xdb}], 0x7, &(0x7f0000000ec0)=""/157, 0x9d, 0x6}, 0x1}, {{&(0x7f0000000f80)=@nfc_llcp, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001000)=""/139, 0x8b}, {&(0x7f0000001100)=""/181, 0xb5}, {&(0x7f0000000b80)=""/32, 0x20}], 0x3, &(0x7f0000001200)=""/32, 0x20, 0x80000000}, 0x2}, {{&(0x7f0000001240)=@ipx, 0x80, &(0x7f0000001440)=[{&(0x7f00000012c0)=""/71, 0x47}, {&(0x7f0000001340)=""/226, 0xe2}], 0x2, &(0x7f0000001480)=""/148, 0x94, 0x3}, 0x4}, {{&(0x7f0000001540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000015c0)=""/212, 0xd4}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x20}, 0x946}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003700)=""/173, 0xad}], 0x1, 0x0, 0x0, 0x4}, 0x8}, {{&(0x7f0000003800)=@ipx, 0x80, &(0x7f0000003980)=[{&(0x7f0000003880)=""/42, 0x2a}, {&(0x7f00000038c0)=""/174, 0xae}], 0x2, &(0x7f00000039c0)=""/3, 0x3, 0x8}, 0x6}, {{&(0x7f0000003a00)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/74, 0x4a}, {&(0x7f0000003b00)=""/103, 0x67}, {&(0x7f0000003b80)=""/245, 0xf5}], 0x3, &(0x7f0000003cc0)=""/4096, 0x1000, 0x3}, 0x2}, {{&(0x7f0000004cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004d40)=""/12, 0xc}, {&(0x7f0000004d80)=""/16, 0x10}, {0x0}], 0x3, &(0x7f0000004e80)=""/38, 0x26}}], 0x9, 0x2, &(0x7f0000005100)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000005200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000005480)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000005600)=ANY=[]}, 0x1, 0x0, 0x0, 0x202}, 0x4000841) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000005180), &(0x7f0000000100)=0x10, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) fchmod(r5, 0x180) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @local}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000005300)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000054c0)={'bond_slave_0\x00'}) getpeername(r4, &(0x7f0000005500)=@xdp, &(0x7f0000005340)=0x80) r6 = accept$packet(r3, &(0x7f0000005b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004e00)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000005640)={@ipv4={[], [], @multicast2}}, &(0x7f0000005840)=0x14) accept$packet(r6, &(0x7f0000004dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005240)=0x14) getpeername$packet(r2, &(0x7f0000005900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005940)=0x73) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005980)={{{@in=@multicast2}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000005a80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000005c40)={'team0\x00'}) accept$packet(r3, &(0x7f0000005c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005cc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000006080)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006040)={&(0x7f0000006440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x2fb, &(0x7f0000000d80)}}], 0x4000000000001b4, 0x40400d4) ioctl$TIOCEXCL(r2, 0x540c) 23:47:10 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:10 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000240)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9ec\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xce\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x90\x93\x81\xba\x03\xe3\xd2\x94Ev\xda\xa3\xa0?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g', 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) 23:47:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) inotify_init1(0x80800) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev}]}, 0x24}}, 0x0) 23:47:10 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:10 executing program 4: socket$inet6(0xa, 0x7, 0xa56a) r0 = socket$inet6(0xa, 0x80003, 0x1b) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x29, 0x4, 'K'}], 0x18}, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=[{0xfffffffffffffc71, 0x0, 0x0, "f5b6dedf6b1a758970af4c5769a90c3f640763b74b2c8a1f9af730a69a828d37ccfcb81bd98104a60d647c8dd81a3e303b41e9471c2c8276c0a48868ca856f8b8757f3eb53721f00f03013324e3ffc"}], 0xc}, 0x101}], 0xb, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x85, 0x0, 0x5, "76595645b651ee9818a1b94c43f0438b", "83b1d692863ae7bc4cb37a37194ab400481072848b3807439f1c2321cf8a8ec8e6c3c1c88a79b41b249a8795f6f6b5b0fb8c558d6beca5b9ca80e187c63ca3d489b8cb7e83e128b7157d6962a9fc6336e3901897cab7431c2b872015855fc31cf2fe04a8571608b7b54ebab06f356ba1"}, 0x85, 0x1) socket$inet_udp(0x2, 0x2, 0x0) 23:47:10 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 247.815847] binder: 9214:9217 transaction failed 29189/-22, size 24-8 line 3117 23:47:10 executing program 4: r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0) pwrite64(r0, &(0x7f0000000000)='/', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0xfffffffffffffffe) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) syz_genetlink_get_family_id$ipvs(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mount$bpf(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') write$P9_RSETATTR(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000001c0)=0xc) socketpair(0x0, 0x0, 0x5, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="40010000", @ANYRES16=r4, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000000c0)) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001010000fffffffff0040000000000000700000000000000040000000000000003000000000000000000000000000000000000000000000000000000000000000500000000100000008000000000000004000000000000000900000000000000200000000000000000000000000000000000000000000000734900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000"]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 23:47:10 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0xfffffffffffffffe, 0x0, 0x101, 0x0, 0xe3}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 23:47:10 executing program 2: r0 = socket(0x400000000000010, 0x802, 0x0) ppoll(&(0x7f0000000080)=[{r0}, {r0, 0x8082}, {r0, 0x2200}, {r0}, {r0, 0x400}], 0x5, &(0x7f0000000100), &(0x7f0000000140)={0x5}, 0x8) write(r0, &(0x7f00000000c0)="24000000210099f0003bf90000ed190e020008160000000080bae48004000a007fbcfe6f", 0x24) open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x126) sysinfo(&(0x7f0000000180)=""/139) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4, 0x4) [ 247.898762] binder: 9229:9231 transaction failed 29189/-22, size 24-8 line 3117 [ 247.922526] audit: type=1400 audit(1553644030.580:48): avc: denied { create } for pid=9233 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_iscsi_socket permissive=1 23:47:10 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:10 executing program 2: getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000080)=""/65, 0x41) timer_create(0x7, &(0x7f0000000240)={0x0, 0x35, 0x0, @thr={&(0x7f0000000100)="aace54d9593b3aba3547628ca7ea1e3c17b74d3a47f4264791f335795c43b759f7bf447d8b8a5bf6e4aafed3b83f4ef36b528d5eb80dc6bd13ee610506f5865e92f4bdf1be38680aea2b3aa8eb9c6d8d2af7824a435e58cbb4ca08bc4872c05e0dd18e3b3c6dde557079c32fb5379a612c9068e9165af6", &(0x7f0000000180)="0c1d8d3778b6cdc6be78963e97ce13bb5e83684f8525c53f4044cf9df9b367f2b6fc3340d073428e56ce3f916e95d4658fa912a4ac61c1dfa0bfdf73e641213d3076466631ce7c970b7b1aa155c36e8220d4bb27c74217291f4a40ba52dc6f851b986d406da19ff78bc0230d7a0bea31ac27e77f1c84634043755dc31639972f564acc562daa082fe7aa3ddc3046209601a723175ebbd7e4"}}, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000300)={{0x77359400}, {r1, r2+30000000}}, &(0x7f0000000340)) io_setup(0x8ed, &(0x7f0000000380)=0x0) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/create\x00', 0x2, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r6 = perf_event_open$cgroup(&(0x7f0000001440)={0x0, 0x70, 0x0, 0x0, 0x3, 0x800, 0x0, 0x8, 0x1000, 0x7, 0x2, 0x2, 0x6, 0x200, 0x5, 0x5, 0x1, 0x1b3, 0x5, 0x80, 0x1ff, 0x3, 0x4, 0x9, 0x1000, 0x1, 0xb61, 0x7, 0xffff, 0xfffffffffffff29c, 0x3f, 0x8, 0xfff, 0x3, 0x34b, 0x864, 0x401, 0x2, 0x0, 0x9, 0x0, @perf_config_ext={0x4, 0xc0a6}, 0x4000, 0x3, 0x2, 0x4, 0x0, 0x440, 0x100000000}, 0xffffffffffffffff, 0x9, 0xffffffffffffff9c, 0x3) r7 = eventfd(0x0) io_submit(r3, 0x2, &(0x7f0000002500)=[&(0x7f0000001400)={0x0, 0x0, 0x0, 0x7, 0x7, r4, &(0x7f0000000400)="c3d26eee14c5fb0953babbe5011619720eb1bc0b38210d25273feed29fab97475c0c9577ae49c0fff5e7815aa466bc3879f6eb73e0fd46f83d022006673531da36afc4f6c130b9b137a6610953efa63a0cf279e674fed83f38e13ca456075b86b1525e9a4d46a329bb828436b1c4fb74b7e9d34ee938f6ecd81e0435b6f38f89a19adda432f0a8f1b3e50adc8dbecae92c7e4d0ac68a052da99d614b9b08ac3146542fde16e8bad4b3afd25cbf969ad20086f7502f827652d114a203ace3e996b45489f6e50312799a8e1ae36991347b472c82e40cf6ee41149703f1abfe328245541e79dc053fc643ed68782c974d43d42b642b8b4effb2adfe062e7d1a13d53f77edf3e2e2f89dee227858519459ce90c2500165be934fe3acf5f5a0365e7bfeb59bda474fd85b5f6e33141a319fcdc1b94f4dd0a508047d8172dc518810bb0b32363a674c50d357f510e7c47a2392e03da54b54542577a3f6dec9143d1be0e2f78fe6739ef55b8a7b40956f0bd16343f9c51ff95a183164f8f0628b213dbfa36c206db015c85ed6ee79fac7338b9ca62fd1555bffb667694a23a1aba179286c94ced2308bc94572793a5afe03fb622e79940052597711a2f34140f294fc297c122ba3b2f0611712b0878845ce211a0cfababac4629a1ef5b5306fa6d714555003534a2624200d8b545155cd1a834d1bb3948c1a7cfccb8666fae38417c8f96abbaa80afee8e43280bc11c6815496a1f0cce1b9deb11e0472bffa89f712a5a76b4daafbd3da32cd73cae67a55e0758c35fd19537b3554c793b943f18c3e7e2aac0d621a2b9120bb3975d5058e075769ff462629c41d899ea020ff4e8791fe6654e2cb9114f5e79325edbe0e02daf29919e02c70881c41d9a794ee04007522d70d8707368b95a0d19e65394c9485ab7b68fe0016bf60e0660f7f5e030f80ec24b6b25938614b1ee0dca54769151db861be67b42d109cb0226ae1e91615a8aadb58c13e146f58333942629f305ee08b3134f6114dba8dc3a3616e63e7cd557c3b4e99fecab6d544e03ff92be2e70c140d49e0e1ad42b51caabeca0ed5e7a4cc9a14b92ab74d550b07a59c3ba7a1ee9c97f610cd90226416057ca0f6e0051abfdbea902b41eb064ac6e610e683ad4ec7286f898e7a6ab7eb7c3da2e5a66d7e04cade1d9ae9b767a9939e2b4c1d66507bc0e0eec626fa16cbf09b9c5da6a6cb6b5ee8ce7444495dfc6bc625b60884148b0a9b6509178a59f412627547c163ea9aedf2d794917e0dc248cce8d6911dfd513e6bf25411970bed78e8bc3a41dda0365e9ecc9484dbcca65fc71deb95a538bee00f1b77ae7ac8c54e4ec9468b4ac31be7daaccefe1c664567e67438d9c33becda67aab0c3c5f26e72b8489b51442aeab2033bd1129a407b328af10ad710871fef2853ffaec62d5be9827a13d5fa8992dd5a2703fa59e71c343e6479ff15adc7b43364ce405ebe7f3a3bb99b64e764765dbaa04bec9643d5310df53543c226bb7f87964c617b9ce5a619ed1b4404e293d75da43bf0bc7b8090c1530fc75e924fc00416ef32a9741010034c538d89f5e7177b88f9b51fee594cbcad62eefb4d6d5c1bda8852f567526f1bb0bfad1b29cbf6484660dce1bd1767ed58ff9da1e976c0db1c2b0fd6c2d565f200ea52cf9c27fd4bde1c7fb2b7c726eecdb1b859350a25a4b4f668a2655b4680b65c733793af13d2caac9ca4525beb3c0cc749563d6c35d7f72d470a5e4ffcfcc478495ee602ea517ee14c6966c40cd7f1852fd6ff9643a0135280838aa68ab1d8f40a680cabd691818c60f9d50e289ed9e328e3b2eb51350e5414871a198726177a9f97b079108571892d9881e7b19ccae9ea4572a5ab43dbfe066a69e7369f71dcf2a93e61fa197660f346b08d259f35d0025018efddb83f418ea5d9164f6ac038f76c2b3c64892ede2c97a48bc5ac4ef3f56c168ded2839292c2925e3d5fda39d67f9bb2957fc471c7359402e488ff2345cebe2423b7fd6c0db84dd29551ac2ff5d0bb6a444de65f5e277806663913e1e40a34b5d08ec01f516968eb862b34c746883b483f2f429093fb69ec1117c36ced097c2ae4a88ebe226e6a874ce6073ce3b23e11b6f1d7c989b54dc970ce5c3558636a0247eecb590784856efacc9024362c00d4e350044983e4d29da6d989d7e994316fcbae219300739bf235cf1d5552dfc0faac60e03fc608adc71fffb6ef13dcb749ad0cb46454f1006f4affa382c3e152034a8e724fe8846e5ac7237aa48fd79b91d9a5e19253720929a0f9fb31bca8be2f64a04cc39ab65c21d54a3e4bf5e9533df7fc9476f2ceb06eeb78f47a3eb69d274389d7425cf700e56f1cb22f75f9eb53ab0fe38a898103ee648359b46393f8fc99fdfbbc77d47157deab81a9a5dff5b76a86bcda89f66879079bff4bba8369a52d891d5c70504ffcb6500163b6fb5f110afcd7c7c0ea718fddcc22bd3da0a53b8e690e9b8c3d40e105217601160149ab1f67b488c7f6e2a32991dc02625126e9d605cf93553301f8dde7a8aca9c97da32f2f9f6ad3a93a8705b23e500a63cf23acf758eb5d45995aa5f59b91ebb5b584572cd2b5b06cecad97eb463a84023de6eec5fac82beb5e403dc918f67f32dbb73d4bc39a57202fd605e5b2bb4a0fa258fbf1bea7a1f1c3ecb28e972ec0f8d77343b5858e0b0c57f49336c2e74470f0e5464e1427507aed2b87b826931f95e0f8dc8148b7a90295734f663a815908df0bf44375f3bff589d64858e059d96522f6d71df213a7d565d54e8aaf111f6792bb00fd739ea4043e25d3cb8a3ea27ceb4878b11bb01f02af8c5b9189d8e352adf490ce6e9ffc54ec5517ddf0688cfcc4c9f38cd51b54da10d532b2516bd2d26c8ef905c612af3ffd49dd3c73c10d9607f678972421fdbd1e872312aeef35e512bcd271bf33663d954b9fc91e2c5a878db4cb3ab67b59c7cce541ac317f442ac76b752ef65c6bfd355d7bf3219f9def0485d4ba1e014cb159590dceee4e238007bf074295477f2abed5af8fbc9c507c7e6d061c84be1a3de3f8bbd0e3e90d80f284d323f44c96b9d377f34926d6c3fcb99ef1fab2691950ea382b2b3aea7572982b864ed0313c175d5d97c90bc959f599b9b1d5d5c865c81e2ad043899d029894879624e08dca03f63a208cd6a4fa72a589b79473656d5473299dc846c8f53fa32fd14ff377a71fe81ea90ec0ffd2cea558037359f721004251d9719254fb84f85ec7ee484df0c531ef81b45bf64bc789d714b5e0500818b804e4dc882d45763c347f96f495714cbad5d8257565ea94f61db9aa387f1dd7cc7318c1865ccdffc21c1dd9d643b99aa8d206b7ae48808ed5e6d229b7bd524ea15fee58f684f1c4d9db8aa44e73354ea93640b57b9718a02336eea7ac69f1bab2c488eee0c7ff1f9f2b655f07e204b49889ed5762cf9fc3054ab0a6d9a4b983676b623a83aad900e2a863ebc2de54779127014321b91d5029d6764ae927526bed6342498455d8fc4e94aa707d77b928b5d1b868714995da0cd73c1cb2ec9922f88a71e3731b14ea58ebd8ccbbc3df5b80fae1c45b655ed53880b019079c7a3d933785e3901a07b2da999b796718ecaad68aa9b9cb6cba1e7bd07cb901f022559b7f7a30c57b5edd838ad487548455463d8cd06f1b2aa931bfb4e59a46139820d8166762fe58b7978987ec274a34d30a2de4510929135892c8b5a8f3f52a1dc96fdb845723801aec1cceec993c66fc4f977e9c6219031bf8ba5173afc54b3154d5cc48eea5b17d2b5df6a7adda12a68606518da61b3a4e8dd36b651bdb61aad099d9361ed6a6fa672e7a79a60244a2eee1e25f84d9219ade85b76382ed0f8faed09ef6f092443a251031180c91695210419cf2fee5d4d2576a55b12f2e98b49d2070a29c527fca885ee0fb306949a66d99ebd397b93717ce8949e58a36d414ca93ac261baed0d7f601bece814b43b3d79a2a0090ace910a16b8b6f7042cce10bd4a6ce3356cd044ea511f45d47cbf41890bc0b50d4c0ee03673a1e48edc1d9c870da551637106a4d609004d812ed33813f81242761d0265cf08dfb451f6b34165b0756e35e259750f18fa3f140e5f04eb9f090e04e6e47a4c43183cdea447eb5547c5a248f5e7a572d3ae768443697eb29adf2be538f46734916a0df2df8ea73fa1e121302e83a10aaf1453c5f94fb52a29f91e4675735cf4d01a430645592434ed03b5509cae673b9105bb1f6225d38e511547287abe45d5bfed8c475822304d4c98bd2c6e5f47282d0b4b912334c4c260dc8046cf142cfd30f86d4d522cd0dd8fc2657429238fa77ec35a7688a4ca5f295ef47d5cc2101cd7709b8a89dafa03add7385e685e65e3515fbede7fcf596dd8d0f3f7deca81026e12ea74ae0edeca2019f7f6be9aa46ef3f07da0ccd1c5ac3519eb07c96e6a3cd11aa0b758c2ac6b8c565b442688201f68b07625e0b150ba104c0214f184412216d49a5e2623b8bcd3320555bac4cca2e98b9d751408bbc4224ec764f398f390c12d42d7cdd577001900ff0160b26d0fb353dea14010218574b283c275a7a02c653e43a667c5e6b2e27f7b5648144529e3a9be19761a52ac1ea32555824c3a0c52dbf21fc277732052dfff92305d6425303acb3d71b092955616fa60d1473c8dde7ec8f1bbc03e6265c2c9faa6658714a4db589197711aef03780ff79dc71beb1db6f23b7f8381d44e885828b0ff13132e5849b21fbadf03d2ddb595ab9dc50b3e7452a859c9915077f2a61be477506f0221298f0f04e87d8769959b683b7338fd5ca3daf2097af06e96d4d81548ce7619c92f54f2864c5f0b956119e520aed8c66fc4a2e4017eab26f3817ee5367e92415cb9070d67bcc48d884f51549afb3054de1a6992b09fb97973a2386ba87f0c910ebe71baf5e97f225b871c13c67165df67a5c5549175e1fad2e8662beab6b926945252056ca175cbe074524ab250883210786261516f9a71c0fc2b4d37cf0daac9604589412a0e0f8eb53886a781f58f4e3d9acc28e04486875718e47251eb922244b24160fa586b84093f6e035a672ef7d19dfabbb5f7e2b8c8aca5f502ace0d8c654514301d2e995b0d2d706d4d300aaaf91e45ff82b9c800a13f4f2c5e2067a0575dd2e9c023cf8396520117491577f6e8babefd2683ffcedbecef7d2f20c57d33c8fbc68944f531421aa3555a5f6a543b93fec99fa2643f3c9684b13f038853e44623d6f477c1afb50496648dcb53bd15715ec31ecde858f0dec0909ff30d27ed73b585cd4c3648b6ba6d5d5402741c60744675175c57d9fbda443e5ea26558d9686a55b963e0cf7e9ea6d1ccd9dc0e27885be2974b7d1462f1707654a13cf959c6b1d2591d93925efc440c8902afda12e2af051431f0e8025eaf3a745596def7daaedae64f70a49ccc094aeb719e5d8ac782823dcd7d6da4153a32d4e10ed1157a84d67d49b180e5ae8d0015588e2e898dbc47364b2e927f1204b2c150dcbe8215276e54e4296f0db6b31709460df7bb1461b80f1c506f2efcab726296cb010f60cc6ced5e04fe48b85dad2f0a8fe8342b01180b72c977bc510bd58740e406763640ee07cc7ebe9af672d5642749b3d980e039de74a1226efd7a9d55afddebad05c0e69c9567410e7395f42074bd4bd60e0b658bb7b983ca0a4755bff0956a6b89d80c66d0b269784ee431cbc49eaf8719805508299bf7bed20590f6e2a46d7ffe03272a70cf722aaca1247ca182e39284d0ac69f158b719198334d69aee96", 0x1000, 0x0, 0x0, 0x0, r5}, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x7, 0x80000000, r6, &(0x7f00000014c0)="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", 0x1000, 0x1000, 0x0, 0x3, r7}]) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002540)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000002580)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e24, @loopback}, 0x100, 0x0, 0x0, 0x0, 0xa73, 0x0, 0xdc, 0x3f, 0xfffffffffffff000}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x30, r9, 0x300, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x2, 0x5, 0x101, 0x9}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x1) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002780)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000002840)={&(0x7f0000002740), 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x1c, r10, 0x600, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040085}, 0x4000000) write$selinux_user(r5, &(0x7f0000002880)={'system_u:object_r:ld_so_t:s0', 0x20, 'staff_u\x00'}, 0x25) timer_delete(r0) ioctl$KDGKBLED(r8, 0x4b64, &(0x7f00000028c0)) r11 = add_key(&(0x7f00000029c0)='.dead\x00', &(0x7f0000002a00)={'syz', 0x2}, &(0x7f0000002a40)="044cd1f6aa98c09f199fb12c336626baad56453e392b6ca70a1b8a8172b16b03167ef1d34c954d6c54aa4d37522e47a607114e15ff01a22bd3dfb0e9449d59571c105cc48fd6cd0aca2035b106a4eee607fed01134db077b57fb73eb574185c1d6744dff2df084e57358959f0e9101f3d6ec0ff5fc92a00e58ea11b8ddab909e7bfce961f4cbf531a0d1c33850cfa8f3f872d0baed1b73", 0x97, 0xfffffffffffffffd) r12 = request_key(&(0x7f0000002900)='cifs.spnego\x00', &(0x7f0000002940)={'syz', 0x0}, &(0x7f0000002980)='}-self($usereth1security\x00', r11) setsockopt$inet_icmp_ICMP_FILTER(r8, 0x1, 0x1, &(0x7f0000002b00)={0x7}, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000002b40)=[@mss], 0x1) write(r6, &(0x7f0000002b80)="2b601beac880738b41f965a4ee179156fe7f0a74d5c6b3d0425bb21a8ba1c55f6990b362db0b604e6899471b8037bbd44b50ca0a83632daf1c853ddd459b05ce94cb31ee97a4d4e0073ad6ae2774e2eefb8b288e7a53ba446eaa2e1becd503eb38885e2d5498565bc57092b37fc32c3de52de1ad745e7235bc67ab4b04ef99ffcc4af04b0b56e7981087dbe23b568d5f9e518c6d2da9d71d89093cf973db2eb6b79b7496cb1ddb95a6f427d996d3dd81331d8aa0dab88ea2a7853b9598207d752dae534425cec71f192d49c79c3a4783e8", 0xd1) keyctl$restrict_keyring(0x1d, r12, &(0x7f0000002c80)='blacklist\x00', &(0x7f0000002cc0)='trusted.overlay.impure\x00') clock_gettime(0x5, &(0x7f0000002d00)) r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000002d80)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r8, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x14, r13, 0x2, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044004) fstat(r8, &(0x7f0000002e80)) ioctl$sock_proto_private(r8, 0x89e7, &(0x7f0000002f00)="fa89c0726ca0f0371d0672c758c6d310568c35fc8d78f19561df08adc0392f7162f26aec869e4b9e409ae4ccf60138c1b40f4862103ab6e38fc6999950e239148bafaadfde4534a86fc12c1889303f") [ 248.047570] binder: release 9251:9256 transaction 305 out, still active [ 248.641336] binder: release 9220:9234 transaction 302 out, still active [ 248.650780] binder: send failed reply for transaction 302, target dead [ 248.657700] binder: send failed reply for transaction 305, target dead 23:47:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @mcast2, 0x5}, 0x1c) 23:47:11 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:11 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) keyctl$assume_authority(0x10, 0x0) 23:47:11 executing program 4: r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0) pwrite64(r0, &(0x7f0000000000)='/', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0xfffffffffffffffe) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) syz_genetlink_get_family_id$ipvs(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mount$bpf(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') write$P9_RSETATTR(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000001c0)=0xc) socketpair(0x0, 