f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x11, 0x0, 0x0) [ 420.315649] binder_alloc: 14641: binder_alloc_buf, no vma [ 420.328418] binder: BINDER_SET_CONTEXT_MGR already set [ 420.353348] binder: 14641:14643 transaction failed 29189/-3, size -24-24 line 3137 04:57:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getrlimit(0x9, &(0x7f00000001c0)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/119, 0x77}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 420.369929] binder: 14648:14651 ioctl 40046207 0 returned -16 [ 420.382313] binder: undelivered TRANSACTION_ERROR: 29189 [ 420.479540] binder: 14661:14663 transaction failed 29201/-22, size -24-24 line 3137 [ 420.488214] binder: undelivered TRANSACTION_ERROR: 29201 04:57:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x7) write$P9_RREMOVE(r4, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff1800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a68770000000000000000000000000000000000000000856164660000800000000000000000002c1b7d000000000000000000000000000000000000000085", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/119], @ANYBLOB='w\x00'/24], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000010000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 04:57:26 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) getuid() sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@expire={0xf8, 0x18, 0x554d90911b127b21, 0x0, 0x0, {{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x4e22}, {@in6=@dev}, @in6=@rand_addr="357780d1d1acc2efd4b0404868eabe7d", {0x0, 0x100000000000, 0x8001}, {}, {0x101, 0x5, 0x8}, 0x70bd27}}}, 0xf8}, 0x8}, 0x0) 04:57:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast2, @in=@multicast2}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000340)=0xe8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) write$binfmt_elf32(r2, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/2789], 0xae8) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000980)=0x7ff, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = open(&(0x7f0000000380)='./file0\x00', 0x600102, 0xac) sendmmsg$unix(r5, &(0x7f0000000680)=[{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000480)="2112221b55ed09c15b56a50a80440fc9aa519658928309a6bdfaa9f71c1114088b2a91053ed1711c0aaab18a23e479aa6cc59f7b15fdcad6012be0458316cee7d28c239a5f9fe452acca500b26837c4ce01adc3c89389d4912533c", 0x5b}, {&(0x7f0000000500)="4487755472ec4cdb5163248dc2cbaab946c7cda4ec015b9a55a144c635931152901d202e0c2fc8b02fe58bf9fbab681dcdd9b33aaf650684226383c22f23d4d2c70051c971a4fa75cdc6261fa0b136e42a0de32f461e0507b6a153f5754dad41d3e815d9510d4f109432883b4822329f6d4171e3d655657e51c46b568f7fff577f706cfc5b2bb91e3901b66d3713b29203f11869a0907a985f003017952152db7922045a02a1bd137ef3d813f6e45a1c572b9ffeb83499f96b89c88d34bc83b652005f72f49bc4c3", 0xc8}, {&(0x7f0000000600)="95c4026a08", 0x5}], 0x3, 0x0, 0x0, 0x10}], 0x1, 0x80) r6 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) fcntl$setstatus(r6, 0x4, 0x0) readv(r6, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) connect$inet6(r6, &(0x7f00000006c0)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x2b}, 0x5}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0xffff8001, 0x4) recvmmsg(r0, &(0x7f00000004c0), 0x400000000000251, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$ppp(r4, &(0x7f00000000c0)="a57f03513d26e5a8415dfe4b8182064bd616ef24c1f0a1ad154c5b67a8870c44919897aae5e36d9e0da5f3795c3afe9e5a73d1033d3c5778f13c690f3a23d3b5e88ddd261226b26917f502f09b134d82993db0b64fbf423cee12bf4f0172111fdb08e795ae50a924d24fa3bba60b0c81591890ada51fbb70e41ea8c9ec20d22a92b3a945d54f0251284d1f1fffe7b5322a768b44054deb5d8fad70b93f5a0c050bc86bea104d480172e764338bd3303f67", 0xb1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0x526987c9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x2, 0x2, 0xff, 0x1, 0xbc, 0x8001}, 0x20) [ 420.599494] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 420.611782] binder: 14671:14673 transaction failed 29201/-22, size -24-24 line 3137 [ 420.632246] binder: undelivered TRANSACTION_ERROR: 29201 04:57:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = eventfd2(0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000140)) fstat(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r7, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r7, r5, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) quotactl(0x0, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000300)="9aea9f3aea3e5513c48a6aab0df5fe8f321fcf0debaf0fa1074619b852b1df1a154dfa7e553335b34d80c86f87cf6745014c31f683b9adc12beb258c40b4e2899be73e22a78a1f5f398e86ca9099d98d54dc84bd68bad021fb583f981c989fc1b8f7997ec6461cc12db0af8ceb43655702d58eacdaf37f31740886c74ec9555893c362e4b0e7bb77a80a5910dd4cbb6ddda182be9a14402b1be5c97d717eb83efed28f27d969a57699c63433f81081103322057759077c95182742dae269722c7dabbaf32c1b060913da4c3517d225136e9e31506c68c78f75790b98f7a451ccb8b140b7f2df4f3114f1e3af72b46e") r8 = fcntl$dupfd(r2, 0x0, r3) r9 = add_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)="23a825cc6037a37ef605e45f25be77459531a0f6ced63c8953496493359644885bfd04b6364086ffae911280138175b77af75e6e2ee98c582044136940e9808a2ee2052baeb0c0618abc824043eb79a9ebeaea67c7998103c05aab5e05be1b8ba70b248caab5c5aa76d4bda004e3bc5c7c42c85e9211347488ac5ef591fa8052756c2d3040864224d1770858ec66cf7d04007fc1dde8c12707a7d9324c8dc1626e10ea4d79640b2ba8b08ef4ff61777c41a56e4974053074a6a1b1a735dcb4ddce5c21807940a23f73d01d957b51d10452802698417cb0590b310e515a2e8bbad8d5ae20cb62d6528a43ff55e81e279cd96de5c1cc1ba9", 0xf7, 0xfffffffffffffff8) r10 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r10) r11 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, r10) keyctl$link(0x8, r9, r11) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/119, 0x77}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 420.713723] binder: 14680:14681 transaction failed 29201/-22, size -24-24 line 3137 [ 420.722667] binder: undelivered TRANSACTION_ERROR: 29201 04:57:28 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:57:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff1800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a687700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/119], @ANYBLOB='w\x00'/24], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="f4000000200000001e1d005e67136b599f9df3504bf583f6"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 04:57:28 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pwrite64(r1, &(0x7f0000000080)="b675becb7c7516dbb7d1759f44d4aacee9f160f102b0910d16ec4f56ec1b3f3d759e1fe38e6af00893267d4aec697afa813efb710f0898c2024f6a751ead5ecf79977811aba77a0b8984269c91fb504f6aea2916685f04aa2a33be9fcdd89ff9f1533a7a054be99f79e92d8b", 0x6c, 0x9) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x100000004ffe0, 0x0) 04:57:28 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x4, 0x80000, 0x0) socket(0x11, 0x800000003, 0x0) socket(0xa, 0x802, 0x0) socket(0x11, 0x800000003, 0x0) socket(0xa, 0x802, 0x0) socket(0xa, 0x802, 0x0) socket(0x11, 0x800000003, 0x0) socket(0x11, 0x800000003, 0x0) socket(0xa, 0x802, 0x0) socket(0x11, 0x800000003, 0x0) socket(0xa, 0x802, 0x0) socket(0x10, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) socket(0xa, 0x802, 0x0) socket(0x11, 0x800000003, 0x0) socket(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) dup3(r1, r0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x1c0000) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) getsockname(r2, &(0x7f0000000140)=@isdn, &(0x7f0000000040)=0x80) pipe2(&(0x7f0000000080), 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x2, 0x0) socket(0x8, 0x800000003, 0x0) socket(0xa, 0x802, 0x0) socket(0x11, 0x800000003, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 04:57:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x2, 0x0, 0x0, 0x1b}) syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xaf2}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r2, 0x10, &(0x7f0000000400)) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) writev(r2, &(0x7f0000000680), 0x0) r4 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r5}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r5, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) sendto$packet(r1, &(0x7f0000000040)="0130251dc935bdba90f39e75023d60919a9284641118154e244ad8862e6b564b5b033dc946d00341a60f48c01dc43593c5728070464164f49b927297bc328e072d8eaa3e2b364a7bc2f46086a0e7f2c1d2e5d1b6cb3c4566ff4160", 0x5b, 0x40, &(0x7f00000000c0)={0x11, 0x5, r5, 0x1, 0x10, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4ed5e3e499c2b980, 0x2010, 0xffffffffffffffff, 0x63853000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 04:57:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) [ 423.332819] binder: 14696:14702 transaction failed 29201/-22, size -24-24 line 3137 [ 423.350016] binder: undelivered TRANSACTION_ERROR: 29201 [ 423.353229] binder: BINDER_SET_CONTEXT_MGR already set [ 423.353238] binder: 14704:14706 ioctl 40046207 0 returned -16 04:57:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x422102, 0x0) writev(r8, &(0x7f0000000980)=[{&(0x7f0000000740)="d6e70addfa41ae8a24dc26ba6cd67e5f26134de274c6e8e9f17e910ba27d4595177ea0686ffbc77a582b50c40fc7e9fb05423321d08fa1ab4ff73ff15d0c2005a5139c0aba8bfc18537ccd70bfce094cab49eb39760b2e90ebcfe7857c4273057b6844ccd7c9193234b752b0607e42baa8aab8cdd98e0a1160a98552bf532696fbf396588a782994d05d6f7e7e9c128e316fd35ae16205c0c1fc8826d70df9961fecaad5c2a1ea6588eeba5eae8843dc4e1bffb03ad94f8f201a0ad06961bc999fa472581b6a96ef298f83e351f93e99b48b821a010a528d159b121c255af2e3f588", 0xe2}, {&(0x7f0000000840)="e932047054d0467f9a4c72463c50badd4bb27eb5bc3c74cefcb8c2e01e2a77c807377390b94dea7b", 0x28}, {&(0x7f0000000880)="031a8fb922670856bae7f4d79ba5c3d187c0d55c8ad44742b8e5aee4053b960e6766eb90a325eba0225728fdff8b2005457bd94fa44ace1a0fa5ac748204935b700e96fac5f8ac74ea0bb6a8aeee783b2c37ec10841a8d4547d792f58b4ea31e753fc39296c831ccdfb5c5825a7e8eea9c044e3c290a793f4dad1d31f8ec41c25e0bfbf5debc28eb301f3d0d7c096e6e6729d0a319314fabb6ec73c09ba32a7b3eaf0c8252ae7e76bce460a727a13fe80180dc5c177c128a25340a", 0xbb}, {&(0x7f0000000940)="be9363368b2116b1d81a6e2e5456e3f30a70105cc5eece76a7343a346f", 0x1d}], 0x4) dup3(r7, r6, 0x0) r9 = dup3(r7, 0xffffffffffffffff, 0x1c0000) r10 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000180)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r10, 0x80008) keyctl$describe(0xb, r10, 0x0, 0x0) r11 = add_key(&(0x7f0000000600)='asymmetric\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="cc1c82a79020d77cebdd8b575b71edc8f2b7a42431c15d6641383b9514f02a7db45cd6ca97e7aebd966d837e05c5d2ffa1103176a83a6cb3759de2ac1ed4da1776c034f6b1acbf364ff88debc997ea38d54f9d9e09b9a2774d4a85082a05cecd549df243fd26e676272b139450f31cf3decfc68e1b", 0x75, 0x0) keyctl$instantiate_iov(0x14, r10, &(0x7f0000000240)=[{&(0x7f0000000480)="300bc1d8ed1140153a6f40fe2af15a040afe395ee69c3bb6f19c47572bfb54ee9179c8f005949b1831a4cf286eef3ecf29a9e19e1cccc1a3ca6bfe62daf078b9c913ec203d5cb2a7f5524b2419dc080233e2205eb8b42415e1b3159061ce95169d0b07ff7d61a78137d841d59401a66493ef4502b12f5af58420c8fd7bee935edc4abbe5c4f3ff0b8ef8248478effdadb958a9e8b42448301a2c678dd1ba0c52655d19f46c0d64510b752fd2a1dba7af3f2274ff62655272597ac4b4b24a398e551e782043a7af446cc7a730c317b0e039ec52279ac20ea860815acff43052", 0xdf}, {&(0x7f0000000700)="c9d24e6cf03bb5f0d9a7fffdad3a7c581c4a76961b83793e", 0x18}, {&(0x7f0000000580)="b43490a6873a6b69825dbb3e2177d2b839db3e2ea932e08ca3254ba38217b6ebc20d05d260aa6fc45b4dcaf168b2ac810e30a91e0fa8e15ca4845b30ea343b4c73aca52ded9bc810085e8632afc29c4fdf9dfe8bd2", 0x55}], 0x3, r11) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0x80087601, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xffffffbf, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff4c02000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a6877000000000000000000000050f5f3322b963887e0c10b6466000000000000355c9e0ec07c27020000000000001d00000000002800852a747000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="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"], @ANYBLOB='w\x00'/24], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="060000000018000000000000c868c9ffb2040000000029c5"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 423.442735] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.2'. [ 423.451992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.471665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.492947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.504287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.514514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.526119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.538177] binder: 14715:14716 transaction failed 29201/-22, size -24-588 line 3137 [ 423.546926] binder: undelivered TRANSACTION_ERROR: 29201 [ 423.553098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.563063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.573609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.584098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 04:57:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x180003) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x0, [], [{0x6, 0x8, 0x4, 0x20, 0x8, 0x40}, {0x1, 0x3, 0xfffffffffffffff8, 0x40000000, 0x59be, 0x4}], [[]]}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x40000, 0x0) r7 = syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) socket$netlink(0x10, 0x3, 0x3) r10 = dup3(r9, r8, 0x0) r11 = dup3(r9, 0xffffffffffffffff, 0x1c0000) write$P9_RVERSION(r10, &(0x7f0000000480)={0x13, 0x65, 0xffff, 0xa, 0xfffffffffffffee2, '9P2000'}, 0x13) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) r12 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000500)={0x0, 0x7, 0x6, 0x0, 0x0, [{r6, 0x0, 0xfffc000000000000}, {r7, 0x0, 0x74}, {r11, 0x0, 0x8}, {r12, 0x0, 0x3}, {r5, 0x0, 0x6}, {0xffffffffffffffff, 0x0, 0x9}]}) r13 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0xb0800, 0x0) write$P9_RLINK(r13, &(0x7f0000000640)={0x7, 0x47, 0x1}, 0x7) r14 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff1800000000000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="852a687700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/119], @ANYBLOB="77200000000000000000000040f28e3c888a05f300"/32], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 423.594849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.610096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.634844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.645671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.655784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.667198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.677316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.687256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.697302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.707719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.718302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.728230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.739092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.755596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.772635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.783066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 04:57:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) [ 423.793916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.805937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.820392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.831575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 04:57:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/119, 0x77}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000380)=0x4) [ 423.844831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.862184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.899214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.913749] binder: 14727:14728 transaction failed 29201/-22, size -24-24 line 3137 [ 423.923236] binder: undelivered TRANSACTION_ERROR: 29201 [ 423.933016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 04:57:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0xc0582, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000300)=""/234, 0xea}], 0x1, 0xfffffffffffffff7) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000ddffffffffffffff00000000e83b2f7fab9286fffbffffffffffff18", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a687700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYBLOB='w\x00'/24], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 423.945650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 423.972243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 04:57:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r6, 0x10, &(0x7f0000000400)) fcntl$setstatus(r6, 0x4, 0x6100) write(r3, &(0x7f0000000440)="d2cec2886a8ebb683c614a0b91b2d97304b866f0c12f2927901903965430b566fab664375c40881fd75b48957b5dec51444a36f4b3734ef063a10e6cc9f47d324ec9b7980924b7f5dd2de8cff3ce03cd45de65950e345c17a9a343cbb510c9396bff33f43cfedbbe430fabf4b273fd5a67ca72dcd2a07405571885d13dfcfe21fa314fd63e3da73059ac2feb4807398f1471bd66075aecbda731", 0x9a) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, r7, &(0x7f0000000040), 0x8000fffffffe) writev(r6, &(0x7f0000000680), 0x0) r8 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r9}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r9, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000001c0)={@empty, 0x72, r9}) r10 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/119, 0x77}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 423.998967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 424.003522] binder: 14731:14732 transaction failed 29201/-22, size -34178681887835160-1801439850948198395 line 3137 [ 424.019185] binder: undelivered TRANSACTION_ERROR: 29201 [ 424.025280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 424.036416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 424.064258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 424.082338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 424.092985] binder: 14734:14735 transaction failed 29201/-22, size -24-24 line 3137 [ 424.104099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 424.119373] binder: undelivered TRANSACTION_ERROR: 29201 [ 424.126702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 424.148064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 424.181391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 424.195034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 424.205036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 04:57:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) dup3(r6, 0xffffffffffffffff, 0x1c0000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x398, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fda={0x66646185, 0x1}, @flat=@handle={0x73682a85, 0x101, 0x2}}, &(0x7f00000000c0)={0x0, 0x18, 0x252}}, 0x1c00}], 0x0, 0x0, 0x0}) 04:57:31 executing program 0: openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x4002, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000180)) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x1, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) syncfs(r0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') write$selinux_context(r3, &(0x7f00000000c0)='system_u:object_r:getty_exec_t:s0\x00', 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0xe8, 0x1, 0x9, 0x3, 0x6, 0xe1, 0x4b, 0x9b, 0x3, 0x1f}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000100)={@multicast1, @broadcast, @remote}, 0xc) 04:57:31 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:57:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000000)=0x277, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r2 = creat(&(0x7f00000069c0)='./file0\x00', 0x100) sendto$inet6(r2, &(0x7f0000006a00)="6f1f21b5cb2f039a97681b75c33e5b0ab44b95531939b6f5b975412cae7e9d62b08bd357677a93b2810b8969d5e553a41fcbf9a79a5a503ad9a4fbf7525526f1e6d9c02a36d1bc32ce85de71b88346d8fe7d47539805cf981a0c6967e5e9482bb791a97564f729c9299819952ba36643254d6fe82b552c1915992fb946e423f695ebeffd8b04a9cbae992b96461b12", 0x8f, 0x1, &(0x7f0000006ac0)={0xa, 0x4e23, 0x401, @loopback, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 04:57:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) 04:57:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x1, 0x2, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r2, &(0x7f0000000700)=""/250, 0xffffffc9) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000000)) r3 = epoll_create1(0xc0000) fcntl$setflags(r3, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r7, 0x10, &(0x7f0000000400)) fcntl$setstatus(r7, 0x4, 0x6100) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, &(0x7f0000000040), 0x8000fffffffe) writev(r7, &(0x7f0000000680), 0x0) r9 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r10}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r10, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={@ipv4={[], [], @empty}, @local, @local, 0x6, 0x0, 0x0, 0x400, 0x6, 0x1000000, r10}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000180)=r4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x02\x00G\xff\x01\x00\x80\x00', 0x800}) [ 426.360515] binder: BINDER_SET_CONTEXT_MGR already set [ 426.366214] binder: 14749:14753 ioctl 40046207 0 returned -16 04:57:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x101000, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xc74) r4 = socket$packet(0x11, 0x3, 0x300) r5 = fcntl$dupfd(r2, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/119, 0x77}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 426.419299] binder: 14742:14758 got transaction with invalid parent offset or type [ 426.427276] binder: 14742:14758 transaction failed 29201/-22, size 96-24 line 3259 [ 426.440368] binder: undelivered TRANSACTION_ERROR: 29201 [ 426.533512] binder: 14763:14764 transaction failed 29201/-22, size -24-24 line 3137 [ 426.543056] binder: undelivered TRANSACTION_ERROR: 29201 04:57:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff1800000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/119], @ANYBLOB='w\x00'/24], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 426.638221] binder: 14766:14767 transaction failed 29201/-22, size -24-24 line 3137 [ 426.647000] binder: undelivered TRANSACTION_ERROR: 29201 04:57:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100000000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x8932, &(0x7f0000000100)={'syz_tun\x00', @ifru_settings={0x1, 0x0, @fr_pvc=0x0}}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)={0xdc, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @local, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb9a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6825}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40004110}, 0x20008010) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x9c, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe87}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa704}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb1c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa6f6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, '\x00'}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x88000}, 0x8040) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/119, 0x77}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000400)) [ 426.903323] binder: 14770:14771 transaction failed 29201/-22, size -24-24 line 3137 [ 426.916436] binder: undelivered TRANSACTION_ERROR: 29201 04:57:32 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/dev\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) sendfile(r0, r1, 0x0, 0x100000000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) fcntl$setstatus(r5, 0x4, 0x0) readv(r5, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r6, 0x0, 0xff}) 04:57:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$loop(0x0, 0x4, 0x51d00) ftruncate(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x81ff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX], 0x2a) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r8, r1) sendfile(0xffffffffffffffff, r7, 0x0, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/s\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') r11 = socket$inet6(0xa, 0x2, 0x0) r12 = socket(0x100000000011, 0x2, 0x85) bind(r12, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000140)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83950118, r13}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'erspan0\x00', r13}) sendmsg$TEAM_CMD_NOOP(r9, &(0x7f0000000e80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2400c000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000ac0)={0x1b8, r10, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x19c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2c}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}]}}]}, 0x1b8}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000011c0)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f00000012c0)=0xe8) getsockname$packet(r4, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) r17 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r17, 0x10, &(0x7f0000000400)) fcntl$setstatus(r17, 0x4, 0x6100) r18 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r17, 0x0, 0x2) sendfile(r17, r18, &(0x7f0000000040), 0x8000fffffffe) writev(r17, &(0x7f0000000680), 0x0) r19 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000002880)) setsockopt$inet6_IPV6_PKTINFO(r19, 0x29, 0x32, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000001480)=@can={0x1d, 0x0}, &(0x7f0000001500)=0x80) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80001400}, 0xc, &(0x7f0000001740)={&(0x7f0000001540)=ANY=[@ANYBLOB="c4010081", @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf250000000008000100", @ANYRES32=r15, @ANYBLOB="240102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400070000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004006cba000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="7c00020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000300000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004003f00000008000600", @ANYRES32=r20], 0x1c4}, 0x1, 0x0, 0x0, 0x2401088d}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 04:57:32 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000140)="966bf507f60e580f6e3419c6c6d670dc8a86cca32d0000000000000000d7033b926eb9278694c542bb6cfbcca3de591a7403c3c7293da3", 0x1000005e5) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x20000) r5 = eventfd2(0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000140)) fstat(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r8, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r8, r6, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x6, 0x3, 0x0, 0x2}}, 0xa0) setfsuid(r8) r9 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r9, 0x2081fc) read(r2, &(0x7f0000000000)=""/250, 0x128b9372) r10 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r10, 0x4, 0x40400) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f00000001c0), 0x526987c9) write$FUSE_WRITE(r11, &(0x7f0000000080)={0x1, 0x0, 0x100005}, 0xfffffffffffffe4f) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f0000000180)={&(0x7f00000003c0)=""/178, 0xb2}) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 04:57:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff1800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a687700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500"/113], @ANYBLOB='w\x00'/24], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) fcntl$setstatus(r5, 0x4, 0x0) readv(r5, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) r6 = creat(0x0, 0x2) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5001080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x810) r8 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r8, 0x10, &(0x7f0000000400)) fcntl$setstatus(r8, 0x4, 0x6100) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, &(0x7f0000000040), 0x8000fffffffe) writev(r8, &(0x7f0000000680), 0x0) r10 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r10, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r11}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r11, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) r13 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r13, 0x10, &(0x7f0000000400)) fcntl$setstatus(r13, 0x4, 0x6100) r14 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r13, 0x0, 0x2) sendfile(r13, r14, &(0x7f0000000040), 0x8000fffffffe) writev(r13, &(0x7f0000000680), 0x0) r15 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r15, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r16}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r16, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) getsockname$packet(r17, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) r19 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r19, 0x10, &(0x7f0000000400)) fcntl$setstatus(r19, 0x4, 0x6100) r20 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r19, 0x0, 0x2) sendfile(r19, r20, &(0x7f0000000040), 0x8000fffffffe) writev(r19, &(0x7f0000000680), 0x0) r21 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r19, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r21, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r22}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r22, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) r24 