0x0, 0x5, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="40010000", @ANYRES16=r4, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000000c0)) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001010000fffffffff0040000000000000700000000000000040000000000000003000000000000000000000000000000000000000000000000000000000000000500000000100000008000000000000004000000000000000900000000000000200000000000000000000000000000000000000000000000734900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000"]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 23:47:11 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:11 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x277, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x830, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x200000a, 0x6031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f000061d000/0x2000)=nil, 0x2000, 0x1b) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000002d00)={0xa, 0x0, 0x0, @empty}, &(0x7f0000002d40)=0x1c, 0x80800) fsync(r0) getsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000002d80), &(0x7f0000002dc0)=0x4) 23:47:11 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(0x0, 0x1040, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000380)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) [ 248.930257] binder: 9282:9292 transaction failed 29189/-22, size 24-8 line 3117 23:47:11 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x8000) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7a307a30be71afb41268100292d4431001f6e2bb66601baa0300fd77d9c60b000000a8"], 0x23) 23:47:11 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001200)='attr/keycreate\x00') exit(0x0) pread64(r0, 0x0, 0x23e, 0x0) 23:47:11 executing program 4: r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0) pwrite64(r0, &(0x7f0000000000)='/', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0xfffffffffffffffe) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) syz_genetlink_get_family_id$ipvs(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mount$bpf(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') write$P9_RSETATTR(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000001c0)=0xc) socketpair(0x0, 0x0, 0x5, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="40010000", @ANYRES16=r4, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000000c0)) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001010000fffffffff0040000000000000700000000000000040000000000000003000000000000000000000000000000000000000000000000000000000000000500000000100000008000000000000004000000000000000900000000000000200000000000000000000000000000000000000000000000734900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000"]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 23:47:11 executing program 0: r0 = open(&(0x7f0000000040)='./file1\x00', 0x400040, 0x0) close(r0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001f00)) clock_gettime(0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0xa, 0x4) 23:47:11 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 249.083568] binder: release 9308:9315 transaction 313 out, still active 23:47:11 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) creat(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x810003, 0xb) 23:47:11 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 249.159035] binder: release 9325:9328 transaction 316 out, still active 23:47:11 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 249.218808] binder: release 9333:9336 transaction 319 out, still active [ 249.275377] binder: release 9341:9342 transaction 322 out, still active 23:47:12 executing program 1: socket$inet6(0xa, 0x100000000001, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:12 executing program 4: r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0) pwrite64(r0, &(0x7f0000000000)='/', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0xfffffffffffffffe) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) syz_genetlink_get_family_id$ipvs(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mount$bpf(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') write$P9_RSETATTR(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000001c0)=0xc) socketpair(0x0, 0x0, 0x5, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="40010000", @ANYRES16=r4, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000000c0)) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001010000fffffffff0040000000000000700000000000000040000000000000003000000000000000000000000000000000000000000000000000000000000000500000000100000008000000000000004000000000000000900000000000000200000000000000000000000000000000000000000000000734900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000"]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 23:47:12 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f00000002c0)={0x1}, 0x8) [ 249.722886] binder: release 9281:9300 transaction 310 out, still active [ 249.752089] binder: send failed reply for transaction 310, target dead [ 249.758099] binder: 9350:9353 transaction failed 29189/-22, size 24-8 line 3117 23:47:12 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 249.775187] binder: send failed reply for transaction 313, target dead [ 249.799547] binder: send failed reply for transaction 316, target dead [ 249.817265] binder: 9359:9362 transaction failed 29189/-22, size 24-8 line 3117 23:47:12 executing program 3: 23:47:12 executing program 2: 23:47:12 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 249.825213] binder: send failed reply for transaction 319, target dead [ 249.832939] binder: send failed reply for transaction 322, target dead 23:47:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x11) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0xb4, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0xf6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) recvfrom$inet(r0, &(0x7f0000000200)=""/159, 0x9f, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="a0", 0x1, 0x41, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)='I', 0x1, 0x204007ffd, 0x0, 0x0) [ 249.940732] binder: release 9369:9375 transaction 331 out, still active 23:47:12 executing program 0: 23:47:12 executing program 4: pipe(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x1, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) fcntl$setstatus(r4, 0x4, 0x80) pwritev(r4, &(0x7f00000003c0), 0x1000000000000297, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r3, 0x0) write(r1, &(0x7f0000000340)="a5", 0x1) dup2(r3, r2) close(r1) read(r0, &(0x7f00000001c0)=""/142, 0x8e) 23:47:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000040)={0x0, 0x0, 0x2}) 23:47:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:13 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x48) 23:47:13 executing program 4: 23:47:13 executing program 3: 23:47:13 executing program 0: 23:47:13 executing program 4: [ 250.588026] binder: release 9354:9366 transaction 328 out, still active [ 250.601395] binder: send failed reply for transaction 328, target dead [ 250.608383] binder: send failed reply for transaction 331, target dead 23:47:13 executing program 2: 23:47:13 executing program 3: 23:47:13 executing program 0: 23:47:13 executing program 4: [ 250.662457] binder: 9390:9398 transaction failed 29189/-22, size 24-8 line 3117 23:47:13 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 250.778703] binder: release 9409:9411 transaction 339 out, still active 23:47:14 executing program 0: 23:47:14 executing program 4: 23:47:14 executing program 3: 23:47:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5) 23:47:14 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:14 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:14 executing program 4: [ 251.448567] binder: release 9396:9402 transaction 336 out, still active [ 251.458911] binder: send failed reply for transaction 336, target dead [ 251.475089] binder: send failed reply for transaction 339, target dead 23:47:14 executing program 0: 23:47:14 executing program 3: 23:47:14 executing program 4: 23:47:14 executing program 2: 23:47:14 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 251.517332] binder: 9418:9422 transaction failed 29189/-22, size 24-8 line 3117 23:47:14 executing program 4: 23:47:14 executing program 3: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c63, 0x10000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') close(r0) 23:47:14 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') sched_rr_get_interval(0x0, &(0x7f0000000100)) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 23:47:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000380)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000001c0)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][dC/\xa6\xbb)p\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1\x06\xbee\\lRcI!l0\xbb\x1f\x80\xfbE\x0e\xc0\xd5\xbe', 0x1, 0x99, &(0x7f0000000100)=""/153}, 0x48) [ 251.669788] binder: release 9434:9437 transaction 347 out, still active 23:47:14 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:14 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') 23:47:14 executing program 4: r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x5) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000040)=0x135) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs(r2, &(0x7f0000000100)='cgroup\x00') 23:47:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f00000000c0)='\x00\x00\x00\x00 \x00\x00\x00\x00') 23:47:14 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c12") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:14 executing program 3: rt_sigaction(0x39, &(0x7f0000000280)={&(0x7f0000000080)="36f2430f2b11c4219d71d50dc4a11115f6f3410faec6f236651d98f77315430f0d544e006766400f3810647fc88f68d0a3ccff0f38f14779f2c8c20000", {0xfffffffffffff716}, 0x40000000, &(0x7f0000000240)="f2450fd02d0d000000d9faf2dc01f3410f16e1f30fc735e0000000f609c9c4c12a5aa900800000c48221985617460f76fac462a1450c81"}, &(0x7f0000000340)={&(0x7f00000002c0)="447ce9c463295c6765262e3e66400f3a612f002e660f685f0d410f16f936660f3801ae000000003666400f6ab95a22000066420f7f14d16dc462ed9a7700", {}, 0x0, &(0x7f0000000300)="263e430f1bcbdad5dc19c403fd0118ecc481f9e47f060f1b9aa00c00000f41504cc48279788605000000c4a1c3d01e8f89d89026"}, 0x8, &(0x7f0000000380)) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaa129100350081002900600111a8b9712106b685f32d37cbf6ab8a33e4ea46a3945728566cde935e72cd76c769927cd7a2dab4c8d883c893aad30180db9bd1099ea8a1240d17309d872a97954b73dfa169f4941446edbd4c35b380c028f78246fb7636f311a81aae8d20ac9c396f621293120c208a92a0d504014b33af4764077e5912f80938fdcbe380a51a1d91298a0000000000000000000000000000"], 0x0) listen(r0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x12) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f00000003c0), 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) [ 252.304649] binder: release 9420:9429 transaction 344 out, still active [ 252.326054] binder: send failed reply for transaction 344, target dead [ 252.344671] binder: send failed reply for transaction 347, target dead 23:47:15 executing program 4: unshare(0x800100) clone(0x2001, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:47:15 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000540)) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000380)=""/70) socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000440)={0x1, 0x1, 0x0, [{0x4, 0x2, 0x2, 0x140000, 0x7, 0xffffffff, 0x6}]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) fallocate(r2, 0x1, 0x100, 0x40) pread64(r2, &(0x7f00000000c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x2, 0x7, 0x8a}) r4 = perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0xfffffffffffffff9, 0xc0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x5, 0x1000, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x0, 0x0, 0x4}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x8000, 0x0) creat(0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc00000003000600000000190200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000300)={'bond0\x00', {0x2, 0x4e24, @loopback}}) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x8010, r4, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x3) 23:47:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'ter\x00\x00\x00\x02\x00\b\x00\x00\x00\x00\x00\x00\xc7\x00', 0x2, [{}, {}]}, 0x48) r1 = dup(r0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={[], 0x101, 0x7, 0x3f, 0x4, 0x8, r2}) [ 252.353716] binder: 9450:9454 transaction failed 29189/-22, size 24-8 line 3117 23:47:15 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @link_local}, 0x10) prctl$PR_GET_SECUREBITS(0x1b) socket$inet(0x2, 0x0, 0x5) 23:47:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000008c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote, 0x1}}}, 0xffffffffffffff96) close(r0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x20195080, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)={{0xcc, 0x4, 0x8001, 0x6f, 0x327, 0xfffffffffffff969, 0x35d, 0xfffffffffffffff7}, "5a313ceb4a07f002d1459155da318db6ab4a927c62af84ddfe7372048f8a1d3eb2f555fdc2573eb6", [[], [], [], []]}, 0x448) fcntl$getflags(r1, 0x409) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 23:47:15 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c12") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 252.495827] binder: release 9486:9488 transaction 355 out, still active 23:47:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:15 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2002, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0xfffffffffffffff9, 0x4) clone(0x2302001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) times(&(0x7f0000000080)) tkill(r1, 0x33) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x88, 0x3059, 0xca}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xffff, 0xb2, 0x8, 0x7, r1}) 23:47:15 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c12") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x3d) connect(r0, &(0x7f0000000140)=@in={0x2, 0x4e20, @local}, 0xfffffffffffffdcb) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 23:47:15 executing program 3: openat$cgroup(0xffffffffffffff9c, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) eventfd(0x3f) socket$netlink(0x10, 0x3, 0xb) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x18) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/create\x00', 0x2, 0x0) signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x3}, 0x8, 0x800) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0xab, 0x8}, 0xc) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/create\x00', 0x2, 0x0) r2 = dup2(r1, r0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x9) socketpair(0x2, 0x2, 0x825, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x8, 0x80007, 0x200020000003) openat$keychord(0xffffffffffffff9c, &(0x7f0000000400)='/dev/keychord\x00', 0x101000, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd82, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400005000000000000d9f1d4282c599f1b000000c7eb714e93b29b13a0d2868132335a007e874d8f13018687283071360b833b2cef0371650412af5cf4c3cbdbe2439a1c695691709396d736d4911e91bdb96ab3996a8a570ba9cba693c8f0454dd15c0a0caa7143eb6ada37451434037c1553c49336f0e2c73c3e9a8646e4007627a08d594f6b2217d3987f352bd185697653055ccc45eef279421f248f6602cb43d95e5457d67fe19b63923286", @ANYRES32=r6, @ANYBLOB="14000600090000000900000000c5bd279ba9d567fb26ebc5000014000200fe8000000000000400003aa4dc40082974dc60c4bc7b67de0993"], 0x40}}, 0x0) 23:47:15 executing program 0: getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ppp\x00', 0x0, 0x0) getdents(r0, &(0x7f0000002840)=""/188, 0xbc) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000014c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = accept$unix(0xffffffffffffff9c, &(0x7f0000002900)=@abs, &(0x7f0000002980)=0xfffffffffffffedc) splice(r1, &(0x7f0000000400), 0xffffffffffffffff, 0x0, 0xb33, 0x0) syz_emit_ethernet(0xe1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000180c200000008050300008787ef9c0531a6caa857083ee9208d9a4f04ef076d553779599caf552931213783c47e71504b0e40c299bf2136e193f717ac7b7f5acddf6fbbf491b584f25d9742ee8c4e6e39d40d73be34fd5e5379b0e848cfda404b48aee2575be595ee233e66253974cbeb273d74516d4c30df744a9cc2fc22d9510213302f56eaf0fceafe4dbf46c8fbc9f0668463023cd02f7c3b0d4f5efaf5220e071d1f157c0460e6bc974bc8766ae02692508155c969b3ee3ac5c7e524b7dc43fa5fd66fe8c56143bb95f5c4520ddc1515addc81f277b435f43d055de7c261289085ec4eef24610c7ca314005bf90e58f681908d4b4bfc41a2deed2e0fbe98800cc4a8e7a8a626cd67c8175e720429adadc57b8bc7eb44a05099b8baee230e614b98c62844443eee22c1b16d9a5f246587916cac4dd65d65b41f41c43f457cc68410a85468ce744dc50869181b1d7ed822264b8ba36edfd98a85b8cc9b08def87475308f5c970bcc2981476475b44e0e942e3b706b06f67d1aa067c11c510c6bbbe67a05358dd703b7d6b3d67be9996d3f7aee8c03"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x4002, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) bind$inet(r3, &(0x7f0000000680)={0x2, 0x4e22, @local}, 0x10) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002b80)='/selinux/policy\x00', 0x0, 0x0) write$tun(r3, &(0x7f0000000440)={@val={0x0, 0xa01}, @void, @ipv6={0xffffffffffffffe0, 0x6, "f04aff", 0x17c, 0x5c, 0x2, @mcast1, @ipv4={[], [], @loopback}, {[@srh={0x2f, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, [@rand_addr="606c722e2948bfce11773c56b22653fb", @mcast1, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}, @dstopts={0x0, 0x1, [], [@enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x80000000}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x20}]}, @hopopts={0x2b, 0xd, [], [@hao={0xc9, 0x10, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, @hao={0xc9, 0x10, @empty}, @pad1, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x28, {0x0, 0x8, 0x3, 0x15, [0x0, 0x1, 0x8, 0x8]}}, @enc_lim={0x4, 0x1, 0xfffffffffffff800}, @enc_lim={0x4, 0x1, 0x3}]}, @dstopts={0x3a, 0x3, [], [@pad1, @pad1, @ra={0x5, 0x2, 0x58b}, @calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0x8000, [0x5df7009f]}}, @pad1]}], @tipc=@name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x5, 0xa, 0xb, 0x2, 0x400, 0x0, 0x1, 0x8, 0x7, 0x1, 0x4e23, 0x4e22, 0x0, 0x1, 0x0, 0x0, 0x1}, [{0xfffffffffffff706, 0x100000001, 0x101, 0x1, 0x7, 0xc9, 0x8, 0xc086}, {0x9, 0xfffffffffffffffc, 0x6, 0x9, 0x4, 0xad, 0x3, 0x7}, {0x1, 0x8, 0x3ff, 0xc000000000000000, 0x0, 0x9a, 0xa, 0xffff}]}}}}, 0x1a8) socket$key(0xf, 0x3, 0x2) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r5 = getpid() ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000600)={0x4, 0x1, 0x646, 0x862, 0x7ff, 0x20}) rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100)) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x6, 0xfffffffffffffffe, 0x8}) ptrace(0x10, r5) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]) wait4(r5, &(0x7f00000003c0), 0x200000000000, &(0x7f0000000300)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) fremovexattr(r2, &(0x7f00000002c0)=@random={'btrfs.', 'user\x00'}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000080)={0x0, 0x2, 0xffffffffffffffff, 0x10001, 0x9}) ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000000c0)={0xffffffff, 0x7f, 0x0, 0x8, 0x10001, 0x100000001}) mkdir(&(0x7f0000002580)='./file0/file0\x00', 0x4) [ 253.155144] binder: send failed reply for transaction 352 to 9456:9472 [ 253.163984] binder: send failed reply for transaction 355, target dead [ 253.178080] binder: undelivered TRANSACTION_ERROR: 29189 [ 253.188716] binder: 9506:9510 transaction failed 29189/-22, size 24-8 line 3117 23:47:15 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000380)='S', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20020102000007) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000240)={0x34, 0x1b, 0x15, 0x7, 0x0, 0x200, 0x6, 0x1a, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r5) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() clone(0x22124000, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x11) wait4(0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 253.197096] audit: type=1400 audit(1553644035.850:49): avc: denied { create } for pid=9503 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_connector_socket permissive=1 [ 253.216010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9514 comm=syz-executor.3 23:47:16 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:16 executing program 4: io_setup(0x3e, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0x7) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) ptrace$setsig(0x4203, r2, 0x1f, &(0x7f0000000140)={0x18, 0x2ad8, 0x3}) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) sendmsg$netlink(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4008004) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x9}]) [ 253.304770] binder: release 9524:9529 transaction 363 out, still active 23:47:16 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0edbeb538145a42c3c4416428a053f0200000054dce0514cc73cb00040efb7ef735f84d8613674d4656d71a5ff6afdbe38914356be79eb17ea"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x6, 0x1, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}, 0x20) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:16 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 253.373645] binder: release 9538:9539 transaction 366 out, still active [ 253.375434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9534 comm=syz-executor.3 [ 253.424315] binder: release 9548:9549 transaction 369 out, still active 23:47:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:16 executing program 4: mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = inotify_init() r1 = epoll_create(0xfff) poll(&(0x7f0000000140)=[{r1, 0x23}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00007a8000)) r2 = inotify_add_watch(r0, &(0x7f00005eaff6)='./control\x00', 0x8) inotify_rm_watch(r0, r2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000d19ff4)={0x84000001}) fcntl$setflags(r0, 0x2, 0x1) 23:47:16 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b0") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:16 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x10, &(0x7f0000000000)={&(0x7f0000000540)=""/4096, 0x1000, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r2, 0x4) read$eventfd(r0, &(0x7f0000000500), 0x8) 23:47:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000380)='S', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20020102000007) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000240)={0x34, 0x1b, 0x15, 0x7, 0x0, 0x200, 0x6, 0x1a, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r5) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() clone(0x22124000, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x11) wait4(0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 23:47:16 executing program 0: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000200)='./file0\x00') readlinkat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=""/37, 0x25) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000002c0)={@dev, 0x0}, &(0x7f0000000300)=0x14) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000001700)={0x6, 0x4, 0x6}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', r2}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/exec\x00', 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000016c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x1334, 0x1a, 0xa05, 0x70bd26, 0x25dfdbff, {0x80000001}, [@generic="84dfd3e9ff60c1d7e886800f1973a18c4c5a5e2f686ba3e14f6e750324506428586639bb189d124b078a3cb88a1e786ed8df98891451a6716794bd0feee0cfcda006009a47d26df88e7856eb7b980b6a0ad7bf721b7ba024310eebf2eb8d8ac0bd109363e1c726602244138f734c70fbf64f40efbdb3f96846838fbddcdf3770dcef81361af11d52454a2519697c", @generic="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", @nested={0xc8, 0x84, [@typed={0x4, 0x8e}, @generic="60c399e10aca1fbbb40ff03397d32c762b4c86cdef6ff7abe7cb458eed3dcf1b17b90098f25bc1ee6f916f2c04315754544ca2e5b67a05b0885ab500aab5ec92c01f61f041e9fa852eb25506d875a0e5394deea17c682d56989f11", @generic="cb58e48e12e3b0a39bc85b912c0b6d0827c1d7e4e664671ccd9edf4f6721285924f50cde5c1d203a52c5b8a5a66b7d1a0aafad5931512f8fbbe7f2c714be41777a2b9b6f950537913a2adc158bf1d1e58a07468234cc8e", @typed={0xc, 0x2d, @u64=0xf5ae}]}, @generic="2573ec6fed9837965e77f89c587e6b5bcdaa8f572f2e30f361f5c420576b8292bb3ed45ee05fc12af2ee17f60aba329243236d2e7de4449986685117b318164fa75c6773f3cbbc35509d900be025455ec3790d86ba81ac402efde2fd7993f1e58f33c38a141fb3691b7b65d05195aa2a2ea50ed179102309b3a481c3be6f98bde28fcda52e52a68e042a20ab2361ecd5210548be3fcdc464baa2e2e03eccfb3a0d45b8e410e3090ded8d046adfa35fe19a5c35b9681bd2a75e9c4fa12de813b2f5595e98271264f870aa57c4dd19a50787b38842aaea019294e4b85b512301", @generic="b546ff67624f0efbdcb7e653b591f3bef95e6672af529296c177c89fd8c91c8940204dd82b77c626da391be7c3a01bc1bd9b8e2996bc71f0710dfc8b00b7c94639ad89e5a04bc2f6f29db214153712a2bce0f101147ca63575b2aac97094f98599d1875f25c43ddc8f72a9043adde97746f898bcf0b0855f35d49a7c55fd69bd265361f1c0867690613b3cf71c6bf8c8e5d9a68ccd946ddd96ec56dd374ddb646d8f1506aeb71a91bbcba935d057821d6f05e83fae06519d0c2b75421da1e41238df926c44efb1416fd2503577e30553d3a621dffe20c6ee26f6c5a091cf730a8839eac07027f40181"]}, 0x1334}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001780)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x5c, r3, 0x210, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x50a}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) ioctl$sock_ifreq(r1, 0x8948, &(0x7f0000000040)={'ip6_6ti0\x00\x02\x02\x00', @ifru_flags}) fallocate(r1, 0x2, 0x0, 0xff) [ 254.002685] binder: release 9515:9523 transaction 360 out, still active [ 254.015803] binder: send failed reply for transaction 360, target dead [ 254.036613] binder: send failed reply for transaction 363, target dead 23:47:16 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b0") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:16 executing program 3: mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x4, 0x500000000000b2, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x100) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x2) capget(&(0x7f0000feaff9)={0x20080522}, &(0x7f0000000000)) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) 23:47:16 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt(r0, 0xfffffffffffffff7, 0xfffffffffffffc9c, &(0x7f0000000040)="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", 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r1, 0x0, 0x1, 0x0, 0x0) [ 254.049576] binder: 9561:9567 transaction failed 29189/-22, size 24-8 line 3117 [ 254.064632] binder: send failed reply for transaction 366, target dead [ 254.090405] binder: send failed reply for transaction 369, target dead 23:47:16 executing program 0: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x17, 0x7, 0x7f, 0x79d0, 0x20, 0xffffffffffffff9c, 0x8}, 0x2c) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000001c0)={r1, 0x0, 0x1, 0x3, 0x59}) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000480)) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) statfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=""/242) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x160, r3, 0x500, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffe}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc914}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x4080) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 23:47:16 executing program 3: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x22) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000080)) 23:47:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000380)='S', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20020102000007) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000240)={0x34, 0x1b, 0x15, 0x7, 0x0, 0x200, 0x6, 0x1a, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r5) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() clone(0x22124000, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x11) wait4(0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 254.133402] binder: 9576:9583 transaction failed 29189/-22, size 24-8 line 3117 23:47:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:17 executing program 4: r0 = gettid() clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001540)='/selinux/mls\x00', 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f00000014c0)=0x9, 0x4) r2 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000080)=0x14, 0x80000) lsetxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U+', 0xffff}, 0x28, 0x1) r3 = geteuid() r4 = request_key(&(0x7f00000015c0)='big_key\x00', &(0x7f0000001600)={'syz', 0x3}, &(0x7f0000001640)='/selinux/mls\x00', 0xfffffffffffffffd) keyctl$get_persistent(0x16, r3, r4) fcntl$setownex(r2, 0xf, &(0x7f0000001500)={0x1, r0}) r5 = memfd_create(&(0x7f0000000240)='o\xc04\xb2Y]\x92\xf1\xc5\b\x15\xc9&!3a\xf6\x9f:3\xbclq', 0x0) pwritev(r5, &(0x7f0000000200)=[{&(0x7f0000000280)="3c78f5eb2f8d7b28c90c063958a4dc8c4a62201581a50a6a4a70f636828b62562b682520a779253538ad39453a7793126c8ecfcf9cd6c3eb1f90a2fc9ffac8c26af39aa5e1d5199713311b7d95f97ae6817d484fbc9344d1ea4fb950db927dd563e2fe5482349869e1744f53683ba9e527728df5cb6a", 0x76}, {&(0x7f0000000300)="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", 0xfa}, {&(0x7f0000000400)="4801eadd6f20613cbc24416386e6c704980cb8cb622d4d067cc323eb450859b7d7e398f38a61855e11f44da0036e855edef3a9a382b8241ed92def1c9c032e2683b31763ce046de33c23fa40d13a5489aa75df8321", 0x55}, {&(0x7f0000000480)="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", 0x1000}], 0x4, 0x0) write(r5, &(0x7f0000000040)="06", 0x1) symlink(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0/file0\x00') ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0xffffffffffffffc1) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000001480)='trusted.overlay.origin\x00', &(0x7f0000001580)='y\x00', 0x2, 0x3) sendfile(r5, r5, &(0x7f00000000c0), 0xfeff) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 23:47:17 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0xc002, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000600)=0x2c3) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x0, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x100, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x1, @mcast2, 0xffffffffffffffbb}, {0xa, 0x4e21, 0xfffffffffffffff9, @dev={0xfe, 0x80, [], 0xc}, 0x1000}, 0x7, [0xfffffffffffffff9, 0x824d, 0x1, 0xc7, 0x8, 0x2]}, 0x5c) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000640)=0x4) clone(0x70024100, &(0x7f00000001c0), 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x1, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x4, 0x0) ioctl(r3, 0xc1, &(0x7f00000004c0)="da7d4b86c2818b75c47f9771d213aedc1cf42145619d6d4f3d64117bf61b5127ad7af6959693156c7711fe75eabf00799280241f1e5aad27d1f3ba517f4aadabeadf5f1953569ed70cee0b91162c85a0e14e7b79821c0ba0b136b09e") io_setup(0x4, &(0x7f0000000080)=0x0) io_getevents(r4, 0x8, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f0000000040)={0x0, 0x1c9c380}) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000200)=0x47, 0x4) pipe2$9p(&(0x7f0000000280), 0x80000) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0004250d000000180002000400949faef46867a5bc0000080002000100000000000000000000000000000000f8b75eb324bed7a97b483071459f880deecde3b5762d8a1f49be71f8d385c6c9a4fcb7dd8d3c30928cf7a1cda1c786b1b5269666c4cb67338f6829903a6a29bc9861f7b0bd7a46d75c34f1bb60ce234de81ac1670396491a5ce786df6733f02920a615b01741c455d9b5f8ff9af7eead4148e84b922298a0464bea1e441ea78f4f2198230c9c19fb1e28e6399c76b982e7779ee3a3a592cf3c703dbe1dbcc5e4ef925e9e6cfd03e6e5b4a2c9d65471b03b4e012d75dbbbf3f04c389d9d703195142794ef6992efbcaf8c63eba8e5d1140f651d15f392f31469dc7bd6f77a4bedd072a3842c6cd076d3fa97a58aa2c1605bbcaa671694bfdb0e60dc7beebe66b57aeed589d3db9f5d2c093a3d955918625725f74519c7b9beea171838f6ad04a65b2280f2470c2ddf7fa37b36478738236a0f6a5c7eb49273a399d570ad76f451362196ea955f6bbc8dbe512b8f168f89741150433d723ce49c4785fa76bf04c38acf4fefc0bfb38f82"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "83d98e", 0x3, 0x11, 0x0, @remote, @ipv4={[], [], @multicast1}, {[], @icmpv6=@ni}}}}}, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000240)={0x4, 0x4, 0x7}) fsetxattr$trusted_overlay_opaque(r2, 0x0, &(0x7f0000000780)='y\x00', 0x2, 0x2) 23:47:17 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b0") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000100)={0x10}) r2 = epoll_create1(0x0) r3 = getpid() fcntl$lock(r1, 0x25, &(0x7f0000000080)={0x1, 0x4, 0x81, 0x3, r3}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x102, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) setxattr$security_smack_transmute(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x2) close(r1) r5 = getuid() stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001040)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000001140)=0xe8) stat(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000001580)=[{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000400)="10ea2ebb22f7f20befae02c3133e39b696a4d0c1cfa2cf304116246a649af5a2527aad628835fd0513edeae65fe23d", 0x2f}, {&(0x7f0000000440)="e1301d6e35ce1c4651f27c03d8c6c14f4a260e356ba166813b28af8c463d7e6e5bcca34c5e99ff149906500cae43390ef67595d0a9e238f7fce41b4ccb56005fd2ec1c7c769b2204207633587fed44d62e72f970107d775966094942ca6102b497c78cca42415eb40677396a5a57e1f7c2dceb2b53ed3ccbd3c09fc63e2fefb9cc844ca72ee5505df7252dfbbebf5c29fbb1dd3c099ed6f04ab5afa0f956846b06426c12e658f60b36faf5137fba88b89bf475ff9663cb5c7364c12a83fe589cf6ddd2bd162ca058e501e84b256d302ef3db5e87c953ba8e3c412fa873c832abe45c37d382cfce53", 0xe8}, {&(0x7f0000000540)="ccc6193d147b4e67a850a412ccd55424c85163fa2bad309cbec8208c2d16fc8da8164ef5a0ba5c0e87ac187b0367660cf1370893c52670dd39a2946f651500c797872372a2733e54f66c96310ff718ebcf3e5e8a3508f7eb646b9ca28ac1a069814b08ceb70b73ea967679f1a11277d1b357a2fcb54c8b99853450160352805c07e333", 0x83}], 0x3, &(0x7f0000000700)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r3, r5, r6}, @rights={0x30, 0x1, 0x1, [r4, r2, r2, r2, r2, r4, r4]}, @rights={0x38, 0x1, 0x1, [r1, r0, r2, r1, r0, r0, r4, r2, r4]}], 0xa0, 0x40011}, {&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000840)="67bbe6597b10af1e823c5a6b3a45db13", 0x10}, {&(0x7f0000000880)="a2354f1d63076b7b268ca0cc6bb532cb2e47eca0ea1d3417aea011588defa122fce85bc5196271a6cffef5ba750aa07c1109bd96c1986118fb2147f2c2804968d04592427129283f004d1dc7426343e02427adad56795cb2e07190d93898902de86a7f8a8c702083a600cef0b0e828e11f6593bf43948e7baa7918f146dc5ac005269bd2522c010ca34462a29e76f71e480471704a3d68dfe27340e3b404a55ad5b0c040e258668ba3132f9e0cf7f1939405a644b5a4e3c4c4b8af85e8b04c8a83afaec1de967ef726c9ac4c2e90", 0xce}, {&(0x7f0000000980)="73939eac3dbf82d8fa08467a07283cdbcdf2586aa4118f66aec162adeedaa5047df129ac08f35706b41ae802c144f8eff75101fad431dd53c2beb1e156455db5fb2b5a545efd7ffbe1145968602a3261911348144edf5f9aadf8ae4f6ac15e392989b3aa1a4bbdcc3d2e24ae5169274665c44bd303c8098cc353f3d71eb81ceb9f13e5b475acf5051a8a324291cbeb30c83a7a82ab9e2503436cbc8768344ef508f7aca089fd", 0xa6}, {&(0x7f0000000a40)="f66eab0cf7b08d38e19627a9a080b2b20dde17b7b99463999601e753f39993c6b70516dccaee8adf3580676228371e41fe75ebacf00ac671534b0183c2e8d6ace2e7a97fe1870a0df747562d75971b66b565d2734ad2bfd4c6b2135ff385da5a0c569f017a5c270124c9b68072ef89adb997560432f6c423b367a3a97ccebea5e8cb36c40d442a43131fda184dbec1b46e583c1c34762f576fde35af309987eb5a8717ccba77929fa1f1e06bdba0a64a983f9679e70ae8ee28f8badd765f31428e623c4e40590004de6b790562407b8a443e8b6937c2a35714e3cd0f5d3444d19e67cc21ed5b513abd76ec1ff0d381a6e6f6e7755c", 0xf5}, {&(0x7f0000000b40)="692598b6c24cc5159cf9ab288b313751cd100e122fcdc78faf6b794b", 0x1c}, {&(0x7f0000000b80)="4acea32f88c29ba2faa5cf5e611f89d9f5dc082a1092f4e6b18dfa6959bdee15388c8cfac31509a9ae1a360e7bd9d87445fbe0bb220769e8a59d92d0d26101ed9dcd3bdbe5a81f103458fc412c344ff85aa618de156b96ca3dfcabcc971fc26098716f071f5f5462c9906d9cfc5f07a7856395c0093420e1ee44f5c32858a14ad087c9c3bddd1277713a570989a7b826de194e74b3a6566334388818098260ea263e4e2f9feeb49aae901247beb5c2d7db47929ccc6ddc0ef2a5", 0xba}, {&(0x7f0000000c40)="f444d7f12e8a736d5c68f496734600d06227baf4580f", 0x16}, {&(0x7f0000000c80)="b1f6028380bd127fa2567c9411d4e99eebb496ff4f5612a7bd8b46657d7377165cfabec3ec646d87c45bc005772a5acffc0af6b35dbde272d06e7e96a1a6f8924e5ff6ed7cee177d0a29edda907dd705980e70e3d08b3444edb750b20e3799e8184d166aa19f43c9cfe16cf19b69b9eba15ede13489fc782ef39ce34f4e57c665bd21e126fb3fbc198e98f5b8e6cd1aeff5d814213879785aaa19619d9d22f567d96603f7c1a8c072679fad0651982f10bccc4d6ed75a5b062af4218def63954f8792cd60ccb535b668cec902cad683981b0708ad88a9266a9620ff0f5cea18e77625346e7177ab579e68a42ea", 0xed}, {&(0x7f0000000d80)="2c82f7bedc005e5b1e88ea1108a3c02c1e1c63efaf633447917f2ad28ebee798749c508a9a4c77891141f76e757db08945354dd596c83e1d90acb33e205aead7479f8820ff3aa4c687c9392c7f7d8c9a4a874e343fc7f5a51627836263b1032cd720fe5dba9edb72cf45e763c7b06daa873ff567cb45e72e770a20754ac5f9e6ae2de91016ca2a740120ae7c00ad9986b3300e4a8c9329d03c3a", 0x9a}], 0x9, &(0x7f0000001240)=[@cred={0x20, 0x1, 0x2, r3, r7, r8}, @rights={0x20, 0x1, 0x1, [r0, r4, r1, r1]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r3, r9, r10}], 0x78, 0x20000000}, {&(0x7f00000012c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001340)="1ac6ec810458ffa5ee10b4d4c580d2a39057bbf8380bec6d6f98794742643efca8d5d9a3a3ced8743880469d146b6524f4c6601d547d01f46cf346dbecc7c6e53944c471152ee89d79f7c49fecdaf58ee0fa95350f291c600a80921a629eb523daa37e1bcd1d7dc94cdaf838b14f595f1d3f44bdddeda5b9bd709ee9", 0x7c}, {&(0x7f00000013c0)="e06cf1d5748351eecfc12526a65a7d9591a9e46c076f06f93ebbd0aa175c0ff777fe43f3dc884eddaf886856145da497d50594bb06e0b1323deb953c5aad8500851797523691c1c346e85d10444572c14ab9c4b2f66d", 0x56}, {&(0x7f0000001440)="6b337163712afa2b843f40dc14fb988ce31dc17140f1185c8401c0a3eef454f65d5bad50266bac8c52816fdb70eb9dfb57ceaf3985e67b0640f0b36226b4bbafe707eeab0e1a794bd06663864c9371795affc527af7be5ef6d32ad63350a783a832875143fa3e3c7783aae78970af7e77fafde81f587f348dcf720c4d0704c70888aff676018f912f2cfa9f86a57bb9b8bdd0e5002fb125273643ecb93562fbfc1ba4f75e93b948fadf3d50dfbfa7e516dfc90f9d39922f5688df0101949d8b709eea4a433f4c71ce0de2433fc151c21c21e345b1b89e617765cfe92b7fb1d23", 0xe0}], 0x3, 0x0, 0x0, 0x40}], 0x3, 0x4000) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r11, &(0x7f00000000c0)) write$UHID_CREATE(r11, &(0x7f00000002c0)={0x0, 'syz1\x00', 'syz1\x00i\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x1}) [ 254.866766] binder: release 9569:9585 transaction 375 out, still active [ 254.883973] binder: send failed reply for transaction 375, target dead 23:47:17 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x81, 0xffffffff, 0x10000, 0x100000001}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000380)='./bus\x00', 0x141046, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x5a487b2a, 0x400056ff}) fallocate(r3, 0x0, 0x0, 0x5) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x9}) 23:47:17 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 254.919546] binder: 9611:9619 transaction failed 29189/-22, size 24-8 line 3117 23:47:17 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', 0x0}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x1f, 0x12) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1) clone(0x40000, &(0x7f0000000000)="2580704a385f6bd83ce9cf66cfd5670870335a375a70c02b7097967339cd51ba2c65fbb24b6780a61df97f9d86efe733ab5f6e0740af7e", &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)="0d8ad1ba0e02208942359425ba391e92ef1967f532a0b1d3f12e030e") 23:47:17 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x1, 0x1f8, [0x0, 0x200001c0, 0x20000358, 0x20000388], 0x0, &(0x7f0000000040), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x40, 0x600e, 'batadv0\x00', 'nlmon0\x00', 'veth0_to_team\x00', 'syzkaller0\x00', @dev={[], 0x18}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0xff, 0xff, 0x521b8413179aaf8c], 0xb8, 0x138, 0x168, [@ip={'ip\x00', 0x20, {{@loopback, @dev={0xac, 0x14, 0x14, 0x21}, 0xffffffff, 0xffffffff, 0xfff, 0x3c8da6ab9b03c9eb, 0x10, 0x3f, 0x4e23, 0x4e20, 0x4e24, 0x4e20}}}]}, [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x2, 0x7ff}}}]}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1}]}, 0x270) fcntl$setflags(r0, 0x2, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x3f}, @sack_perm, @mss={0x2, 0x5}], 