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r24, 0x10, &(0x7f0000000400)) fcntl$setstatus(r24, 0x4, 0x6100) r25 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r24, 0x0, 0x2) sendfile(r24, r25, &(0x7f0000000040), 0x8000fffffffe) writev(r24, &(0x7f0000000680), 0x0) r26 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r24, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r26, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r27}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r27, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) r29 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r29, 0x10, &(0x7f0000000400)) fcntl$setstatus(r29, 0x4, 0x6100) r30 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r29, 0x0, 0x2) r31 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r31, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r31, 0x400454cd, 0x7) dup3(r32, r31, 0x0) r33 = dup3(r32, 0xffffffffffffffff, 0x1c0000) preadv(r33, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) sendfile(r33, r30, &(0x7f0000000040), 0x8000fffffffe) writev(r29, &(0x7f0000000680), 0x0) r34 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r29, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r34, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r35}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r35, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000a80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000680)={0x384, r7, 0xd876fbabd06da0fa, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r11}, {0xac, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x6, 0x2, 0x3, 0x1}, {0x6, 0x2, 0x3, 0x1}, {0x4, 0x6, 0x3, 0x401}, {0x7, 0x0, 0xfe, 0xfffffffb}, {0x401, 0x2, 0x2, 0x8}, {0x0, 0x8, 0x24, 0x7}, {0x9, 0x5, 0xfe, 0xa0f}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6c3}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x21c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r18}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r23}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r27}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x84c}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r28}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r35}}}]}}]}, 0x384}, 0x1, 0x0, 0x0, 0x801}, 0x22000080) [ 427.453499] binder: 14785:14787 transaction failed 29201/-22, size -24-24 line 3137 04:57:33 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8c0060}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x68, r6, 0xf6b98f7d4236dc16, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x40414}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc000020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x15) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r7, 0x0, 0x1420000a74, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000120007031dfffd946fa2830012000a0009000000741d85680c1ba3a20400ff7e280000002600ffff", 0x2c}], 0x1}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 427.672086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.693454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.720075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.738920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.758921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.779611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.789880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.801110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.812048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.829481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.855058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.875501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.888327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.900003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.915813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.926426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.941446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.952061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.961951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.971706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.981803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 427.992824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.003061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.012816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.022924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.032847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.042859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.052985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.062951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.072601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.082285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.092095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.101936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.111633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.121283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.130952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.140609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.150304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.162899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.172612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.182595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.192383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.202124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.212099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.221976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.231950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.242692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.252542] binder: undelivered TRANSACTION_ERROR: 29201 [ 428.258607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.268371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.278222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.288191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.298721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.308736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.318893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.328614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.338294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.348158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.358382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.368649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.378416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.388200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.397994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.408720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.418910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.428632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.438295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.448562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.458237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.470333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.485497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.495595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.505489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.515182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.525319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.536504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.546201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.556602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.566370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 428.576058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 04:57:34 executing program 3: pipe(&(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:57:34 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) fcntl$setstatus(r2, 0x4, 0x0) readv(r2, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x5, 0x7, 0x1, 0x0, 0x9, 0x10012, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0x7}, 0x1, 0x5, 0x2, 0x0, 0x7, 0x10000, 0x2}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000001c00071bab092500090007000aab06000000000000004c93210001", 0x38e7e57817205957) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 04:57:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) 04:57:34 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x3, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000100)={0x7ff, {{0xa, 0x4e21, 0x4, @loopback, 0x4}}, 0x1, 0x2, [{{0xa, 0x4e24, 0xffffffff, @remote, 0x7}}, {{0xa, 0x4e23, 0x81, @local, 0xe4}}]}, 0x190) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') sendfile(r0, r2, 0x0, 0x80000002) 04:57:34 executing program 5: close(0xffffffffffffffff) r0 = socket(0x200000000010, 0x2, 0x2) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) dup3(r5, r4, 0x0) dup3(r5, 0xffffffffffffffff, 0x1c0000) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x7fff}, 0x8) r6 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) fcntl$setstatus(r6, 0x4, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x800, 0x0) readv(r8, &(0x7f0000000480)=[{&(0x7f0000000340)=""/137, 0xffffffffffffff80}, {&(0x7f0000000280)=""/25, 0x19}], 0x2a1) write$evdev(r6, &(0x7f0000000040)=[{{0x0, 0x7530}, 0x1d, 0x5, 0x9}, {{}, 0x5, 0x6, 0x7ff}, {{}, 0x3, 0x8000, 0x4}], 0x48) pwritev(r3, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) alarm(0x2d) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r3, 0x0, 0x180003) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(r10, r9, 0x0) r11 = dup3(r10, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$RTC_RD_TIME(r11, 0x80247009, &(0x7f0000000140)) write(r0, &(0x7f0000000180)="2400000025007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) [ 429.381921] binder: BINDER_SET_CONTEXT_MGR already set [ 429.391887] binder: 14811:14813 ioctl 40046207 0 returned -16 04:57:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000d12ffc)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000300)={r2, 0x0, 0x6, 0x1, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x737e4526746eb34a, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) fcntl$setownex(r3, 0xf, &(0x7f0000704000)={0x2}) r4 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x8932, &(0x7f0000000100)={'syz_tun\x00', @ifru_settings={0x1, 0x0, @fr_pvc=0x0}}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000700), 0x31f, 0x10400003) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9800000025528d0af3c2986390948abb067c65fbd0da179642e45cbb9390cc426a6a33fe2c492eaec4c7a13746e2460a505315a4e8e879ecb7fdf28bb69fc9fdb299bd93a6e33b2e0855dd6082e230ecf79b6066872ce8346ecb7623ec3d9bc79c882e4422f05b11c4af5a6f64bf5e911395e2a7c0", @ANYBLOB="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", @ANYBLOB="00012dbd7000fddbdf25100000007c0005002c000200080003000000000008000400400000000800010001000000080001002000000008000100010000004c00020008000200060000000800040001000000080003000500000008000400bdb4331e080004000800000008000400000000000800030007000000080003003f00000008000400050000000800020004000400"], 0x3}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r6, @ANYBLOB="000425bd7000fbdbdf261200000088000100080003001f000000380004001400010002004e24c81e00010000000000000000200002000a004e2400000008fe8000000000000000000000000000aa050000004400020008338aafdc6fd4326e0004008000000008040000000100080002009a0b0000080001000d00000008000400800000000801f3b93cbce110490300041aea0008000100020000000800010000000000400007000800010000000000080001000101000008000100256800000c00040002000000000000000c000400050000000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40004110}, 0x20008010) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"]) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r7 = memfd_create(&(0x7f00000000c0)='n\x9e\xc2ux/.bdevh\x01\xd9\"\x8f\xa9\x91\x95\x7f\b\x00\x00', 0x0) ftruncate(r7, 0x4000b) sendfile(r0, r7, 0x0, 0x10010000000002) [ 429.448149] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 429.466756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 429.478923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 429.498414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 429.515341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 429.525536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 429.549866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 429.576054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 04:57:35 executing program 2: socket(0x6000800000000010, 0x2, 0x0) [ 429.595993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 429.604653] syz-executor.2 (14825) used greatest stack depth: 22064 bytes left [ 429.613566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 429.623733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 429.638398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 04:57:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x6, 0x53, 0x7fff, 0xff, 0x200, 0x6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000000190000000000389bb212e1e0cc0a0001000000000000000000c00000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004400050000000000000000000000000000000000000000000000000000000000c55f397f6ea6d2e72d8a8a2c91f94abf00"/180], 0xfc}, 0x8}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0xe31, 0x0, 0x0, {{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x6e6bb9, 0x0, 0x0, 0x1}}, 0xb8}, 0x8}, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r7 = inotify_init() socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f0000000380)={@local}, &(0x7f00000003c0)=0x14) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r9, &(0x7f0000002a80)=""/4096, 0x1000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(r11, r10, 0x0) r12 = dup3(r11, 0xffffffffffffffff, 0x1c0000) preadv(r12, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$VT_GETMODE(r12, 0x5601, &(0x7f00000004c0)) getdents(r9, 0x0, 0x0) inotify_add_watch(r7, &(0x7f0000000080)='.\x00', 0xfe) r13 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r13, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x14) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r13, r13, &(0x7f00000001c0), 0xa198) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'bpq0\x00', 0x1000}) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@dev, @in6=@empty}}, {{@in=@local}}}, &(0x7f0000000480)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000200)={@multicast1}, &(0x7f0000000240)=0xc) r14 = getpid() fcntl$lock(r7, 0x5, &(0x7f0000000440)={0x3, 0x0, 0x400, 0x3, r14}) 04:57:35 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3100cd80361b2c38"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) socket(0x400000000000010, 0x802, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:57:35 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) creat(&(0x7f0000000480)='./bus\x00', 0x19) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getpgrp(0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/\x06\xf1\xe9\x1d\x9d\x1c\xea\xf0E\xa9Su\xaa\xe5_C!\xf8\xdb\xee\xa3\xdcoW\xd4<\xcbj\x15\x87\xd1\xdc\xea\x8e\xcc\xf0\x98\x8b\xfe\x89\xa8p&\xf5O\xe1\x17\x84f\xaf\xc1\xbc\'\x02gU\xcb_\xff{T@@\x99y\x9a\xee\xefC\xb0\xd3\xea\x12\xf1\xb3,\xb4\xd8\xbc\xde\xb0\xacT\xff\x80\xd6W\x99>\xf2\x91Y\xe9\x83\x7f(\xee\xcf\xc0\x94\x1fX\xbcV\x11\xc2K\x95\xf4\x19\xc8\xab.\xebRZ\xab~\xc1\xd0\x98\xfb\xc2]\xd5\xb0\xd1\xcc[\x81\xb8-\xa8y\xcc4\xd8\x1f\xf0z\x8e\xc9\xcfQ\xa6\x03\x8e\xfe\x81\xccT\xfa|\x83\xa3,>l\xa2\x1d\x93|\x1f\xae\xf2\x9e\xbb\xec\x82\x0f4\x1b\x05`\xf9\xfby\'\xea\x062z\xdft\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2CD(\xcd@\x8cd[D\xe2cN\x039](\xa6N\x9f\x8c\x99\xe6\xa3\xcdR\xc0\xe9$\x8a\x94\xab\xf9\xd9j\xd4\xc0\xe2\xbb\xfa(EV\x19\xc7\t\xe9\xaep\xf1\"A3\x0f\xa26m\x99\xf6\xa6ae\xb3\xd5$\xb0*\xd0]~F\xab=\xc5-g\xcfx\x1ds\xd06\x82u\xa7oJ\xd7\\\xce\xf80xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) eventfd(0x0) fcntl$getown(r1, 0x9) getpgrp(0x0) socket$inet(0x2, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x0) r5 = inotify_init1(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setown(r5, 0x8, 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, &(0x7f00000004c0)) [ 429.675085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 429.685384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 429.698065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 429.715009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 429.783728] input: syz1 as /devices/virtual/input/input36 04:57:35 executing program 2: open(0x0, 0x0, 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe) writev(r1, &(0x7f0000000680), 0x0) r5 = socket$inet6(0xa, 0x0, 0x0) r6 = open(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), 0x0, r5}, 0x68) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0) socket$inet6(0xa, 0x0, 0x6) pipe(0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) write$selinux_load(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="411f1b3932cb7ec46fda058645abbd4a8c3275cc54ed19577eae500708000000bb386c184f3bcb2b89d31fdcf4468de44fec532eaba87f85c47a00bb66503e502b8d19c602109dc51008a0e3e3a7365951c3e9eddcc5c5b7b60d5b7e2da60717e50037ab1802800508dccf29a46591b5de396cd6041d3a7e95f59d1cbd89cf440e7edeb0eed201c7e535aa397fb50027d9f83f6a6b0e5198dd8f832f30bfa2b1cb43032610be"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r1, r4, 0x0, 0xa5cc554) 04:57:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'nr0\x01\x00\x00\x06\x9e\xf1GC\x818\x91\x94n', 0x811}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) r6 = eventfd2(0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000140)) r7 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r8 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) r9 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r9) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r9, 0x0) fcntl$setstatus(r9, 0x4, 0x0) readv(r9, &(0x7f0000001b80)=[{&(0x7f0000001d80)=""/4083, 0x1003}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68}], 0x6) pwritev(r9, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r7, r8, 0x0, 0x180003) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(r11, r10, 0x0) dup3(r11, 0xffffffffffffffff, 0x1c0000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r12, 0x400454cd, 0x7) dup3(r3, 0xffffffffffffffff, 0x80000) dup3(r13, 0xffffffffffffffff, 0x1c0000) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000100)={'n\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r14, 0x400454cd, 0x7) dup3(r15, r14, 0x0) r16 = dup3(r15, 0xffffffffffffffff, 0x1c0000) preadv(r16, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) r17 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r17, 0x0) fcntl$setstatus(r17, 0x4, 0x0) readv(r17, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000280)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/55, 0x37}], 0x6) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r18, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r18, 0x400454cd, 0x7) dup3(r19, r18, 0x0) dup3(r19, 0xffffffffffffffff, 0x1c0000) r20 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r20, 0x400454ca, 0x0) ioctl$TUNSETLINK(r20, 0x400454cd, 0x7) r21 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fstat(r21, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r24, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r24, r22, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@empty, @in6=@empty, 0x4e20, 0x520e, 0x4e24, 0x81, 0x2, 0x130, 0x40, 0x2, 0x0, r24}, {0x7, 0xffffffffffffff01, 0x10000, 0x1a, 0x84000001, 0x7, 0x7ff, 0x8}, {0x7ff, 0x3, 0x5, 0x9}, 0x39, 0x6e6bbc, 0x2, 0x1, 0x0, 0x2}, {{@in6=@rand_addr="53f10d39414309068be3c9d2608b4739", 0x4d2, 0x32}, 0x2, @in6=@loopback, 0x3503, 0x0, 0x2, 0x7, 0x2a1, 0x1, 0x5}}, 0xe8) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000140)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x132}) getuid() prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) 04:57:37 executing program 3: pipe(&(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:57:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) 04:57:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r6, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r7, &(0x7f0000000700)=""/250, 0xffffffc9) sendto$inet6(r7, &(0x7f0000000500)="3ddd40caf419a9b7d7c34c570daac2025e74a8b6aa643d053954fdc6aa675611a6b2184e936c538a24a5d98c7ea141f0dc4caac88b8ee2cd0e95f7fd359995fd650646d0b86d3f7ac93769760f81cde9129dbb23806a55677cf69a346f43dabfca91765f5ab8ec94f2fde63957727843dd695c29ae57b7622f35989ae78bc3c9dca805c90329bd7262ba3260eedc9575", 0x90, 0x10000812, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r6, 0x0, 0x180003) r8 = fcntl$dupfd(r5, 0x0, r0) syz_extract_tcp_res(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0x3f, 0x4) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344}, 0x1, 0x0) write$tun(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05c2000290780040131220cb2a598e3ff4cc75f3dd34af1c5be100007a2f4a647e1040c32cec146307b6798418593e6d16101f028f96df00f360816e9062fd38bbee6410f8c698c33a99182893ffff1dbb48d8c562985519fc02fa222dec3f545ba183c670274b3cbe416edde13c39af0955d7c48b61cfec55c818d9a58b0acb1305afb1cfaa5a135b1809804ac9ec6e811f44ebf236a1a1ae26b417dbd3b02e7d3853"], 0x1ed) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/119, 0x77}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 04:57:37 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00\x91\xa5\xea\x18\xee\x13\x02\xa1\xb2#2\x12\xf45!%&\xf8\x023\x82\x83G\xad\xf2\xdc^G\xa3}`E\t\xed\xf4\x99\n\x94`F\xef\xe0HL*\xa5\xd4\xb2\xb93\xabl\xa3;h,\x1e\x1a/a\x99\x11L\xba\xa82&>\xd1\x05s\x87\x02$\x0fg\xd6\x15\x7f\xf6\x1f\x9c\xad\xa119\xad\xc56\xe91\x9e\xed\xb4\v\v\x80h') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) read(r3, &(0x7f0000000000)=""/250, 0xedf1d44) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40400) fcntl$setstatus(r1, 0x4, 0x6100) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r6, &(0x7f0000007e00), 0x40000000000025d, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r7, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x0, &(0x7f0000000100)=@abs, 0x930000) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000400000000000000b02300000000000009000000000000000000000000000000000000000000000000000000000000000100000000000000010000000000000000000080000000000300000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/304]) 04:57:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000002140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000002180)=0x10) listen(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_GET_TIMERSLACK(0x1e) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) dup3(r5, r4, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x1c0000) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000002100)='tls\x00', 0x4) sendmmsg(r6, &(0x7f0000002000)=[{{&(0x7f0000000140)=@nfc_llcp={0x27, 0x1, 0x2, 0x0, 0x0, 0x1, "1c8f32f0a2ea5432e53abfe3433384efd73d0f9a638d98061d152298496efe746369a9a137710c39b58266677a20ea3ca0bd7f8719d02894830dc221d36fc0", 0xd}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="57ddc5dffb268604e462cf91215e8d0bf756b99a7b98c90986db3c3c2f862bcdb11e0b1b2db5c078f91e606bf983479c077b1e5449819f82f4cf10807ee587dcae8f5d12db26bc9cb92d727b8e07c10b282bfb6f371ce4820349e0caf05d7c417f979664f70aa0edc6b9ca027094621cdfa0cec7b2c631338a", 0x79}, {&(0x7f0000000240)="8f8ce65b71d0aeed7e2cff648d68beac46d27af94d21d10f6fedbf2f305eb007d38557191148141b0410f65522dbfd0ffd9e6c0cf0e7072537c3e4c85d4fcebad068a47bc47e362355d57b", 0x4b}], 0x2, &(0x7f00000021c0)=[{0x190, 0x100, 0x6, "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"}, {0x100, 0x5, 0x1, "ffa6991eeb6e22eb1989b2005f68bf09e1e8ab88921302cf972b207e227ede2d5f5d9fd7712ee2464eebeabb83f1710e6afdc84914dd3dd55cf077a6132b4817f1286ee25424ebf5912e8595942d11c99a2eaab851b16eae0a04429bcf82fcb049ef7658d3f16c373f96a6803a0b31d3c9d4d414bc95254b21080901db1cd850d8ad5e2bd7cdcd776beec0ef119a95fe8efd8327a7e5e554477f1fcb00c56f0a0ec3b19ffec8d0d008b334380382dcb27b45060e40446cef8ae522228afbc31c5e147285ec438a1756996bec5966162b2400ce5125a5ab6c69dfefc5b6f9f47a8ad91572bf3e34913e8bc119d7d66b72"}], 0x290}}, {{&(0x7f00000004c0)=@x25={0x9, @remote={[], 0x0}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)="ca5c48fa582d35ee430db4928ada34beaa314275c2f02a43bf2dafe39b1dae2e4495ba295f0c3c4b05", 0x29}], 0x1}}, {{&(0x7f0000000540)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x8, 0x0, "4b9c5450a6aad44acf44d63131ec041daefd395e1e3b6cda25212f5dfefd7e169a24ae5af746ffd22bcf31163bbc2d841f6e0164ea336220b3ecdee69ca1d3", 0x27}, 0x80, &(0x7f0000001700)=[{&(0x7f00000005c0)="d89398a480670ab9f66a8881cac4af6104a89001bf4ef5947f8b8ca8387cad582de2e3daf1d5bdaf4f2e094dc81a6970675fc20106a48e44a4e64e72efc76bdb207b4ea30bda1f1fe02e9594316e05467a341ca620f841cd8ac51a65fbcd310ee27ebdb8c07d643f2a1e516bd4ec57813eae45c9e8fa8da7aa6001ba465c1efca6a6de45b400541e72d1edc9afcb1e97eac05571130df20af71adca4ef81e2c91cb41689366dc36db34a711947d9c7c0f867bf7127884458782cfa570e4e740e2ddf915bf0985f3c9bfbeac496436cba5e60e4324b6ddcb8df2209a6ce80dcf4b85a7e7c20fdf4c8830bf9", 0xeb}, {&(0x7f00000006c0)="b4711d1d01f63f1ef62dd8fe2c34483f5e8848ce5d43b5fe5479e83dfbeb88ade37d7c07182e39ae79d4542514", 0x2d}, {&(0x7f0000000700)="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", 0x1000}], 0x3, &(0x7f0000001740)=[{0xc8, 0x1, 0x0, "888c8955a7258497de23d75dcb7a1c60bb4818a9358498d2de97bc8c923894d3083d0963612e4ebf8a7a6ff97e13274b8b415024ef7d380bb594fc7f3edc6d804a2f0d7267ff3acff6e9b9170a9a810047449da8262cd464d2de546846c0b64b859c2d3d498ad3af61749eeb3ee1bb00c676b47a2b6b472b4c116c375c1b84967110aead6751f7001085392d6b4dfe068361c9f88a54d533be607209f1551c83118d0c69962b8d7fedb82572d4ffae46950a5610"}, {0xf8, 0x318, 0x8000, "3a1c540c9b9f536ac9af324435f6073bb3dd92d52e8fa02aa480706ac6deaf851493fe7c434169d9c1621354dc3504934a650de486cff6728b46f1ca11c0cf69f0fa342e8feeff250e9e7fd5b87fc73d05d5db8419ff352371db363cce828e5c5e5156f3276bde0c240375d96d744a36564086a1de424d1ba22a73f00469e848cba96caa22cc9fe4eebb2f6e8dbac1b2601bce9f30faa92ff070357de508253e64df0512b2b21d7bdfaa5565a7502a4372c75812101a66e871d7b01352c6dea674de199a28421a689e4bd55e993a7bbae2390437779b9bad6fb4d60bd22f4fa5408e"}, {0x98, 0x219, 0x401, "6755644154c8d9ba149938d4dd1c3d58c5bef08e34a16edc25f7036737c57bd8dde76a0d218350ef72df542f748c85313e88c14a631f490876ace084d29ab55fe27cde08e932d8ab7a4ab10795cbf7593b189d6b6f0ada4b8f51381c5c3e420ee6582696eac95f7fe647cc516713cba75fc07e4efa7f58204f648973e8d5e0eb32e3"}, {0xf8, 0x0, 0x1, "3a8d0732131a7cc9fa72daeb017845fc5336f500caf1247bcdde07cc5934dd131b64e649667f4202ce08f1097840ba116c1c0e7513e16c3b6a25c45e2664528ffe08a83700989ff4276cad9390a24c27be0e270c8f41543895358f75a3d4fcbb297ea2df9dc86f1242922a7319ef05f1c52a0e7ff939e45673a9a5092d2c5dd715a436e280d0898014eb264cf65359738e4e077225428535b2f415536250653e48dca2d572bee35541b0617bd1a94cf89d133ea71eedd7e30c022de981df33182fc0b6f26f3fc04febb3d9c797e43b4311c07b820630415a9f236ff56f1b5678924faa85ab905f"}, {0xe8, 0x119, 0x401, "ef61a9f37bf0c3e72e140e877bd35d2f734d9bf8c1159a3d98f87c78dff41f13d72886a5c3bbc5849abb6a693f3082c6e4ffef00c3fba39686939739b2efa07de57e8af11d380ad67498d59f0c6860447a5320056fb1449239a85dbb9216a0e7eb841c3aca671770167cd96ef6936930f3ac73300f6803c249365634178ac9af9c89ccb8e048bf7832995754e5f6d7ddc09d75198facd851f633719e242f28b5514969426131283dec2b9cc7378d2877498d8de1d10b108d4fce1d339f4380543e71202e972b4c8391cb77e9dad8dfc3edb8c5ff0cea"}, {0x28, 0x10b, 0x4, "1b34c4079a0aff4d119c7401789bd67e6b103bd2b0"}, {0x80, 0x100, 0x3, "371593cd13af886e83090bc4948a76e3299739c5c83c836770c7b3e6a83cdbb5d90d7c36cdd06d90e4ee9f8e476f393038b1429891800f4b17bcb617a8ac4e16daec7aeab86042e2ea63d8faaa055a4e61fc34790a493e886f5fe780aa80f89a4306b1b3224bd014387b662244f61f1e"}], 0x4e0}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c40)="3d4203718fc1d5c22d8969fbe5d0effeee6fcf1c7e1469507c7112151ccbce87e839c9f0735369c101054cf0a209b183b57037785b", 0x35}, {&(0x7f0000001c80)="2dd85fb6e9e95d6acddebcce8f77c48646b535068be1c676069a863124cad95d1de55ff106e032712a56c09c80d168af05e65fbc269d1c72b58f331ea5e92f4406d17996ebbe441c86304c4365f5e890c7a349a3ae967184a54c187dc3c2e529aef246a9d477225560eaea55b257bc329db48b488511a9d53eb150f2a7e6ffd8fd91a8494d3c85b88447577cd3dbd1582fb4b33ee184f330a47e4086d7", 0x9d}, {&(0x7f0000001d40)="fbf89c867dd984b403f7be3a6cde404fa7303ec3a627f4fa0d26b6836e6ffc7ddd270e90a1aa7538e60dad31f7de01391533f5fb82aac4a0fbc1dd", 0x3b}, {&(0x7f0000001d80)="000644f36d69eae694eba185f663b3b8c758f1fa57919f0de90791bfae62c51260d1214680a010a77862c847a9dfd61719173d14c3e3d223b3c5823df538a7fe6e58ef77a9e27abcf12e7ac9e4bc8758e26326cc82e9bebfc17a31a28959f4d4b65f86e2a7fc32402dc84b0686678f430e5f6dbc22c3002e1f7545c41d78e02c2d76b83eedd6318f677c95329be69af66228a90330b7c9030e4ea1e37bb6cd9c32941160a2440e841d93ff2f2adb4ad6489b6f12acdd0e55d68fb8d159f4f1d5546d2fae20c479b4352af5bef09d2db8e0e0ac320e305391890d238700cafe0168b733d1c878886e6478617eee696a16acd733b7358ac76e", 0xf8}], 0x4, &(0x7f0000001ec0)=[{0xa8, 0x116, 0x10001, "132bd4eb127d94d684a44e1d1ee0e753a246d6cd8ce8ce5e5dbe22a752f68b0aa957288f001f96e27092586c644c325433f3487700c310021b0d3836100fc8e4b758f00785af84fa7dc09be158728fb36abadf9d4ae563d1f0a95ed439e29eb48c46a9b4fa93fcad5d96b865d3d34905e3c4e238827ee1ed91e13b37cc720bac5e99ed540292adf0a5b2732bee4578b8f7056e16"}, {0x88, 0x35e68e7410807727, 0x4000000, "39a46280fc87364b377b701dc8e12af7d223334ed0c57a1b4e6de9a9989b53715dc00515beead9651b107852ce5aea38da760d3bb36012e18ed3f2dce2a776e6eaf70edcb222bb33066cbf194d893244a32ab17095506aefa969dc0082c74d27ff2a2047d02891977dee1e8cc6bd8743cf522c98"}], 0x130}}], 0x4, 0x9cbe0e7bf9e8e54a) r7 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r7) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) fcntl$setstatus(r7, 0x4, 0x0) readv(r7, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f00000002c0)={'veth1_to_team\x00', {0x2, 0x4e24, @remote}}) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a0665bc45ff81054e220000000058000b480400945f64009400050038925a01000000000500000000f0fffeffe809000000fff5dd0500001000010009080800418e00000004fcff", 0x58}], 0x1) 04:57:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x680, 0x5c) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20008088) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x100000198) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) sendfile(r1, r2, 0x0, 0x8000fffffffe) io_setup(0x7, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f00000006c0)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r7, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) fallocate(r7, 0x2, 0x20, 0x4db2fd78) dup3(r6, r5, 0x80000) r8 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r9 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r9, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) sendfile(r8, r9, 0x0, 0x180003) r10 = eventfd2(0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ashmem\x00', 0x180040, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r11, 0x400454cd, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r12) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) readv(r12, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) openat(0xffffffffffffffff, &(0x7f0000001680)='./bus\x00', 0x2400, 0x20) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r13, 0x400454cd, 0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000016c0)) fstat(r10, &(0x7f0000000580)) r14 = socket(0x9, 0x8000f, 0x2d) r15 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/load\x00', 0x2, 0x0) r16 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001580)='/dev/bsg\x00', 0x1c285, 0x0) io_submit(r4, 0x4, &(0x7f0000001600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffa, r6, &(0x7f0000000240)="f712c41dc230ed0e76eb8ad3eaff1740c4da047f8f467dc1399a9bff8296e02d14920ea4570469d2264bb23a02324f6d16a764b1a0d76bfb9082a65f7b881ba6b2d2c4702829df78940d1d6d6dd726b6888d76ac7578677730573718488e621f53fbe321d152a6b511aa78011444dd812bfe2d98f1f2cebfefa2e19d3d18d8c2486144f5f2d3bc23dcfc56cfcdde919f82f1f9e7e3a4ddc7d0724d33f7493bdaee2dc22533b3fa55", 0xa8, 0xd6}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x98, r8, &(0x7f0000000300)="b985791ff4bde879a25f0ab47a52385bf775cfd52a7b50dbdd645b22646d4bdd6061e6ca102188b14d7aa3edc1c9e4eb21187e2d91fb420c7a5f8000664437276cab3a57dc5427b78485ec0410b09a545c8c56c7fdb3118ab501b8d5f62f19efa84b79c0819b976fc5a14444f2d7fe77af6b7471c35c5f24a101ddc193713d2a9b846e64a8a69a59f6bd99f82e4648a249f234312661f754ba8f99808637af92d13f9c417f4294768561ed26b53ecb1f21c34aa17f0c2c27eff6bab8294e4d1040bd2c427a4a0d662715d7370ca4aa10ea2550f53931a83b59ea4a03604a4184bb", 0xe1, 0x2, 0x0, 0x3, r10}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1000, r14, &(0x7f00000004c0)="17805f758dd5356581654fbc57bc725bd0ae845922df9ee3a87a1c", 0x1b, 0x3c26fbe6, 0x0, 0x3}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x8, 0xdb2, r15, &(0x7f0000000580)="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", 0x1000, 0x6, 0x0, 0x4, r16}]) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) [ 432.389071] binder: BINDER_SET_CONTEXT_MGR already set [ 432.401132] binder: 14884:14886 ioctl 40046207 0 returned -16 [ 432.450441] binder: 14882:14895 transaction failed 29201/-22, size -24-24 line 3137 04:57:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) 04:57:38 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="180100062000100018000200c60c314fbcfcacd200b6e9b81e8eae77ea7db842"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r0, r1, 0x0, 0x88001) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@rand_addr, @multicast2, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x21}, r6}, 0x14) sendmmsg(r0, &(0x7f0000005780), 0x4000000000000d2, 0x0) [ 432.621421] binder: BINDER_SET_CONTEXT_MGR already set [ 432.639861] Dead loop on virtual device ip6_vti0, fix it urgently! [ 432.643417] binder: 14906:14909 ioctl 40046207 0 returned -16 [ 432.678179] Dead loop on virtual device ip6_vti0, fix it urgently! [ 432.702882] Dead loop on virtual device ip6_vti0, fix it urgently! [ 432.727081] Dead loop on virtual device ip6_vti0, fix it urgently! [ 432.742324] Dead loop on virtual device ip6_vti0, fix it urgently! [ 432.757487] Dead loop on virtual device ip6_vti0, fix it urgently! 04:57:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() pause() ptrace$setopts(0x4206, r5, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) [ 432.838152] binder: BINDER_SET_CONTEXT_MGR already set [ 432.850720] binder: 14913:14914 ioctl 40046207 0 returned -16 04:57:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r7 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r7, 0x0, 0x180003) fcntl$getownex(r6, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r8, &(0x7f0000000100)='attr/current\x00') ftruncate(r5, 0x200004) r9 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r9, 0x200004) 04:57:38 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r2, 0x323, 0x1ad}, &(0x7f0000000300)=ANY=[], 0x0, 0x0) gettid() lsetxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f00000005c0)='security.ima\x00', &(0x7f0000000500)=@v2={0x199495597533e665, 0x2, 0x3, 0xfffffffa, 0xad, "d5d72165bfbbf507667ae19c8281b940343f90c8532b4a631b4e8e2203564ab4d9e08612dfa6fe49606aba47dbb79d2133369a2fbcc121dcd92e504f626dafd21e77f37ce247ac4f57602e1f5333078ddac60e58017d835e15329e0b46cbbd95a1be0ae9410e519eb8cfc4ef13e2afa0b71ef0e9e4f45325c9b957e71fb3cfea00088c442c8a5cbf4f905f969157775427ee7fe7edab804457b788840fffee14d72879"}, 0xad, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008913, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') dup(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r5, 0x1, 0x28, 0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f00000001c0)={'\x00\xf9\v\xa6\xf6\x82Ks\x16\xd6 R\n\v\xb3\x00', {0x2, 0x4e23, @loopback}}) write(r3, &(0x7f0000000600)="61a94e087febc97dafbd5f8475ceaeb9ea230fb625e33c2d3d08cb4d3e4d27274f5cc1043d6b58934e36b59369f5baa498456558ccc38844663a96052af6f29d241f3c4486d0b1ce4f3b4e6a0ab15636d97ed1c3042af37154", 0x59) read(r1, &(0x7f0000000200)=""/237, 0xfffffffffffffe5d) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x4) r8 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) ftruncate(r7, 0x81ff) syz_genetlink_get_family_id$tipc(0x0) [ 433.188765] binder: undelivered TRANSACTION_ERROR: 29201 04:57:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c) mknodat(r2, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES64=r3], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00032abd7000ffdbdf250f00004400010008000b00736970000c000700500000001700000008000b0073697000080005000400000008000b0073697000080001000a00000045fe07002100000002000000080004000200000008000400ffffffff"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0xd0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x2, r3, 0x20, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/119, 0x77}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 433.357105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket [ 433.387417] binder: 14927:14928 transaction failed 29201/-22, size -24-24 line 3137 [ 433.404925] binder: undelivered TRANSACTION_ERROR: 29201 04:57:40 executing program 3: pipe(&(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:57:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x27c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd6c9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4e57}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x62}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x28}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x20040080}, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/119, 0x77}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 04:57:40 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x2, 0x1e6, [0x200002c0, 0x0, 0x0, 0x200004f4, 0x20000524], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x25e) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000780)="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", 0x371, 0x400d084, 0x0, 0x0) 04:57:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x14812}) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x80) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r2 = socket$inet6(0xa, 0x1, 0x24) dup2(r2, r0) 04:57:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() pause() ptrace$setopts(0x4206, r5, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) 04:57:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = dup3(r0, r1, 0x80000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x2b0, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400040}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x209}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x4c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe58}, @TIPC_NLA_SOCK_REF={0x3, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb0b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf2139ac}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x40}, @TIPC_NLA_MEDIA={0xcc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x91}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd9e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9538}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58ac}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x17}]}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x104}, 0x4004000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x526987c9) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580)='/dev/bsg\x00', 0x101000, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x306) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000480)={{0x0, 0x2, 0x20, 0x2, 0x9}, 0x9, 0x6, 'id1\x00', 'timer0\x00', 0x0, 0x6, 0x4, 0xffffffffffffffe1}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414000000a1d3138218c97f0bb5cdf4a400"/50, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000008000c0000000000480001006d643500"/248], 0x140}}, 0x0) 04:57:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22fffffbff}, 0xc) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r4 = socket$inet(0x2, 0x5, 0x18) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f00000000c0), 0xffffffffffffff5a) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 435.421957] binder: BINDER_SET_CONTEXT_MGR already set [ 435.435583] binder: 14945:14950 ioctl 40046207 0 returned -16 04:57:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/119, 0x77}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 435.471225] binder: 14944:14947 transaction failed 29201/-22, size -24-24 line 3137 [ 435.480981] binder: undelivered TRANSACTION_ERROR: 29201 04:57:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = eventfd2(0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgid(r5) syz_open_procfs(r5, &(0x7f00000001c0)='limits\x00') r6 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/119, 0x77}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 435.516383] binder: 14961:14965 transaction failed 29201/-22, size -24-24 line 3137 [ 435.525647] binder: undelivered TRANSACTION_ERROR: 29201 [ 435.534386] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket 04:57:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22fffffbff}, 0xc) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r4 = socket$inet(0x2, 0x5, 0x18) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f00000000c0), 0xffffffffffffff5a) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 04:57:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff1800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a687700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/119], @ANYBLOB='w\x00'/24], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 435.618904] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 435.650665] binder: 14974:14979 transaction failed 29201/-22, size -24-24 line 3137 [ 435.661565] binder: undelivered TRANSACTION_ERROR: 29201 04:57:41 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000380)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(0x0, 0x0) socket$unix(0x1, 0x5, 0x0) pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fb52ed05059d"], 0x6}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) fcntl$getflags(r1, 0xb) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 435.724426] binder: 14984:14985 transaction failed 29201/-22, size -24-24 line 3137 [ 435.735887] binder: undelivered TRANSACTION_ERROR: 29201 04:57:43 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffd) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x1, 0x6}, 0x0, 0x0, 0x0, 0x442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0xffff}}, 0xa0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r5, 0x29, 0x24, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r6, &(0x7f0000000700)=""/250, 0xffffffc9) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000140)) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000680)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f0000000440)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000400)='security.capability\x00', &(0x7f00000005c0)=@v3={0x3000000, [{0x8, 0x1}, {0x0, 0x71f40d98}]}, 0x18, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r8 = dup3(0xffffffffffffffff, r0, 0x6c468e8bde84cb05) fgetxattr(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="757365cfe36debdb7ea56d73656c696ee5cfbb"], &(0x7f00000018c0)=""/4096, 0x1000) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r1) r10 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[@ANYBLOB="0b010900a1000000270300000700000076010000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003b4b55f800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c1f12e5d583f00e236b816beaa6100"], 0x205) ftruncate(r10, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000100)={0x0, r9}) 04:57:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="11634840000000000000000000f6ff00000010023a4800973408bb5720bfc80092a8c91c0000000000000000000000000000000043c7c6ff25ab1653abc97f0fb99a0166bd33dd953ea88a52804be48f5d21d5dc87eb38b27d3fb4372f727218d7c2c66aa7631cfeaa16005f0f6db1059eb80121db2bafcf38cb037cd7b83d55c45f7cc4646fb2f059a1a43e079e3eac510d63c3a7962510173f6790fa0bfdd8f47928397a57fc16b7d6b92b2f93db04cbe489d5cfccd4c2af753b8f70f551f9e5f1f2bf486699081819db2f5d13d517d656987dd0bed32404271da8", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a687700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/119], @ANYBLOB='w\x00'/24], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 04:57:43 executing program 3: socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:57:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r1, &(0x7f0000000700)=""/250, 0xffffffc9) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x50000}, 0x9055) fchdir(r0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) ftruncate(r3, 0x1c08) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) write$FUSE_LK(r5, &(0x7f0000000040)={0x28}, 0x28) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30}, 0xb0b8) 04:57:43 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() pause() ptrace$setopts(0x4206, r5, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) [ 438.444570] binder_alloc: 15001: binder_alloc_buf size 5947751244651901888 failed, no address space [ 438.449765] binder: BINDER_SET_CONTEXT_MGR already set [ 438.449773] binder: 15003:15006 ioctl 40046207 0 returned -16 [ 438.473758] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 438.483785] binder: 15001:15004 transaction failed 29201/-28, size 0-0 line 3137 04:57:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@flat=@weak_handle, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/197, 0xc5, 0x1, 0xb}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/119, 0x77}}, &(0x7f00000000c0)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) [ 438.502500] binder: undelivered TRANSACTION_ERROR: 29201 [ 438.547178] binder: 15014:15015 got transaction with invalid handle, 0 [ 438.556454] binder: 15014:15015 transaction failed 29201/-22, size 104-24 line 3228 [ 438.565318] binder: undelivered TRANSACTION_ERROR: 29201 04:57:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x526987c9) syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x6) write$P9_RREMOVE(r1, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0) getpgid(0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x800, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4000, 0x0) fadvise64(r5, 0x1000, 0x200, 0x7) r8 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000003284e97e1c1cd4cf3d9e00e15a8136e41be79f7601e6de00085fc813741f206bf82847cfda43a417bc026a86ea4602029fb130749b70ff9baac61208e8", @ANYRES16=0x0, @ANYBLOB="000086a150255978c43db402a942"]}}, 0x0) write$cgroup_type(r8, &(0x7f0000000340)='threaded\x00', 0xffffffc5) pipe(&(0x7f0000000080)) 04:57:44 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0xe) fchdir(0xffffffffffffffff) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0) getpgid(0x0) write$FUSE_LK(r1, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000180)=0x21e5, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@remote, 0x9, 0x0, 0x0, 0x8, 0x0, 0x7fffffff}, 0x0) socket(0x2, 0x80a, 0xff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) fadvise64(r2, 0x0, 0x200, 0x7) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r6 = open(0x0, 0x0, 0x1c0) syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc409948dbe75120c9a652c357177effff00000000c10a8f3a69f98546b0c5263bddd3b60b9f7cd62127ba740fdceff2c40c8d772c550200505536052104000000000000008e65c6cf0b320655a32bfee0648e9ae02514690636d083f161c24e68fc8a999112d4000047f477724228c6b7", @ANYBLOB="2036c7ae852840b72e41020d8bf7545660f1680041636526ec9ee86edb16558064d1083fb034ea1c8286def836203c549c4a9840dd61bb952ea542c67806cea9f6c644cb51dd9be3900219f8f4f4a1da05807c12d8b8480c15dd9d9836f275dbb85973f9fca39f5d5133f5b50028cf2b7c1fe63948c4"], 0x2}}, 0x0) r7 = eventfd2(0x0, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000140)) fstat(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r11 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r11) add_key$keyring(0x0, 0x0, 0x0, 0x0, r11) r12 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r11) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000140)) fstat(r13, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r16, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r16, r14, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) r17 = eventfd2(0x0, 0x0) fcntl$getownex(r17, 0x10, &(0x7f0000000140)) fstat(r17, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r20, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r20, r18, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) keyctl$get_persistent(0x3, r10, r12) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r10, r8, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000740)=ANY=[@ANYBLOB="b88f5a0000d2f18c1f4da3c076087977179908e84ccfecb52c87820000e1aaaba313358d42f8b81fda95e83eb1e183af8337ce7d5a0d4ea909b1d89dbe5e9aad8dd46f38725ae5f0", @ANYPTR64, @ANYBLOB="84b11e1629355b65d2f590f402bd4e0177ad5bbe8d961effe2a5aa46c1afc51439496ee3f501413d333c29c6ab4d47b454c55f0a2c6d972a7c78611ba41932b08731936fdead433a7586a136908c00478fb3c27d23c0808766d58b6a6958ac5be3a4a57ffa86b5e25592d443a2d808c673d2cac2f74f508a40ba6db57bb3c5ad91a917a3cd40eacb7871a6932e06e2fa0d8bbe4b5d970426327504bc16c2e1"], 0x3}, 0x1, 0x0, 0x0, 0x24008ca0}, 0x4000413) write$cgroup_type(r5, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r21 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r21, 0x0) mkdirat(r21, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r21, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 04:57:44 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='u', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x8) r1 = dup(r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) ptrace$getsig(0x4202, r2, 0x1, &(0x7f0000000280)) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0xffffff24, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000180)='net/rfcomm\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 04:57:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) [ 439.314164] binder: BINDER_SET_CONTEXT_MGR already set [ 439.320519] binder: 15040:15042 ioctl 40046207 0 returned -16 04:57:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x1a) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x1c40000}, 0x1c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080600efffeffe809000000ff0000f03ac7100003ffffff0eb0f43f64eed581c451ffffffffffffffffe7ee000000", 0x58}], 0x1) 04:57:44 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) dup3(r2, r0, 0x0) memfd_create(&(0x7f0000000080)=':]ppp0\x00', 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) dup3(r4, r3, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x1c0000) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) openat$cgroup_type(r5, &(0x7f0000000400)='cgroup.type\x00', 0x2, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r6, &(0x7f0000000700)=""/250, 0xffffffc9) r7 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) fcntl$getown(r0, 0x9) r8 = getpgid(r1) r9 = syz_open_procfs(r8, &(0x7f0000000340)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r10 = socket(0x10, 0x3, 0x2) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r11 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r12, 0x400454cd, 0x7) dup3(r13, r12, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r14, 0x400454cd, 0x323) dup3(r15, r14, 0x0) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000018c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r16, 0x400454cd, 0x7) dup3(r17, r16, 0x0) r18 = dup3(r17, 0xffffffffffffffff, 0x1c0000) preadv(r18, &(0x7f0000000080), 0x0, 0x1001) readv(r9, &(0x7f0000000580), 0x25b) r19 = socket$inet(0x2, 0x0, 0x0) syncfs(r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r20, 0x8953, 0x0) r21 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r21, 0x8953, &(0x7f0000000500)={{0x2, 0x4e22, @multicast1}, {0x1, @broadcast}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r21, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, 0x0, 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x0) r22 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r22) r23 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r24 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r24, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r23, 0x4c00, r24) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r22, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r22, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r26, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000680)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r28 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r29, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r29, r27, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r22, &(0x7f0000001b80), 0x0) read(r25, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r23, r24, 0x0, 0x180003) 04:57:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffd) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x1, 0x6}, 0x0, 0x0, 0x0, 0x442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0xffff}}, 0xa0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r5, 0x29, 0x24, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r6, &(0x7f0000000700)=""/250, 0xffffffc9) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000140)) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000680)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f0000000440)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000400)='security.capability\x00', &(0x7f00000005c0)=@v3={0x3000000, [{0x8, 0x1}, {0x0, 0x71f40d98}]}, 0x18, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r8 = dup3(0xffffffffffffffff, r0, 0x6c468e8bde84cb05) fgetxattr(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="757365cfe36debdb7ea56d73656c696ee5cfbb"], &(0x7f00000018c0)=""/4096, 0x1000) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r1) r10 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[@ANYBLOB="0b010900a1000000270300000700000076010000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003b4b55f800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c1f12e5d583f00e236b816beaa6100"], 0x205) ftruncate(r10, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000100)={0x0, r9}) 04:57:45 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) [ 439.546555] binder: BINDER_SET_CONTEXT_MGR already set [ 439.560294] binder: 15060:15061 ioctl 40046207 0 returned -16 04:57:46 executing program 3: socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:57:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) 04:57:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='\a\x00e\f\n\xd5<\x8eZer#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000157063b55785107000000000000000000e8ffffffffffffff1800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a687700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/119], @ANYBLOB='w\x00'/24], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/10], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 04:57:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) 04:57:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d4d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff]}, 0x45c) 04:57:47 executing program 5: open(0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x3, 'veth1_to_bridge\x00', {0x7}, 0x9}) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) inotify_init() fcntl$setstatus(r1, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x38d133b2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0x4) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r4, &(0x7f00000001c0), 0x8000fffffffe) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) io_setup(0xb0, &(0x7f0000000500)=0x0) r6 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fsetxattr(r6, &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0xb6, 0x0) io_submit(r5, 0x1, &(0x7f0000001cc0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, r6}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 441.467766] binder: BINDER_SET_CONTEXT_MGR already set [ 441.480481] binder: 15094:15099 ioctl 40046207 0 returned -16 [ 441.494590] input: syz1 as /devices/virtual/input/input38 04:57:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) syncfs(r5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000a84700000000000000000000000000000000e8ffffffff00ffff18000000000000a974191700", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="852a68770000000000000000000000007d1c00000000009d9907ea7efa171e5cf2c1daa0156833000000856164660000000000000000000000000000003a2a236800", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/119], @ANYBLOB='w\x00'/24], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 04:57:47 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x6) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="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", 0x11f}], 0x4, 0x0) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = eventfd2(0x0, 0x0) setxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000400)='TRUE', 0x4, 0x1) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000300)={0x1, 'bpq0\x00', {}, 0xff41}) r6 = getpgid(r4) syz_open_procfs(r6, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') r7 = getpgid(r6) r8 = eventfd2(0x0, 0x0) fcntl$getownex(r8, 0x10, &(0x7f0000000140)={0x0, 0x0}) r10 = getpgid(r9) syz_open_procfs(r10, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') rt_tgsigqueueinfo(r7, r10, 0x37, &(0x7f0000000040)={0x7, 0x0, 0x8001}) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x1f, 0xfffffffffffffffc) ptrace$cont(0x20, r0, 0x0, 0x0) 04:57:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(0x0, 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 441.588226] input: syz1 as /devices/virtual/input/input39 [ 441.655328] binder: BINDER_SET_CONTEXT_MGR already set [ 441.662875] binder_alloc: 15108: binder_alloc_buf size 72057594038001664 failed, no address space [ 441.677085] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 441.690099] binder: 15119:15121 ioctl 40046207 0 returned -16 04:57:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="dc"], 0x1) io_submit(r4, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r2, r3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = dup2(r7, r6) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) capset(0x0, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x0, 0x8, 0x4}) bind$inet(r9, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f00000000c0), 0x19b3aef86ca2203c) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000200), 0x88) write$binfmt_elf64(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdb4) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) fcntl$setstatus(r1, 0x4, 0x64400) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10200}]) 04:57:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff1800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a687700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/119], @ANYBLOB='w\x00'/24], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="b5f361183c176330bee76e84711ba364d82c7ef17d83197cfe0de24850cc1760ce8d4aeb8af8834e6f2d4f214d0e7186b895d8c5cf8cea5e650bdc785d7a680da82e261d1b9a86402f29974e8bec80e36930ff8998cb6635591f62486c57fa90bb5b85e4ab06fb72680eff0da9ca7d84c6cdf4474602b40edaca04f19b9161be65d8c51e158a5709f246df97f14732519893983d56c2b0ad45461a1939427586900e65b91a9fa4696ca850ce36"], 0x0, 0x0, 0x0}) [ 441.702753] binder: 15108:15111 transaction failed 29201/-28, size 72057594036355072-1638399 line 3137 [ 441.727789] binder: undelivered TRANSACTION_ERROR: 29201 04:57:47 executing program 0: open(0x0, 0x0, 0x1c0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x282a41, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key(&(0x7f0000000580)='\xb8\xddA\xb1QW\xe1\xcd*\xfa\xe3\x19keyring\x00T\xf0\"l\x95(\x1d\xf3\xef\xcbPF]\x0eT\xb5\xeb\x92[\xf1Wk5\xfexP\xdd\xb1A\xc1\xf1\\;r\xbb\xc3\x03l\xfa\xcc\xb6\xc84a8U\xff\x88\xf8\x16\x91\xbcs\x1c\xccUQR`\x054\x9a\'\at\xde\xcc\xd9\x9d\xb0~\xee@VO\x01\x9f\x85\x93\x8a\xe2\xf7\x84K6\x7f\xca`\xe7\xa6m\x94\x11(\xbbZ)\x8fzK\x8e`H\xbd\xfb\xedqU-\xb6W\x97\xe9\xf97=\xd0\x004N\xf4i=)8\x0e?