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)={0x0}, 0x10) ioctl$TIOCGSID(r0, 0x5429, 0x0) fcntl$lock(0xffffffffffffffff, 0x27, &(0x7f0000000100)={0x2, 0x0, 0x1}) syz_genetlink_get_family_id$tipc(0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000140)={0x0, 0x0, {0x0, 0xecf, 0xfd92, {0x9, 0xc1}, {0x0, 0x1}, @cond=[{0x8, 0x0, 0x9, 0x6, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, {0x52, 0x6, 0x0, {0x8, 0xfa2}, {}, @rumble={0x48}}}) mprotect(&(0x7f0000564000/0x4000)=nil, 0x4000, 0x7) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) 23:47:17 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 255.729476] binder: release 9618:9634 transaction 380 out, still active [ 255.743962] binder: send failed reply for transaction 380, target dead 23:47:19 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x4c1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x1000000000, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="f2fa2d02018bdc401ae13f09709635510d894048522491f25b6e38d74a72b63a44d0bba7b7e5865fc09d4d1863e81a85bc5360029ec75641f10e016d7ae759a5fff5d4bf45c2a86a7df3c0d37769f3b400302ead567a2fad03a1a863c7fe8e235aa287038471c0e14fb6ad8da4ff38000000000000000060842094480e86f1efeaf14eba4eeb9a478bb24a475ff65fdda7caac0cf473533855a8"], 0x2d, 0x2) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="b499cd807490dc6cd4eb82c2c635d753cc4e6d4fc74e3e9198974be559b148e6efa117f629fc08363aa98a3332259158b8a82fd064f0adba62a0f533c35475ea669a0863218858dfe30066d84185a952709cd3efb17a2564e5631d2e5b3402cf693165780d1c75bdc77f5de9e5ac1ba272aa628bce24ce79a376c89459966eb2850c4f60d3ac7d1c11d6ba70fd4f72f72c40d11ba9ada5cec4f9801439ee14b136f55be377b4dc776d48c282c7fcd70ddbe8445802fbb8600665d89fbd4e3d97be8fe5f30f8df14d1af7f04645b67174b25ae2217c703d36841408e7ae81") 23:47:19 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 257.199994] binder: 9662:9664 transaction failed 29189/-22, size 24-8 line 3117 23:47:20 executing program 4: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000a40)) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000580)) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800000000000, 0x0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x200327da) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write(r1, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x2001, 0x0) fcntl$lock(0xffffffffffffffff, 0x8000000000000002, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f0000000040)="f14e548aba59b03a86d6b837614b183917d72d10e923f95e83d239903642ad5c0700d29516757bcd43803dcf9e", 0x2d}, {&(0x7f0000000200)="99f66274df0a640b5b07f73cc10e2d6d4dd0c7feff70298bc7048b31a14e993f71b9e1a0a4f3bd2aa0f6c9b9e904b94a3f6f4db94fe4e2bd634521fda1ab8c4a4debb8b725df06e8190364c5986a7c4292489db0055f193108b09811089584ad828dfbcf9d108800cfe8df9be921ba35ce6a89f4e036267241c3b71254e2decfaf21f179eb201067dc91440dc5a00f78f2f9904dd0ef41d41676c4524b5df1af89069f153f5ea7ac15fae5e3629ff353ee857a63c29d37c09d6a9d196092ab4ebb98e2eac259a9432e396cb8f11cebd28d7607ee9a", 0xd5}, {&(0x7f0000000300)="99ab11978218fa784fbc8cd19934e502e99e16704d465d8b06a9c03c20d01682155e154d3e40bde0e40fb89455d66759891772597036278ee231a9d195d7bf25f70a768fb2ddacec0ea2c7d67efa122b6d452fbd2d9719f05a5726bdffc38fc8b0a590761cdbc92c7687bdbe8348bbbff7c2eab40545723ecd6011d4c165e384738a44f9eab2719db950add1774d3133528ecc6ef421ce514be403ef9f38b62ae0ac0c7da74a38703ea1980d9f51937771214fe848caf1873aea8e3d007b64c83dc6a28782f72e039fa99975141a4b6418a7d0b98ee86e60a82786dfee07285a932ac173f50042037df94a27ffd62f1509f6620ee0", 0xf5}, {&(0x7f0000000080)='5', 0x1}, {&(0x7f0000000100)="5016b633e7cd0d2d16be427ede02bcbacac7c75b07", 0x15}, {&(0x7f0000000400)="8449f32da5a237c9f1de6866dec3a64701ffdf17673de4fdad7e3bc04014fcfe26d1e02424fc700f7eb70c955126ccf590f4dd6526cdef497486ab7d394afd724ec60a9d3a632d82", 0x48}], 0x6, 0xa) 23:47:20 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x1, 0x1f8, [0x0, 0x200001c0, 0x20000358, 0x20000388], 0x0, &(0x7f0000000040), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x40, 0x600e, 'batadv0\x00', 'nlmon0\x00', 'veth0_to_team\x00', 'syzkaller0\x00', @dev={[], 0x18}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0xff, 0xff, 0x521b8413179aaf8c], 0xb8, 0x138, 0x168, [@ip={'ip\x00', 0x20, {{@loopback, @dev={0xac, 0x14, 0x14, 0x21}, 0xffffffff, 0xffffffff, 0xfff, 0x3c8da6ab9b03c9eb, 0x10, 0x3f, 0x4e23, 0x4e20, 0x4e24, 0x4e20}}}]}, [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x2, 0x7ff}}}]}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1}]}, 0x270) fcntl$setflags(r0, 0x2, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x3f}, @sack_perm, @mss={0x2, 0x5}], 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)={0x0}, 0x10) ioctl$TIOCGSID(r0, 0x5429, 0x0) fcntl$lock(0xffffffffffffffff, 0x27, &(0x7f0000000100)={0x2, 0x0, 0x1}) syz_genetlink_get_family_id$tipc(0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000140)={0x0, 0x0, {0x0, 0xecf, 0xfd92, {0x9, 0xc1}, {0x0, 0x1}, @cond=[{0x8, 0x0, 0x9, 0x6, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, {0x52, 0x6, 0x0, {0x8, 0xfa2}, {}, @rumble={0x48}}}) mprotect(&(0x7f0000564000/0x4000)=nil, 0x4000, 0x7) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) 23:47:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000440)='reno\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0)=r1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802123001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000d40)={0x7, 0x10, 0x8000000000008}) setxattr$security_smack_entry(&(0x7f0000000380)='./bus\x00', &(0x7f00000001c0)='security.SMACK64\x00', &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00', 0x46, 0x1) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000013c0)=ANY=[@ANYBLOB="7d1fc4a43bfbae6fc9fea32dd18742b9ee469c4c1e56e9c8b22eff63bfd53bd9b54f7d6621812070aa3ed7714bdc16c13520e705c9290dc569dfcb330262532ebf8c64053c2997951777942cc164627a30e3be741a9160f0591b060089addb55e1c0af02000000000000cf89fb51cd42dfabe96fa1de99ded786ec6abd654a5f0872fa0d3abd51c7b4625d55ab53c3d7009080af9ec6c82fedfc4ade431ffccb604dfe71b276f19ccb7daa9a1dc00710d8f8aa40395374ab85226babf54fac010c95ce294d519ee921e861084dd97816c06639b249b293f84768276947f20318eeb8bafdf701fa6273e9f1a424581c513907000000"], 0xf5) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@local, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000b40)) stat(&(0x7f0000002040)='./bus\x00', &(0x7f0000002080)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f00000003c0)=@kern={0x10, 0x0, 0x0, 0x2}, 0x2d5, &(0x7f0000000500)=[{&(0x7f0000000e00)={0x10, 0x37, 0x404, 0x70bd2b, 0x25dfdbfd}, 0x28c}], 0x1, 0x0, 0x378}, 0x20000001) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000014c0)=ANY=[@ANYBLOB="7f454c46fa03a309090000000000000003000700050000002f000000000000004000000000000000b103000000000000018000000400380002000100aa00000000000070400000000200000000000000070000000000000008000000000000000300000000000000ff03000000000000ff01000000000000ca1c6c7dc8f5056ec278239aeb8821279d87cc1c23e400149664ea375bf022d6364409f67dc42501fcfb55a0bad0509cf747c93aa970457600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ca3e9f3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004314fdb0009a3e9848931ab5dfa500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e97c0334b4f7b9a69e7b29c4ed80108c36dbe3245b3253af7e35589958dbc42d806256a715a8f22fe759814b61c9b73174c86c25dd3554b80fed2513feae43d3efef99241aa08238f90fe36259e63881ed0610d8075a15b32896a52b7a576c85341c0d9c6f15dc5da8e0dd06d8df6b2ed8b266994e2d42a048b7be40833dd75841a4823e2fff81c21472e9996b44bff67038e9dc433235c3ff1c394e2798dcbc9c626a656e70e10a298afecf512c633b76fcd0cb88256714c05d6cae3c228ca23f488120501ca381bacd766d602e7b3da4a1dd123341f294bf4b9"], 0x48b) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000280)=""/239) r4 = request_key(&(0x7f0000000dc0)='user\x00', &(0x7f0000000e40)={'syz', 0x3}, &(0x7f0000000e80)='wlan0]\'\x00', 0xfffffffffffffffd) add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000940)="8b13299926f6b1dd3b2295a24606836c2706428fcc6002f7ddc62773de1f69a180a476bae0e2268b38a7ee354efa6668f7e50367697568dd5a64ec51c32041118d56f61672cb91385af5759266c399360e6f3b007da7ce3323313a42eb4bb6005b080cd88abab8234ebe59e67b12e0c74e427c29b4b6a08fe5743015fc949c09adbf5582977889e11ef9df4903141b2b4ee281756b2b42fc399b77006943fd5e4f028d1aa88e0d36591a30cfe89d682ae4a2f14f7f0f11f270eab148362202", 0xbf, r4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:47:20 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:20 executing program 0: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000000)={0x7d, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x1, 0x2, 0xfff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x0, 0x2}, 0x20) 23:47:20 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 257.912925] binder: 9669:9677 transaction failed 29189/-22, size 24-8 line 3117 23:47:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r1, r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x8000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$packet(0x11, 0x0, 0x300) r5 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x38) ptrace$cont(0x18, r5, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x129}) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) pwritev(r0, &(0x7f0000001b40)=[{&(0x7f0000001ac0)="1767e69e73c5f75490930dc386445da9bda15ba87b5315a72718", 0x1a}], 0x1, 0x0) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000400)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x40810) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xffffffffffffffed, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @SEG6_ATTR_ALGID={0x0, 0x6, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 23:47:20 executing program 3: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file1\x00') r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) fchdir(r0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb1117befe51e9989) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000000c0)=0x1, 0x4) getcwd(0x0, 0x100000106) 23:47:20 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:20 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001300)=0x4, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000001340)={@ipv4={[], [], @remote}, r2}, 0x14) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x210, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946f9eb406da200a0009000000001d85680c4fc9633c4b6624", 0x24}], 0x1}, 0x0) [ 258.042890] binder: release 9689:9694 transaction 389 out, still active 23:47:20 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) close(r0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x808e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0x5, 0x5793}, {0x44b1, 0x4}]}, 0x14, 0x3) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x8000, 0x8) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000003c0)={0x8000, 0xffffffffffffff91, 0x100, 0x8000, 0x16, 0x100000000, 0x100000001, 0x7, 0xe62, 0x3f, 0x1f, 0x6}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSETMODE(r4, 0x4b3a, 0xfffffffffffff72f) unshare(0x40040300) fcntl$getownex(r1, 0x10, &(0x7f0000000640)={0x0, 0x0}) perf_event_open(&(0x7f00000005c0)={0x5, 0x70, 0x2, 0xffff, 0x34a3, 0x35d, 0x0, 0x9, 0x4000, 0x8, 0x400, 0x0, 0x7ff, 0xfff, 0x2, 0x0, 0x1f, 0x9, 0x1, 0x400, 0x2, 0x41, 0xfffffffffffffffe, 0x3, 0x9, 0x4, 0x800, 0x6327e3a0, 0x6, 0x437, 0x7fff, 0x100, 0x100, 0x400, 0x9, 0x5, 0xfff, 0x7fffffff, 0x0, 0x20, 0x4, @perf_bp={&(0x7f0000000580), 0x4}, 0x4000, 0x9, 0x2, 0x8, 0x3ff, 0xfffffffffffffffc, 0x1ff}, r6, 0xe, r4, 0x1) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) write(r5, &(0x7f00000001c0), 0x100000073) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000400)=0x8) read(r5, &(0x7f0000000480)=""/250, 0xfa) ioctl$TCXONC(r2, 0x540a, 0x3) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10054}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000bb580000e7000100240200000800010001efffff0700b6000000000000000000000000000000", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="0000002ba88ff9623d29b077fc067e3f6993033f0ec4a1d82c115a1c405d66a591f61a7a6721da4b34472524061e7257ec3d93e81a2bc3326364c20b8171b84d56ab208fde812bdf16a7bed0a99ea858a829fe67438fedc9854763dbd02af1b6"], 0x34}}, 0x20000001) [ 258.161901] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=9708 comm=syz-executor.2 [ 258.212293] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.279727] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=9708 comm=syz-executor.2 [ 258.293206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.717983] binder: release 9670:9691 transaction 386 out, still active [ 258.737583] binder: send failed reply for transaction 386, target dead [ 258.756906] binder: send failed reply for transaction 389, target dead 23:47:21 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003640)={0x0}, &(0x7f0000003680)=0xc) r3 = getuid() lstat(&(0x7f00000036c0)='./file1\x00', &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() fstat(r0, &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() sendmsg$unix(r0, &(0x7f0000003940)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003580)=[{&(0x7f0000000100)="6ebd8e613f0b2d85a8e25d635721aa65f682619578df8c5ae7f1810ff7bc921ff093d4153e72f2a2b41c06647dcca28b3af1fe3ac14b3d5a9fd52d4b5315b1b8d84f1296f0eea4f724ef7708f84373c6aa95b035106d07ed2b5e264871d8c009b7f1beed8e232633d636607d92c52cdbd3cd263635776e4f8daa0b9bddd2ccd345a576f87d3344b77728998b7e60c4a608e7f553ce9ce2a0a79be43fd82ade2d5d90d1209bbc07e7336928fa3bcebedfbd117bc66adb2ebc8ab8567b45294b", 0xbf}, {&(0x7f0000000200)="493e595ac635c6b616311e381996cad866d0d7da88c489e0f87b3771b037740776aa1ce1e5dd72aa9b589f16b28e02bf057afd3edd016bc89d4c684902fa79e2b4042e613657cda754cc473d689bec05d67fbb9732ea856b722513fcb22182d14b8d0cff9c4ade30ad4007b9a64624360612e39f84c66419ff8bd708109c75ed639cf311f80ed2ed06619e", 0x8b}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="31e986ac4aed76e3c2067e898db1e6994838a055c3a4c38719bc7f2f77a646d23c58348e8b4bf505bff53d6072a3553c0088d83590fb7e9e926c2e7c4e517a649f7a9761616c75f97dd9bd5fd881beb64387b70bec1b", 0x56}, {&(0x7f0000002340)="f99099361b01b87ac33bc0b536f90f3a0ef96ee918ec1a989597961947ff8a1abd660c151bb017971c368f823237638464adf630b6c4204aec2b97a27bd62b5131aa605c3ac3a067d9b9592e2961f9166aea028c13be5fc883b7ecf4d10c48f72bad69116e6788ff24b92d0c055733e8bb9b71e2ac7bf1a6288f00cfd8be68916be314063d75f8f8526b7b9a7c6972765332664dcd4247b64d676659a7077659373af61e583d05e2bbea8e0c4c968b421b5da66e45221d50383be348dc75086cd8a569c432f66ae72a23e34ab8a4f0ff6238a55b113c55c2eba210378d91211f043226", 0xe3}, {&(0x7f0000002440)="b0d6064d16dd4016764ef0f41aed7b1b18ea847b450c32e52ccb622ac35e69ec28b36fa7d698663e4055aa2b350005fee2bbd4968096ed5af71ec62ef92605d221493126b3d7aba1844e3f", 0x4b}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="d1a27c5bb8355bf56952bebb040f2e0dca63e70aa2120624b17a473085d06479b171903af5bc8e7fa1167c3baf4a9002c36e672acd4b4977a229ea403185b1d179af72de69a7ed046ccd5f41d98e520a3823b8116c49c98210df8f513fd7c3de3658099a4a593cc77a998e7951729850ad2f33d90c380bb25b596ba78d0098bab63fe86e483bfccdac82aab00b50941b85de2c57dffef5c84663e833", 0x9c}], 0x9, &(0x7f0000003980)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="20000000000001000000000000000000f4fd18e794c084ccb7890bd001995ce64ed487ade650db98c7e9a1c59cb9e320653e85d1d519a9ebd981231aa8d7b074dfb38f5048a6f13dff114daa35b0c6dec344402ca2351eb4678ae57cb70e8bc578f61d2fb3", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x4000000}, 0x4000010) unlink(&(0x7f0000000040)='./bus\x00') 23:47:21 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000002c0)={@empty, r1}, 0x14) getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f0000000080)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x81, @rand_addr="6657e77e468ce4205d779d2daa7eb4ae", 0x6}, 0x1c) 23:47:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000001c0)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x80000000000003, &(0x7f0000332000/0x2000)=nil) r3 = fcntl$getown(r1, 0x9) get_robust_list(r3, &(0x7f0000000380)=&(0x7f0000000340)={&(0x7f0000000280)={&(0x7f0000000240)}, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)}}, &(0x7f00000003c0)=0x18) 23:47:21 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:21 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x808e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x40040300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) signalfd4(r0, &(0x7f0000000080)={0x1}, 0x8, 0x80800) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) [ 259.672650] binder: release 9731:9749 transaction 393 out, still active [ 259.680355] binder: send failed reply for transaction 393, target dead 23:47:23 executing program 0: r0 = memfd_create(&(0x7f0000000240)='o\xc04\xb2Y]\x92\xf1\xc5\b\x15\xc9&!3a\xf6\x9f:3\xbclq', 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000140)=0x2) write$eventfd(r0, &(0x7f0000000100)=0x8000000007, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000180)={0x9, 0x7fffffff, 0xffff, 0x0, 0x10001, 0x4000}) sendfile(r0, r0, &(0x7f00000000c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x20000000000001e2}, 0x10) 23:47:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:23 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], &(0x7f0000000180)=""/216, 0x0, 0xd8, 0x4000000000000}, 0x20) signalfd(r0, &(0x7f0000000280)={0x5a94}, 0x8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6032, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x13c, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x272}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xadfd}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5573}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x44, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf3b}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffff9112}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffc}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24008800}, 0x20000050) sendfile(r1, r2, 0x0, 0x80000001) 23:47:23 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:23 executing program 3: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pselect6(0x2ca, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='posix_acl_accesskeyring\x00', 0xffffffffffffff9c}, 0x10) r2 = getpgid(r0) fcntl$setown(r1, 0x8, r2) tkill(r0, 0x5) ptrace$cont(0x18, r0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000140)=0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffffffffffffe, 0x1000000010, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 23:47:23 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000058c0f184c303c8909e557bdb788d79da5fbd8969481f6ca98fa51909e6f521ccb6c6adc803236adb358f32c246c47d98c8308eb17f8c9533"], 0xc) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) getsockname(r1, &(0x7f0000000140)=@x25={0x9, @remote}, &(0x7f00000001c0)=0x80) socketpair(0x0, 0x6, 0x1, &(0x7f0000000040)) 23:47:23 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 261.257168] binder: 9765:9768 ioctl c0306201 0 returned -14 23:47:24 executing program 3: fstat(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r0, r1) mknod(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:usr_t:s0\x00', 0x1b, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@in6, &(0x7f0000000140)=0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e20, 0x3, @mcast1, 0x6}, 0x1c) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040)) select(0x2ee, 0x0, &(0x7f0000000140), 0x0, 0x0) 23:47:24 executing program 2: openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 23:47:24 executing program 4: capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000300)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x341002, 0x0) getsockname$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r1, &(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc) [ 261.345475] binder: 9779:9788 ioctl c0306201 0 returned -14 23:47:24 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 261.407427] audit: type=1400 audit(1553644044.070:50): avc: denied { connect } for pid=9794 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 