\xdc\x98\xe4\xe10=\x01,~\x13\x02\xc5\x02\xfb\x1c8?\xeb\xf0\xc3fn\x9aY\x18\b\xc9C\xe2[L4.iwC\x83nM;\v\n\xd4\v\xe3?\x06VNP\x97\x94\x80\rb\xa3I6\x13\x8b\xb6\xa1\x0f@\xf48-\xbf8s\xf8\xed\xeciC6\xbf\xb0\xa7e]Pz^\x9eQ\x85DL\t\xbb(\x9b\xfb\xe9\vvo\xd8\xe7\x1d\xf4\xca\x7f\x11\\', &(0x7f0000000300)={'\x06\x00', 0x2}, 0x0, 0xfffffdf2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="d7467f421bb24e3c69ada577111fc2614e22c1311c6c5c52f40300f40d46c2305b8ba5a7eea830df04707fd06637064d932f1a7049b65f814e234724642c9ed65b4837e468cdec1bde7323ba6cb0bc03426e3e700056f7d3f52b28d73da02612d3d23d9e0e9ccd8527cc854875f15025d032ae45d9f239c52a31597b4c1887bb9c7cf1ae2ab6f28a4a0929c964cd87aaaff2090000000000000097dc3ab0d7d4a50e303029c991c011da218231ce3067ef4f880d07aeaa47378199c186befe36ca97a18b536f27d906c8324176b0"], 0xd0) sendto$inet(r4, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac60bded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x9, 0x0, 0x27) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) writev(r0, &(0x7f0000000880), 0x0) r5 = open(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, 0x0) socket$inet6(0xa, 0x80000, 0x7) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040), 0x4) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) close(0xffffffffffffffff) [ 441.825743] binder: 15130:15143 transaction failed 29201/-22, size -24-24 line 3137 [ 441.871646] binder: undelivered TRANSACTION_ERROR: 29201 04:57:50 executing program 3: socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:57:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(0x0, 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 04:57:50 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200), 0xfffffffffffff13}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket(0x11, 0x804, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 04:57:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x28, 0x0, &(0x7f0000000440)=[@decrefs={0x40046307, 0x1}, @release={0x40046306, 0x2}, @increfs={0x40046304, 0x2}, @request_death], 0xd1, 0x0, &(0x7f0000000480)="6a331294f0b2f09c72024b50359aee009860dc6c403b4a67b6b9026b7406a194c12bfbe0a4b01fb81dc391b255eb4ad624d7dba168a7ec0effcea5a960e0c3b060fcd434d5a02eff8b6f9a73ffa82b0b5f67bf0d4776fd81990e1ddec95a6059a5c21b0f79cffe5e208e628d646639fd77d149f7a071eb43e68ed68f9875fffa6b44a7af08bed22e95d1e67212ba66b8f6d6d83293dde0e3c1ca4108ef2bd4846e09f436761a3d94bf5ed8080a1d7c70e66bedb2682a8e4e8eb497abf0d815274ae65d1937bd9dc195ad622b16d69d69cb"}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) dup3(r3, r2, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x1c0000) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0x7c, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, 0x3}, @exit_looper, @request_death={0x400c630e, 0x3}, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x9, 0x1, 0xa}, @fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x8}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x2a, 0x0, &(0x7f0000000240)="772a841cd2fe98adf125137743f6ef5797b42af1e104bedf5f808db1f8ecaa8498d10087bbca90c22bf8"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 04:57:50 executing program 2: open(0x0, 0x0, 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe) writev(r1, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, 0x0) socket$inet6(0xa, 0x0, 0x6) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f8571") write$selinux_load(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="411f1b3932cb7ec46f54ed19577eae500708000000bb386c184f3bcb2b89d31fdcf4468de44fec532ebba87f85c47a00bb66503e502b8d19c602109dc51008a0e3e3a7365951c3e9eddcc5c5b72100000000ac53415f0000"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r1, r4, 0x0, 0xa5cc554) 04:57:50 executing program 0: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) readv(r0, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/104) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x0) keyctl$clear(0x7, r2) request_key(0x0, &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0) r3 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x30000, 0x0) fcntl$dupfd(r4, 0x406, r1) keyctl$read(0xb, r3, 0x0, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="9698dbb56dd68937e5d2369b6932562c029e43409ccf5a90ad2df62fe1bf8994cb96c94632d20745ecae0c794767eff894c9c8b1364d6b6572e027be622949c82c235d02561a23c30a2b42303c03809154b37a1fa4aed60379bbb8b0f2d7976a5497c08ddbaa0091592d02979206791ded742bc74dfa1a057aca0b35c72b202cd1f45e6c9c35", 0x86, 0xfffffffffffffffd) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r5, r5, 0x0, 0x24000000) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) pwritev(r6, &(0x7f0000000240)=[{&(0x7f0000000680)="f3baad4ae7be81861a3469ab1ac6f2d2911f9c9404afc72c1e47a4c01db0e6fe210aa050131a880e4f778c7bf56439f6d772e05425843464b4109ea631adb93915596edb2e070e7d067325962b31025ebacb794d7197dc81ffd785e142e63048181e3d04e1db3c1367000546838951bfb2753e1e87d27ca87c83679464c05728974bbbe9409641ca5cbdf75b65dafd1a0e2fee680f83a2ac5093d9dd0a8fc78c62efc7b1203715d67bae76ac5ec7abd36eb77f875aff30c09feb4f045b47ae488209", 0xc2}, {&(0x7f0000001800)="3c87def8bfbec38807f8d379ed579e24420767c1261ec74e19a5c0d6d95bfe56cc6902ab85909e03ac6b5ee91db78bf3730d7ea532cbf61de85baecc1c12c5d72bbb44a117430716f30453292760c61cbc779e856aeb97105dc5b973cfca988f68421df0613ea10d6e87702c8bd69360f6a1738d65e4ab64957be6836089fa177d1d5184e46a2dffbf7535372eb2a5ec71c7affa6d016faafe5e986aaf6c6fd783e81555c0d23cd6474c2c9e3b8dcc0b12c50dc09f62cb428ba41448afa39c4f862018c5e0538a580b3af6fa0e528ec731d30121", 0xd4}, {&(0x7f0000001cc0)="4edd728b2ea468c3b03c71aecef7271b37a00bede4050bc5e682b3094cdfe0c09aaa242fc48b1efd8d44ac279b4223e3c05b27c8e55aad0a2e5c1995407600bdc611ce962d72bae1ffd506c767a735ee643598e0f623889d26d14b4d25220952d7ce1b9e11a146d2bd1bb8431926b561e99fa99da9e717aae534648b1df670c493632e63ff0000d5f37cb91d5a1646e6c36c661c344bd8c531658d2e8d60e43d0ed34fd13529a380b3c66b3406a6f96fb527fadce9ecc73d1ee20c34aad53327654f8269efe4799a646ef8e2e364191c359cd0efb80643711e9fb0065df981efedbd456d373f8ba0e6932115844d1b572f7c827b872903c8", 0xf8}], 0x3, 0x5) close(r5) r7 = eventfd2(0x0, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000140)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r8, &(0x7f0000000440)) write(r7, &(0x7f0000000000)="0b041e8df9c018fd101fe222405eec2fcfc20da7c93cedadecf58af5c03de63834a3c2d2ae869d932408e1b8be16f68c36409f5a06547a662552be1feeba3a175e30", 0x42) 04:57:50 executing program 3: pipe(0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 444.485974] binder: BINDER_SET_CONTEXT_MGR already set [ 444.493187] binder: 15158:15161 ioctl 40046207 0 returned -16 [ 444.511821] binder: 15155:15163 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 444.520774] binder: 15155:15163 Release 1 refcount change on invalid ref 2 ret -22 [ 444.538202] binder: 15155:15163 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 444.549870] binder: 15155:15163 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 04:57:50 executing program 0: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000003c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) lstat(0x0, 0x0) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) memfd_create(&(0x7f0000000040)='comm\x00\xf5\'\xd5\x1eZ[E\x9bH\xe7]\\C\x12\xf6\"t`\x16\xed6\xeb\x0e\xdc\x1b\xdf\x93\xed\xff\x81\"\x98\x89\x14\xb1\xfc\xfa\x02\xbe\xf7)\xf2\xffI\x91\x0e\xf7_J\x9a}XF)\x1d:\x87>t=\xf6\xf1\xfd\x8e\x06\xd6\xd6L\xc4\x87\xfe\xab\x7f\xc8(S\x8c:\x06\x00\x00\x00\x00\x00\x00\x00\x8c\x8a\x02V\x033\xf0\x89\xd8N+\x151J\x96\xdf&\xe0>\xadu\x15\xed\x94\xec%5\x80\xa7~\xbc\x9c3\x90\x97\x1d\xd8j\x0e]P\x0f\xa9*a2\x89Y\xcc$=\xb7\x0f\xd1\x807 T\xec\xb2\xfd\x88M\x99\xa9\xf9\x10t\r\xea\xabv\x1dn\f\x88[\x18\xa6\xcfE\"\x9c\xc1\xdbYW\xac&\xc5\x11c\x85#;\xf9\x9a\x9f9\xd7&\t\x99\xfd\x010\x98/\x13\xe1\xf3\x81\xb3m\xaf\x11\xb3\x9e\xd1\xd7\xc6\x92m\xdd\xba\x01\xbc\xed\x9dl:\x1e\xf8o\x190\xf9\xb2\x1e~\x1fHQ', 0x0) getpid() syz_open_procfs(0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) pselect6(0x40, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x1f, 0x0, 0xfffffffffffffff7, 0xa7f, 0x1}, &(0x7f00000000c0)={0x0, 0xa9a0, 0x1000, 0x0, 0xf8, 0x0, 0x0, 0x7fffffff}, &(0x7f0000000140)={0x0, 0x4, 0x5a, 0x81, 0x0, 0x0, 0x6, 0x5}, 0x0, &(0x7f0000000440)={0x0}) r4 = epoll_create1(0x0) epoll_create1(0x0) close(r4) dup(r4) r5 = creat(0x0, 0x0) write$P9_RREMOVE(r5, &(0x7f0000000200)={0x10}, 0xffffff9a) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 04:57:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(0x0, 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 444.697855] binder: BINDER_SET_CONTEXT_MGR already set [ 444.705187] binder: 15185:15187 ioctl 40046207 0 returned -16 04:57:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') r5 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) [ 444.898153] binder: BINDER_SET_CONTEXT_MGR already set [ 444.913523] binder: 15193:15194 ioctl 40046207 0 returned -16 04:57:50 executing program 5: r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x0, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x7cc081938aef1490, &(0x7f0000000240)='\a', 0x2ba) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f00000000c0)='\a', 0x1) accept$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)=r3) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) poll(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) gettid() fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r5, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r6, &(0x7f0000000700)=""/250, 0xffffffc9) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000000080)=0x1) request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)='user}eth1\x00', 0x0) 04:57:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x526987c9) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000380)=0x8, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r3 = dup3(r0, r2, 0x80000) write$P9_RLOPEN(r3, &(0x7f0000000240)={0x18, 0xd, 0x2, {{0xea, 0x1, 0x7}, 0x3}}, 0x18) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r5, 0x0, r6) r7 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r7) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) fcntl$setstatus(r7, 0x4, 0x0) readv(r7, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0x526987c9) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x80100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x40) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff1800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a687700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/119], @ANYBLOB='w\x00'/24], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000180000000000000038000000000000006903751fd3013a59ae10aff2c3c9a5d4b8e2ed4a2ab92b7145bc2a112b2e6d971b5ffb6741aa31eae992"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 04:57:50 executing program 0: r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000f00)=ANY=[@ANYBLOB="73797374656d5f753a6f726a6563745f723a756e636f6e66696e65645f6578b369e0776d5f657865635f743a7330202f7573722f7362696e2f637570732d62726f7773656420303030303030303030303030303030303030303000"], 0x2b8) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 04:57:50 executing program 0: sched_yield() r0 = socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) close(r1) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') dup(r0) r2 = eventfd2(0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r5, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x180003) fstat(r4, &(0x7f0000000180)) r6 = gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000280)={0x3, 0x0, 0x2, 0x9, r6}) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000000c0)=0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000040)=0x10001) 04:57:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000080)="d220360b1c7e", 0x6) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000180)={0x101, {{0xa, 0x4e24, 0x7fff, @mcast2, 0x1ff}}, 0x0, 0x3, [{{0xa, 0x4e21, 0xd90, @rand_addr="960fc51e366b4cd0328e716576f2df0d", 0xff}}, {{0xa, 0x4e24, 0x40, @loopback, 0x80000000}}, {{0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x9, 0x0}, 0x6}}]}, 0x210) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000040)={0x34}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="39000000130025006900000000000000ab00804806000000000000000000000019001400da083986d2d764d745f26d8c1c0afcf1aea1960000", 0x39}], 0x1) 04:57:51 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000100)={0xa, 0x4e21, 0x0, @dev, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="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", 0x5ad}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000290000003e000000010000000000000063b92ce0548dc50ea860f4dc04e5ad469e81b711113518b9940879cdc6d3dcb586ae33d973c97fe7e15cd3e5a245ac1f43b7e664118fba14d6c5261bbe7f14e784c00a26ffe43c31807bc2418947c3f2e5f0dafa13109f92349eb1d7a9129d2b3699eaf2bfc70e00009b725932944ef9bf0b1cff579908157adbab9ae8f58eae3818dbc89c9ff7dea938c39b814212287fc3a22bff3b1bcea7f6a2c8c2106a8a23d804e98df41cb45276bdaa9f9fe68d4f631cda5efffb33b738a5deae1b930bbb0515f955688e8387f7f8f7e03478021301"], 0xea}, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000180)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x80008) r2 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) fcntl$setstatus(r2, 0x4, 0x0) readv(r2, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) keyctl$describe(0xb, r1, 0x0, 0x0) keyctl$invalidate(0x15, r1) 04:57:51 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') ptrace$setsig(0x4203, r2, 0x4, &(0x7f0000000000)={0x2a, 0x40000, 0x7}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x37) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 04:57:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) creat(0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) syz_open_procfs(r1, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfb120eb7) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x1d2, 0x0) mmap$perf(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r2, 0x4) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setxattr$security_evm(0x0, &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) open(&(0x7f0000000480)='./bus\x00', 0x0, 0x109) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000130003006900000000000000ab008048060000004600010707000014190001401000000500005096bff225053cc4ae5cfe14b23bfa04446a6e8883380f9ff38a975956b1750699ade43620db3df2b2da737d9e2cafef71bddea83abb28afc485dddfeb4dc5b613741659f46ea9", 0x71}], 0x1) 04:57:53 executing program 3: pipe(0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:57:53 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') r5 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) 04:57:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) lseek(r1, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e) sendfile(r1, r2, 0x0, 0xa5cc554) 04:57:53 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) creat(0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) syz_open_procfs(r1, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfb120eb7) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x1d2, 0x0) mmap$perf(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r2, 0x4) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setxattr$security_evm(0x0, &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) open(&(0x7f0000000480)='./bus\x00', 0x0, 0x109) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000130003006900000000000000ab008048060000004600010707000014190001401000000500005096bff225053cc4ae5cfe14b23bfa04446a6e8883380f9ff38a975956b1750699ade43620db3df2b2da737d9e2cafef71bddea83abb28afc485dddfeb4dc5b613741659f46ea9", 0x71}], 0x1) 04:57:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000340)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) getsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000240)={@rand_addr, @loopback}, &(0x7f0000000300)=0x8) r5 = socket$packet(0x11, 0x3, 0x300) r6 = fcntl$dupfd(r2, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f00000001c0), 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/119, 0x77}}, &(0x7f00000000c0)={0x0, 0xf4, 0x38}}}], 0x0, 0x0, 0x0}) 04:57:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x1ff, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fsync(r4) read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xab53b20a69165e88, 0x32, 0xffffffffffffffff, 0x20000000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x4}, 0x68) r5 = creat(&(0x7f0000000540)='./bus\x00', 0x1) syz_genetlink_get_family_id$tipc2(0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r7, 0x0, 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x2, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000001410000001800170000000e000062007564783a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_open_procfs(0x0, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x66, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) r10 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCGBITSW(r10, 0x80404525, 0x0) [ 447.567992] binder: BINDER_SET_CONTEXT_MGR already set [ 447.578160] binder: 15242:15246 ioctl 40046207 0 returned -16 [ 447.605198] binder: 15240:15245 transaction failed 29201/-22, size -24-24 line 3137 04:57:53 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x8000, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000440)}, 0x10) eventfd2(0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000580)=0x6) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r4 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$RTC_VL_READ(r3, 0x80047013, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x437}}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e22, 0x400, @remote, 0x50e26630}, 0xfffffffffffffe65) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x42, @loopback}, 0xffffffffffffffd1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) accept$inet6(r9, &(0x7f0000000180), &(0x7f0000000240)=0x1c) sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd) 04:57:53 executing program 1: mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup3(r5, 0xffffffffffffffff, 0x0) sendfile(r5, r1, &(0x7f0000000080)=0x1f, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff1800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a687700000000000000000000000000000000000000008561646600000000000000000000000000000000000500000000000000000000852a7440f4000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/119], @ANYBLOB='w\x00'/24], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000076b44e4a52d00000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 447.614765] binder: undelivered TRANSACTION_ERROR: 29201 04:57:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r3, &(0x7f0000000700)=""/250, 0xffffffc9) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000001c0)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = fcntl$dupfd(r2, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/119, 0x77}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 04:57:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0205000004000000000006000000000002000100"/32], 0x20}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000200)={{0x2, 0x0, @broadcast}, {0x306}, 0x10, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x4e21, @rand_addr=0xfffffffc}}) [ 447.874869] binder: 15276:15282 transaction failed 29201/-22, size -24-24 line 3137 04:57:53 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) ftruncate(r0, 0x40) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r2, 0x208205) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x6000000, 0x100000001, 0x6000000, 0x1}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000000), 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x10000, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FITRIM(r7, 0xc0185879, &(0x7f00000000c0)={0x0, 0x40, 0x7fffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') readv(r8, &(0x7f0000002340)=[{&(0x7f0000000c00)=""/4081, 0xff1}], 0x1) readv(r8, &(0x7f0000000580), 0x3c1) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000180)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) r9 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r9) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r9, 0x0) fcntl$setstatus(r9, 0x4, 0x0) readv(r9, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4092, 0x70a}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000000200)=""/68, 0x44}], 0x6) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000040)=0x0) fcntl$setown(r8, 0x8, r10) socket$inet(0x2, 0x3, 0x19) syncfs(0xffffffffffffffff) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/anycast6\x00') preadv(r11, &(0x7f00000017c0), 0x3a8, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(r12, 0x10, &(0x7f0000000140)) 04:57:53 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r0, &(0x7f0000000700)=""/250, 0xffffffc9) utimensat(r0, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x180) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x3ff, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r2, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r3, &(0x7f0000000700)=""/250, 0xffffffc9) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$unix(r1, &(0x7f0000000040)=@file={0xa2c3756ee12b3b28, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xff86) [ 448.597044] binder: undelivered TRANSACTION_ERROR: 29201 04:57:56 executing program 3: pipe(0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:57:56 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_team\x00', {0x4}, 0x7}) r2 = dup(r1) write(r2, &(0x7f0000000080)="240000005800010000000000002304000a04f51108000100020100020800038005000000", 0x275) 04:57:56 executing program 0: open(0x0, 0x0, 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4) add_key(&(0x7f0000000180)='user\x00', &(0x7f00000003c0)={'syz'}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe) writev(r1, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, 0x0) socket$inet6(0xa, 0x0, 0x6) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f8571") write$selinux_load(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r1, r4, 0x0, 0xa5cc554) 04:57:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='\x00\x00t/netstap\x00') r5 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) tkill(r5, 0x1c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) 04:57:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/119, 0xffffffffffffff71}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 04:57:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x1ff, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fsync(r4) read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e) write$P9_RREMOVE(r4, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xab53b20a69165e88, 0x32, 0xffffffffffffffff, 0x20000000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x4}, 0x68) r5 = creat(&(0x7f0000000540)='./bus\x00', 0x1) syz_genetlink_get_family_id$tipc2(0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') prctl$PR_SVE_GET_VL(0x33, 0x1859c) preadv(r7, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x66, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) r8 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCGBITSW(r8, 0x80404525, 0x0) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000080)={0x52, 0x5, 0x6, {0x7, 0xf4b}, {0x5, 0x5}, @period={0x5c, 0xb18b, 0x0, 0x0, 0x6, {0x1000, 0xfbb8, 0xfffb, 0x800}, 0x8, &(0x7f0000000000)=[0x0, 0x7fff, 0x44f3, 0x40e5, 0x0, 0x2, 0x401, 0x0]}}) 04:57:56 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_team\x00', {0x4}, 0x7}) r2 = dup(r1) write(r2, &(0x7f0000000080)="240000005800010000000000002304000a04f51108000100020100020800038005000000", 0x275) 04:57:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) clock_settime(0x6, &(0x7f0000000240)={0x77359400}) syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff1800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a687700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/119], @ANYBLOB="7700000004000000000000000000000000000000000000004b1891166b8b9e7270a2b7ded243cc8f0912777300effe1a3f59b83345"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 04:57:56 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000001c0)) connect$inet(r2, 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) r6 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c20087ea00000000100"}, 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000400)=@req={0x28, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_settings={0x800009, 0xe18, @fr_pvc=&(0x7f0000000300)={0x7}}}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000440)) r8 = getpid() timer_create(0x3, &(0x7f0000000380)={0x0, 0x6, 0x2, @tid=r8}, &(0x7f00000003c0)=0x0) timer_gettime(r9, &(0x7f0000000480)) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x0) socket$inet6(0xa, 0x800, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) [ 450.599095] binder: BINDER_SET_CONTEXT_MGR already set [ 450.600121] binder: 15305:15307 transaction failed 29201/-22, size -24-24 line 3137 [ 450.606649] binder: undelivered TRANSACTION_ERROR: 29201 [ 450.617748] binder: 15303:15309 ioctl 40046207 0 returned -16 04:57:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@release={0x40046306, 0x3}], 0x1000, 0x0, &(0x7f0000000300)="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"}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r5, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x180003) ioctl(r4, 0x4, &(0x7f0000001300)="242fee998a640379bab913d1846d6bf812876523b0747d8e296c444a67069f98f46b4bf6ecfcad5d7c3ebc31f736b7e6a2c66839f6be8973e74b52b406db256925450d14f86b84e8d225cf4ab36a2cd8cb91980cc22ab9579cadc060ac015d64c55fd63626ff5f34e16e2ee8e5b43fccd5e0a25e6332a1ecf073b1bd8504bbfd82a9b13929fed208866a2c89e4df47851c40de0c686dd72cc005a85a80bba4b018939ccd7ae367b3d08acfbadfa7dadd038b3e52adcf4b9065a1dbdb1113da5d6e18e124dc381583d9f4d761029e0f9bc8a1534db5073fb13a8ecd8bfef6ee5e8d42971990e1fdfd07996967123b970ac3873d1a") r6 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff1800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a687700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4ffffffffffffff00"/119], @ANYBLOB='w\x00'/24], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) gettid() [ 450.681522] binder: 15319:15322 transaction failed 29201/-22, size -24-24 line 3137 [ 450.697273] binder: undelivered TRANSACTION_ERROR: 29201 [ 450.814167] binder: 15333:15337 Release 1 refcount change on invalid ref 3 ret -22 04:57:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x1ff, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fsync(r4) read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e) write$P9_RREMOVE(r4, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xab53b20a69165e88, 0x32, 0xffffffffffffffff, 0x20000000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x4}, 0x68) r5 = creat(&(0x7f0000000540)='./bus\x00', 0x1) syz_genetlink_get_family_id$tipc2(0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') prctl$PR_SVE_GET_VL(0x33, 0x1859c) preadv(r7, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x66, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) r8 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCGBITSW(r8, 0x80404525, 0x0) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000080)={0x52, 0x5, 0x6, {0x7, 0xf4b}, {0x5, 0x5}, @period={0x5c, 0xb18b, 0x0, 0x0, 0x6, {0x1000, 0xfbb8, 0xfffb, 0x800}, 0x8, &(0x7f0000000000)=[0x0, 0x7fff, 0x44f3, 0x40e5, 0x0, 0x2, 0x401, 0x0]}}) 04:57:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f00000006c0)) dup3(r5, r4, 0x80000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) r7 = dup2(r5, r6) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000300)={{0x5e, @broadcast, 0x4e21, 0x4, 'sed\x00', 0x3b, 0xfffffac3, 0x57}, {@remote, 0x4e21, 0x10000, 0x1, 0x1d11, 0x2}}, 0x44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) fcntl$dupfd(r2, 0x0, r3) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0x5269880b) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840040000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a687701000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/119], @ANYBLOB='w\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0070fbc1a5a0a323d73916b0f4fbc102598d8fd4b2cd"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 451.119164] binder: 15353:15360 got transaction to invalid handle [ 451.145818] binder: 15353:15360 transaction failed 29201/-22, size 96-24 line 3014 [ 451.782023] binder: undelivered TRANSACTION_ERROR: 29201 04:57:59 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x0, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:57:59 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x3f, 0x12) getpgid(0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x8, 'hsr0\x00', {'rose0\x00'}}) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@rand_addr="73d0226db513bdba574a6696ccda0a40", 0x9, 0x0, 0x0, 0xe, 0x0, 0x7fffffff}, &(0x7f0000000180)=0x20) socket(0xa, 0x800, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fadvise64(r1, 0x0, 0x200, 0x7) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) open(0x0, 0x0, 0x1c0) syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="778b100059aec048492d3670b6cef7605933720073423284fc6af38b847c9ad3a249003a35859cb8d9234b20548d75e85f3f58196b7921b7f76e7a0b9cf18ed1b1c930f85ea2b182686dfc1e506977ca2e09cc91871785defc3c0358dbe09755668f4ae4c6e0c535c97b8980b8169076e07ade3a0000fe0a509d3ed979530a4736a16fd7bdad2ddc7b6ede9c01468a47a48759fe3cf6a20b2d26b82fec928cb8675fe903a1761c46164e3ce5275d"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x4000413) write$cgroup_type(r4, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000000c0)='./file1\x00') 04:57:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:57:59 executing program 0: r0 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = accept(0xffffffffffffffff, &(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, &(0x7f0000000280)=0x80) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f00000002c0)={0x8, 'team0\x00', {'gretap0\x00'}, 0x8001}) dup3(r1, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) recvfrom$inet(r0, &(0x7f00000000c0)=""/240, 0xf0, 0x40000040, 0x0, 0x0) r3 = socket(0x10, 0x800, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x4000) sendmmsg$inet6(r4, &(0x7f0000001600)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0xff, @ipv4={[], [], @loopback}}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="18b665fcf6c6c16a9aa6c0f85449a485cf4bbe277feaede75f7e7a423c3bc73600aea7d35456b7236766c65d3d38c314e7117b4d09", 0x35}], 0x2, &(0x7f0000001400)=[@hoplimit={{0x14, 0x29, 0x34, 0x21}}, @hopopts_2292={{0xe8, 0x29, 0x36, {0x0, 0x19, [], [@generic={0x3f, 0xcd, "0d564c909e09ea0a4cda3070848b070a4cdc467878046bd735727c0ae979f3f977ef16ed2d60ed09f6bedbf2cc1f6b4fc1fa5940e2ad642fc29ea1e6054c67f6b4083792204e76547141d46e5c2824b7badac7620d3928080703da7b6a122fa3496bf836cf6becd066f70243b72d15da3c388064ed33c16392dba1360b92b18e8402d8e4f7b314ecb676ad0717079eb0937f135839f7dc3919b07fd8f7ce38dff77db69722ba0cb8ef94d0eae97cc04ab6cb8d4692f528be7f1f5eafad1ea3082011e24af42bf1c7c0bc7eca3f"}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x32, 0x0, [], [@jumbo={0xc2, 0x4, 0x40}]}}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x8, 0x11, [], [@calipso={0x7, 0x20, {0xf4d, 0x6, 0x5, 0x9, [0x2, 0x15a, 0x0]}}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x18, {0x6, 0x4, 0x1f, 0xbb8, [0x6, 0x7]}}, @jumbo={0xc2, 0x4, 0x81}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x28, {0x9, 0x8, 0x0, 0x40, [0x9, 0x7fff, 0x6, 0x8000]}}, @ra={0x5, 0x2, 0xffff}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0x1f8}}], 0x1, 0x20000) write(r3, &(0x7f00000001c0)="3a0000001a005f0414f9f407000944000a0000000000000000000000080010000000000045ad7399c3c1e643038b025fd2ab733d835994e1097403d5f4cb5a4ae41eff574b1a6a5d0ae4455923a892d307eedc668d1817bde6a9e8e61b2a5107b484e06d66e76465e7dc8f1f712f4a4c51e0ca48554fb628ab07433a5b8b704b7d20963242ad0df07ff30bf1897c4718f96c013fe0f6d0a49a3f26", 0x9b) 04:57:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x8002}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x8923, &(0x7f0000000080)={'eql\x00', @ifru_settings={0x2d8, 0x0, @sync=0x0}}) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000100)={0x57fe66e6, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) 04:57:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = eventfd2(0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgid(r5) r6 = syz_open_procfs(r5, &(0x7f00000001c0)='gid_map\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r8 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r8, 0x10, &(0x7f0000000400)) fcntl$setstatus(r8, 0x4, 0x6100) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, &(0x7f0000000040)=0x1400000000000, 0x9) writev(r8, &(0x7f0000000680), 0x0) r10 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r10, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r11}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r11, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) r12 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r12, 0x10, &(0x7f0000000400)) fcntl$setstatus(r12, 0x4, 0x6100) r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r12, 0x0, 0x2) sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe) writev(r3, &(0x7f0000000800)=[{&(0x7f0000000440)="6a4f826de2e640f7a4ac1f3ce54a6b1f7235c0e8e492297861da6ea984ba841f67c5caf6ee99ecbcb30910a720509b95963f163d2c648e2e437977c8694b1d9e30b3e102ded4fce5cf01c969096e37d792c79d594603ca8be3a6b9cd63efe88f4d6f9f19d991db43948e148615c2f749e5d08f15c3e8f39a72e128603138cacb93d579c4cef17a42c1e255624723803c11"}, {&(0x7f0000000500)="89ba9d02fc95934681b65d826a72d36cefa4a5ba3c4fe81e1e5b6f0b32919c71956399d4f9e871e4e14bd9bf2995b51c3092d2387135f2d94fe52a0ce31f6ad2c152750fc9e7bc61197e2c2e7a41f70e9761984b5f285fde8be23123b1da56e63e22f96ae0bdf6d064ebe7b00e3d803f8dbc23fa7b274228a4af234cb4fa83f483f76859577ba42056b0a45f501683d8284f0c22cd9f6fcb4e9d"}, {&(0x7f00000005c0)="e4a5bd31b953c64c686f8d090efbc76547cb7681d47178aa8d9419b72f8facf46499bbf4640ce0cc2a01fa92e028fa7258698a3ed4542235a3402040c4e07ce30c13f6f63083ea302fdbd8f17faca122a0ddc8d6164286134ad9679d46f306578294c70945436b58d0ced670e470e41d4f1cbc16323917c58df6d3d45864dc03c677d8"}, {&(0x7f0000000680)="89b373f2ee8ff924e2df6001e6a188e0a5b4d84d5ce53aab9df96efb18eb1a9fbb6d"}, {&(0x7f0000000740)="9a38b704c8b01dab30943fa39957e2fc57e0f7984da5db8bc3e61c5bfe794c0d74f4663c2c10b9bbbb0457277d6d17dbaac88df9a51b52ee1db5fc743c9018d4b27db7a4ac496d37eedc7577aaca1260ebb8c9166686592322859934af8d9d5facda7c42990f6e1852ff323b25574851372a2c0ee9fee506ef1b68f6310063f66e"}], 0x2b8) r14 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r14, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r15}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r15, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_IFINDEX={0x8, 0xb, r11}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x88}, @FOU_ATTR_IFINDEX={0x8, 0xb, r15}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r16 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11636218710735439f4a5d4a278c48400000000000000000000000000000000000000000000000000000000000000000e8ffffff", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a687700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/119], @ANYBLOB='w\x00'/24], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 04:57:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff1800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a687700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/119], @ANYBLOB="77000000000000000000000000000000d6fc298d150000000a2d654486ff8b1342b2bae523ba3984739c062b126d223ad844a8bc03acbba963bfe0be1dbe7e5b5ac2bce7b14ba2e0506ad421b718c8f908b0864309b36f75c5cf94235386dc387e94b0053f737232c909655c619ec32317a41a74c88b734ba766cd973b392d9e41defd2d1df0f6ac3a4c6913f963b2b462610a2012cb3069a159aae7976a69e30099cec9814f1e54d85010ef51f9bbd0268387b78f5b388281efed6ea92f6a68badc899ac3161b2f8a63ec3f5e662b2bdf18e74457"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r5 = eventfd2(0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000140)) fstat(r5, &(0x7f0000000580)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendfile(r5, r6, &(0x7f00000001c0)=0x3, 0x7f) [ 453.614362] binder: 15380:15383 unknown command 409101073 [ 453.626915] binder: 15380:15383 ioctl c0306201 20000180 returned -22 [ 453.627952] binder: BINDER_SET_CONTEXT_MGR already set [ 453.627960] binder: 15377:15387 ioctl 40046207 0 returned -16 [ 453.710243] Ø: renamed from eql [ 453.751522] binder: 15398:15399 transaction failed 29201/-22, size -24-24 line 3137 [ 453.766328] binder: undelivered TRANSACTION_ERROR: 29201 04:57:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x0, 0x1, {0x32, 0x11, 0x14, 0x1d, 0x6, 0x0, 0x2, 0xb8}}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x526987c9) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000003c0)) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) chroot(&(0x7f0000000380)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_VL_READ(r6, 0x80047013, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff1800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a687700000000000000000000000000000000000000008561646600000000000000000000000000000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/119], @ANYBLOB='w\x00'/24], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000180000000000000038000000000000005759195d855587b9f21aac4fb8e8280476b33bd84667d6b89e57543900352cbcb303be99dd0400000000000000d0a116"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 04:57:59 executing program 0: r0 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r1 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) writev(r1, &(0x7f0000000680), 0x0) r3 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r4}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r4, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r5, &(0x7f0000000700)=""/250, 0xffffffc9) getpeername$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) dup3(r8, 0xffffffffffffffff, 0x1c0000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) r10 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r10, 0x10, &(0x7f0000000400)) fcntl$setstatus(r10, 0x4, 0x6100) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r10, 0x0, 0x2) sendfile(r10, r11, &(0x7f0000000040), 0x8000fffffffe) writev(r10, &(0x7f0000000680), 0x0) r12 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r12, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r13}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r13, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) r14 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r14, 0x10, &(0x7f0000000400)) fcntl$setstatus(r14, 0x4, 0x6100) r15 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r14, 0x0, 0x2) sendfile(r14, r15, &(0x7f0000000040), 0x8000fffffffe) writev(r14, &(0x7f0000000680), 0x0) r16 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r16, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r17}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r17, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) r18 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r18, 0x10, &(0x7f0000000400)) fcntl$setstatus(r18, 0x4, 0x6100) r19 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r18, 0x0, 0x2) sendfile(r18, r19, &(0x7f0000000040), 0x8000fffffffe) writev(r18, &(0x7f0000000680), 0x0) r20 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r18, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r20, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r21}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r21, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) r22 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r22, 0x10, &(0x7f0000000400)) fcntl$setstatus(r22, 0x4, 0x6100) r23 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r22, 0x0, 0x2) sendfile(r22, r23, &(0x7f0000000040), 0x8000fffffffe) writev(r22, &(0x7f0000000680), 0x0) r24 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r22, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r24, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r25}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r25, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) r26 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r26, 0x10, &(0x7f0000000400)) fcntl$setstatus(r26, 0x4, 0x6100) r27 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r26, 0x0, 0x2) sendfile(r26, r27, &(0x7f0000000040), 0x8000fffffffe) writev(r26, &(0x7f0000000680), 0x0) r28 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r26, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r28, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r29}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r29, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r31 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r31, 0x10, &(0x7f0000000400)) fcntl$setstatus(r31, 0x4, 0x6100) r32 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r31, 0x0, 0x2) sendfile(r31, r32, &(0x7f0000000040), 0x8000fffffffe) writev(r31, &(0x7f0000000680), 0x0) r33 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r31, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r33, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r34}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r34, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) r35 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r35, 0x10, &(0x7f0000000400)) fcntl$setstatus(r35, 0x4, 0x6100) r36 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r35, 0x0, 0x2) sendfile(r35, r36, &(0x7f0000000040), 0x8000fffffffe) writev(r35, &(0x7f0000000680), 0x0) r37 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r35, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r37, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r38}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r38, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', r38}) r40 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r40, 0x10, &(0x7f0000000400)) fcntl$setstatus(r40, 0x4, 0x6100) r41 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r40, 0x0, 0x2) sendfile(r40, r41, &(0x7f0000000040), 0x8000fffffffe) writev(r40, &(0x7f0000000680), 0x0) r42 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r40, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r42, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r43}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r43, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000015c0)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) r45 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r45, 0x10, &(0x7f0000000400)) fcntl$setstatus(r45, 0x4, 0x6100) r46 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r45, 0x0, 0x2) sendfile(r45, r46, &(0x7f0000000040), 0x8000fffffffe) writev(r45, &(0x7f0000000680), 0x0) r47 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r45, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r47, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r48}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r48, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000540)={@empty, @remote, 0x0}, &(0x7f00000016c0)=0xc) r50 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r50, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r51 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r51, 0x10, &(0x7f0000000400)) fcntl$setstatus(r51, 0x4, 0x6100) r52 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r51, 0x0, 0x2) sendfile(r51, r52, &(0x7f0000000040), 0x8000fffffffe) writev(r51, &(0x7f0000000680), 0x0) r53 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r51, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r53, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r54}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r54, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) ioctl$ifreq_SIOCGIFINDEX_vcan(r50, 0x8933, &(0x7f00000017c0)={'vxcan1\x00', r54}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'ip6erspan0\x00', 0x0}) r57 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r57, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) getsockname$packet(r57, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) r58 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r58, 0x10, &(0x7f0000000400)) fcntl$setstatus(r58, 0x4, 0x6100) r59 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r58, 0x0, 0x2) sendfile(r58, r59, &(0x7f0000000040), 0x8000fffffffe) writev(r58, &(0x7f0000000680), 0x0) r60 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r58, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r60, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r61}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r61, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) ioctl$sock_SIOCGIFINDEX(r57, 0x8933, &(0x7f0000001a00)={'sit0\x00', r61}) r63 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r63, 0x10, &(0x7f0000000400)) fcntl$setstatus(r63, 0x4, 0x6100) r64 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r63, 0x0, 0x2) sendfile(r63, r64, &(0x7f0000000040), 0x8000fffffffe) writev(r63, &(0x7f0000000680), 0x0) r65 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r63, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r65, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r66}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r66, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) r67 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r67, 0x10, &(0x7f0000000400)) fcntl$setstatus(r67, 0x4, 0x6100) r68 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r67, 0x0, 0x2) sendfile(r67, r68, &(0x7f0000000040), 0x8000fffffffe) writev(r67, &(0x7f0000000680), 0x0) r69 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r67, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r69, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r70}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r70, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) r71 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r71, 0x10, &(0x7f0000000400)) fcntl$setstatus(r71, 0x4, 0x6100) r72 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r71, 0x0, 0x2) sendfile(r71, r72, &(0x7f0000000040), 0x8000fffffffe) writev(r71, &(0x7f0000000680), 0x0) r73 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r71, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r73, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r74}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r74, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000022c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002280)={&(0x7f0000001a40)={0x828, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x234, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1c3b4c4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x208b}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xc46}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8}}}]}}, {{0x8, 0x1, r21}, {0x1ac, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r29}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8af9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r34}}}]}}, {{0x8, 0x1, r39}, {0xb4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r43}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r44}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r48}, {0x12c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r49}}}]}}, {{0x8}, {0x1b0, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x24000}}, {0x8, 0x6, r55}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r56}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r62}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r66}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r70}}}]}}, {{0x8, 0x1, r74}, {0x74, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x828}, 0x1, 0x0, 0x0, 0x4010}, 0x220000e0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r75 = open(&(0x7f0000021000)='./file0\x00', 0xa2cce56677dba241, 0x0) getsockopt$inet6_mreq(r75, 0x29, 0x0, &(0x7f0000000100)={@initdev}, &(0x7f0000000180)=0x14) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r76, &(0x7f0000000700)=""/250, 0xffffffc9) ioctl$sock_inet_tcp_SIOCOUTQNSD(r76, 0x894b, &(0x7f0000000040)) fchdir(r75) r77 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r78 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r78, &(0x7f0000000580)={0x8, "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", 0x1000}, 0x10000005c) fadvise64(r78, 0x0, 0x0, 0x4) sendfile(r77, r77, 0x0, 0x7fff) [ 453.934669] Ø: renamed from eql 04:57:59 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x210a00, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000180)={@ipv4, r1}, 0x14) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) tkill(r2, 0x3b) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000200)=""/48) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=0x0) fcntl$setown(r3, 0x8, r4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x200000, 0x0) r6 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x381342) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000340)={0x3, 0x20, 0x2, r6}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x10, &(0x7f00000003c0)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000400), &(0x7f0000000440)=0xc) r8 = dup(0xffffffffffffffff) write$FUSE_LK(r8, &(0x7f0000000480)={0x28, 0x0, 0x1, {{0x3, 0x6, 0x0, r4}}}, 0x28) r9 = socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000500)=""/4096) mkdirat(r8, &(0x7f0000001500)='./file0\x00', 0x100) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001540)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000001580)={{0x2, 0x4e22, @broadcast}, {0x306, @dev={[], 0x13}}, 0x4c, {0x2, 0x4e23, @multicast1}, 'syzkaller1\x00'}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000001600)) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001680)='/selinux/mls\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r11, 0xc0096616, &(0x7f00000016c0)={0x2, [0x0, 0x0]}) write$P9_RFLUSH(r8, &(0x7f0000001700)={0x7, 0x6d, 0x1}, 0x7) 04:57:59 executing program 2: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) getpeername(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "545a1dbfaa13c7e4", "0b59a4096e89dcfd5a9f7fa31ad674a1", "7aa2b966", "fd5dbd2a2f5b3062"}, 0x28) r3 = gettid() r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000000c0)) prctl$PR_GET_KEEPCAPS(0x7) tkill(r3, 0x9) 04:57:59 executing program 2: r0 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="f94a0f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xc}], 0x100000000000005a}}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) tkill(r0, 0x30) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x526987c9) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c0}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:02 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x0, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:02 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000340)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0x10, 0x3, 0x2) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7), 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x323) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000018c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(r10, r9, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r11, 0x400454cd, 0x7) dup3(r12, r11, 0x0) dup3(r12, 0xffffffffffffffff, 0x1c0000) r13 = dup3(r12, 0xffffffffffffffff, 0x1c0000) preadv(r13, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r14 = socket$inet(0x2, 0x0, 0x0) syncfs(r14) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r15, 0x8953, 0x0) r16 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r16, 0x8953, &(0x7f0000000500)={{0x2, 0x4e22, @multicast1}, {0x1, @broadcast}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r16, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, 0x0, 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x0) r17 = open(&(0x7f0000000500)='./bus\x00', 0x143442, 0xda) close(r17) r18 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x505082) r19 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r19, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r18, 0x4c00, r19) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x8010, r17, 0xd32a5000) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r17, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r21, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000240)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r24, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0x29, 0x19, 0x1, {0x1120, {0x8, 0x1, 0x6}, 0x100010114, r24, r22, 0x4, 0x10000, 0x4000000000000009, 0x1, 0x4, 0x8, 0x0, 0x0, 0x6, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r17, &(0x7f0000001b80), 0x0) read(r20, &(0x7f0000000800)=""/264, 0x108) sendfile(r18, r19, 0x0, 0x180003) 04:58:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/119, 0x77}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x1c0000) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0xc0506617, &(0x7f0000000300)={{0x0, 0x0, @descriptor="5ee0fe644540c5f2"}, 0x93, [], "8974667aeb8038e6a1603df604e9e9e8b2d1c0c2065e75ac90273188aa808db17e492e986b0e5a23ccf385137815e4e155a53bc571f3697fbfb2c5623f6df70f614e751b66263125b693460487b25078cb89a2afac2306218e3a1b2a4267b29ab4d9c351186d9f3a274632f2102c468abce959cb533541dd2af084985d590c189fdd294b420fe10ae018535a147fbe16e2c04f"}) 04:58:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = eventfd2(0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000140)) fstat(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r7, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r7, r5, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) r8 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r8) r9 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r8) keyctl$get_persistent(0x16, r7, r9) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) dup3(r3, r2, 0x0) dup3(r3, 0xffffffffffffffff, 0x1c0000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000200)={0x6, 'netdevsim0\x00', {0x800}, 0xa351}) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001f0001060000000000000000ffffffff0000000000100000000000000000000000000000fe8000000000000000000000000000bb00000000000000000c001500000000000000000034daccec477b5accb17bf114d33e34049f379cf983b7b55d39d5c4b74929a4d15014864f18a8f5f640e75efbb5ac00628a31ddb3e4ad970fd7727dc4f9ae4c4df91735bab4c10eb3eaf20c0bbb759b691e18a2689f62b31a8d51dde996499b5257cb7bcdcd3fc5bee1ba4b45c4b86007ba7eac5c2bb06bd013badcf3ddfde165b1b5ecfd0678dc6f563e86176442425071217e1f8dcc28606d9f70ae4352ce"], 0x4c}}, 0x0) 04:58:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 456.639329] binder_alloc: 15453: binder_alloc_buf, no vma [ 456.644171] binder: BINDER_SET_CONTEXT_MGR already set [ 456.644184] binder: 15454:15459 ioctl 40046207 0 returned -16 [ 456.659133] binder: 15453:15455 transaction failed 29189/-3, size -24-24 line 3137 04:58:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:58:02 executing program 1: openat$keychord(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/keychord\x00', 0x40c000, 0x0) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) symlinkat(&(0x7f0000000100)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7f2, &(0x7f0000000380)) write(r2, &(0x7f00000001c0), 0xfffffef3) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="0203ffcea749a9c89b57c55f33db6bf7d4c6c3bc799dd222a748844f020200000000000000461f070000296fc06065478d0001486ff8da30d01b9cb4c70aa8ab86379e5e50739aa773ae81abcda5dff0eed19cdb0086d700000000537934dc76491921d0a48c416dcd996ca1056ad49d7f3d1066e90c609239912fe88e0800000000c7544282506bf07c678075fd0d0ad098b28efc0076619e3d29207c833c9f57ae57d7b5ba43e83b8247a7f00f6e77e1184476693f804d19c122b737f9375d3c628db2838f33a87f3c7abf3da1ffffffff00000000eef6ea1028e838d2a84a145157ebc361e738380d034cd362e5f736eaa708e6004b7ad6f7d447914ec2bf015d52731919a39d30923f029153006dbcfb25c28f99bdefe72970ad783de911309698fe369e1bb8b7b32852526d19bba6354572f4fa0622d059ed0946ea16b668ef8aba7a72e842822764fb9a719dda80f30dc45cedf49965c187cf92928918c0a5a34061a59b105e238344fe93185e714b28e180ae89713645ec690f3207a0623d57199bbbf3e58801deb0a7f511b482be44cc9363db7daa72ffe6fcce8140e718d06bc0f0346dae38a6c98ee87528ce69b1857e750afd969c5ef62b698e094ec69d40c767c9560e60bd5e0310eff6df340360f87da581437523ae44f84f3a7e8c7bdd612a563b57026d77f507785270b2b3f88a76b4c677c735b21e232688cdb56c99cfdff97583152072236c5a1ea47b56118bb06aa3009bcb7d2b805373ae578a04f0b1edfe"], 0x1, 0x2) read(r1, &(0x7f0000000200)=""/250, 0xfffffe8a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, 0x0, 0x0) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(0x0, 0x10) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000080)=0x7042) sync_file_range(0xffffffffffffffff, 0x4000000005, 0x2, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='\xe7\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 456.780888] binder: undelivered TRANSACTION_ERROR: 29189 04:58:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f00000000c0)="2d4ca08ebba523e7e67ad2e8d8d9d4b70b59817450ed4f7b6f74d37c463a5e19ddb9835b3a4ba8bce941", 0xff78, 0x8800, 0x0, 0x1000001d3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) setxattr$security_smack_transmute(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x5) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000240)=@gcm_128={{0x303}, "106cbc80cefef01a", "495c19084e8bff8823ef9b431762d9ee", "8cfbce54", "3c589f0d30812e22"}, 0x28) 04:58:02 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x80) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0\x05\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x8) lseek(r2, 0x0, 0x2) sendfile(r2, r7, &(0x7f0000000040), 0x8000fffffffe) writev(r2, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r8, 0x24, &(0x7f0000000100)={0x2, 0x1, 0xd95, 0x20}) fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6(0x10, 0x8000000100000003, 0x0) dup2(r9, r10) r11 = socket(0x5, 0x0, 0xfe) getsockname$packet(r11, &(0x7f0000000040), &(0x7f00000001c0)=0x14) sendfile(r2, r7, 0x0, 0xa5cc554) 04:58:04 executing program 5: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r4, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r4, 0x0, 0x180003) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x77d}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 04:58:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='lo\x00', 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffce, 0xffffffffffffff4d, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0}, @fda, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f00000000c0)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) [ 458.540733] binder: 15524:15525 transaction failed 29201/-22, size 4294967246--179 line 3137 [ 458.564926] binder: undelivered TRANSACTION_ERROR: 29201 [ 458.573580] binder: 15524:15526 transaction failed 29201/-22, size 4294967246--179 line 3137 [ 458.583371] binder: undelivered TRANSACTION_ERROR: 29201 04:58:05 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x0, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e20, @local}, 0xffffffffffffff57) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x9a6}], 0x1, 0x0, 0x187}, 0x100) r1 = dup(r0) write$binfmt_aout(r1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="cc000000000000000000000000000000d4010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6056c6a95870de5e2a3b7907b519e090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c6400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a66980aa59065fd1db09e5a1810c00"/2301], 0x8fd) 04:58:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) socket$key(0xf, 0x3, 0x2) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = dup3(r0, r1, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x526987c9) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x40, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) r5 = socket$netlink(0x10, 0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r5, 0x0}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000001c0)={'veth0_to_bridge\x00', @ifru_addrs=@ethernet={0x6, @remote}}) 04:58:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:58:05 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x2, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = timerfd_create(0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) dup3(r5, r4, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x1c0000) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) dup3(r3, r2, 0x80000) r7 = fcntl$dupfd(r1, 0xa0f, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00*\x0e\xc3=.