23:47:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f00000000c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000180)="7933c0156a35b6f49a0ec0d1b8e66f13fa18d6515f03bb246bceda26ebdd931fa884dc453a50ba90864b0dd0dc4d35a0a00a7e7f3e15c07ceb5a110bee4769ce51ab84bb3fe924493a68238e6c921926187b0ec1682b466ce993163a8748b6584ad7ca30f83c3a2ff71fa311e6f272a4c609c91ef4dfbd93199647c45f6f11d183b5846a1d470800896a4d80442b53a54e8b052814e3ae") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f00000003c0)=""/123, &(0x7f0000000440)=0x7b) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x21c64d44c02be03f, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x7) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x420, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 23:47:24 executing program 2: mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='bpf\x00', 0x10000, &(0x7f00000001c0)='/dev/uinput\x00') mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x20000000000000) fcntl$getown(0xffffffffffffffff, 0x9) setpriority(0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 23:47:24 executing program 0: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$smack_current(r0, &(0x7f00000000c0)='\x00', 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000140)=0x73, 0xfe37) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) 23:47:24 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:24 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x2d, 0x2, 0x1, "8bdc401ae13f09709635510d89404852", "24913a44d0bba7b7e5865fc09d4d1863e81a85bc5360029e"}, 0x2d, 0x2) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0x7, 0x5, 0x4, 0x2a, 0x0, 0x9a, 0x6, 0x100, 0x1, 0x2, 0x9, 0x9}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000100)=0x1ff) getsockname$inet(r2, &(0x7f0000000180)={0x2, 0x0, @empty}, &(0x7f00000001c0)=0x10) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) 23:47:24 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:24 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x100, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioprio_set$uid(0x3, r2, 0x5) io_setup(0xa14a, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r4 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000002400)=""/4096, 0xc8b7) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000300)={0xe0400000000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)=',', 0x1, 0x407000}]) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000040)=0x1, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0xa040, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 23:47:24 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) memfd_create(&(0x7f0000000000)='\xc8vmnet1\x00', 0x5) getdents(r1, 0x0, 0x0) dup2(r0, r1) 23:47:24 executing program 3: creat(&(0x7f0000000240)='./bus\x00', 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) [ 262.057364] binder: release 9762:9783 transaction 397 out, still active [ 262.071526] binder: send failed reply for transaction 397, target dead 23:47:24 executing program 4: setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) clone(0x200000041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x1d, 0x39, 0x7, 0x1a, 0x3, 0xfff, 0x5, 0x132, 0xffffffffffffffff}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000002c0)) ptrace(0x10, r1) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000180)='threaded\x00', 0x9) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x6, 0x3, 0x7fff, 0x100000001, 0x0, 0x7, 0x2000, 0x4, 0x3ff, 0xfffffffffffffffc, 0xfffffffffffffff9, 0x8, 0x9, 0x40, 0x6, 0x0, 0x5ae, 0x2e, 0x1, 0xb75, 0x80, 0x10000, 0xda7, 0x80000000, 0x8, 0xe85, 0x7, 0xfffffffffffffff8, 0x7, 0x3f, 0x6, 0x100000000, 0x7, 0xffff, 0xa4, 0x4, 0x0, 0x400, 0x4, @perf_config_ext={0x0, 0x81}, 0xc92f, 0xfff, 0x1, 0x9, 0x1, 0xeb, 0x7fffffff}, r1, 0x1, r2, 0x3) ptrace$getsig(0x2, r1, 0xffffffffff600003, &(0x7f0000000000)) fgetxattr(r2, &(0x7f0000000340)=@known='system.posix_acl_access\x00', &(0x7f0000000380)=""/2, 0x2) r3 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) 23:47:24 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:24 executing program 2: ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2a8382, 0x199) ioctl$TIOCEXCL(r1, 0x540c) r2 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000280), 0x10) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000000)='trusted.overlay.origin\x00', 0x0, 0x0, 0x2) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60f00000", @ANYRES16=r3, @ANYBLOB="00012cbd7000ffdbdf250400000020000600080001000100008008000100d76f00000400020008000100ce000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_dev$evdev(&(0x7f0000000480)='/dev/input/event#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x200000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040), 0x4) dup(r4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) link(0x0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) 23:47:24 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:24 executing program 0: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x3f, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/15, 0xf) getrandom(&(0x7f00000002c0)=""/59, 0x14, 0x3) getdents64(r1, &(0x7f0000000000)=""/30, 0x1e) 23:47:24 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:25 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:25 executing program 0: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200000, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) restart_syscall() 23:47:25 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000001d40)={@initdev, @empty}, 0x0) accept4$packet(r0, &(0x7f00000027c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002800)=0x14, 0x80800) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000002840)={@initdev}, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000028c0)={{{@in=@multicast1, @in6=@mcast1}}, {{}, 0x0, @in=@broadcast}}, &(0x7f00000029c0)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000002a40)) recvmmsg(r2, &(0x7f0000009380)=[{{0x0, 0x0, 0x0}, 0x8001}, {{&(0x7f0000006580)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000006840)=[{0x0}, {&(0x7f0000006680)=""/211, 0xd3}, {0x0}, {0x0}], 0x4}, 0x9}, {{&(0x7f0000006880)=@sco, 0x80, &(0x7f0000006b00)=[{&(0x7f0000006900)=""/146, 0x92}, {0x0}, {&(0x7f0000006a40)=""/170, 0xaa}], 0x3, &(0x7f0000006b40)=""/14, 0xe}, 0xfffffffffffffffd}, {{0x0, 0x0, &(0x7f0000006d00)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}, 0x7fffffff}], 0x5, 0x40010003, &(0x7f0000009540)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000009680)) 23:47:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x2) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3b) fcntl$setstatus(r2, 0x4, 0x42803) 23:47:25 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00') getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="ac", 0x1}], 0x1) [ 262.910302] binder: release 9838:9853 transaction 401 out, still active [ 262.918671] binder: send failed reply for transaction 401, target dead 23:47:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x6) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000002017874c19bf0bec8bdcdb551b0b50c00000000000000", @ANYRES32=0x0], 0x1c}}, 0x0) 23:47:25 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000080)={0x2, 0x8001, 0x3, 0x4ed8, 0x0, 0x338}) 23:47:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x7, @local, 0x7}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x22}, 0x7}}]}, 0x190) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) fcntl$setstatus(r2, 0x4, 0x42803) 23:47:25 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) eventfd(0x400000009) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000400)='tls\x00', 0x4) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="de866ae131301d4e6eedb68ffe78e5e300000000", @ANYRES16=r2, @ANYBLOB="04002dbd7000fedbdf2510000000180001000c0007001400000023000000080001000a00000008000500020000001c00010008000800001000000800080008000000080005000400000030000200080004000600000014000100e0000002000000000000000000000000080006000500000008000600400000000800060002000000"], 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000240)="93919be9e12aa6d66c055dd93df9e7ae6f30a006ec6f7bf5b523faf28764ef050d265142d926a5859b475018d03b6f7f2cbf7b7ac8c99fe6d88901b7c5bf70d1298e7a8ad7f84129cec7d1cf12774dd276d4f3d148910b7f5609e06a319f1c66088ba4d6c48ce4388df0d5b8778035fa0569bfc35063f489ca699aeb651ae8824a2dab00796966eefa5c0302d87f29f9e94e48f9c48f4ce22a1bf001204aede371a5f7344c8e8291f926701500d65a3cf9e982af94314cc2b4506e5ae81e8b096396a85480a1f3f071565519e8a46f6fe230fecdf3aaeeb71e1f6b", 0xdb) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) set_robust_list(&(0x7f0000000540)={&(0x7f0000000480)={&(0x7f0000000440)}, 0x8, &(0x7f0000000500)={&(0x7f00000004c0)}}, 0x18) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) chroot(0x0) [ 263.009020] binder: 9899:9905 got transaction with invalid offset (0, min 0 max 0) or object. [ 263.038584] binder: 9899:9905 transaction failed 29201/-22, size 0-8 line 3348 23:47:25 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 263.080665] binder: undelivered TRANSACTION_ERROR: 29201 [ 263.272929] binder: release 9922:9928 transaction 409 out, still active [ 263.296074] binder: undelivered TRANSACTION_COMPLETE 23:47:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:26 executing program 0: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:26 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0x21592516) [ 263.750165] binder: release 9885:9903 transaction 405 out, still active [ 263.765712] binder: send failed reply for transaction 405, target dead [ 263.782169] binder: send failed reply for transaction 409, target dead [ 263.794045] binder: 9942:9946 transaction failed 29189/-22, size 0-0 line 3117 [ 263.819361] binder: undelivered TRANSACTION_ERROR: 29189 [ 264.605191] binder: release 9945:9954 transaction 412 out, still active [ 264.614586] binder: send failed reply for transaction 412, target dead 23:47:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) bind$inet(r1, 0x0, 0xffffffffffffff26) sendto$inet(0xffffffffffffffff, 0x0, 0x6d, 0x0, 0x0, 0x280) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) sync() fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) pipe(&(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000340)='attr/keycreate\x00') syz_open_pts(0xffffffffffffffff, 0x8100) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$TIOCCONS(r2, 0x541d) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x35c) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) 23:47:28 executing program 0: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:28 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:28 executing program 3: pipe(&(0x7f0000000400)={0xffffffffffffffff}) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) read(r0, &(0x7f0000000200)=""/250, 0xfffffea4) 23:47:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) [ 265.958935] binder: 9960:9963 transaction failed 29189/-22, size 0-0 line 3117 [ 265.980241] binder: undelivered TRANSACTION_ERROR: 29189 23:47:28 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x8000000000011, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) fcntl$setstatus(r2, 0x4, 0x2400) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) renameat(r4, &(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00') write(r5, &(0x7f00000001c0), 0x1000002ac) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) 23:47:28 executing program 0: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:28 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') 23:47:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, 0xffffffffffffffff) 23:47:28 executing program 2: dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00\x00\x00\x00\x01\x00') ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9, 0x0, 0x1800000000000000}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x400000000000033, 0xffffffffffffffff, 0x0) unshare(0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000000c0)) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800450000300000000000019078ac2314bbac1414110302907800000000450000000000000000000000ac2314aaac141400a956ed865b7a9dbb03d68e89bc556e60c755a2ddadf2342e3de6a5b52ffce1e661ac6cc3b47949d6c73f03b1b1755f5520e18d132371628bf9bbd8e11b07a62a6c66921e04890edb6effebbf2a6f25e9b901bf44cff6570d56513a2e35c538d4e5117fb23f3f188fd08a0fba6764ca509023bda215dbfc9ef53cfed6e55d7c9dd7d009f14a81f7d2feae44f905ade7dcfbd6966cb2ebc625b1e04ac201a5be1e759a7542e9f05f8601d779038c4ec988d3f0e97a6362e9ac95a0"], 0x0) open$dir(&(0x7f0000000540)='./file0/file0\x00', 0x2100, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ptrace$getregs(0xc, 0x0, 0x1000, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') socketpair(0x7, 0x800, 0x1ff, &(0x7f0000000480)) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000440), 0x1, 0x0, 0x0, 0x4}, 0x8000) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r4, 0x2008200) r5 = open(&(0x7f0000000140)='./bus\x00', 0x8004000, 0x0) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:47:28 executing program 0: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ptrace$peek(0x3, r0, &(0x7f0000000040)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000300)=""/250, 0xfa) 23:47:28 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 266.111471] binder: release 9981:9984 transaction 420 out, still active [ 266.128432] binder: undelivered TRANSACTION_COMPLETE 23:47:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000000)) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x100000073) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x290040, 0x0) 23:47:28 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 266.187777] binder: release 10000:10001 transaction 421 out, still active [ 266.206482] binder: undelivered TRANSACTION_COMPLETE 23:47:28 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') [ 266.277153] binder: release 10009:10010 transaction 422 out, still active [ 266.299080] binder: undelivered TRANSACTION_COMPLETE [ 266.368607] binder: 10015:10016 got transaction with invalid offset (0, min 0 max 0) or object. [ 266.403321] binder: 10015:10016 transaction failed 29201/-22, size 0-8 line 3348 [ 266.418658] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.760316] binder: release 9961:9973 transaction 417 out, still active [ 266.777796] binder: send failed reply for transaction 417, target dead [ 266.799587] binder: send failed reply for transaction 420, target dead 23:47:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') getdents64(r0, &(0x7f0000004380)=""/4096, 0x15c) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x1, 0x8, 0x52, 0x52, 0x0, 0x100000001, 0x0, 0x1, 0x3ff, 0x3, 0x1, 0x9, 0x800, 0x9, 0x6, 0x4ae, 0x6, 0x1, 0x3ff, 0x0, 0x3f, 0x3, 0x1, 0x80000000, 0xcfc6, 0x7fffffff, 0x1, 0x80000001, 0x8, 0x800, 0x10000, 0x4, 0x0, 0x0, 0xbaa, 0x7, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0xf2e, 0x5a0, 0x7, 0x8, 0x5}, 0xffffffffffffffff, 0x5, r1, 0xf) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c9c380}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f00000028c0)='/deV/\x00\xe1\xb1c$I\xd0](\x10\xbbZ\x19\xd0\x14\x96}%\xed\x85\xb1YT\x9c\xf8@f\xa0\xd0G\x10-,\xc3+\xb8i\xc0\xaf\xbf\xfc\x99\x95\x835\xab\xeaH\b\"\x82\x82\x7f:k\xfe\xeb\x97\xd1\xbb&I\xe8\xf9\xe0\xab^\xbb\xbeY\xbf\x9f\xe3\xa5\xae\xfc\x93\xe2\xcfC\x8f\x89\xcbqB\x90a\xd3o8\xb1\xfa\xae\xe6\xb2\xaf\xfb\x1a\x10\xd5\x82\xb1$Q\x8c\x13\x9b\xc7z\xecM\x00\x01z\x8f\xdb\xb4\x82\x05S[\x85\xd9c\x16\x8dg?\x91y\xd3\xffN\xe9\x8bg\xe7\xfe<\xca#`(\xf5\xa7\x05\xc7\x12W\x94\xbc;\'\x1a\xa2\b)\x1a\xec\xec_i\xb8F\xb0\x06\x00bG\xb1\xbb\xdfx\xf8\x98\xda@\xe5M\xd0\xe4\xf0\x01V\x11/\xfa\x83\xe6^\xf0XfT\x90\xb1&D\xd1\x16a\x99\a#\xa5#\xbb\x99Fp\x92\x03\xcf\x8f\x85i\x81\xb1\x9e\x9a\a\x95\x17\xd84YT\f)\x1aSD\x19\x9d\x0e\x99!\x87\xe2?\xf2j\xfcS\xcb%C\x9b\xf8\x93\xd17\xf1\x97G\xa0g\xb5\xde\x1a\xc7\x83\xc1\x17\xcc\xd8\xf4\x15\xe5\x0e\xa7\x91N\xa3\x93\xe5&H\x7f\x1d\xd9\xa8)', 0x0) write$apparmor_current(r0, &(0x7f0000000000)=@hat={'changehat ', 0x1, 0x5e, ['syz0\x00', '/\x00', 'syz0\x00']}, 0x29) ftruncate(r3, 0xfffffd) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000380)={0xb, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x9}, 0x118) sendfile(r2, r3, &(0x7f00000037c0)=0xf10001, 0xfffffdef) getgroups(0x1, &(0x7f0000005840)=[0xffffffffffffffff]) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e21, @multicast1}}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') 23:47:29 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) 23:47:29 executing program 4: rt_sigpending(&(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x306, &(0x7f0000001fd8)=@raw=[@call={0x85, 0x0, 0x0, 0x21}], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$unix(0x1, 0x8000000001, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:47:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c12") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) [ 266.821945] binder: send failed reply for transaction 421, target dead [ 266.838831] binder: send failed reply for transaction 422, target dead 23:47:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141046, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x5f5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x0, 0x80000000, 0x0, 0x7}) r4 = getpgid(0x0) capget(&(0x7f0000000180)={0x20071026, r4}, &(0x7f0000000200)={0x0, 0x6, 0x3, 0x9}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0xaae, 0x3, 0x2fe, 0x4}) inotify_add_watch(r3, &(0x7f0000000140)='./bus\x00', 0x510) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0) statx(r3, &(0x7f0000000100)='./file1\x00', 0x2000, 0x20, &(0x7f0000000300)) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000001c0)) lseek(r2, 0x0, 0x3) [ 266.878549] binder: 10025:10026 transaction failed 29189/-22, size 0-8 line 3117 23:47:29 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) [ 266.933154] binder: undelivered TRANSACTION_ERROR: 29189 [ 266.976694] audit: type=1400 audit(1553644049.640:51): avc: denied { ioctl } for pid=10028 comm="syz-executor.3" path="socket:[25481]" dev="sockfs" ino=25481 ioctlcmd=0x891c scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 267.025160] binder: 10037:10041 got transaction with invalid offset (0, min 0 max 0) or object. [ 267.043073] binder: 10037:10041 transaction failed 29201/-22, size 0-8 line 3348 [ 267.097183] binder: undelivered TRANSACTION_ERROR: 29201 23:47:30 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x1, &(0x7f0000000100)=ANY=[@ANYPTR64], &(0x7f0000000080)='(9+\xee\xe4\xfc\x7f\xf7\x8f\xe8\xc4E\x1c \x03\xa1V\tO<\xa0\xf4\xbc\x8cg_[\xe6\x0f\x8bq\xce?