\x13\xcbx\x95*\xeeX\x9fcy\xa49\xf6\x8f\x82^\x19\xa9\xcd+\b\x9f\xc6,\xa0\xf0\xff\x9dO\x06\xc9\x15\xda\xa4\x7fh\xd4\xe8C\xdeKUrR\xf4\x9c\x87\xee\xd2\xfb\xdfs\xd0G\x91\x02\x15Z\xa8\x1ad\xadY\x13\x14mg\xc9\x00\x16\xa4\xc48\x06u\x1e:\xd4Y?\xd8P\xe8reP\xffv\xd6\x12\x85N1\n\f\xb0\x1e\xe7\xffD\x1aS\xbf0\x80\xff\xff7V\xcc5\x96W\x14J\xe2\x93\xe3\xc6A7\xd8\xec\xb2m\xf5\x16-\x1b\xbd\x11\x1aYg\xe0\xa7\xd19\a') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') [ 459.689402] binder: BINDER_SET_CONTEXT_MGR already set [ 459.703228] binder: 15533:15536 ioctl 40046207 0 returned -16 04:58:05 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)="e7db96021c858ac269b1442d82cdbd29b93f447e716842ad33c9ce7ba1a8dacaf618090193aa2a85659875bee76cc09cc0df0c46936ac4a020a5ac0dd667e66d11b7b29ddeb57f37ca2c7b927371322549412d64e1ab146b447a05663ebd5f682cd8c415996621c391123590b504c22e0e93d027a87485a18ed2fe8d6c6c3434d3dce3fd54d7058912cfc32687bc719a895e6917ccade645365ba1c020775538b4a431e9937f288005db8a66ce8d09e1d72485bd939b140005749ef28e313e60ffe9b740e0fc9c25f8c950b7d38256bdf90c71ba92566e", 0xd7, r0}, 0x68) 04:58:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000280)) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000d12ffc)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000300)={r2, 0x0, 0x6, 0x1, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x737e4526746eb34a, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) fcntl$setownex(r3, 0xf, &(0x7f0000704000)={0x2}) r4 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x8932, &(0x7f0000000100)={'syz_tun\x00', @ifru_settings={0x1, 0x0, @fr_pvc=0x0}}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000700), 0x31f, 0x10400003) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9800000025528d0af3c2986390948abb067c65fbd0da179642e45cbb9390cc426a6a33fe2c492eaec4c7a13746e2460a505315a4e8e879ecb7fdf28bb69fc9fdb299bd93a6e33b2e0855dd6082e230ecf79b6066872ce8346ecb7623ec3d9bc79c882e4422f05b11c4af5a6f64bf5e911395e2a7c0", @ANYBLOB="b5d0cfcd98fc2b0c5ab715503f05ae94e6689beab577e1e0bbfb836a938fd4aa21d19fb349aed21125e5ef3b937885bbf3cc77a5205516bcd1ec09d9027cab98c029f2e50632689af95636b0a40b454d5c45eb1136b71751ae4c2794865a34619817e065eb75a19358f27cb637729b73c8971472cb615e38279e6fce13f1d5b65cf493b180f23c693d3fb1f7b5f986ee18cc1f00000000000000db09e1f93f2d1e01fcce539e9be19494baa32c337fc0dc5b70f3d3c7ede42c638bc806486ac0c980f13169566978fd5c111a57084f31deb7f105d46c11b9a50a3652e03f961c5245a737e074b952822a88ed87fcd3c4c8cb4ca0f21551b51be247290f07ee6454b06539101b276a7c4337005e201c936441fbbe8a7b470219f1e04505d5cd96aad11eccb6e489a79cf24c71f0e96c0f297bb3e1e4edccee26c9689820658be015b4e4b0b707b74a96527fe029aa245418489bceca69b71ae6f0454f84bf0aa6da1675574c9bfd0b2da70176e2299c347caf73b1f3986a85b6ddfd6a4c436d88d87cb1916d0df746217c7363e361e1c9c4032389b16adcaeffcd048dde79b0c5ab77f3d4cfc0edfbce74f71479f3a444948260", @ANYBLOB="00012dbd7000fddbdf25100000007c0005002c000200080003000000000008000400400000000800010001000000080001002000000008000100010000004c00020008000200060000000800040001000000080003000500000008000400bdb4331e080004000800000008000400000000000800030007000000080003003f00000008000400050000000800020004000400"], 0x3}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)={0xdc, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @local, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb9a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6825}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40004110}, 0x20008010) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r7 = memfd_create(&(0x7f00000000c0)='n\x9e\xc2ux/.bdevh\x01\xd9\"\x8f\xa9\x91\x95\x7f\b\x00\x00', 0x0) ftruncate(r7, 0x4000b) sendfile(r0, r7, 0x0, 0x10010000000002) 04:58:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r1) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x0) readv(r1, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000000c0)={{0xfffffffffffffffd, 0x1, 0x40, 0x0, 0x7e}, 0x696c, 0xfff, 0x5e}) sendto$inet6(r0, 0x0, 0x0, 0x800, &(0x7f0000000040)={0xa, 0x1e, 0x0, @ipv4={[], [], @empty}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10) 04:58:05 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$selinux_load(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c1100000000000000000000000000000001000a00000000000000000000004000000000000000098505bd"], 0x4c) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) sendfile(r3, r0, 0x0, 0x1) 04:58:05 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000024007fffffff9e0000007701001c00ff0100000000000000f1", 0x1d) splice(r0, 0x0, r2, 0x0, 0x422000a78, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) dup3(r6, 0xffffffffffffffff, 0x1c0000) dup(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f00000000c0)) 04:58:05 executing program 1: syz_open_dev$loop(&(0x7f00000004c0)='/de\r\xcd\x1a@\xb1\x02\x91\x11', 0x6e04, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) add_key(0x0, &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) writev(r2, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0) socket$inet6(0xa, 0x480040004000, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup2(r9, r8) connect$unix(r8, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setstatus(r8, 0x4, 0x427ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r11, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup2(0xffffffffffffffff, r10) fcntl$setstatus(r7, 0x4, 0x400) write(r10, &(0x7f0000000400)="d385da37c48985c8025f716720c975d335d669a55b5c6a5fa1148f7a463900c3fdc9e1a87e69cef2573eea1fd88efc8cb589e051525b152f9c65ac21e640a009eada93923d9f1f83bab17c", 0x4b) write$selinux_load(r3, &(0x7f0000000180)=ANY=[], 0xffffffffffffffad) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) [ 460.070372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 460.099482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 460.119060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 460.146852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 460.173799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 460.205480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 460.236471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 460.286164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 460.337610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 460.378856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 460.419162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 460.457563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 460.497787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 460.539282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 460.581577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 04:58:06 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/checkreqprot\x00', 0x800, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000180)={0x1, 0x10000, 0x0, 0x0, 0x0, 0x6}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) flock(r0, 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) socket(0x0, 0xa, 0x100000000) close(0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) sendmsg(r4, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, 0x0}, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000300)=@sha1={0x1, "4c5bbb881c9a71d0113ae099001d434577f66ff6"}, 0x15, 0x0) ioperm(0x3, 0x8001, 0x7fffffff) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(0x0, 0xd9) fdatasync(r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000001c0)={0x0, r8, 0x0, 0x0, 0x0, 0x7}) r9 = open(&(0x7f00000000c0)='./file1\x00', 0x101142, 0x0) r10 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r10, &(0x7f0000000280), 0x1033b) fdatasync(0xffffffffffffffff) ioctl$FICLONE(r7, 0x40049409, r9) write(r6, &(0x7f00000001c0), 0xfb120eb7) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140), 0x1) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x2, 0x0) 04:58:08 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:08 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x3f, 0x12) getpgid(0x0) write$FUSE_LK(r1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@rand_addr="73d0226db513bdba574a6696ccda0a40", 0x9, 0x0, 0x0, 0xe, 0x0, 0x7fffffff}, &(0x7f0000000180)=0x20) socket(0x2, 0x4, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) fadvise64(r2, 0x0, 0x200, 0x7) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) open(0x0, 0x0, 0x1c0) syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b51214eb9548d1bbb6112dceef734d3ed1e46d57616e", @ANYRES16=0x0, @ANYBLOB="02000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x4000413) write$cgroup_type(r5, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000000c0)='./file1\x00') syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) read(r1, &(0x7f0000000700)=""/250, 0xffffffc9) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x7) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x98, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/152], 0x0, 0x0, 0x0}) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 04:58:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:58:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="dc"], 0x1) io_submit(r4, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000180)='\f', 0x1, 0x0, 0x0, 0x2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0}]) dup3(r2, r3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) fcntl$setstatus(r1, 0x4, 0x64400) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10200}]) 04:58:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r2, &(0x7f0000000700)=""/250, 0xffffffc9) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x200, 0x0) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x24000000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="08002cbd7000fcdbdf2506000000100001006e65746f657673696d000000100002006e657464657673696d30000008000300030000000800040001000000100001006e657464657673696d000000100002006e657464657673696d300000040002000000100001006e657464657673696d000000100002006e657464657673696d30000008000300030000000800040200000000080001007063690014000200303030303a30303a31302e30000000000800030001000000080004000200"/202], 0xd0}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r5, &(0x7f0000000700)=""/250, 0xffffffc9) r6 = eventfd2(0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = getpgid(r7) syz_open_procfs(r8, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0e04402}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000005) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 462.686762] binder: BINDER_SET_CONTEXT_MGR already set [ 462.696478] binder: 15603:15607 ioctl 40046207 0 returned -16 04:58:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = open(0x0, 0x0, 0x8a) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x801, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='/selinux/avc/hashs\x00') getsockopt$sock_timeval(r1, 0x1, 0x62, &(0x7f0000000340), &(0x7f0000000380)=0x8) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900000807010010006c6f0000002400000000000008000011"], 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xffff0002}, 0xffffffffffffff1a) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0xcc442, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x10000, 0x0, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0xfc64) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) dup3(r9, 0xffffffffffffffff, 0x1c0000) recvmmsg(r9, &(0x7f0000002b40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/155, 0x9b}, {&(0x7f0000000480)=""/85, 0x55}, {&(0x7f0000000500)=""/244, 0xf4}, {&(0x7f00000001c0)=""/16, 0x10}], 0x4, &(0x7f0000000600)=""/128, 0x80}, 0x2}, {{&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/234, 0xea}, {&(0x7f0000000800)=""/127, 0x7f}, {&(0x7f0000000880)=""/88, 0x58}, {&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000900)=""/15, 0xf}, {&(0x7f0000000940)=""/76, 0x4c}, {&(0x7f0000000b00)=""/193, 0xc1}], 0x7, &(0x7f0000000c00)=""/171, 0xab}, 0x1}, {{&(0x7f0000000cc0)=@pppol2tp, 0x80, &(0x7f0000001380)=[{&(0x7f0000000d40)=""/186, 0xba}, {&(0x7f0000000e00)=""/239, 0xef}, {&(0x7f0000000f00)=""/238, 0xee}, {&(0x7f0000000a40)=""/19, 0x13}, {&(0x7f0000001000)=""/251, 0xfb}, {&(0x7f0000001100)=""/139, 0x8b}, {&(0x7f00000011c0)=""/135, 0x87}, {&(0x7f0000001280)=""/240, 0xf0}], 0x8}, 0x8}, {{&(0x7f0000001400)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000001480)=""/144, 0x90}, {&(0x7f0000001540)=""/54, 0x36}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000001580)=""/147, 0x93}, {&(0x7f0000001640)=""/25, 0x19}, {&(0x7f0000001680)=""/117, 0x75}, {&(0x7f0000001700)=""/240, 0xf0}, {&(0x7f00000028c0)=""/157, 0x9d}, {&(0x7f0000002980)=""/67, 0x43}, {&(0x7f0000001800)=""/64, 0x40}], 0xa, &(0x7f0000002ac0)=""/65, 0x41}, 0x81}], 0x4, 0x20, &(0x7f0000002c40)={0x0, 0x1c9c380}) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1) r12 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c) mknodat(r12, 0x0, 0x0, 0x0) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r12, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES64=r13], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r11, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="00032abd7000ffdbdf250f00004400010008000b00736970000c000700500000001700000008000b0073697000080005000400000008000b0073697000080001000a00000045fe07002100000002000000080004000200000008000400ffffffff"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0xd0) sendmsg$IPVS_CMD_GET_SERVICE(r10, &(0x7f0000002e80)={&(0x7f0000002c80), 0xc, &(0x7f0000002e40)={&(0x7f0000002ec0)={0x15c, r13, 0x701, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xb}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x27}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6b3ea9b5}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT, @IPVS_SVC_ATTR_FLAGS={0x0, 0x7, {0x4, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x0, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x75}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0xfffffc80, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x461a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ec}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x88}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x15c}}, 0x8800) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r14 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r14, &(0x7f00000002c0)="2059ae6e6dbba3a79ffe", 0xfffffffffffffe56, 0x0, 0x0, 0x0) 04:58:08 executing program 1: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x0, 0x7, @loopback, 0x8}, {0xa, 0x4e21, 0x0, @remote}, 0x0, [0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3]}, 0x5c) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev, 0x2}, 0x1c) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x1d2, 0x0) mmap$perf(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r0, 0x4) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = eventfd2(0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = getpgid(r6) syz_open_procfs(r7, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x95, 0x2, 0x2, 0x80, 0x0, 0xfff, 0xff141a801026cb23, 0x10, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x2, 0x3}, 0x4000, 0x7, 0x20dcf, 0x0, 0xfd7, 0x40, 0x7f}, r6, 0x2, 0xffffffffffffffff, 0x9) open(0x0, 0x14102e, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) 04:58:09 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x35, 0x0, 0x0, 0x3}, {0x80000006}]}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x400000000003}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = accept$unix(r4, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000140)={0x7ff, 0x4, 0x5, 0x40, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) 04:58:09 executing program 5: open(0x0, 0x0, 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r2, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000080)=0xfffffffc, 0xfffffffffffffeb6) fcntl$getflags(r0, 0x3) add_key(&(0x7f0000000180)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000300)='./file0\x00', 0x400000, 0x238) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) writev(r2, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r6 = open(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0) r7 = socket$inet6(0xa, 0x0, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r8, 0x24, &(0x7f0000000100)={0x1, 0x1, 0xd95}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r9}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="d3851fa932349c2a626790e745bd67d6e34a3c5b3f15602be56c4293c0aca3426334ed4ba97eb61b7462b61fd92618f6a635fe6b4b6cfd50bfaab12c9c3c8d213d126cefdb07e5ef7f5462479c2d2703fa1cf23119e8ae1395adc58c88e963073c0931c48f95debc607466eeb5c40cf2"], 0x6a) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) [ 463.510919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket 04:58:09 executing program 1: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f00000001c0)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r4 = socket$inet6(0xa, 0x2, 0x0) socket$inet(0x10, 0x80003, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xffffffffffffff63) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f000000ed80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f000000eb40)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f000000ec40)=[{&(0x7f000000ebc0)="a1c6e8f331d9c047d51158fb67e571238ba8ae5082749f933f79bba1bf9036685003acafbbfd6de1e1c03f5e835d90b7af0e0d857261f17b3346bb76de428044749687a5de", 0x45}], 0x1, &(0x7f000000ec80)=ANY=[@ANYBLOB="4000000000000000ea00000000030000857eab923541a97c95c7248932c98917ab101bd76b5800aa2baec82edd84f4a86a3ea51a39ac7999811f000000000000a800000000000000ede2230e43000000d9da910b578e8631db49d0413a2758a4baec768a22bd598e2294a6268ba556c77508c2c9d796e217c67c7917f315dd7e0ddd817bfe15000000000000000828669259989f58518de040dfb74244066f01c2318602fd150a49d56f843efc4d808a1b4f2692a1d95e7b911611f368bc03f98b023139af266724f24ba67bb84a4e25d96326939e6ca134f9944709a10a36a8cd7ff8a404a69a93"], 0xe8}}], 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) dup(r4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) socket$key(0xf, 0x3, 0x2) r6 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="90e73cedbe844bdda8570833395d493a1aac3238b7a34f24f9cd39785d5c237073dafde77ef5a1a9e66dc63ae928a4a42e9d88b131eb6d46353331c4f2861a245d33b4e74462a0d534390bbaea2e57284334a55affc1f64455564ede46c25d2bd9c9afa4b715ce7bed394231b36dde3cf7508556370755b5fc8a6e44f08f48329868b04088ee5e3ac8ed649a4b753a1088b904c76a2f773e886213ee0b3479e6022fea8ded5b5086da76c227d8cd917ff133ac978a6c65814c7185d0c59035b9a6966b883251439e2a217dd97131872749cd4d2821df359014b654b23b6411d2ebcdb5a3cb693b3f06aa4588be365742b7d22a44f3f2a073479ff0", 0xfb, r6) add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0), 0x0, 0x0) r7 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r8 = gettid() fcntl$setownex(r7, 0xf, &(0x7f0000000280)={0x2, r8}) fcntl$setlease(r7, 0x400, 0x0) 04:58:09 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) preadv(r0, &(0x7f0000003380)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000140)=""/226, 0xe2}, {&(0x7f0000001280)=""/246, 0xf6}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/4096, 0x1000}], 0x6, 0x88c) io_setup(0x6f, &(0x7f0000000240)=0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000003400)='/selinux/mls\x00', 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000004880)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000004840)={&(0x7f0000003480)={0x13b4, 0xa, 0x3e2147066616334f, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x9}, [@nested={0x284, 0x81, [@generic="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", @generic="92e2c3edb18bed38e7f15689e64c7ff53d460e044cf36368e5f85e20246c524f841e73bfdf771caf73daf25d73c852ede3", @generic="5da0d0a608abffc342f4a6d8baded4b4b606d003c9cbb2c68a33250886eb25a88611a773c3abc44096020981719504665361db30683f1b88cd5fc71e4ca165ace09dcc0d5002c4f78a57a8b9d2d5d8e0ce7dda66b23d21b57a636da85b778a63bdaa", @typed={0xf0, 0xf, @binary="e203130fd8d29c08d91f09fe9ea16901e792f4579d4c996cd3566325306d8cd9f69829bf7fd3b0aa0407aa8bdf5010c0ebfab85921e8050ddf775d0d7967701fc6aec429520289e9cc9be872219367a2bcfead99751eda19522299849cdf2399cbd6d41c74329668748e27755456c9cfdc3eb5bd71298b8e0e9f3dad871089fbab64b7159d3cf4c7d18bc9ea49056a0d555d5ea2c5c8eaa6ad22de4702196c7b228f372c601ae3e1a347744f4c4b1468f2d2ff678c9eea3549b8cdf6d136cd21f5c64b0ab761e21a5c5b4a834265d9a13931cd93cdc06f7d41cab0b87095fa152d0a85975bc7e19bbae188"}]}, @nested={0x10, 0x4c, [@typed={0x4, 0x73}, @typed={0x8, 0x22, @uid=0xee01}]}, @typed={0x8, 0xa, @u32=0x6}, @generic="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", @generic="0537e0b3cdbd32af5f994f4c23c01efacc23016aece2a2e96386a66d00b35ee53bc42a0bfc2686141de0d056c24de2175771904ebf5c98d10e6a88682ddeb51f4e555bcbd9b0a0f1fe13319afba1a93f3eab43fcaf0532682285c8d6bb3fa94b6fd9b32fc19c40f9840b3dd94a04158321f62b427f804d5021ae3f08d0f0e05c996719e1cb47baea387950d5bdf7f8c1c35046a023ccaaa47d60f1b57221775bd5db5c4b93fcfb11e2214e97", @generic="cf3fd2f2538fa2a80c29312d24296ef044b618fde6d60ce7f5944c4daba7edd35ceb50aca18c8a99c82d928949f1a6f016f7bac4d1b9f832b4bc26cf4a8d5a5adc7acc719b50ee3a44b40344922e2e6c4002b08092b9ae"]}, 0x13b4}}, 0x8080) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) delete_module(&(0x7f00000000c0)='\x9a)\x00', 0xa00) 04:58:11 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:11 executing program 5: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00d473fc00000000", 0x12, 0x0, 0x0, 0xfffffffffffffe57) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x93}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004140), 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x5, 0x4) 04:58:11 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() fchownat(r2, &(0x7f0000000000)='./file0\x00', r3, r4, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = eventfd2(0x0, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000140)) fstat(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r10, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r10, r8, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) r11 = eventfd2(0x0, 0x0) fcntl$getownex(r11, 0x10, &(0x7f0000000140)) fstat(r11, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r14, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r14, r12, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = eventfd2(0x0, 0x0) fcntl$getownex(r16, 0x10, &(0x7f0000000140)) fstat(r16, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r19, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r19, r17, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) fstat(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = eventfd2(0x0, 0x0) fcntl$getownex(r21, 0x10, &(0x7f0000000140)) fstat(r21, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r24, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r24, r22, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) r25 = eventfd2(0x0, 0x0) fcntl$getownex(r25, 0x10, &(0x7f0000000140)) fstat(r25, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r27 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r28, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r28, r26, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [{0x2, 0x4, r6}, {0x2, 0x1, r10}, {0x2, 0x6, r1}, {0x2, 0x1, r14}, {0x2, 0x6c3bcb3f753719d0, r1}, {0x2, 0x2, r15}, {0x2, 0x7, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x0, r17}, {0x8, 0x8, 0xffffffffffffffff}, {0x8, 0x8, r20}, {0x8, 0x3, r22}, {0x8, 0x1, r26}], {0x10, 0x8}}, 0x84, 0x2) write$uinput_user_dev(r5, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) r29 = dup(r5) ioctl$UI_SET_SWBIT(r29, 0x4004556d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r31 = dup(r30) ioctl$PERF_EVENT_IOC_ENABLE(r31, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$uinput_user_dev(r29, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x45c) 04:58:11 executing program 1: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f00000001c0)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r4 = socket$inet6(0xa, 0x2, 0x0) socket$inet(0x10, 0x80003, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xffffffffffffff63) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f000000ed80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f000000eb40)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f000000ec40)=[{&(0x7f000000ebc0)="a1c6e8f331d9c047d51158fb67e571238ba8ae5082749f933f79bba1bf9036685003acafbbfd6de1e1c03f5e835d90b7af0e0d857261f17b3346bb76de428044749687a5de", 0x45}], 0x1, &(0x7f000000ec80)=ANY=[@ANYBLOB="4000000000000000ea00000000030000857eab923541a97c95c7248932c98917ab101bd76b5800aa2baec82edd84f4a86a3ea51a39ac7999811f000000000000a800000000000000ede2230e43000000d9da910b578e8631db49d0413a2758a4baec768a22bd598e2294a6268ba556c77508c2c9d796e217c67c7917f315dd7e0ddd817bfe15000000000000000828669259989f58518de040dfb74244066f01c2318602fd150a49d56f843efc4d808a1b4f2692a1d95e7b911611f368bc03f98b023139af266724f24ba67bb84a4e25d96326939e6ca134f9944709a10a36a8cd7ff8a404a69a93"], 0xe8}}], 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) dup(r4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) socket$key(0xf, 0x3, 0x2) r6 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="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", 0xfb, r6) add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0), 0x0, 0x0) r7 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r8 = gettid() fcntl$setownex(r7, 0xf, &(0x7f0000000280)={0x2, r8}) fcntl$setlease(r7, 0x400, 0x0) 04:58:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) r2 = creat(0x0, 0x2) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5001080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x810) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) accept4$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14, 0x80800) r7 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r7, 0x10, &(0x7f0000000400)) fcntl$setstatus(r7, 0x4, 