\x92[\xeds\xe1)\xd8\xd3\xeae~\aKp\xc7\xb6o\xe4\xbf\x9b~\xff\xfd;\x12\\\x03\xb0z6\xeeY\xae\xd4\xa8\xf51\xe1\x89H\\F7\x04'}, 0x48) socketpair(0x1b, 0x80a, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000240)={{{@in=@empty, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000380)={@local, 0x70, r1}) 23:47:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802123001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/load\x00', 0x2, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000d40)={0x7, 0x10, 0x8000000000008}) write$selinux_load(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="02ff7cf9080000005345204c696e757815000000000000000800000007000000402c0000a60000002315c908e62da2987ab4a993e15dd46f403b433ba26697bce0b07b2b8fd84054ba87146b18cdea823343182ad8479954c11ea393a8264b48bee115e3"], 0x64) setxattr$security_smack_entry(&(0x7f0000000380)='./bus\x00', &(0x7f00000001c0)='security.SMACK64\x00', &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00', 0x46, 0x1) fcntl$dupfd(r1, 0x0, r2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000013c0)=ANY=[@ANYBLOB="7d1fc4a43bfbae6fc9fea32dd18742b9ee469c4c1e56e9c8b22eff63bfd53bd9b54f7d6621812070aa3ed7714bdc16c13520e705c9290dc569dfcb330262532ebf8c64053c2997951777942cc164627a30e3be741a9160f0591b060089addb55e1c0af02000000000000cf89fb51cd42dfabe96fa1de99ded786ec6abd654a5f0859fa0d3abd51c7b4625d55ab53c3d7009080af9ec6c82fedfc4ade431ffccb604dfe71b276f19ccb7daa9a1dc00710d8f8aa40395374ab85226babf54fac010c95ce294d519ee921e861084dd97816c06639b249b293f84768276947f20318eeb8bafdf701fa6273e9f1a424581c513907000000"], 0xf5) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) getpid() r4 = creat(&(0x7f0000000080)='./bus\x00', 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@local, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000b40)) stat(&(0x7f0000002040)='./bus\x00', &(0x7f0000002080)) sendmsg$netlink(r4, &(0x7f0000002180)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1000}, 0xc, &(0x7f00000004c0)=[{&(0x7f0000000e00)={0x10, 0x37, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x10}], 0x1}, 0x20000000) creat(&(0x7f00000005c0)='\x00', 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x48d) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000900)=0x9) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000280)=""/239) r5 = request_key(&(0x7f0000000dc0)='user\x00', &(0x7f0000000e40)={'syz', 0x3}, &(0x7f0000000e80)='wlan0]\'\x00', 0xfffffffffffffffd) add_key$user(&(0x7f0000000ec0)='user\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000500), 0x0, r5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:47:30 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000380)='/dev/keychord\x00', 0x40000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0xffff}, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="e862404000000000000000000000000000000000e3000000000900f53c00049144f03456529a75000000000200000000000000000000000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) getgroups(0x7, &(0x7f0000000200)=[0xee00, 0xee00, 0xee01, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) fchownat(r2, &(0x7f0000000080)='./file0\x00', r3, r4, 0x400) 23:47:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="444673537eef495101af9b00a000000000040050b688e9af4894120b080000007efe83590dc2b9faac87876cfd680b"], 0x1) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@mss, @sack_perm, @mss, @window, @sack_perm], 0x20000000000001f4) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000040)=0x1, 0x4) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="c2", 0x1, 0x20000084, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x4, 0x7ffffffc}, 0x14) shutdown(r0, 0x1) 23:47:30 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000100), 0x8c, 0x1, 0x0, &(0x7f0000000180), 0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000000)="6694cc562b292c403af49fee8da1dddd1acd7044130aa241237eb74af0a59a7b7a80dd4b643fd7f9885794b39c9d37504c708ebba9d95cd601e5d2739119508df9bf8b66413f7cd51b8487f1fe7bc5dc14a52b2b7eb5a4f8fda8241d0361ebe2635d7c6b0dd5d7b0d2df5ed2acd0967dc532bb18ce48bbfe73fd5e352cf595c4700558009dd35ebb43ee78de7f72a226ba9f85e23c6a23e02ba4", 0x9a) 23:47:30 executing program 0: r0 = socket(0x10, 0x802, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 23:47:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23}, 0x10) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) link(0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) bind(r0, &(0x7f00000001c0)=@ethernet={0x306, @broadcast}, 0x80) epoll_create1(0x80000) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) connect(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x3b2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x1c}, 0x1c}}, 0x40005) [ 267.364020] binder: BINDER_SET_CONTEXT_MGR already set [ 267.379172] binder: 10060:10068 ioctl 40046207 0 returned -16 23:47:30 executing program 0: r0 = socket(0x200000000001, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000000)={'syz_tun\x00', @ifru_settings={0x1, 0x0, @fr_pvc=0x0}}) 23:47:30 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) write$P9_RREAD(r0, &(0x7f00000002c0)={0x100b, 0x75, 0x2, {0x1000, "4f801442fb360ad062fb61dbbf4c2ba2885aef675253862c8ef568f8bfb371d1e1f108a98fd260eee621db3468e904455b6c6251335a466b53e8d37c27aa2a2c76cd55e6c97ce3f2a7f1d0f0127dfb6377ba54ba6dd3bffe8b11be38a925902b4d4aafa247b524e7a3382bbb956e03de6e6854faf37c1d809006147ebaabd9e1f3d568c0a4ca8ab0028a1e70eac4239edae1657b51bb1790480fabde5d9966211ecb1b4e54362ad9541b6ea0fbf0147faed2bd0d3d9766d8e4c26ecd09aa1ebd55192b9c73a986d85c6015bed13dab532e039bbc672ce361b27d0e648c418a33e8f66dbe0f8c901566c6c6ba6b2e75c992a908c2ab3f415d48528efa256b8abd952e7ef4a603851f85b5d70aa7f5a9edb9c89a4f95eec1b334f421410656f581900eb66a050d565cba18b1be671f7bc773be9ffbdebd1047949c51d7164f4bb1b21f20db9b0922856f049948dc7cca0bba89f0c74955759ecb890dd8973de961f695bfdec84841bfe94b3c2e5d93de92ea9219a5f9540b7522d26ef1f36953155d21a79313824da8904a6e78480b3bfd9e95ea44bd42bfc7afd9707bed889bf4a7cb2be77324b9c6d5421558c63a953cb78a7e071479e80b24161d145e1965aff4f0bcae6dc4983d52e74fbc97917d0fa7cf7d8d861f3e27118e5cdfe1f656d9e802af1918cbdd2f8c0cf27dabc051d42ada23e35f0006715ae97c48a408319303b70ea4af8aa378ae15f5a2f685cc8b54a4938380c3a20fb8bb849d99f5da0a36ffd19eb8b5a4a058c0bf12493bd774cf1776992b7d3cb399339f0d743c1f3a667e8f680ade8a3f09a824f8bc83223380f7c697388448fff42503d7381e35198ccecbecfd5326d8992c64cc24c2df71bce5fd11314f75cfb55244fbe2cf65bf84f33ba8785a43f297fd07d7daf7afae81c072dbed59eea09063c795227337b2caf47cb4c0a03567b97fca82f9e8ec13aefb8599ba322245d7937abe7d5665e287672cc6bc38618c4450d1b38362f7d41749ebb02a8b44284466650a68707371e41090215811d041b230ff47a4049530ba4e7e01d5305c253f37eb501712e26fa04529771a89d95a8dc88a7738b887df66c1c54c3c1563873b1ce3fe4d154321a48040072c079bfe6fcd7955db4449080ed1bb38cb9b17561e67254c54d36fc06b3cd58525bb92a3795fee0b3cea05b2e46f413aa84c3cd29297a24a634741b762feec6c9abda4cdb4cc30abcce20beee2261e60dbbe065accbb6e6a231a436f807350031f87ac30e86610ab1b5e97d97e23ee1a6688a2d78ee8d51d2626a961cda29b0de40fdf5da429aca312ed7ef23bbabbc509353e00f0c65861bfe34ae2a96dda4ee2fbf20c9114c2d8525be94f74a00d261bc8ae835fb241c51cd67755f5bfdcfe327833d573b2dfae15a36d1207cf544d6417d97f1a22aceccf40f93dfce635f1268ff63167548fb18aac4f9afa1f4c3ef00295fe71abdde9909e677cd0236f3310d552b56f8ad97a90ca25eaf1220ec7276a2ead8dccad5a4c311d320bbdebd304a9cba36310e5d00ca5a8999b8e1f34852c2dec8cf6a892136d7e096af213f0c54bc4eae8873a99d02fd2955bf6826c303ccd5c893969c9a0a7ec42edb4c5d6167f5f5f1b8cceb7a6fb8f1286f60c7b805b3a4563887385e73b99fe570d8cf9f8f0c7ab7fb3e091a1485a2a589439d4922d0fd482a801e4c247070bc006a6b9182f0ed82c55937d249e5507c8a77f0b9d57cba75ed50fa4a7b71b6d43b04985815eba4581668a1cbdcc85f815689aca582018c3393a4702214d553706838414ed997f92ffe4a4a5d5bb53a739817fef2448d5cec5e2130d08ef8fd60127e50977518fd94e435e604b88737ec5bcd39abe55fd961cd59441eb043c0afb824366d8f8ace0dd8c13515fe261d88089bfc10460cf0bda4f60fce2ef1549dfc4063abe5e86bbb5176de04a9b4de4ca2f3e4f0528d3ff06cb8687ae135177169cfeae74cb3b3d29028f440eeab0fa14a8ec91722dd57dc640d8238a16bbfa4f5b7b323713feb4a55193af6fedee7d6d9848344534c2594222fe43d8e200bd294500d39137fbc4a0b353cec7ce35ea32de6781771f8ada949bc0b798670ed57a19aa9e924a88b40e6e812b023f90999032caaf0e2335482d5684b043662d539ab1767fda387ebdede5de5aefa03f91f2c2498e4a2c99705957466488209efc1513d061eb165466e287ba6569f13f04770e4d00d125d5ee8c90087b36c3dd683ea2ba0612f22a7149fb83aae5581643d94fcfa77eb177c6028978e391581f5dbeb57ae550fa9237606a01eaa932890f682b03f63c535df8669200fd7fb1181d0839624f2458de4389df451752d3fe439924632519a379c809d65ddc752c1cbbb8ff7cf03a3dd1398dab11e5c833b056896f90015e65008aab4de4a71dedf6586f80890d80091eaae17dbbce73ab785cb3abb131105f9384fe097cf476b310239ef7b57d00d77ea567635266b2277a94cc87942bf9cd8fec3c82f468669c3de8a71c2bc39fd5ceb5fb0de825f99d9086e7d48508ade90c0066efc9a0a2f7ab0098987b62be5805c6c5edd56a03dd2766a4941e6eb9b7bdb33cf22c611c845e83b5c094cf5f8b6b565516adc547bcbbf3d0d86c13262bb663ab91fda5f73b901dc75e64bd41fd4477aba72f4d9ee40058df3ea59f2e25c85719737709da39088a364e347a48cc2dab3bc5f24b85f230ddd9dbd320a422effa191e21301b8eddf9c5dc8a3c1dc58357541d28bdbed7049c4478c080510949ac88eea8f4d4de7c8f1b8fa94e5fe520b5a1182e2e436ad2c087aed08e365409257568046ae2c5228ef9b15926fd4b9cbd878d4e8ade26ae24cc8a8927abd65444e63f86dd7d6d22caf047b9cc3ef782343ed03263555419ab81ef5171f8612f11d7f951c108fa5ab9cbe8a81740a8aeacb3babe906ed7e1dddeff1af38148339a6186a46dd211b3a27f4e33b1b8416bcc22bd1d2fa1ad1eefb5806fa2f295d499acd9c7f02b750f56a44758464ba4e9a34889ebed4537cc82df10ecaeeada6e9ecff20cb76d3ce1166bafa091b5838cabdfd3d9e1fb1a3d7f99844f05a01dbab93c4441290e635b6e7f94e2e612ce9338f59dc8068932d2b749958408ee958b86e0cd01b915dd35c352bf5d117be341a91689d951265dede5ba1e86e6a2bdde8747a215addf5b88dafae9fdf5e714979205bb7f573ee008bbb25dd672c97614a694e569c4b6fbe16724487bc4657d0fe2eff7244f102dc4ac3a804818313e822d8222774f504cad892c0afdd17a160c118f93c8c46c80560e647d19b876d32dacb630ae34447ffb7fd5947d1bcaffee9bfdb3ec56944da57f2914792c7e472da84e162684cbdf95c50ce0430f78c14ad0a695ffc08dbcfcf72a2a4f053057a54f93122a8de4f037641b5a73aa07f0a1348ba45c0f9595a385ab891e59497336c89d0b35f6655a9ef3402e53ae910b7410d0e90988e5ca562c47eca70811c8323fc9f342c0411a4f9915ad52c606320c372e101ba09e16361501f85f8b36443b5a1c8e93b48a2ee82433ef99cfb2cf691a4c3aed9ba0103862b6ce0aa117d60eb1b026ec9be61bdace983c99f4384dcd69c4bca2289bbb9726dfe5c9cccdae2998d097ecf92d8dbcdf3be4cfa8fe52f42445b050bab9220d3438fc993325843c827994fdaa8a8e0e50bfbea316041291b43a04bb8d5bf3a4c70a5ebb29f21e44d5da839169c4b71796c7e3e0b824017c6b7880797cd9e48a16b55d513b71a8d322caf85607bae876c7dfd2418fadde04590952a39965c5ce1664364df4f33b8a02ba30112e21493723d4de3bd69bb53f5886bb3ad6a384495373b0d1464366a521e997d935fef521fb739f32f2adfa6c7ac9b5e088f70e9d2eaa015c3ca074d1db293ac888dd802da1c5a189140fc2ef1a2df66f8ecfc8ae81a982f539ed6d89a55e8d63fcfffb7eb8f698b41c70ab0f044e792c76ceb8d323631d458789c3d4ae36c576b805d17eeae63df645b00f583f21a9e912561b7277fdc2ca7265dcd93cc65b5e301641fd071e35f18047bd16413ef9eb3b8b9349c0ad96316d8d18b8259aa3c972883d5ac810862221a6010034cdffd2a2978863511710fc11f7a72ffe8defcfcac8866eb621b22ecc527db963b592bdc28711f6db45f98bb763db8bbb89b887e7186045a3aae25117f4e1d688b6a687a67cc6c861374e0bba1dc85d8d6eac3f05b5394a5534b6bf4a088e364cb6e95767f2faed4c25c3a4634a5349008df342c5782f72b9881dac642d42a85c8085495e1e8006d82be3fbd288458b8c2563ecd5e86dbbefaffc318645617e598e681649c75627c5a49ea1c5e5a2ead9f890396e901d51e8d0b6e34bba96fb02be516515cf3be680e245c92d89eb6974ceb55d74413e3fa66697927d41cff62676b4f7fe404ea3b3d628d70957566ec7682a95d2576561e1fd468a69ba5a817de23ccc642d20643aaed953f0d0cf9ad0ccb9f8002f53679f36e6b8fa63ebcb75aedeaa88ecd5baa6b2bae554508f0032f7b33d47509561b599e81090caf590c5c04546e2dbbd285002660b433539b6b10c47104b5d935d904517072fbb9a34d50de72918ea3f50ffb385f231f2dcb000440cf0124f68c2cd1f675352424fac5352308da88a4746d7efd6129f9fb744628d91b46aa756a3dab766b99687c89d11476039905932c02e9f814374ecea8267f0689e153fe9519a64d7914ec0511db48ed918307c2e4bfbea2df383c08b72243c86da4295fcddab226b5ad8ef7906976b3d432d3defc0e8295cd07febcb7455b4dab1f7fabf079a4c8a4448b5665bbc4095a1638a2a89c5ff42ce142d8e09b84259f5d135ac0a4b77a41f03ff280fbc7ab5cb4f1ba2cb656100591ed73d2892d10d0ec0cae9ddd9dba43a2d1267d03e2ce3efc8da9a560e4cca569da8831a2a6989b7cf20358638d62488b245366d84b0dfeaa7d4c0e574a04129fed6eb98c2c5ddb1f19e58f671b2e15244afab3f659301cf7823454307c6ab1fb62dce0a360cd918a609d0eaf1b940ed0680763ffb091438303170b8da29c220d75fe5560cbe8766efc9a388f4e55fcb4b022336395148cf900f2c35775e093bdba20951aaa8d19e9160efe7d419979120c668e8f2aa86e4f9c39cd5088e1d3ee31e7b062cfa57122c9af9de70e55ae316e1692403bdcb24784d2185ab39ed502aeaa03f534d79033280dc135a7be28e88aa2890c709a86ec40d1c2ced9041d1a9ef699ddd71d82a0c8d5b4931fcf37e9bedcd639e46c80b4f0f6e9db301b3ae9183802f3969c1b5462e3c7c5355d73410f82a00fd6735ede4ef8470341229155882df07393da9df19fb3b5f1b5b593c8deaa26047a070659ec659fea92b9736a3d3afde3619d049200d85fbddf0d73be9abbd93ca7c53bcf3633120ec57c483234037274b431a6095c48f00fdf230f2dc7194ba63f4e79f502f19a23b7ad790bd27b3247b45415b1ef9d2f955deb15b7d2a4f5da4da357929d8a6c6d6ab2b3631d70acb75845ff18c4f67768c6f47b4c6abbb8d4d8c34e76b5e5b277ef128ced00163d1156b5ce063629fbcea82ca3c107b0754cd2c66aa8060ccd8fe876e664e141c4ccd4ee4eb04c0ebc74e59eb19c122f600081bb50567fc4e44728ecd736a6662231879f8c0050e1609e93e46fb63f8de3d6fce0a243f71b8017b9523eb619e01e243565c072391facfe7d9312d1580919b82ef08f8fbbcc6a1c11cb47813ca12343154af313088a432da"}}, 0x100b) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = inotify_init() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) inotify_rm_watch(r1, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) connect(r2, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000d7, 0x0) [ 267.415518] binder: 10060:10080 unknown command 1077961448 [ 267.438358] binder: 10060:10080 ioctl c0306201 20000440 returned -22 [ 267.474507] binder: BINDER_SET_CONTEXT_MGR already set [ 267.482642] binder: 10060:10080 ioctl 40046207 0 returned -16 [ 267.495048] binder: 10060:10080 unknown command 1077961448 [ 267.500789] binder: 10060:10080 ioctl c0306201 20000440 returned -22 23:47:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c12") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x3, 0x7, 0x61, 0x0, 0x30}]}, &(0x7f0000000040)='Q\xa2\xa2\x11\xbbo-\x95\xd3\xc0I\x960(U\x06\t.\xc3\t\xa4\xd5\x99\x02_2\x01\r\xf8\xedxR\xc2\a\xc0\x17\x15k3\xfc\xe7\x9d\xea\xe7\x19M#\"N\xe4\xe4\xc5\xe3!\xfd\x80\xb7', 0x5, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x1, [], 0x0, 0x3}, 0x48) 23:47:30 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000002c0)=""/98) syz_open_dev$rtc(0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)={0x7, 0x6, 0x9, 0xf1f4, 0x2, 0x3}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x3, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000004c0)}], 0x1, 0x81806) openat$pfkey(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000280)=0x7) select(0x40, &(0x7f0000000080)={0x5b, 0x47a9, 0x1, 0x4ec3, 0x3, 0x7, 0x8, 0x100000000}, &(0x7f0000000100)={0x2, 0x8001, 0xf7, 0x80000001, 0x7a33, 0x0, 0xff, 0xfffffffffffffe01}, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x80000000, 0x2, 0x5, 0x80000001, 0x5}, &(0x7f0000000180)) sendfile(r4, r5, 0x0, 0x2000006) 23:47:30 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0800450000300000000000889078ac7014bbac1414000304907800080600450000000000000000000000ac1414aaac141400"], 0x0) 23:47:30 executing program 2: accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82002) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) add_key(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8000000000000, 0x10, 0xffffffffffffffff, 0x800000000) socket$packet(0x11, 0x0, 0x300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 23:47:30 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="b583c2ba0000000000000000"]], 0x0, 0x0, 0x0}) fchmod(r0, 0x1) syz_genetlink_get_family_id$tipc2(0x0) 23:47:30 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000340)={0x1, 0x0, 0x80000000, 0x2, 0xb2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') clock_adjtime(0x6, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x80000001, 0x1, 0x1, 0x3, 0x0, 0x6, 0x3, 0x200, 0x2, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x15, 0xffff, 0x3, 0xfff, 0x3f, 0x0, 0x5, 0xd1}) setns(r2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) r4 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={r3, r4, r6}, 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_cache\x00') ioctl$RTC_VL_READ(r7, 0x80047013, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x2, 0x8, 0xff, 0x3, 0x0, 0x7, 0xc0894, 0x3, 0x62de9f4a, 0x401, 0x7, 0x7, 0x8001, 0x3, 0xff, 0xf6, 0x8, 0x4, 0x1, 0x6, 0x5, 0x7f, 0x9, 0x4e8e, 0x2, 0x80, 0x8, 0x94, 0xeff9, 0x6, 0xd5, 0xffffffff, 0x3, 0x4, 0x1c45, 0x75, 0x0, 0x2, 0x1, @perf_config_ext={0xed9, 0x400}, 0x0, 0x1, 0x2, 0x4, 0xffffffffe5b938dc, 0x8, 0x5}, r5, 0x2, r0, 0x1) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f0000000200)={0x30, 0x1, 0x2, 0x1e, 0x0, 0x4301, 0x5, 0xab, 0xffffffffffffffff}) [ 267.699434] binder: release 10027:10035 transaction 426 out, still active [ 267.707849] binder: send failed reply for transaction 426, target dead [ 267.736835] binder: 10098:10101 transaction failed 29189/-22, size 0-8 line 3117 23:47:30 executing program 0: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1ff, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb}, 0x2c) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) 23:47:30 executing program 3: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f00000001c0)={@mcast2, 0x0}, &(0x7f0000000200)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000240)={@empty, r1}, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x0) accept$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000c86000), &(0x7f0000000040)=0x3a9) 23:47:30 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200800, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x8001, 0x38, "914add371fe3b2dc2dafbb4763b1c59a00187f9674ec2bb4e46fa456a5a55a91c475c1c4e307f0569f89a96654f3fd1aba6a097f06088218"}) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @empty=[0x2, 0x88a8ffff00000000], [{[], {0x8100, 0x4, 0x5}}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x2, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 267.778024] binder: 10098:10109 transaction failed 29189/-22, size 0-8 line 3117 23:47:30 executing program 4: r0 = inotify_init() fallocate(r0, 0x200000012, 0x0, 0xf1a) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000040)={0x7, 0x8, {0x57, 0x1, 0x3ff, {0x4, 0x4}, {0x3, 0x1}, @ramp={0x800, 0x5, {0x8, 0x6, 0x0, 0x3ff}}}, {0x51, 0x100, 0x0, {0x5d6, 0x6}, {0x3, 0xac8d}, @const={0x2, {0x6, 0x2, 0x100000000, 0xb93a}}}}) 23:47:30 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x2, 0x330, [0x200006c0, 0x0, 0x0, 0x200006f0, 0x20000810], 0x0, &(0x7f0000000180), &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x20, 0x895f, 'bond_slave_1\x00', 'rose0\x00', 'veth1\x00', 'ip6gre0\x00', @dev={[], 0x1f}, [0xff, 0x0, 0x0, 0x0, 0xff], @random="1849a11ab339", [0x0, 0xd0f33379934e0b17, 0x0, 0xff, 0xff], 0x70, 0xb8, 0xf0}, [@common=@ERROR={'ERROR\x00', 0x20, {"3934ccbce63b14429f10f9d8b7ff43119671f94f4b3203d026cbbecbcdf8"}}]}, @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x15, 0x20, 0x1, 'sit0\x00', 'bpq0\x00', 'eql\x00', 'veth0_to_bond\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x108, 0x178, 0x1b0, [@physdev={'physdev\x00', 0x70, {{'veth0\x00', {}, 'veth0\x00', {}, 0x8, 0xc}}}]}, [@snat={'snat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@random="8e18b698b1fa", 0xfffffffffffffffc}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="63463ffa4c15", 0xffffffffffffffff}}}}]}]}, 0x3a8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x420, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}}, 0x20000044) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) [ 267.840517] binder: undelivered TRANSACTION_ERROR: 29189 [ 267.846433] binder: undelivered TRANSACTION_ERROR: 29189 [ 267.919683] binder: 10130:10134 got transaction with invalid offset (0, min 0 max 0) or object. [ 267.930700] binder: 10130:10134 transaction failed 29201/-22, size 0-8 line 3348 [ 267.956636] binder: 10130:10139 got transaction with invalid offset (0, min 0 max 0) or object. [ 267.966099] binder: 10130:10139 transaction failed 29201/-22, size 0-8 line 3348 [ 267.977433] binder: undelivered TRANSACTION_ERROR: 29201 [ 267.983075] binder: undelivered TRANSACTION_ERROR: 29201 23:47:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c12") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:31 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000240)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f00000000c0)={@multicast2, @multicast2}, &(0x7f0000000100)=0x8) getsockopt$packet_int(r2, 0x107, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:47:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000380)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=""/137) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000280)=@md5={0x1, "e29908e497883e7f416e3bc8ef1d27f0"}, 0x11, 0x3) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x3) fchdir(r0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x3e, @remote, 0x4e24, 0x0, 'sed\x00', 0x22, 0xffffffff, 0x22}, 0x2c) write$P9_RAUTH(r2, &(0x7f0000000180)={0x14, 0x67, 0x800000}, 0x14) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) fstat(0xffffffffffffffff, 0x0) 23:47:31 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000480)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x37, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000400)) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x800000000, 0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) sendmmsg(r3, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) ioctl$KDDELIO(r1, 0x4b35, 0x8) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00') sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[]}}, 