0x6100) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, &(0x7f0000000040), 0x8000fffffffe) writev(r7, &(0x7f0000000680), 0x0) r9 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r10}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r10, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) r11 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r11, 0x10, &(0x7f0000000400)) fcntl$setstatus(r11, 0x4, 0x6100) r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r11, 0x0, 0x2) sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe) writev(r11, &(0x7f0000000680), 0x0) r13 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r13, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r14}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r14, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @rand_addr, @broadcast}, &(0x7f0000000440)=0xc) r16 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r16, 0x10, &(0x7f0000000400)) fcntl$setstatus(r16, 0x4, 0x6100) r17 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r16, 0x0, 0x2) sendfile(r16, r17, &(0x7f0000000040), 0x8000fffffffe) writev(r16, &(0x7f0000000680), 0x0) r18 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r18, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r19}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r19, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) r20 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r20, 0x10, &(0x7f0000000400)) fcntl$setstatus(r20, 0x4, 0x6100) r21 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r20, 0x0, 0x2) sendfile(r20, r21, &(0x7f0000000040), 0x8000fffffffe) writev(r20, &(0x7f0000000680), 0x0) r22 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r20, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r22, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r23}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r23, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) r24 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r24, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r25 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r25, 0x10, &(0x7f0000000400)) fcntl$setstatus(r25, 0x4, 0x6100) r26 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r25, 0x0, 0x2) sendfile(r25, r26, &(0x7f0000000040), 0x8000fffffffe) writev(r25, &(0x7f0000000680), 0x0) r27 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r25, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r27, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r28}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r28, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) ioctl$sock_SIOCDELRT(r24, 0x890c, &(0x7f0000000580)={0x0, @xdp={0x2c, 0x4, r28, 0x34}, @rc={0x1f, {0x6, 0x8, 0x81, 0x4, 0xff}, 0xa2}, @nl=@unspec, 0x7b8, 0x0, 0x0, 0x0, 0xa1, 0x0, 0xffff, 0x2, 0x5}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40042000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1f8, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x144, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1d51}}, {0x8, 0x6, r23}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r29}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) getsockopt$inet6_int(r1, 0x29, 0x46, 0x0, &(0x7f0000329000)=0xfffffffc) 04:58:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) dup3(r2, 0xffffffffffffffff, 0x1c0000) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) tkill(r3, 0x1c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 04:58:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 465.717159] binder: BINDER_SET_CONTEXT_MGR already set [ 465.723455] binder: 15684:15689 ioctl 40046207 0 returned -16 [ 465.750048] input: syz1 as /devices/virtual/input/input40 04:58:11 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc00c28af09239543, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0) pipe(&(0x7f0000000840)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001e80)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(0xffffffffffffffff, &(0x7f0000000380)) write(r1, &(0x7f00000001c0), 0xfffffef3) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000080)) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x83) r2 = epoll_create(0x5) r3 = syz_open_dev$binderN(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x200f}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x28) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r5, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) socketpair(0x0, 0xa054b98f838cc548, 0x7f, &(0x7f0000000180)) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x383082, 0x0) faccessat(r6, &(0x7f0000000100)='./file0\x00', 0x1c6, 0x1e00) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000000)) [ 465.854996] input: syz1 as /devices/virtual/input/input41 04:58:11 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) writev(r2, &(0x7f00000011c0)=[{&(0x7f0000000100)="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"}, {&(0x7f0000001100)="e19630a973ec9b84236673fdb560fa4ea858d2ba4e77da7495dafc4602e366e3f7ba5ec91b0ed7a5e563a0a721db8dd69accd0743ac580f99e813ee8846907de6e44dc8efab67d9b94dc2623bd3f94a56cb5ef1da36ca24ea35f7c29fb11da92b00f25a6f129e2490459d900374210846d1b3d44380b36df77b11bd3fc607c6c97b30d806cac3ce47d98aa71f7f939204190dfd4d5c77de4be716eb142"}, {&(0x7f0000000000)="320076d743520df85962e163f8f948a6a68c93ac058bd029094a64cd53c64665193573527a2b5f36664ef04e509e90bea7a188189b43b4a635a4cb0bca32cc110a8da5f10a43967857d254ed1da38cc76c9a0df518504592e54a55db16b65a1200ca3eb22ed0450f6606e754"}], 0x10000000000001f4) 04:58:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) flistxattr(r3, &(0x7f0000000240)=""/198, 0xc6) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000000)="580000001400", 0x6}], 0x1) write$binfmt_elf64(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="7311400000ef45e8441ec9ac90e8233a49d76108be3407df70c0452a"], 0xff86) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002980)='/dev/bsg\x00', 0x400, 0x0) getsockopt$packet_int(r7, 0x107, 0x9, &(0x7f00000029c0), &(0x7f0000002a00)=0x4) close(r6) socket$netlink(0x10, 0x3, 0x6) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) 04:58:11 executing program 1: r0 = socket(0x10, 0x1000000000000007, 0x0) write(r0, &(0x7f0000000080)="2200000015000300000007000000030002080303010000000800020041024bc10768", 0x22) 04:58:11 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup\x00\x8a@\xd2e\xb4W\xab\x99\xac\xb4\x9a\a\xea\x1c\xc5\xf9\xfd(2+mTS\xbc\xd0F\x88\x10\xd2\x11\xdc\x81q_\xc0Q\x1bE\x970Wv\xbeKN\tV\xb0\x01\x15\x18\x9c\x8b\xea\xe9 \x19\x0e\xfc8M\xb1 \x05\x82\xccW \x06\xe2\x06\xd5\xb3\aTbK\xd9\xa1DY\xbeZ5\x85\x04!\x90_\xfb\xa5\xfaX\xe8R\xe1\r\x1b\xa1\xb6\xd2)\x8bM\xe2\xb6\xac^\xe5\x84\xa9\x8fE{o\xb8\b\xb6\xd7P\xa3\x1a\x01\x8b{\x10J o\xeb\xb2|\x1d\xdb\xf2n@\x83\xeae\xbf\x9b\xcb\xbdj\x02\x8e\xa09\xbfo;\xce\x85\xea%\xe8\x84\xd8\xc6\xdfI\xe6\xa8\xf1\x00\x19kN\xce', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$eventfd(r1, &(0x7f00000001c0), 0xffffff7f) r2 = open(&(0x7f0000000040)='./bus\x00', 0x10d000, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = eventfd2(0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgid(r4) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/uts\x00') setns(r5, 0x20000000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000002200), 0x1000) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r6, &(0x7f0000000700)=""/250, 0xffffffc9) epoll_wait(r6, &(0x7f00000000c0)=[{}, {}, {}], 0x3, 0x2000000) [ 466.089615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 466.098447] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.132101] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.153732] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.182349] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.208818] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.218451] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.248735] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.258335] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.288764] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.298380] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.328743] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.338460] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.368818] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.388585] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.398449] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.440610] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 466.458819] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.480179] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.507682] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.517734] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.527653] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.538003] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.566874] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.590274] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.599927] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.609839] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.629022] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.644012] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.668797] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.678413] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 466.690012] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket 04:58:14 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:14 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = open(&(0x7f0000000000)='\x00', 0x20000, 0x80) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x4, 0x4) write(0xffffffffffffffff, &(0x7f0000000140)="285136cc1e0e88090e2a28b522f246edd9958079883ecbee98ed56192997428286642e019a94c65cd875a210a1f16abf5ae1b022848a36088dba268655cb4963cc58855ceef436558f7e8e1850cd47f125f4f55f79385e12edc31afe03cb0a04967a17819acc5b1affcd0f96a5513d02", 0x70) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) r2 = socket$netlink(0x10, 0x3, 0x2) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0), 0x1f7) 04:58:14 executing program 2: fchdir(0xffffffffffffffff) creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/xfrm_stat\x00') prlimit64(0x0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r2, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000001c0)=0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) dup3(r4, r3, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x1c0000) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) read$FUSE(r5, &(0x7f00000013c0), 0x1000) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r6, 0x0) read(r0, &(0x7f0000000000)=""/250, 0xedf1d44) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) fdatasync(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 04:58:14 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) write$P9_RGETLOCK(r0, &(0x7f00000000c0)={0xffffffffffffff3c, 0x37, 0x2, {0x0, 0x3, 0x9, 0x0, 0x51, 'vboxnet0!cgroupselinuxppp1em0}trusted:posix_acl_accessuserselfvboxnet1#security%]'}}, 0xfffffffffffffebd) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x24) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)) 04:58:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) dup3(r2, 0xffffffffffffffff, 0x1c0000) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) tkill(r3, 0x1c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 04:58:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:58:14 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_settings={0x7, 0x8, @fr_pvc_info=&(0x7f00000000c0)={0x101, 'veth1\x00'}}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'all\x00\x19\x00\x00!C\x19\xb2d\xb4\xa0\xb4v', 0x420000015001}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000180)=0xf51f) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000040)) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(0x0) [ 468.731239] audit: type=1400 audit(1575349094.273:26): avc: denied { dyntransition } for pid=15737 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0 tclass=process permissive=1 [ 468.735344] binder: BINDER_SET_CONTEXT_MGR already set [ 468.735352] binder: 15742:15743 ioctl 40046207 0 returned -16 04:58:14 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB="771efd"], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x1, {{0xa, 0x4e21, 0x23, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000001}}, 0x0, 0x1, [{{0xa, 0x4e21, 0x9, @loopback, 0x20}}]}, 0x110) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005780), 0x4000000000000d2, 0x0) 04:58:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 469.016977] Dead loop on virtual device ip6_vti0, fix it urgently! [ 469.018971] binder: BINDER_SET_CONTEXT_MGR already set [ 469.018981] binder: 15762:15765 ioctl 40046207 0 returned -16 04:58:14 executing program 2: mknod(&(0x7f0000000180)='./file0\x00', 0x1421, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x5) [ 469.061863] Dead loop on virtual device ip6_vti0, fix it urgently! [ 469.079079] Dead loop on virtual device ip6_vti0, fix it urgently! [ 469.094982] Dead loop on virtual device ip6_vti0, fix it urgently! 04:58:14 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc00c28af09239543, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0xf63a9f5c01237c3c, 0x0) pipe(&(0x7f0000000840)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001e80)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(0xffffffffffffffff, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000080)) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x83) r2 = epoll_create(0x5) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x200f}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x28) r4 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000180)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r6, 0x80008) keyctl$describe(0xb, r6, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000380)='syzkaller\x00', &(0x7f00000003c0)=@chain={'key_or_keyring:', r6, ':chain\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r8, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) socketpair(0x0, 0xa054b98f838cc548, 0x7f, &(0x7f0000000180)) faccessat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x1600) [ 469.110931] Dead loop on virtual device ip6_vti0, fix it urgently! [ 469.118543] Dead loop on virtual device ip6_vti0, fix it urgently! 04:58:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz1', "2d68bf4ebb9880a3dd045e4b6eff23e6870fb2612a3d3cf0a1551063a37276e59b9205967b8fa2cfc0dbb703a0ab754918d39cd8650c683b47572ca72f9035f1b55d0eee1180"}, 0x4a) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x100800, 0x10) getdents(r2, &(0x7f0000000100)=""/152, 0x98) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 04:58:17 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x4040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000002500)='./file0/bus\x00', 0xcebb6074bb566d42) r3 = open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000180)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x51, r3, 0x0) 04:58:17 executing program 0: r0 = syz_open_procfs(0x0, 0x0) ppoll(&(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x101800) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$negate(0xd, 0x0, 0x80000001, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000000)="77e45f95fcaed655f6fbed3af6105632612a6d203bbdcdd074ef8aec585537", 0x1f) syz_open_pts(0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 04:58:17 executing program 2: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x100, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x180003) r3 = dup(r1) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f00000000c0), 0x4) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x145, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000240)='bridge_slave_0\x00', 0x5, 0x3, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="0203000313000000fe0600000000000005000600000004020a00000000008307f4fd41536cd467000000edff00000000000000000000000005000900000000010a0000000000008700000000000600000000000000000000000000000000040b02000100000000000000020b1d820fb405000500000000000a000066ff9af500ff02000000000000000800001e7b16f6000000000000000082dde5487e550f98a9432d5121ea6767344400271b3bb7dd09e5888862d59bba792e67c68247d35f9f1792098c7752571245549e8ac3cfe08379f68ee627a27efe5c6f7999a22d01000000000000001b90c8005ed45bef043e897166010bbcb92a4ac2f817c7e16310dbb6bce6940463dc62d8d7335777eb6964c50f1eb30b3cc0a1e8a30058e8945c985a8c4988342570c1a61e667ece1a3b26be06da91232253a04e5f2444d472508d3ad1126e83fe1d26cb06e9807c0b6ad56e61618df2bd49b50d7317ecd28ea066500d6f8ba7808093d9df357f9f409becbb316ef82f2c2fcd195b95dd7e4496220fe8c11a7767640415cd24a4773b869d2d006723c62b84a80af6dfd0882128d41a3f03f100000000000000000000005d7eb574c7fdeb3bfe363d401b5db38bb19b64e971bf6cae323053c453dc757a101250745294c9620bc47aadb4f2f6f45fb5a5b423cb15f043ba8c21d8b2392282e3af949945565b325ed64582169dbc9fbd00000000000000000000000016e69be513daefa980860ca18e614654115408b5f215274d8953ce44e432619c9d4e0def0193f32826d8c7e17824ea1a4c6fcbc4351124b4c0287aec9a8e9290cf57c200dd0aa1e613a329cb2bc6e65b17152d512f02377b6ac79400cce2e83fec6f441ef48c429e63b97dd458989c3655c23fc70499cb68af9090a2ffa9e05c663c45e8de198768047972b60fd6d0dafa51a21ec8917e3d1207129a279321ca6a09e8657e6c5f0338640a59bf121aa29e8bac730997e8d5a8b1c36b85e096fc19b6ccf4a7c97faf000000006cbb1510a4fd70a3ccf9f3bd5716bba561fccc867bfa62a76031e671e2d859302d6c581f8d0c9451a5fd330695de155c314811867d231b1e4adcb70e7259c2968a87891a157a86077817c4d0ab19fec0897ddca151ee98c020a49c6c41850112bb0eed2b618f0062aba84bf5a9880a344494b9180fad2418dae19fc76f36967c97235531f8e885f742adb04193718d4d22b3ab6b24db983bbac7d8d5fa2a3e072d99453cff9c7e8ee6569ef849395b12f7489316edeb80b2aecc32917b89b5002201345b1db3508da9cb15469d3cf0e002c6afc2d1d6db54c1a4558c2a8f914e233c32d10ab8d5c8e754142006a2b817c772fb62a357d39a1d438cd535e5730d80fa239d20bf73b8e80e13"], 0x98}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x7, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e21, @remote}, 0x204, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000000)='veth0_to_hsr\x00', 0x7ffffffe, 0x1, 0x89e8}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="02020000020000000000000000001900e5903ebc7a8642a1ed40b53ab411f1575ca5b0e9bbb019f9b348c2e1521741019d9e8d0aaa8e8aad9ddc4860d74b47d690b72e1b9b0969e6ef8b30492c5fa87a3d701df2dd39bca627308c1471f1cf000000000000009965e9356ee5cb05ddd3a9bfe2ba7d7bf876bdf9009dbf25263fdb903c2ea5fb3e41140f35697d74459d47df5917971ea0b0f70000000000000008106fe16a028631f024be733cfa065fa06ad815ca8f24ea10e150ace5205b5587aa4344b8920270e8b15cd523a50f7d37855cac8734ea9f3f298a4e1dbfca57b78efd0e66a41f85ddf8e8a58a633c80ec2f2616cf4947cf978a9109c7fb8f5279bddb52134d7c784b43b8564642b9e68f22cfe39486bd04cad5ca68a4c6889e33a4a9b9e63efeee411b16c0977a8323ee40e82f046ed0be64bf42becaa14f3c583ac9122a25e35a0e8a992394aae5804f6df259d1571af22ec8fc739d32c385f627405ae4e41c49f79ae44f72c87cbb17a4602145fea001308e3fb803fbdc943b234f1b7fa60c912d"], 0x10}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400024c, 0x0) socket$key(0xf, 0x3, 0x2) 04:58:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) tkill(r3, 0x1c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 04:58:17 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x102}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x301) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'eql\x00', 0x3ed8f24c44c677b2}) dup3(r0, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) dup3(r4, r3, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x1c0000) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000000100)) 04:58:17 executing program 0: r0 = syz_open_procfs(0x0, 0x0) ppoll(&(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x101800) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$negate(0xd, 0x0, 0x80000001, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000000)="77e45f95fcaed655f6fbed3af6105632612a6d203bbdcdd074ef8aec585537", 0x1f) syz_open_pts(0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 471.761162] binder: BINDER_SET_CONTEXT_MGR already set [ 471.766706] binder: 15794:15796 ioctl 40046207 0 returned -16 [ 471.871722] device eql entered promiscuous mode 04:58:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$cont(0x7, r4, 0x0, 0x0) 04:58:17 executing program 2: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x100, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x180003) r3 = dup(r1) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f00000000c0), 0x4) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x145, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000240)='bridge_slave_0\x00', 0x5, 0x3, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x7, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e21, @remote}, 0x204, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000000)='veth0_to_hsr\x00', 0x7ffffffe, 0x1, 0x89e8}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400024c, 0x0) socket$key(0xf, 0x3, 0x2) 04:58:17 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x102}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x301) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'eql\x00', 0x3ed8f24c44c677b2}) dup3(r0, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) dup3(r4, r3, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x1c0000) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000000100)) [ 472.021270] binder: BINDER_SET_CONTEXT_MGR already set [ 472.027430] binder: 15822:15825 ioctl 40046207 0 returned -16 [ 472.100253] device eql entered promiscuous mode 04:58:17 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x0, 0xffffffff}, {0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) flistxattr(r2, &(0x7f0000000040)=""/32, 0x20) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000000c0)=""/111, &(0x7f0000000180)=0x6f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 04:58:17 executing program 1: r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) dup3(r3, r2, 0x0) dup3(r3, 0xffffffffffffffff, 0x1c0000) fcntl$setstatus(r3, 0x4, 0x1400) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) write(r0, &(0x7f0000000080)="124d4c9662ca9f1878", 0x9) syz_genetlink_get_family_id$SEG6(0x0) 04:58:20 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:20 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp\x00') readv(r0, &(0x7f0000002340)=[{0x0}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x526987c9) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r2, &(0x7f0000000700)=""/250, 0xffffffc9) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000001600)={0x5, 0x8003, 0x1, 0x0, 0x9, 0x31aa}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000000)) syz_open_dev$loop(0x0, 0x4, 0x51d00) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) socket$inet6(0xa, 0x20000000080002, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r4, 0x0) pipe(&(0x7f0000000380)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) 04:58:20 executing program 1: open(0x0, 0x1, 0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r1) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x0) readv(r1, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) write$apparmor_exec(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="6578656320baf4deba09e92e2f6367726f7570"], 0x13) fchdir(r0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r3, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000340)) inotify_init() fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100), 0x4) fcntl$getflags(0xffffffffffffffff, 0x3) add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000540), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x7ff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x208200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x10d000, 0x0) read$FUSE(r8, &(0x7f0000002200), 0xffffffda) lseek(r3, 0x0, 0x2) sendfile(r3, r5, &(0x7f0000000040), 0x8000fffffffe) writev(0xffffffffffffffff, &(0x7f0000000680), 0x0) 04:58:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) tkill(r3, 0x1c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 04:58:20 executing program 0: r0 = syz_open_procfs(0x0, 0x0) ppoll(&(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x101800) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$negate(0xd, 0x0, 0x80000001, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000000)="77e45f95fcaed655f6fbed3af6105632612a6d203bbdcdd074ef8aec585537", 0x1f) syz_open_pts(0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 474.762451] binder: BINDER_SET_CONTEXT_MGR already set [ 474.769742] binder: 15849:15851 ioctl 40046207 0 returned -16 04:58:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') read(r0, &(0x7f0000000200)=""/247, 0xd9) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) eventfd2(0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000580)=0x6) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) socket$inet6(0xa, 0x400000000001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$P9_RRENAME(r4, &(0x7f0000000900)={0x7}, 0x7) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000080)=0x2) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0xdd82a34e1fb6018f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) socket(0x100000000011, 0x2, 0x0) chroot(&(0x7f0000000040)='./file0\x00') 04:58:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$cont(0x7, r4, 0x0, 0x0) [ 475.036049] binder: BINDER_SET_CONTEXT_MGR already set [ 475.042072] binder: 15871:15872 ioctl 40046207 0 returned -16 04:58:20 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet(0x10, 0x3, 0x0) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0x0, 0x4}, 0x28) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$binfmt_elf64(r3, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x6, 0x0, 0x81, 0x8001, 0x0, 0x3e, 0x5, 0x1e2, 0x40, 0x38a, 0x1, 0x1, 0x38, 0x2, 0x1, 0x0, 0x8}, [{0x3, 0x327, 0x3, 0x0, 0xa9d, 0x1, 0x3, 0x4}], "413dce626fc788ee579bd891059cb743716bf3177a26f104b4fa76290d93d1af00161c82941e2908b074cc23c69ac1e8f994fc8b0d8072", [[], [], []]}, 0x3af) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000040)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x397, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f00000001c0)={0x77359400}) openat$null(0xffffffffffffff9c, 0x0, 0x20000, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000480)=""/4096, &(0x7f0000000000)=0x1000) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000023c0), 0x1000000000000252) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_misc(r4, &(0x7f0000001840)=ANY=[@ANYBLOB="000000009e11f58985bc81aa3df7f2fe06eaf0db31daed255bea852e2664f7fee6f7635f0783fcf1a067e2686bc43745295ae469fdf216929b89492f009573e7fc666b08f451ca3b0436192ae36a2ffceda24bf9e700323cd27267b6da0cccaa52ac217219d83ad771d4e69af297c5e98e7891d4eb379387ea5d30b12c50440ef002cc1a1c3051ecb5c4b4b1625fbede50cd51cdc395dbb5c6ae41e5603ce5b50f4357c91228ba9da15f34bacbbdd6655ece6a41131be19737e9bedfe7b346ba8d1e729dceb45925ee15d405f1d04c1331708a0010a9ea99c98f0b5a370bafd9208cd01707bd46fa482d08232a6c05080147"], 0x4) [ 475.275451] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 475.284794] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 475.297663] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 475.306994] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:58:21 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r3, &(0x7f0000001080)=@un=@file={0x0, './bus\x00'}, 0x80) bind(r3, &(0x7f00000002c0)=@generic={0x10, "a15294984749b5f08e31d300aaf85f0cd8f8564e838eb8aba7812eef0199051eeb6ae59b0b7eff94967eea2f9a8ee95e89fe372080027964fdcc08dc26b52c021028bcd8811419dfce34d5eabe4c42554c791dfc9a6b031e0c5d20bfbc91f23ddbbbd7a5b22febb58feb7db8c0a37d763c963b5a68a96aa5ad92d5b0a023"}, 0x80) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=0x7, 0x396) r4 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x2, &(0x7f0000000240)) r5 = dup(r4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) r6 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r8, 0x0, 0x0) connect$unix(r8, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r9, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r9, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r10, 0x0, 0x0) connect$unix(r10, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r11, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r11, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r12, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r12, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r13, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r13, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r14, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r14, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r15, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r15, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$key(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRES16=r3, @ANYRES16=r0, @ANYBLOB="8a4968b27c0aee4d976b9c0dc74bdc445e13a954e6c6f69c1df7a4f70b3819e3491dc8f141ac6028666e8f15241bf5cb09fb9c1983f3f76573c6d1486bb4790ee0f29a2a0408ff5b05185b5c5a5134b464b795eb2638b4b0859d55dd6367d6432ab82906eee8aeb941eedda1479bbbcf3b92529561f66f5915792ba6ac2a3526ae14e7265c489ca6452c123593e909d186ffcb964628d51d798fdb7139958c9beb017782f8f26ab504b49b6645afaa1db50fd96c3d1c3a95453ceb7c4a0e33f5a8834ae3a1d909479a183070a9ad6c685b610d31ad98cacce62fae82bb714e5cb5e8e11ae69b551001dc00", @ANYPTR=&(0x7f0000000800)=ANY=[@ANYPTR=&(0x7f0000000580)=ANY=[@ANYRES32=r8, @ANYPTR64, @ANYRES32=r12, @ANYPTR], @ANYRES64=r13, @ANYRES16, @ANYRESOCT, @ANYRES64=0x0, @ANYRES32=r10, @ANYRESHEX, @ANYRES64], @ANYRESOCT, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESDEC=r0, @ANYRES32], @ANYRESDEC], @ANYPTR=&(0x7f0000001740)=ANY=[@ANYBLOB="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", @ANYRES64=r15, @ANYRES32=r10, @ANYRES16=r3], @ANYRESOCT=r11, @ANYRES16=0x0, @ANYRES16=r4], 