0x40) socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000048c0)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in6=@remote}}}, &(0x7f00000049c0)=0xe8) unshare(0x60000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r4, &(0x7f0000000f00), 0x0, 0x0, &(0x7f0000001080)) recvfrom$inet(r1, &(0x7f0000000240)=""/35, 0x23, 0x40000000, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) sched_setaffinity(0x0, 0x1fb, &(0x7f0000000500)=0x100006) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) creat(&(0x7f0000000380)='./file0\x00', 0x40) 23:47:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') accept4$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e, 0x80800) sendfile(r0, r1, &(0x7f00000000c0)=0x202, 0x8) write$eventfd(r1, &(0x7f0000000180)=0x1, 0x8) 23:47:31 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) [ 268.565593] binder: release 10102:10124 transaction 433 out, still active [ 268.578833] binder: send failed reply for transaction 433, target dead 23:47:31 executing program 2: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x2, 0x330, [0x200006c0, 0x0, 0x0, 0x200006f0, 0x20000810], 0x0, &(0x7f0000000180), &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x20, 0x895f, 'bond_slave_1\x00', 'rose0\x00', 'veth1\x00', 'ip6gre0\x00', @dev={[], 0x1f}, [0xff, 0x0, 0x0, 0x0, 0xff], @random="1849a11ab339", [0x0, 0xd0f33379934e0b17, 0x0, 0xff, 0xff], 0x70, 0xb8, 0xf0}, [@common=@ERROR={'ERROR\x00', 0x20, {"3934ccbce63b14429f10f9d8b7ff43119671f94f4b3203d026cbbecbcdf8"}}]}, @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x15, 0x20, 0x1, 'sit0\x00', 'bpq0\x00', 'eql\x00', 'veth0_to_bond\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x108, 0x178, 0x1b0, [@physdev={'physdev\x00', 0x70, {{'veth0\x00', {}, 'veth0\x00', {}, 0x8, 0xc}}}]}, [@snat={'snat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@random="8e18b698b1fa", 0xfffffffffffffffc}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="63463ffa4c15", 0xffffffffffffffff}}}}]}]}, 0x3a8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x420, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}}, 0x20000044) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) [ 268.630481] binder: 10148:10155 transaction failed 29189/-22, size 0-8 line 3117 [ 268.664131] binder: 10148:10155 transaction failed 29189/-22, size 0-8 line 3117 23:47:31 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x3) fallocate(r0, 0x20, 0x0, 0x8002) ioctl$TIOCCONS(r0, 0x541d) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x3, 0x422, 0x80000001, 0xffff, 0x9, 0x1}) 23:47:31 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) 23:47:31 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f00000000c0)=[{r0}, {}], 0x2, 0xfffffffffffffff7) r1 = socket$inet6(0xa, 0x80003, 0xff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) [ 268.693721] binder: undelivered TRANSACTION_ERROR: 29189 [ 268.711638] binder: undelivered TRANSACTION_ERROR: 29189 23:47:31 executing program 2: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x2, 0x330, [0x200006c0, 0x0, 0x0, 0x200006f0, 0x20000810], 0x0, &(0x7f0000000180), &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x20, 0x895f, 'bond_slave_1\x00', 'rose0\x00', 'veth1\x00', 'ip6gre0\x00', @dev={[], 0x1f}, [0xff, 0x0, 0x0, 0x0, 0xff], @random="1849a11ab339", [0x0, 0xd0f33379934e0b17, 0x0, 0xff, 0xff], 0x70, 0xb8, 0xf0}, [@common=@ERROR={'ERROR\x00', 0x20, {"3934ccbce63b14429f10f9d8b7ff43119671f94f4b3203d026cbbecbcdf8"}}]}, @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x15, 0x20, 0x1, 'sit0\x00', 'bpq0\x00', 'eql\x00', 'veth0_to_bond\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x108, 0x178, 0x1b0, [@physdev={'physdev\x00', 0x70, {{'veth0\x00', {}, 'veth0\x00', {}, 0x8, 0xc}}}]}, [@snat={'snat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@random="8e18b698b1fa", 0xfffffffffffffffc}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="63463ffa4c15", 0xffffffffffffffff}}}}]}]}, 0x3a8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x420, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}}, 0x20000044) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) [ 268.761234] binder: 10172:10176 got transaction with invalid offset (0, min 0 max 0) or object. [ 268.781121] binder: 10172:10176 transaction failed 29201/-22, size 0-8 line 3348 23:47:31 executing program 4: r0 = socket$inet6(0xa, 0x200000002, 0xfffffffffffeffff) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0xffffffffffffffff) syz_emit_ethernet(0x2d2, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0xe20}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6050a09c00081100fe80000000000000ef000000000000bbfe8000000000001000000000000000aa00404e2000089078"], 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0xb68b, 0x546b}) [ 268.809399] binder: 10172:10183 got transaction with invalid offset (0, min 0 max 0) or object. [ 268.821106] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.831869] binder: 10172:10183 transaction failed 29201/-22, size 0-8 line 3348 [ 268.840991] binder: undelivered TRANSACTION_ERROR: 29201 23:47:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:32 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x0, 0x20004008000007) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)="24000000190007041dfffd946f610500", 0x10}], 0x1}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0xfffffffffffffffb}, 0x4) [ 269.416703] binder: release 10144:10163 transaction 441 out, still active [ 269.427789] binder: send failed reply for transaction 441, target dead 23:47:32 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = socket(0xb, 0x2, 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) getpeername$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000005100000000000000000000000000000000000000000000080000000000000000000000000000008938af6b9e7235c101800000000000001d5b7ccf3e79a6df3446a87108c8447a05aed93212deba411cfe662575f82248791b48abe098e56fc41e9f40b5f60d37c7ee16e7d2b9c859229640c8d38fef2f201f0dd07b470b5315c7977844ab552766d32fdbb384abbf5c4d56e041c249a400f3402259e622f50340e7ca52dc1effc5c14877daa179a2f0eac7e1e592a84919da757caca643a4e8d5", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) [ 269.509128] binder: 10202:10204 got transaction with invalid offsets ptr [ 269.516570] binder: 10202:10204 transaction failed 29201/-14, size 0-8 line 3300 [ 269.531193] binder: 10202:10209 got transaction with invalid offsets ptr [ 269.538425] binder: 10202:10209 transaction failed 29201/-14, size 0-8 line 3300 [ 269.547582] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.553537] binder: undelivered TRANSACTION_ERROR: 29201 23:47:32 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000480)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x37, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000400)) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x800000000, 0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) sendmmsg(r3, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) ioctl$KDDELIO(r1, 0x4b35, 0x8) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00') sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[]}}, 0x40) socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000048c0)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in6=@remote}}}, &(0x7f00000049c0)=0xe8) unshare(0x60000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r4, &(0x7f0000000f00), 0x0, 0x0, &(0x7f0000001080)) recvfrom$inet(r1, &(0x7f0000000240)=""/35, 0x23, 0x40000000, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) sched_setaffinity(0x0, 0x1fb, &(0x7f0000000500)=0x100006) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) creat(&(0x7f0000000380)='./file0\x00', 0x40) 23:47:32 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.stat\x00', 0x0, 0x0) write$selinux_load(r3, &(0x7f0000000480)={0xf97cff8c, 0x8, 'SE Linux', "e1a86bafe7970ba3b3e5f39e3e1d2a11a72da366582ebbb49ae6ad66a6dc5e0349bab2480d4aba7ba9d923a6936e8823c7d8290256b2d8fe9374aa5fe2cbd5ec8b8013e436389edf2285d28d6dae0181602dc27792351ed057437dd854e5dc13bf1844963f305d46021644764aa47f2afad1bb6df25ff02579ba989f9f34dd9c60d9534e94d1"}, 0x96) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = dup2(r2, r0) timerfd_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000040)) r5 = request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='/dev/binder#\x00', 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r5, &(0x7f0000000140)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', '/dev/binder#\x00', 0x20, 0x1c, 0x20, [0x0, 0x65, 0x0]}, 0x3a, r6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) r8 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002f80)={0x0, 0x0, 0x0}, &(0x7f0000002fc0)=0xc) sendmsg$netlink(r4, &(0x7f0000003080)={&(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x2100030}, 0xc, &(0x7f00000005c0)=[{&(0x7f00000006c0)={0x158, 0x40, 0x22b, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x1c, 0x8c, @str='-|ppp0[securitywlan1CT\x00'}, @typed={0xc, 0x42, @u64=0xba9}, @typed={0x14, 0x62, @ipv6=@mcast1}, @nested={0xf4, 0x56, [@generic="d5d0037bfa4699f005599adaee89ffc381f94dfa99123abf053e8240ecc890978930d72b0620567899460a4e4cd984bbbfb36c35789106de5a41a47254ded0ae6491a07e2a6b47400663b4070d36f428d63799ef905196ac0287acbee7ac0b21ea0c0f5f3ed0e8aad6b82204b17a15b18942a47e3c2414904ce715b6fea2af2bc4317a5f5a22725b4db62b5049f8a9b504f046eb5bef06c5b996a1c17cf6bdde9e", @generic="2ee9b5d2749f97bfe20e4317d5580904fb7300f2fb637b77cfcf14dc13d4f7138267805d9050b26a7adbfc9a957b41f1b2e22048d7158590e5fd2599b5de736884d57f70e68d77df318829a6739c"]}, @generic="aa7ff3f89c5fa8876beaa53486", @typed={0x8, 0x10, @u32=0xfffffffffffffff9}]}, 0x158}, {&(0x7f00000003c0)={0x20, 0x20, 0x0, 0x70bd26, 0x25dfdbfc, "", [@generic="57849cd7cc1cab", @typed={0x8, 0x58, @fd=r4}]}, 0x20}, {&(0x7f0000000840)={0x2368, 0x15, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@generic="1156dbab535156352fe8c3", @generic="f1a9e63e4a6382e67d4f013c0a5589b474c3f4b3d1b9a323aca4318bf2f4f1f18f4143b2903303a52ed5bc751c34dc2a8c4d4dc7cfdb180b2075e7d97090a4408edadb4c2f37375e17ebdf77afac5798cd81557490c92ceb4413c2921e55e50db65bd88ad283dcebd6dc30babf878aff58969ff12308d8b8f38d71d15b61d5166bb6efc5b51e8c168e3712f8829d1e920c872d7fd97b450e435069abf33d423be3511f18b464ca209ec63b05f968ef6b13453c527cf6", @typed={0xc, 0x4c, @u64=0x4}, @nested={0x1070, 0x93, [@generic="7990385ed156f9e494d821444952fc74abf957bda213deb2590e2f4d71482c5675c7ffa4aeae16f1bf8b83f4369b114fd81c971ce2eebf5fc0ef3c320c69432c4899af5b6b380fb5a940cd1bba531d3557440d81f45b09c22c701e5d38d048a66697403a9a57abf40e0cc52ec0384fd4738dc2c516415ff3e8d0ce752839b0936e33e9b174c874211c2de87bad5dce3d8a47c7ce9b6fd8f40d7daf088011a88eb523ccd5958ce12000abe37a061d503693e484cf75d12c4608a98fbfcb3e2b8e5d75019b5aa50c6a0287999292fe8391fb514a142320643da307c0a9bb40e26fcb1edea51d395bb647eb1bd18c5c1d52d70cdb38e81293050c27916d2638cbfba0002d49b03d81aaeb3e52690ad4d8ff712218a448768a7f1d75fde646af4b8751ae1bdd3afdd2fe5ffd1b537dc2c29c7cce80998a430dceeb9992c72d4ea79ac4e99fb72339725b378c0be77c28d1c86594eb5c3f76d576d3c65dddb764e45d699af57f8ad6b19bf83248768534ab35b781452bcf92c93cddf008a139d28e2b7fc7df18fa452a2229fa86bf1f0e77fbf6f019660176057e77a6e15d3fa111a0f72e6b7373cdfbcae9fe6f3f49c3c438c1b9c8faab5101fe55ddd56fc753e51f11acefa5445daa9cd6ade91d99a68a5ac594d419873a1dbb17591f6613e873145a273c8f28e6b282938814760593cbb4f2a809b5824df31b3dd1eb73682b4e405ab0c5cfc559e4ee66e23dfd2415fd811a2d17bc80c23603480ad05ef03853b17bb7305cf4b2227ebc5fb0e03865c8ffec1bcfb9a37602cc674f692f99ba143e93b891f977b1dcccdb83405aac9c78c896847037c531b205a0f517ebc7df3b4b599ef2bcb3395a6a4ef40aa72fb4d88f56c157979268880baa2780b9bfb28b21fcb725f4d9e68488c761e43f3c4b22674717e3c106b9a5ea12652c9328623bbf94a54c849f102bafbe44c19cb05dd768e404af5fcf7c8f273b075ca71091692ad002f362515746100a1a0b96a7162858add37106e6a451926ca52211564a39f98daf4648e1fb5c3ae8ffd5cdc4e126fe5c21f6d8fe01dabf0043909487ad2280d7be7e9e41646ef4c6204bf191b861e124df7f3aa0f1a0ec97f6a1083b50a35af61cc972618d2d388ae19c635d74c94e02c5cb537c59efc5857c096c211bd5931dcac1edf2ff2d4ab88220f58cb60ceb4a6ff0790c0ab7e8f36df16793789718c9c4cd217547dc9e43f35e22bf9fdfad6d72433b323eb978df4cdb51567b3c293e729e92956567e809c57afe7c814f08f07d51af37e7b56f225929128ee4e6e651e7ce06fb7915dc771d4da9bcfa2ba1547f028cfa7587fe751c22780095ba4103d9843a358118885a847ee2dcbbc621ac162ec3f41b93240113bc45693641a8208dec6b4c11c77a8df3654120cd4530e9a61648bee77ad3e0ca5c156fd5811d2cc79569a5faccc4be7083d9574be6e43aa0b929f04362c3d19c90124576d8728d1484c3984b8e779981133bafc6ab69efca3550ac7f484492aa48b04cd08923763f54f4392fdc834d99f30e00eccfc83c277f433be61a6a1ba3f68920daf7679b0f3eb6d3f0f91ecb316b167c90f9b146e0804ee4ab4a24a813514f5a13515a649ece38ed54bc76d8902d14b71f7a28450d2b41099831cf3872f513b891bfe2c08176c86113b491f263b3d5ae06ac7d6bc21e9437ad7eb5d28f091489f746853f463bb6c555e0d6f380c3522dd82411025b7116a3be8cc2afda3e3d9468ddc3d8d20a08aa79a45a85e652f9918b9e89bf034ff324f2fcd9e0ba868da45b8dd9d6352bb658e9963918a1660d72463e6622dc2664e6352107cb1b18936bc176b6e62e020b8137546ddedd3338286ecf8545fe1a6b67e9defb1cbc936a85e9bf38193613164b08b9314468780c9272cfe5456c1853f614efddc6dd2e7abc226da787bac6c1a8a9dae18b6694884181bb1c461b4adea873dc91146c39a76620ebf0cd0f52e2db11e4d5054577afc42361542030f14a91dd1942f3e2fd4e2f8cb298f306fb1e4136e2e951586781cac57c0a52b1fb82d318fca8ffe4ca464d461e754139e393db144cc1a831b1c9b468a4b4f783826ef47ecdc022cfd11acd69026383a0ee067c0aa795882ad8babfe470cd41298141ef60e8c6b4aef8e1dd7772ef708e0a4a6c39ce73f62d634288cffce159d8c2262bdfe80c563a1a66a22c874140a6165be5ffbd7b8c4afef44f32e223cc15f2f726155b55819b229c6e6a17ef13326a677c2f646bee81feb437ca19a9df2f7ed2fdc6dc9afca17de7e2148ffbacdad6bd4dc2d8ae4d49b786c6a206a74740e4b7040b6dac7d1b78daff19f34930cadee22a37ea761328a7e96d1189dbbb025fff61245677804df6c37f4d47d79475242b796d6067dce6f0fd3bff55eec0734a36045ca1fd8d48e1875bc12d18199068ce72cd36c7d96afa47d747f86556c187c73f2638f5d5fa800bdc05c30852c5bb6fc2b1f4a6504fe4893948924871aee2f79eaed9df077e3d914b7fc6304eb7f2e354a4f2db2a6784a7e78af4ddb18e2242f8eaefa1030042ec3ace543c28948e877b0bb5dc8c1a8c473fc73e8a9cb1bdb91972c26d55ca88925c2cf5bbf5d61d9d70ca70e03bd494b3280df3d7f362258e5978084425750fa20fc5a4efdf0be6d7bb9400f43b62aeef2e217ab1d7d23fbcf36fcaa4c965dc22483d59edd64a4c65ee58794c89b153a149ce9f39474b3546cc08320733a6922dd22d4aa312ce19ab081b569bdff95a88354e338c44acc81b3f684a27440a61ad20a8a7dca88734f3dfde3d2d6422d1230917dd7333646f10424f5e4b3313116167c337c674a9a363d924fc3e3a4da9452f3e5ae33844104c4ddcf3e7884d9e1415ece1854f6ccd242e80982b376f000856c88919e2493ac6fb504cf1bff4aed2ee060036179522fe5644ac98d2b4c9f655df834cc0aa03830649ccd8ac5e345ab0422ac12b8ab839c4c0074a972e844776cdf936e576180dfd5991248f34b5722b9afc6365fdac91c828ecff7289b898720ca7fdc8a13112b6a4a0562f55c9501cb662bb58ed2e25bcb0eb56eec75a2b542a602502c841727a49aefae7ac4dc20b60beb26cb1b2b27530732189315ac9f7ecd62ad390a01772e4b5523c5de03d9dc54adf671a6a16dd17169771fb91274f2650ee1d8d3e39fe4d8bbb49ddfcd03cfd600e3d124799472dc57273dbfc7f73f19ff2c9d4a90587309b7d8c311029927616ee585d6f8abaad43cfce794bd9136adba1f89aa2d180cf7e257419f65bc984e1a3a94a18ad933217255cba3c8619e66b57f89f5d61248e39829353c0a5fc18e7d5127b1ac535faef1c2790e76ea2428a9b700e8257e79da00fc9d5bfd0c63dfd48eed7596cb1ef34bb8c14dc9cfc2078aef28840a57cb8c9efffb476f367c749cf925729ac1e6c812d70bb9d08185a40ff6d15a748977e1e4121765ab7584ae656fc1f65b13dea2aeacf7c5f75cfff37b21491400b2a7e75999699d46a8f9cdcb635b9685cac72d8f0b4ea4d0e5e187721b2a6d75d86a8bbe0fc4d1ed965a914263869f22d92779a146c9c7e469fdc36a859735913a17a34f8180508ceacbd95b1c1e280b120ddcb7b76e6b94678c6035a9a2178aef304d588da2f266b82ba4784292c8d82b0befde247453d0073a6f71507195b5afcf27d4b386d1ca44a51ace0009c02368620cc74cf3d98efe457fb201922c867a229e2786ac6a4fd5b83c8d9073d32b0d87fc9d87ec9dd16995056df92299e55bdfde1f4b03be6caa2fc569044148696ea28519ca4c8abcbd2ea13097a95db2ff5ea442d8ba5154d4a421c6b89254e6b099ec9b56fa5bed1845181cbcd142c630bcf0fba1e84ee8b10cc629db0c1230933177de7224f314677369aa45766cb1f014cc807467e3b6ac4c1d3cf0fe1cb930e71ffaaa856797303c6ce16ef7adc6d77407281c0ba5f8aa65e8ea35a0c25cf44159bbe2a73cf00ba83e7684262faf295d53007d95624570bc3a66b75043756c60a9c46846b577691d2a9641168668bd03c7946c044157afdd4b435274fb2a288c264f12634ec8f96e94475b4a9a18a66219d59a5df672b66fa45547e89ad8215e6f8b0f1b59fb8683625c073aa0fb28056a43ef17525a69a7af3002aaad63288d4233dafecc100b10d534e2fa176aa2524abe4ef646ea8e4bac02585955b102ae5066cbd7314b890d4dd8c790c7d3609a9ad928b2e76850f829a70a22781de53408a9bcefb21ebab897b5525f067a0c2fd077d9c9842980ec1052dfb8012e98b827a39c3e38653c405c040e4b72962112cb22021020ed2bdea1ccb36552b1958a22a41fe20302f8ade10a3349b18504db9ae3257fedd5e9c96391c21aabfa6646ec6e5f22665826f82e558124d62beff82ea9994a244bc1fa6f9e2cd0395f8036a50e6e33e8ab556347d0ea98063541dbdbb7df72e03994d2b9b0658345bc268319d133f5f26e0f16955e075f737a087eb6ed3e018202173afba4eed002dc0707d39ec832e75984d928ffb198505d324061f5cabcb900c515dee54eb31d7fdcbf2997a22885353ffe0dada484dfdfe390d5d713362716f3b58aee5caabbc55b5d3812b5b68450fd565622c99417c3edc34353bd6b5c6c4e80219bf6aab8651c91399ab454864148321ca80c3d6b008d3d0b006ded931d196e0704a6633223201dae221c6dfd492233fb5e9e062b837e9675c49c6edab40fced7bc16558a44b68cba1d08189455595373b9183edc9c0f32d750d632e902a434252f439dde0712ffe2c93f00e154883eebce85ca9710c3875ec10a142c93013e5d7d71ace4fa769b87be5f0c62ebe1d3593de685326f0989839766a64b631a397d4cbe5ad4efdaa2331f33e378fb2f41c14ccb6538cfdfceac3f93099a8726d02c7b64acc288d9589f74691975a26f696d3a2fe8cbb3e1e694b3e5a89b3b94e44345863f5cf13e432bd4e26d21bd9a661192290d95e3cac5a1172a0810fdf89c9668cd76f730512ff72e42798b577d23c514860e156ab7574f8890fb4f048ce434750161ee7daedda3d6e79f291c2a6736dea56e3692cdbae6d6d503c65e314bdaf581061410b7774022b45e7d857ca7742a0b1ccf867496f483e69c42154169b64371295d755436e6639f0ea81552f038337ab6340f29de21f4d95fee0d3329fbaf23e88c3c9ae63b7ea31d172540f24890c73321f9d6117ead3e4ce25cb545652b58827fa8b5e5e7d2b9cd0e626b488f0e718476b4d8095bcc59683f3af58edffe1d04c4b8f674cd1a638ba4effa7ea107037ae21454a5007ee759431a752919c2bd7594e2370bb7d8a9e8069a523a425aa509b9556fe53059d6747f48e8961af0622bd9acfbae64694a1151a5d7119c48011dc43980b325c1dafb8a407d4c0903c7a38de219d0eef1a116208ef29a91d8f9d131d20e74a4b70d0ea62cd1a5459379613391fff5cdac9d6964c3b4976ea49998d9f1d40acafd9e00babc059e337ad4b381dc17ae31a8e86cdd8a475e11b270dc29eab26f374451222bb1736a04eea6ace9542cd8003e52d6a900313e8899a55f6bfac300bad7dd7dc126e418ae5ee64187e886802e86c5c2a24ba0390e8d5a252e8edb9d46ce1592dfa2a69067c2ac4f9b89a4cac28acd3abcc779d15d65b8b41588405535d73e902eb62e47ec22b3f87558afdc636f8b5a3524edce56f047ffe49e7bca932e7ee55b20c3cf86f0a579e99407a2f4644d5f6fae8ab9e2d665aafba97ba7de0762e4a88875f39d00f", @generic="d8210379edb50adf9a9da8628fc83576fd8be84d49a3c41b56345d0281856d260153a5997243ebc4082e3476e911f550e57910cf7b4ae575d604af03c1b90c92b21cb290d67196827dfcaa2b978ea2e49335726c29437716a7e8bd313146f59d8b856461ed38a4e4618b"]}, @generic="ced4fa70f13aed5422934da5c1c3409afc960236213336f264b034dce6832b97ba5d7fc8f7b14151307d7e3a5568c7fb6b7aa82b5c200d5ccbdb822a2eec3e288d05eb567c6bfabeaab47fff16580814e44f0a07e7bc3e8e445b56fa866d8a355e5f24b7a2e8991ac7db6fa7a52e9bf82c7989a84539d5ceb8d57b67952ddf8852c2eb19d536f5dcc8c9a553d6aa7ffdb2a63f22e48c2418317c4a2f7270aa07bd6d7eb5", @nested={0xf8, 0x1f, [@generic="1759e6b90873ecca0d693ffa5a08521c1ac42555584300ba387a4e69de3a99a7abc40accbfa471916442e7efc92f149dfca49de578cf408f169d573d8de6a5cf6dc382a2258d7e8c4b673f51064ccf45631684d5d1d531d89a71ffb6e5db22b707f3f9cdcb03c3ea6fce961bab0cd9279cb342e2d00c17fd10718dc01d3076cfd81ef9ab113fc71e0922f41b7190d5bd0925cf1ed065207f86f3b9cb7cd7a8f72247b8d6805128283bb793e7a0f35d0ba3fc3b129539166b57c997856b5cef4ddce78dba8b54f544eb9672378e043d4b1467437cb21a2efcb200e46d1257a4810b5d37c5fde3c988", @typed={0x8, 0x25, @pid=r7}, @typed={0x4, 0x43}]}, @nested={0x107c, 0x7, [@generic="6a655ff0b55b3f559c9d18f6b52025ec9745944962427f87ac35d2bc19eca221bfd87c4e08d4c6a05f66844b6eb13bffa01cafdb466a4e", @typed={0x1004, 0x1f, @binary="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"}, @typed={0xc, 0x18, @u64=0x7f}, @generic="e46db290282d8e25f05d6329cc8546122e752a2ffe358e478ab7b725d2607eb9ea49b2dd72c29b1ee9c675ad0f785804c3"]}]}, 0x2368}, {&(0x7f0000002bc0)={0x3b8, 0x30, 0x200, 0x70bd2b, 0x25dfdbff, "", [@nested={0x1b8, 0x88, [@typed={0x14, 0x66, @ipv6=@mcast1}, @generic="c23522a82a3350a59129c2d6ede6932c6182e7c4a58abad6577c4201d24411f5d68efb95747b6fb5cc89dd445afcf01dd3d64210980a10", @generic="8782313d61cdea11745de11b268c54d8a406635745875636e7c95fb01fd8f56ba110aa26d7a4cd9124520688002dbe5fdc2d6990678e8186f844e2f2b26bf7e66b1547ce3c3acb523a6c0439c4f4db36bac1cf8706e2881fa7f216f336e90b2b45612e9ec458ee080de4f174b3434f8906b81296b37465dbf773c90047cabeaf7b8b47bf41067c78ad6aecdfc64ac52d2e6c02cf05e6d0ae3f222bd8d1eae98b448733413a059acc908ce2c5554d485d78f859dabddbb60bebd58a5bb45b7b1ee55251f5a5098d4bb44c0ba0bd21354cc3846155fbf7dc076e40b9816838ca0ae9d71999058dcd552eeb429280981239", @generic="973a0da002cdb49f9dfbdb1eb2fc3e1c256bfde7fe39b2ec62c34ca2babc8dfea0bcd3366f415ddb39f8eb4a74860e7a90f99bf1dafd16aa967949d48ebefa56cddf08ed5f949bbaee97a8ba6cba715da54477d4c90d53bfcec10147cd1ca620028226f124f22654f9b36bdc4b94e1fc2c9b1793ea898fcf"]}, @typed={0x10, 0x1b, @binary="fa051f7c9d32e740c47e67"}, @nested={0x1e0, 0x7b, [@generic="be1e518ab5af78ea7d5eed21ea3a6f78dfb774c23c295e00cd19694311214658be1347b672d0bddf17d50d9c7874fce6ceaf9ed6ce8e5d660c6be5084430db32ee8480e0c13114c87b24a43f1c933e03c3c68f82b306aece13326eba", @generic="072f2e77b1230eac7761e7ca6d67c9749d532bc00a859be8332d720678ddf35db684baa12bde7925a5fcf4459d393bb2bfd6d17b17f04912d1ecd87f0858176b912bdf8a140d4b73f50dbd5b1dd89fa2a0646dd1c5178f", @typed={0xa8, 0x7e, @binary="643298b0146e4ec2184e17d9a65ecf516af2ce4f4de481cf6d376681d4417b8608448152f83841b3f14e7bb3e940efbc225e391ea2e71c04d98b2a7282263314fe235b9463933af0f96ee63bdc6b0e291537f5cbf64727b82a405c573ea93dd393aa7dfef8e607b0a289eb04383a8fa71f73fcd4fe5ba46fc315a95d66709a12ff28dc87a1f41980d0c0ffb8fadb7ab843305c4d79d30982a11cec86801eca0e8bbdb0"}, @generic="d3f9031cf99a512fd8191802f5aa41edb1668196fef4ab3af2a0731e837df4c2f108281264b27eb86adf35c01030cb1a4b068191518546537cf806c7db75aa68cde3b4867699d1edf964aa95fde4640dfa9b8bb14cc4e23521fd800a825a0829797563b8649d94a61205c1162ed6cc3ad94caa1687c9c608221cf325af5c"]}]}, 0x3b8}], 0x4, &(0x7f0000003000)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x28, 0x1, 0x1, [r1, r4, r3, r2, r3]}], 0x48, 0x4048040}, 0x80) ioctl$TIOCLINUX3(r4, 0x541c, &(0x7f0000000280)) write$P9_RLINK(r4, &(0x7f0000000200)={0x7, 0x47, 0x2}, 0x7) syz_genetlink_get_family_id$tipc2(0x0) setxattr$trusted_overlay_opaque(&(0x7f00000030c0)='./file0\x00', &(0x7f0000003100)='trusted.overlay.opaque\x00', &(0x7f0000003140)='y\x00', 0x2, 0x2) 23:47:32 executing program 4: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000480)={{}, {}, [{}]}, 0x2c, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x8}, 0x10) mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='udf\x00', 0x40, &(0x7f00000000c0)='\x00') 23:47:32 executing program 2: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x2, 0x330, [0x200006c0, 0x0, 0x0, 0x200006f0, 0x20000810], 0x0, &(0x7f0000000180), &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x20, 0x895f, 'bond_slave_1\x00', 'rose0\x00', 'veth1\x00', 'ip6gre0\x00', @dev={[], 0x1f}, [0xff, 0x0, 0x0, 0x0, 0xff], @random="1849a11ab339", [0x0, 0xd0f33379934e0b17, 0x0, 0xff, 0xff], 0x70, 0xb8, 0xf0}, [@common=@ERROR={'ERROR\x00', 0x20, {"3934ccbce63b14429f10f9d8b7ff43119671f94f4b3203d026cbbecbcdf8"}}]}, @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x15, 0x20, 0x1, 'sit0\x00', 'bpq0\x00', 'eql\x00', 'veth0_to_bond\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x108, 0x178, 0x1b0, [@physdev={'physdev\x00', 0x70, {{'veth0\x00', {}, 'veth0\x00', {}, 0x8, 0xc}}}]}, [@snat={'snat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@random="8e18b698b1fa", 0xfffffffffffffffc}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="63463ffa4c15", 0xffffffffffffffff}}}}]}]}, 0x3a8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x420, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}}, 0x20000044) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) 23:47:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000300)={0x7, 0x70, 0x9, 0x4, 0xe0, 0x4295, 0x0, 0x8, 0xa0, 0x8, 0xfff, 0x3, 0x4, 0x3, 0x9, 0x216, 0x9, 0x8000, 0x6, 0x100, 0x1, 0x2, 0x4, 0x2, 0x484c, 0x9, 0x61, 0x200, 0x2, 0x0, 0x8, 0x80, 0x8, 0x7fffffff, 0x4, 0x3, 0x1, 0x8001, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}, 0x1880, 0x5, 0x7, 0x5, 0xda8, 0x7f, 0x6}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='cdg\x00', 0x4) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') accept4$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @local}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000680)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000006c0)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000800)=0xe8) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000a40)={@multicast2, @broadcast, 0x0}, &(0x7f0000000a80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000b80)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000c80)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'sit0\x00', 0x0}) getpeername$packet(r2, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000e40)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000e80)={@loopback, 0x0}, &(0x7f0000000ec0)=0x14) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000001300)={@loopback, @empty, 0x0}, &(0x7f0000001340)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000015c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001600)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000001700)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001740)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000001840)=0xe8) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000001e80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x11040000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001880)={0x5a8, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x1ac, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5b735496}}}]}}, {{0x8, 0x1, r9}, {0x74, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x303f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}]}}, {{0x8, 0x1, r11}, {0x7c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0xb4, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7ef}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x21c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r18}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r19}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}]}, 0x5a8}, 0x1, 0x0, 0x0, 0x4}, 0xc040) sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRES32=r2], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 23:47:32 executing program 4: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = socket(0xb, 0x2, 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) getpeername$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000005100000000000000000000000000000000000000000000080000000000000000000000000000008938af6b9e7235c101800000000000001d5b7ccf3e79a6df3446a87108c8447a05aed93212deba411cfe662575f82248791b48abe098e56fc41e9f40b5f60d37c7ee16e7d2b9c859229640c8d38fef2f201f0dd07b470b5315c7977844ab552766d32fdbb384abbf5c4d56e041c249a400f3402259e622f50340e7ca52dc1effc5c14877daa179a2f0eac7e1e592a84919da757caca643a4e8d5", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) [ 269.683956] binder: 10217:10228 got transaction with invalid offset (0, min 0 max 0) or object. [ 269.701925] binder: 10217:10228 transaction failed 29201/-22, size 0-8 line 3348 23:47:32 executing program 4: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = socket(0xb, 0x2, 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) getpeername$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000005100000000000000000000000000000000000000000000080000000000000000000000000000008938af6b9e7235c101800000000000001d5b7ccf3e79a6df3446a87108c8447a05aed93212deba411cfe662575f82248791b48abe098e56fc41e9f40b5f60d37c7ee16e7d2b9c859229640c8d38fef2f201f0dd07b470b5315c7977844ab552766d32fdbb384abbf5c4d56e041c249a400f3402259e622f50340e7ca52dc1effc5c14877daa179a2f0eac7e1e592a84919da757caca643a4e8d5", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 23:47:32 executing program 2: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB=']'], 0x1) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/validatetrans\x00', 0x1, 0x0) r2 = dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x401040}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)=@delsa={0x184, 0x11, 0x802, 0x70bd28, 0x25dfdbff, {@in6=@local, 0x4d6, 0xa, 0xff}, [@sa={0xe4, 0x6, {{@in=@multicast1, @in6=@local, 0x4e22, 0x8, 0x4e21, 0x4, 0xa, 0x80, 0x20, 0xbf, r3, r4}, {@in6=@remote, 0x4d2}, @in6=@empty, {0x3, 0xb3, 0x7, 0x1, 0x800, 0x40, 0x1, 0xcf76}, {0x3, 0x4, 0x6, 0x1000}, {0x9, 0x401, 0x80000000}, 0x70bd29, 0x3505, 0xa, 0x6, 0x5}}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd2b}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd25, 0x70bd2d, 0x70bd25, 0x70bd2c, 0x2, [0x2, 0x1, 0x4]}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2c, 0x70bd2d, 0x70bd2c, 0x70bd2a, 0x6, [0x3a82]}}, @mark={0xc, 0x15, {0x350759, 0x6}}, @srcaddr={0x14, 0xd, @in6=@mcast1}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) io_setup(0x9, &(0x7f0000000100)=0x0) io_getevents(r5, 0x7fff, 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x989680}) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 23:47:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000480)='/dev/input/event#\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x7e, &(0x7f00000001c0)) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) io_submit(0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) [ 269.732997] binder: 10217:10228 got transaction with invalid offset (0, min 0 max 0) or object. [ 269.765081] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.773427] binder: 10217:10228 transaction failed 29201/-22, size 0-8 line 3348 [ 269.797051] binder: undelivered TRANSACTION_ERROR: 29201 23:47:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 23:47:32 executing program 4: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = socket(0xb, 0x2, 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) getpeername$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000005100000000000000000000000000000000000000000000080000000000000000000000000000008938af6b9e7235c101800000000000001d5b7ccf3e79a6df3446a87108c8447a05aed93212deba411cfe662575f82248791b48abe098e56fc41e9f40b5f60d37c7ee16e7d2b9c859229640c8d38fef2f201f0dd07b470b5315c7977844ab552766d32fdbb384abbf5c4d56e041c249a400f3402259e622f50340e7ca52dc1effc5c14877daa179a2f0eac7e1e592a84919da757caca643a4e8d5", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 23:47:32 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x4a}, 0x2c) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x2, &(0x7f00000000c0)={0x40000000003, 0x0, 0x400000, 0x0, 0x10020000008, 0x0}, 0x2c) [ 270.247464] binder: release 10194:10203 transaction 447 out, still active [ 270.259861] binder: send failed reply for transaction 447, target dead 23:47:33 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80000, 0x34) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x0, 0xf1, 0x0, 0x0, 0x1f}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 23:47:33 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000480)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x37, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000400)) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x800000000, 0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) sendmmsg(r3, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) ioctl$KDDELIO(r1, 0x4b35, 0x8) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00') sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[]}}, 0x40) socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000048c0)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in6=@remote}}}, &(0x7f00000049c0)=0xe8) unshare(0x60000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r4, &(0x7f0000000f00), 0x0, 0x0, &(0x7f0000001080)) recvfrom$inet(r1, &(0x7f0000000240)=""/35, 0x23, 0x40000000, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) sched_setaffinity(0x0, 0x1fb, &(0x7f0000000500)=0x100006) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) creat(&(0x7f0000000380)='./file0\x00', 0x40) 23:47:33 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x8) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) 23:47:33 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet(0x2, 0x3, 0x7f) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x80ffffc, 0x0) tee(r2, r1, 0x0, 0x4) splice(r0, 0x0, r3, 0x0, 0x9, 0x2) 23:47:33 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0x7}, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) fcntl$getownex(r3, 0x10, &(0x7f0000000100)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x80, 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 23:47:33 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x7fe, 0x4) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) bind$packet(r1, &(0x7f0000000200)={0x11, 0x17, r2, 0x1, 0x9, 0x6, @local}, 0x14) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@ipv4={[], [], @rand_addr=0x6e}, 0xfff, 0x2, 0xff, 0x7, 0x9, 0xee}, 0x20) close(r0) 23:47:33 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr="73dc327dbcdb2c2add5714220e661bf2", 0x4e23, 0x7, 0x4e22, 0x0, 0x2, 0x20, 0xa0, 0x88, r1, r2}, {0x16, 0x6, 0x7, 0x9, 0x10001, 0x5, 0x86, 0x5}, {0x9c, 0x2f64, 0x4, 0x4}, 0x2, 0x6e6bb1, 0x2, 0x1, 0x1, 0x3}, {{@in=@remote, 0x4d5, 0xff}, 0xa, @in=@multicast2, 0x0, 0x3, 0x3, 0x7, 0x8001, 0x10000, 0x3}}, 0xe8) set_tid_address(&(0x7f00000002c0)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r3, 0x0) rmdir(&(0x7f0000000280)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400034b74dc65ea3a4d400000000000000000000000000000000000000020000523a899cd99d34e46fc1000000000000000000080000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) 23:47:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) delete_module(&(0x7f00000000c0)='\x00', 0x200) close(r2) ioctl$RTC_VL_CLR(r3, 0x7014) splice(r1, 0x0, r3, 0x0, 0x2000007, 0xa) [ 270.629493] audit: type=1400 audit(1553644053.290:52): avc: denied { map } for pid=10294 comm="syz-executor.5" path="socket:[26831]" dev="sockfs" ino=26831 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 [ 270.659300] binder: BINDER_SET_CONTEXT_MGR already set [ 270.665268] binder: 10294:10295 ioctl 40046207 0 returned -16 [ 270.672296] binder: 10294:10295 got transaction to invalid handle [ 270.679152] binder: 10294:10295 transaction failed 29201/-22, size 8062627085465454906-193 line 3117 [ 270.707259] binder: BINDER_SET_CONTEXT_MGR already set [ 270.712951] binder: 10294:10303 ioctl 40046207 0 returned -16 [ 270.719393] binder: 10294:10295 got transaction to invalid handle 23:47:33 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40010040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc001) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) [ 270.726632] binder: 10294:10295 transaction failed 29201/-22, size 8062627085465454906-193 line 3117 [ 270.746120] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.760119] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.792018] binder: 10307:10309 got transaction with invalid offset (0, min 0 max 0) or object. [ 270.808660] binder: 10307:10309 transaction failed 29201/-22, size 0-8 line 3348 [ 270.828203] binder: 10307:10311 got transaction with invalid offset (0, min 0 max 0) or object. [ 270.838973] binder: 10307:10311 transaction failed 29201/-22, size 0-8 line 3348 [ 270.858274] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.896005] binder: undelivered TRANSACTION_ERROR: 29201 23:47:33 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00f4b296d7ba0d4198ebbf47be033e5acd6340400000000000000000000000730428b300000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) 23:47:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) [ 271.082571] binder: release 10263:10271 transaction 455 out, still active [ 271.095116] binder: send failed reply for transaction 455, target dead 23:47:33 executing program 5: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x9, 0x75a8, 0x0, 0x7, 0x3ff, 0x100000000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00ea000000000000"]], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) [ 271.123888] binder: 10314:10316 unknown command -1766657024 [ 271.135005] binder: 10314:10316 ioctl c0306201 20000440 returned -22 [ 271.153057] binder: 10314:10320 unknown command -1766657024 [ 271.159252] binder: 10314:10320 ioctl c0306201 20000440 returned -22 [ 271.230427] ------------[ cut here ]------------ [ 271.235279] kernel BUG at drivers/android/binder_alloc.c:1130! [ 271.252549] invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 271.258475] Modules linked in: [ 271.261696] CPU: 0 PID: 10326 Comm: syz-executor.5 Not tainted 4.14.108+ #38 [ 271.269151] task: ffff8881d3d08000 task.stack: ffff8881d1bc8000 [ 271.275644] RIP: 0010:binder_alloc_do_buffer_copy+0xc7/0x500 [ 271.286724] RSP: 0018:ffff8881d1bcf5d0 EFLAGS: 00010216 [ 271.292116] RAX: 0000000000040000 RBX: 0000000020001020 RCX: 00000000000002dc [ 271.299398] RDX: ffffffff82237477 RSI: ffffc90003b54000 RDI: ffff8881cb878158 [ 271.306678] RBP: 0000000000000008 R08: ffff8881d1bcf8b0 R09: 0000000000000028 [ 271.314140] R10: ffffed103a379f06 R11: ffff8881d1bcf837 R12: ffff8881c36f3d18 [ 271.321463] R13: 0000000000000028 R14: 000000000000ea00 R15: ffff8881d1bcf8b0 [ 271.328745] FS: 00007f3f3e77c700(0000) GS:ffff8881dba00000(0000) knlGS:0000000000000000 [ 271.337152] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.343174] CR2: 0000001b2f322000 CR3: 00000001cae90001 CR4: 00000000001606b0 [ 271.351327] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 271.358702] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 271.366073] Call Trace: [ 271.368693] ? binder_alloc_do_buffer_copy+0x1ef/0x500 [ 271.374023] binder_get_object+0x90/0x190 [ 271.378223] binder_transaction+0x1e2d/0x5640 [ 271.382759] ? check_preemption_disabled+0x35/0x1f0 [ 271.387789] ? binder_inc_ref_for_node+0xba0/0xba0 [ 271.392727] ? perf_trace_lock+0x11e/0x4e0 [ 271.396976] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 271.401928] ? HARDIRQ_verbose+0x10/0x10 [ 271.406016] ? __might_fault+0x104/0x1b0 [ 271.410087] ? lock_downgrade+0x5d0/0x5d0 [ 271.414247] ? lock_acquire+0x10f/0x380 [ 271.418233] ? __might_fault+0xd4/0x1b0 [ 271.422218] ? __might_fault+0x177/0x1b0 [ 271.426288] ? binder_thread_write+0x512/0x1f90 [ 271.431020] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 271.436132] ? binder_transaction+0x5640/0x5640 [ 271.440899] ? HARDIRQ_verbose+0x10/0x10 [ 271.444963] ? lock_downgrade+0x5d0/0x5d0 [ 271.449092] ? lock_acquire+0x10f/0x380 [ 271.453048] ? __might_fault+0xd4/0x1b0 [ 271.457021] ? __might_fault+0x177/0x1b0 [ 271.461072] ? binder_ioctl+0xd48/0x14ea [ 271.465120] ? binder_poll+0x230/0x230 [ 271.468994] ? __lock_acquire+0x56a/0x3fa0 [ 271.473383] ? perf_trace_lock+0x11e/0x4e0 [ 271.477604] ? check_preemption_disabled+0x35/0x1f0 [ 271.482616] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 271.487618] ? check_preemption_disabled+0x35/0x1f0 [ 271.492653] ? binder_poll+0x230/0x230 [ 271.496534] ? do_vfs_ioctl+0xabe/0x1040 [ 271.500577] ? selinux_file_ioctl+0x426/0x590 [ 271.505140] ? selinux_file_ioctl+0x116/0x590 [ 271.509627] ? ioctl_preallocate+0x1e0/0x1e0 [ 271.514055] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 271.519749] ? __fget+0x1ff/0x360 [ 271.523190] ? lock_downgrade+0x5d0/0x5d0 [ 271.527335] ? lock_acquire+0x10f/0x380 [ 271.531340] ? __fget+0x44/0x360 [ 271.534836] ? check_preemption_disabled+0x35/0x1f0 [ 271.539865] ? security_file_ioctl+0x7c/0xb0 [ 271.544265] ? SyS_ioctl+0x7f/0xb0 [ 271.547807] ? do_vfs_ioctl+0x1040/0x1040 [ 271.551949] ? do_syscall_64+0x19b/0x4b0 [ 271.556176] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 271.561535] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0d 04 00 00 48 8b 6d 58 48 29 dd e8 33 33 0d ff 49 39 ed 76 07 e8 29 33 0d ff <0f> 0b e8 22 33 0d ff 4c 29 ed 49 39 ee 77 ec e8 15 33 0d ff 41 [ 271.580885] RIP: binder_alloc_do_buffer_copy+0xc7/0x500 RSP: ffff8881d1bcf5d0 [ 271.590877] ---[ end trace 3f6e9ff2440b5517 ]--- [ 271.596101] Kernel panic - not syncing: Fatal exception [ 271.601525] Kernel Offset: 0x20800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 271.612431] Rebooting in 86400 seconds..