0x27}}, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000640)=0x1) inotify_init() lseek(0xffffffffffffffff, 0x4, 0x0) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) r16 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r16, 0x1, 0x25, 0x0, 0x0) sendto$inet6(r16, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x100000031, &(0x7f0000000140)=0x2, 0x4) getsockname(r16, 0x0, 0x0) r17 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r17, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4) bind$inet(r17, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r17, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @timestamp], 0x3) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x9) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r18 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x108) ftruncate(r18, 0x2007fff) sendfile(r5, r18, 0x0, 0x8000fffffffe) 04:58:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001400011900000000000000000a00eeff0100000014000200"/44], 0x2c}}, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r1, &(0x7f0000000700)=""/250, 0xffffffc9) r2 = eventfd2(0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) fstat(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r5, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r5, r3, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) r6 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) r8 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r9 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r9, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) sendfile(r8, r9, 0x0, 0x180003) r10 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r10) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r10, 0x0) fcntl$setstatus(r10, 0x4, 0x0) readv(r10, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000ec0)=0xe8) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, 0x0) ioctl$TUNSETLINK(r12, 0x400454cd, 0x7) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r13, 0x400454cd, 0x7) dup3(r14, r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x1c0000) r15 = openat$dir(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x8000, 0x40) r16 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r16, 0x0) fcntl$setstatus(r16, 0x4, 0x0) readv(r16, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) r18 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r19 = eventfd2(0x0, 0x0) fcntl$getownex(r19, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgid(r20) stat(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = eventfd2(0x0, 0x0) fcntl$getownex(r22, 0x10, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = timerfd_create(0x0, 0x0) timerfd_settime(r24, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f00000006c0)) dup3(r24, r23, 0x80000) r25 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r25, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r27 = timerfd_create(0x0, 0x0) timerfd_settime(r27, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f00000006c0)) dup3(r27, r26, 0x80000) r28 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r28, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r28, 0x400454cd, 0x7) dup3(r29, r28, 0x0) fstat(r28, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r31 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r31, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r32, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r32, r30, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) r33 = eventfd2(0x0, 0x0) fcntl$getownex(r33, 0x10, &(0x7f0000000140)) fstat(r33, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r35 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r36, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r36, r34, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) r37 = eventfd2(0x0, 0x0) fcntl$getownex(r37, 0x10, &(0x7f0000000140)) fstat(r37, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r39 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r39, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r40, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r40, r38, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) sendmsg$netlink(r1, &(0x7f0000001240)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x10000000}, 0xc, &(0x7f0000000fc0)=[{&(0x7f0000000100)={0x11c, 0x2b, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x14, 0x19, @ipv6=@remote}, @generic="6ad9a69d4a32f33461019f39d59e60c75e8dc402942d602b601d69eecbdb7498ed8f3b89cab0414ab6fcfd91a6c1046ddd20de3d2d0a5410c56a5b384b4d293800c72f6339068afd69110255c9c0b2a1a598f2ea97408e22072b8d0cae9f2f23d40a1a731593f1218046a210b7ef28cc1b7e41d8d73eb3a0c1929a0c09bc29e3d445e2a4a83d10049a93b41f72abdce35a3ba02accf72c5b9a6b9c0fa06613692a2e7588d4e16f217f7e82622b3354facca6203f854741c530962cfef4d365f00e28ebcd69b14748441f07b4f6945ffeeb017765e410a6af91e79160cc45a36e9d26ba505257edbb6a285ce7f9610c7ecc8c9f9389"]}, 0x11c}, {&(0x7f0000000240)={0x54, 0x41, 0x200, 0x70bd28, 0x25dfdbff, "", [@generic="904449751b93dae85ab71129cb6f210008d95cf1fa9035dbf2b8ef3a86f9d6a669973785b732e1d5687b06bcd0c4362ad7ab1fce11d7427e7edbebede98c8cc25a8e0b"]}, 0x54}, {&(0x7f00000002c0)={0x2d4, 0x36, 0x3b3f4fcd1cc73710, 0x70bd27, 0x25dfdbff, "", [@nested={0x2c4, 0x6d, [@typed={0x4, 0xd}, @typed={0x4, 0x3c}, @generic="7f4304662067e2817be167063e6ba8659a18794e87a9a76e24cd309e7c1031993b39a013bba70245213d87184c39ca365327e8ea44b2aa8e095bd84f6c125001e730b1a0ca61194775b6d024c185286f9f5dd43bba2c9e79a2344a84b15e2eb77fbd1c07897941a75037a154", @generic="38b15afa7b7a0b298c3dfad4330bacf02a508d21133780383f8448d1b944afe329999f65754a7876cf42f45b281c4c069f7ef1fb8cee4b927da5ca4689f3d30b405c4013f73cb246ceae2295542a24851b2f188b74e9b4928b33be80f6bb8faa727648c1b3550734e3e4e1e8d82dd6e418bc4b4b1f97cc1bb3f32ff0b06eb4e0ea21d0aee45ff86bc61dd741a0baa55ac2b9f84ee48f2ce845c2b0aad4fbd9e60c3540f5a60cb95acd18bb708a0d69f9b41439479d22", @typed={0x8, 0x8f, @uid=r5}, @typed={0x8, 0x46, @ipv4=@local}, @typed={0x18, 0x76, @binary="5b3847dec187ca25a9ddd54122735da48eb559"}, @typed={0x8, 0x62, @ipv4=@local}, @generic="b0ede569acc4821794e5b9a56cca53031565c3e95489ecbf7162c969dba3b70359271757e02fc990386d0f06a26c0c0db57d22c70adfaf51cf42467a94e4085c1e458af055796ac37060e7f0281895d8de7a8177f594aa43504bf754ab28c025d7ac436cd85c9535e67103ddbb46373d208293b20e654c9933573a1761a4f07291c4d39247570cb71d3a90e9c443d29d8601643f917f484ffee813ace000643501dcf0836ea419465e0eca5ca786ad39f439578fa9bbba4e39e0559d3cafba6ee1b7e9f55440f3a2eef27f8b2c66564e0b7d1144155fbe20212e263d", @generic="d48be70bf22e2c2f7cd10bb5ef06784c66e9d46ba412b4f856def3f7bec3f7cd46259075a9af7b256ba94af4ab2c2655b72da1ecc1b7dc4ba77039caee35d8ae8cddabca7037b03ac5945ce5714de979ca81a1d079d9165a2d9a584b7bc1c5fbf3be84f5199b008babb7a7df1bb7456a6dc23b9d595ef63747cf924798b9b30bdb345f90286e8bc3ba"]}]}, 0x2d4}, {&(0x7f0000000640)={0x780, 0x19, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@nested={0xb8, 0x1, [@generic="e75ef9568c2734ca6e7be45fe4d48535b711b9bad514fea0bb9369af261812657d0d78bf0fd9825ad18e8d6e9312ac3e1368ab305303b3c6abb40faccf58cb7308865d2f04991434bd9254131f937a5121cfb7325491cf753dd792daa911bbd55d61f81bbee2aa8435f6d147fbbe518cc6fe4640b8e85125baa86fe77f75a1ff8584eb8e3c832e838ffd4b68f69a1cc5dfd04f969e8280b7c9a83b292c2db53da7bd9ade1ee128bd332ac38d", @typed={0x8, 0x8000, @pid=r7}]}, @nested={0xc0, 0x24, [@generic="dd89ba5ef58448", @generic="be735e379c71b61260cfe846db7acdbf631650a0299aedb2a81e8884d113141b8ecf32612c8b0c71f785f98916f0ec09dd124cbe7220c4eb44d53e43e583eaad33ce54f08297350cacb08d819635c00ca7643f42fc74208cca79de2a289778cdcf80a8fd0451ed605d6d1d7318604f0cb76ba8cd301ee251c9d6cdfe82d0ab25bbdb3c169e9ff56935d25e173b6b9e29da6747e006aee6262d515349a03203f8c1c5b837b9e5e587d0e3", @typed={0x8, 0x7b, @fd=r0}]}, @generic="84740f88b72857ad1c198b9a07baec0bb5a2f9b4b2066dfa45e527318cd580413e437fd856d82b6df95489d925e50011452ddfd4a407fbffe7e48939457bbb4f3faef480550a20d4582366719e7ce236882b10331d5b8f6773943a644867892d0f20229260b3bba67072aeb505f6272297c296bf5d13b17f289c44b19ecc46f1205abdd13118c0fbd30a506db11a086df51f3b45287cc178fbb1", @generic="69c2a6a55aec9292894b2933a5905beb95490a4e1f43955dfd739be56fc91e0e2f7d1e6b64a0de08ca88db3ba1b958de1d09650c6c32dafe614a8dae57976ec6bee13a2f2d56c3b308b4d0a38ace47c209d91046887876fc40ae123c0becb4a7a56646662e920a7adf64d537f3bc339fc163d8ba6a5f54e97031c84bf596a35bbbfc2ed0b79371c84282d1f039ceebe3f5d5754bf1d35aea5157c335db2c689ff4380c0f8b04256405dad2a1a8b27b9f69ddd264e759c89838344b10e7700d73d2f8105ba96e156bb4f8fddbca23368e68b0d5522ee2e866", @typed={0x8, 0xc, @fd=r0}, @generic="90e8afc0ea5c5695eef2c43963c5d0c72c7bbc4b821a3e0f52758ea4c3cbeaa3847efc2680ec5ae8d9d38e7c22758ea1c80d6049ae408445baf5d848f128d7a314a97219026a18d1f5a91aa075a364eeb6cff4d365ee885f2b79a3084e3a4baf185ee90e7d5c03471a05fbcb8eeabdafedf873155b35e3cccabbe395a38925b3a00e750e7d93e508f0059405c4b484a1ab6ac9ec1c41dfc0ec5182132caf8768e2259495eda3880b3443502431012fcfcfdd676b5c38371ad499c91b02c79e3a748cee", @nested={0x3a8, 0x1c, [@generic="9086f96c9b158d98cbadf2fd6e036247737010f0f0e650659c8178c760ddaeb2545e211cd9ae3ee303fcb00b0ea9ee19d20639c1923546ad507957f637a962c29ec56798e4afa7cee68fdb6aae147811ba511d379c91a4a580afadcf57c52cefdc1ec1df0e649a1526be31405dbc8b429820027cc806b921ee394ab01dfadfb3bf9600275bf1419eaec96fc1f00bc1cf603520cf8fefa6703ef611468211fe6d7691d79420610a2f99651f83c8a270e8d7504276439d4800c63eb76004eee3c3ccbb109d8110f3ec5c03171f83b270295462aa75f3a528befa389f0a5be72099e26267446f2244443af6d2f3258b54", @typed={0x8, 0xf, @ipv4=@multicast1}, @typed={0x8, 0x45, @u32=0x2}, @typed={0x10, 0x56, @str='%trusteda\x00'}, @generic="5a8022b83246fb40dc33c48eae6546c627639eaa9e78b1efdfa6e184f4e0ed2cf18b18566a22d9b8194c2e43b8edc6c42a6d72b7505080622f44478178606a83e9556be8a28b168e237fc86720d65df18a75d80b4065385d4d99f1320fb9258087c9c921ce5953ff70e2cdb1bad0774f7fafe8454e97349dbc34fb53d191968db1dd1b110ae57f916ca0ea45dce911fb0fd4bba04d64177338aeffea18fe8aa05ea3c0f2ddcc46803490a8f616bb66e06483b7847a0cbe52ad31c0f856d5170b319e495993b01d", @generic="13a9226b49fac05053ed7e478b54fccdbeb375120f45ebf6eded6df2b3d23ac0731763873edf22adc3b8946b2e66a84f90787f67d82e05c9c4eeb22c42414fcfc68d", @typed={0x14, 0x71, @ipv6=@ipv4={[], [], @local}}, @typed={0xdc, 0x79, @binary="928689a8c1e34b931a61b9dfd432df5835bf069dc937334973bf31c582004f1cfd725f9e48a9c8ebd17b74d93cbc4d3e0d8e55835d761a75347f0d632316ee4461e9695c43e04be1c05f4219fe0fce1fd2abf6a88b2f745995dfe8635e901334270f076a4874658be3b4c44e6fbfb68b952d60c3651634b808d2da1e3955b5742348b4966a8b2db11f8c1c27a97913cc059131518b87a9d5516708bf75f82329d52e149e3d81c8b70b38dbc08ef0cad2a72f6d3354121798fc218fe1b25d1c18acaad8c4702e9c4d6251bc2e9335ee33316b323fae56"}, @generic="4f7da4bdb7a4f06f45852c0101a2d4ca82a3f96fecacad64e14baab6e727d9a89cce5c115a5495b02423a8b8ad55e8d0b7ed35c6dfe2ea546f64fd82236f8aa85217", @generic="5855fbf04abb69ac6eb6e473980237cf81a31b4a26c0e5057570b32bfc96926e02487eeac219120bdc603c5be3ac0ec28e9f33408f4ae038c0390db1ea5b6f6931a8d7ebf824ec441c3b1dbf4c5a1aafe0949657544febc0d5cf"]}, @generic="2f36114bcd19b8ac29", @typed={0x8, 0x54, @fd=r8}]}, 0x780}, {&(0x7f0000000f00)={0x18, 0x41, 0x2, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0x3a, @uid=r11}]}, 0xffffffffffffffae}, {&(0x7f0000000f40)={0x50, 0x12, 0x800, 0x70bd25, 0x25dfdbfc, "", [@generic="d0019f15ab4dee5ad78e7311ba86aafc34f44f10cf18fdd6ceea38f6a7be6ce255bf7b1a30698386d50f48fc52fd6ae7c6a327c6441a648a6486fe4d0336e2"]}, 0x50}], 0x6, &(0x7f0000001180)=[@rights={{0x20, 0x1, 0x1, [r0, r12, r0, r14]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r36, r38}}}, @rights={{0x2c, 0x1, 0x1, [r15, r0, 0xffffffffffffffff, r0, r16, r17, r18]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r30}}}], 0xa0, 0x20000000}, 0x20000000) [ 475.798863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 475.807685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 475.817006] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 475.826523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:58:21 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet(0x10, 0x3, 0x0) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0x0, 0x4}, 0x28) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$binfmt_elf64(r3, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x6, 0x0, 0x81, 0x8001, 0x0, 0x3e, 0x5, 0x1e2, 0x40, 0x38a, 0x1, 0x1, 0x38, 0x2, 0x1, 0x0, 0x8}, [{0x3, 0x327, 0x3, 0x0, 0xa9d, 0x1, 0x3, 0x4}], "413dce626fc788ee579bd891059cb743716bf3177a26f104b4fa76290d93d1af00161c82941e2908b074cc23c69ac1e8f994fc8b0d8072", [[], [], []]}, 0x3af) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000040)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x397, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f00000001c0)={0x77359400}) openat$null(0xffffffffffffff9c, 0x0, 0x20000, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000480)=""/4096, &(0x7f0000000000)=0x1000) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000023c0), 0x1000000000000252) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_misc(r4, &(0x7f0000001840)=ANY=[@ANYBLOB="000000009e11f58985bc81aa3df7f2fe06eaf0db31daed255bea852e2664f7fee6f7635f0783fcf1a067e2686bc43745295ae469fdf216929b89492f009573e7fc666b08f451ca3b0436192ae36a2ffceda24bf9e700323cd27267b6da0cccaa52ac217219d83ad771d4e69af297c5e98e7891d4eb379387ea5d30b12c50440ef002cc1a1c3051ecb5c4b4b1625fbede50cd51cdc395dbb5c6ae41e5603ce5b50f4357c91228ba9da15f34bacbbdd6655ece6a41131be19737e9bedfe7b346ba8d1e729dceb45925ee15d405f1d04c1331708a0010a9ea99c98f0b5a370bafd9208cd01707bd46fa482d08232a6c05080147"], 0x4) [ 476.351314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 476.360451] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:58:22 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) fchdir(r1) personality(0x4100001) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_to_bridge\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, 0xfffffffffffffff8) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00002dbd7000ffdbdf250100000014000700ff01000000000000000000000000ffffac1414bb08000600e000000108000600ac1e000125849d3cbb18446ba4356c0278cd1dd04936409bc70bd3a791cfd61976f73c0611b0cb9438f1138b42e4f994d7635cd2acfc19462adaf6c149ede93352dc7c79340618ef619d10eab2f144b2911b9de73dcfad19135a8d6131b2283f3fb9d87ba1"], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000040)) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="000000000000010000000000000000000002001e0000000000000000", @ANYRES32=r4, @ANYBLOB="00000000050000000000000000000000000000000000000006000000"]) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, &(0x7f00000001c0)=0x7fff, 0x4) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) setsockopt$inet6_opts(r7, 0x29, 0x3f, &(0x7f0000000200)=@fragment={0x0, 0x0, 0x4, 0x4, 0x0, 0xbe14, 0x64}, 0x8) write(r7, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r7, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) recvmmsg(r7, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sendfile(r3, r6, &(0x7f0000000140), 0x8fff) [ 476.751467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28265 sclass=netlink_route_socket 04:58:23 executing program 1: r0 = inotify_init1(0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000140)=""/31, &(0x7f0000000180)=0x1f) ptrace(0x4207, r1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) write$P9_RSTATFS(r3, &(0x7f00000000c0)={0x43, 0x9, 0x2, {0x80, 0x1, 0x9, 0x3, 0x1, 0x100, 0x7, 0x7, 0x30d}}, 0x43) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8030000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x150, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5dc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc5c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbb4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x1a, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 04:58:23 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet(0x10, 0x3, 0x0) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0x0, 0x4}, 0x28) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$binfmt_elf64(r3, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x6, 0x0, 0x81, 0x8001, 0x0, 0x3e, 0x5, 0x1e2, 0x40, 0x38a, 0x1, 0x1, 0x38, 0x2, 0x1, 0x0, 0x8}, [{0x3, 0x327, 0x3, 0x0, 0xa9d, 0x1, 0x3, 0x4}], "413dce626fc788ee579bd891059cb743716bf3177a26f104b4fa76290d93d1af00161c82941e2908b074cc23c69ac1e8f994fc8b0d8072", [[], [], []]}, 0x3af) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000040)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x397, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f00000001c0)={0x77359400}) openat$null(0xffffffffffffff9c, 0x0, 0x20000, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000480)=""/4096, &(0x7f0000000000)=0x1000) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000023c0), 0x1000000000000252) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_misc(r4, &(0x7f0000001840)=ANY=[@ANYBLOB="000000009e11f58985bc81aa3df7f2fe06eaf0db31daed255bea852e2664f7fee6f7635f0783fcf1a067e2686bc43745295ae469fdf216929b89492f009573e7fc666b08f451ca3b0436192ae36a2ffceda24bf9e700323cd27267b6da0cccaa52ac217219d83ad771d4e69af297c5e98e7891d4eb379387ea5d30b12c50440ef002cc1a1c3051ecb5c4b4b1625fbede50cd51cdc395dbb5c6ae41e5603ce5b50f4357c91228ba9da15f34bacbbdd6655ece6a41131be19737e9bedfe7b346ba8d1e729dceb45925ee15d405f1d04c1331708a0010a9ea99c98f0b5a370bafd9208cd01707bd46fa482d08232a6c05080147"], 0x4) 04:58:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 04:58:23 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:23 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) fchdir(r1) personality(0x4100001) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_to_bridge\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, 0xfffffffffffffff8) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00002dbd7000ffdbdf250100000014000700ff01000000000000000000000000ffffac1414bb08000600e000000108000600ac1e000125849d3cbb18446ba4356c0278cd1dd04936409bc70bd3a791cfd61976f73c0611b0cb9438f1138b42e4f994d7635cd2acfc19462adaf6c149ede93352dc7c79340618ef619d10eab2f144b2911b9de73dcfad19135a8d6131b2283f3fb9d87ba1"], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000040)) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="000000000000010000000000000000000002001e0000000000000000", @ANYRES32=r4, @ANYBLOB="00000000050000000000000000000000000000000000000006000000"]) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, &(0x7f00000001c0)=0x7fff, 0x4) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) setsockopt$inet6_opts(r7, 0x29, 0x3f, &(0x7f0000000200)=@fragment={0x0, 0x0, 0x4, 0x4, 0x0, 0xbe14, 0x64}, 0x8) write(r7, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r7, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) recvmmsg(r7, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sendfile(r3, r6, &(0x7f0000000140), 0x8fff) [ 477.782229] binder: BINDER_SET_CONTEXT_MGR already set [ 477.789260] binder: 15922:15924 ioctl 40046207 0 returned -16 04:58:23 executing program 1: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0x82dc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) open(&(0x7f0000000040)='./file1\x00', 0x80, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xa4, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa8f19a90}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec39}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12e900}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x4000008) open(&(0x7f0000000180)='./file0\x00', 0x802, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) setuid(r6) sendfile(r4, r5, 0x0, 0x80000001) [ 477.823051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28265 sclass=netlink_route_socket [ 477.929871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket 04:58:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$cont(0x7, r4, 0x0, 0x0) 04:58:23 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="56e22595d6aa072084cd4c83e7ed95d398a708b544ba47240d739d9adadfae77e862d82a1a5cdc81dda0bb414de209876ce5f676e4687e48f3c472dc5c6f3dd4e7f48f0db0addbb1bfc99ddaafc7a5cb8978d7fdb3135b056a816f8b67", 0x5d, r0) keyctl$setperm(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r1, 0xe}, &(0x7f0000000500)=ANY=[@ANYBLOB="656e633d6f61657020686173683d7368613531322d61767832000026f3000000000000e6ffffffffffffff0000000000000000000000000000000000af00000000000000000000000000008a7608e38e74f69f707dd02d0fc6d0cbe581f2f0e5c2e2d26c000000"], &(0x7f00000001c0)="772724d4ac2b107bc7befd976d50", 0x0) gettid() ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl(0xffffffffffffffff, 0x1000008913, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000380)={'bridge0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) fsetxattr(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="62747266d12e471635f9d22e2f6367726f757000"], &(0x7f0000000140)='\x00', 0x1, 0x3) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$notify(r4, 0x402, 0x20) ftruncate(r5, 0x8200) r6 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) ftruncate(r5, 0x81ff) syz_genetlink_get_family_id$tipc(0x0) socket$nl_route(0x10, 0x3, 0x0) [ 478.052245] binder: BINDER_SET_CONTEXT_MGR already set [ 478.057965] binder: 15949:15950 ioctl 40046207 0 returned -16 04:58:24 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="56e22595d6aa072084cd4c83e7ed95d398a708b544ba47240d739d9adadfae77e862d82a1a5cdc81dda0bb414de209876ce5f676e4687e48f3c472dc5c6f3dd4e7f48f0db0addbb1bfc99ddaafc7a5cb8978d7fdb3135b056a816f8b67", 0x5d, r0) keyctl$setperm(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r1, 0xe}, &(0x7f0000000500)=ANY=[@ANYBLOB="656e633d6f61657020686173683d7368613531322d61767832000026f3000000000000e6ffffffffffffff0000000000000000000000000000000000af00000000000000000000000000008a7608e38e74f69f707dd02d0fc6d0cbe581f2f0e5c2e2d26c000000"], &(0x7f00000001c0)="772724d4ac2b107bc7befd976d50", 0x0) gettid() ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl(0xffffffffffffffff, 0x1000008913, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000380)={'bridge0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) fsetxattr(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="62747266d12e471635f9d22e2f6367726f757000"], &(0x7f0000000140)='\x00', 0x1, 0x3) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$notify(r4, 0x402, 0x20) ftruncate(r5, 0x8200) r6 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) ftruncate(r5, 0x81ff) syz_genetlink_get_family_id$tipc(0x0) socket$nl_route(0x10, 0x3, 0x0) 04:58:24 executing program 0: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) readv(r0, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x305, &(0x7f0000000000)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') preadv(r3, &(0x7f00000017c0), 0x1000000000000304, 0x400000000100) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) fcntl$getown(r4, 0x9) 04:58:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1) r3 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c) mknodat(r3, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[]}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00032a317000ffdbdf250f00004400010008000b00736970000c000700500000001700000008000b0073697000080005000400000008000b0073697000080001000a00000045fe07002100000002000000080004000200000008040400ffffffff"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0xd0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x7ba09a978a8caeee}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x32}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x16cc1ea1e7540cf7}, 0xa3ed4c0ca431c575) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @timestamp], 0x2) r5 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000180)='F', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x80008) keyctl$describe(0xb, r5, 0x0, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={r5, 0x9e, 0x75}, 0x0, &(0x7f0000000100)="cef00bcb5794ddb1c60143734270333beed8adbeeeb022a2898ada5eb4fe0bd6619c925b6d7b8a15266ebb77eaab30ae8411652b821ab5e2c78fc26ba8edc856f891d0acafc12c6b0805fc9e1840265f78b7a9cf2d844f3ec44b789d7bab7ef127d0cc82395b77448cd05d84b0afdfe44657f15ff8631d66b2bdaf0964bbf8cea039858d0fcdf80a171308e42db9c38a9a492d3c221d88d0091b6edb16ae", &(0x7f00000001c0)=""/117) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000040)="74533e84b203091d54458c61f83f901b33032769", 0x14) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x2f) fcntl$setstatus(r0, 0x4, 0x80000000002c00) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 04:58:24 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40040, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000040)=0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101000, 0x0) write$P9_RSETATTR(r1, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x200, 0x1, 0xb5b7a9371e7abe45, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) r6 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000500)=[0xffffffffffffffff, 0xee01]) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=0x0) getresgid(&(0x7f0000000700)=0x0, &(0x7f0000000740), &(0x7f0000000780)) getresgid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)=0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0x4}, [{0x2, 0x0, r3}, {0x2, 0x4, r4}, {0x2, 0x5, r5}, {0x2, 0x6, r6}, {0x2, 0x7, r7}, {0x2, 0x7, r8}], {0x4, 0x6}, [{0x8, 0x2, r9}, {0x8, 0xddcdd50684904031, r10}, {0x8, 0x1, r11}, {0x8, 0x0, r12}, {0x8, 0x2, r13}], {0x10, 0x2}}, 0x7c, 0x0) r14 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0) fgetxattr(r14, &(0x7f0000000940)=@random={'os2.', '\x00'}, &(0x7f0000000980)=""/4096, 0x1000) r15 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffff800) ioctl$FIGETBSZ(r15, 0x2, &(0x7f0000001980)) accept4(r1, &(0x7f00000019c0)=@isdn, &(0x7f0000001a40)=0x80, 0x0) ioctl$BLKPG(r14, 0x1269, &(0x7f0000001b40)={0x5, 0x1, 0x89, &(0x7f0000001a80)="d0ff0d081b93c44a9947c017be280a0ca1225303a9e21186fd0335e9dc3089612ea02bfa83072313f22fb3ad55ddae6aed93f5bbfc8c66dab133414eea21fbf4679cc204d637482d7270cccee0ca74b8e041c12f833b735de22b29a899dfb441c2712db92319b07534364ffcc3e20eb69cab43526b4644f2026aaa918186ccfa59a8c0e26c3022341e"}) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r16, 0x80087601, &(0x7f0000001b80)) ioctl$TIOCVHANGUP(r14, 0x5437, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) getuid() r17 = socket$netlink(0x10, 0x3, 0xa) setsockopt$SO_TIMESTAMPING(r17, 0x1, 0x41, &(0x7f0000001bc0)=0x82, 0x4) [ 478.603410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket 04:58:24 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@local}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f00001400000000000048000000000800120000000300000000000000000006000000000000000000000000000000e0000002000000000000000000000000e000000100000000000000000000000005000500000000000a0000000000000000002000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff000000c3a5000000"], 0xa0}}, 0x0) [ 478.671552] audit: type=1400 audit(1575349104.213:27): avc: denied { setopt } for pid=15981 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 04:58:24 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) fchdir(r1) personality(0x4100001) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_to_bridge\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, 0xfffffffffffffff8) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00002dbd7000ffdbdf250100000014000700ff01000000000000000000000000ffffac1414bb08000600e000000108000600ac1e000125849d3cbb18446ba4356c0278cd1dd04936409bc70bd3a791cfd61976f73c0611b0cb9438f1138b42e4f994d7635cd2acfc19462adaf6c149ede93352dc7c79340618ef619d10eab2f144b2911b9de73dcfad19135a8d6131b2283f3fb9d87ba1"], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000040)) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="000000000000010000000000000000000002001e0000000000000000", @ANYRES32=r4, @ANYBLOB="00000000050000000000000000000000000000000000000006000000"]) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, &(0x7f00000001c0)=0x7fff, 0x4) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) setsockopt$inet6_opts(r7, 0x29, 0x3f, &(0x7f0000000200)=@fragment={0x0, 0x0, 0x4, 0x4, 0x0, 0xbe14, 0x64}, 0x8) write(r7, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r7, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) recvmmsg(r7, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sendfile(r3, r6, &(0x7f0000000140), 0x8fff) [ 478.790146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28265 sclass=netlink_route_socket 04:58:26 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:26 executing program 1: syz_open_dev$loop(&(0x7f00000004c0)='/de\r\xcd\x1a@\xb1\x02\x91\x11', 0x6e04, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) writev(r2, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0) socket$inet6(0xa, 0x480040004000, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup2(r9, r8) connect$unix(r8, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setstatus(r8, 0x4, 0x427ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r11, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup2(r11, r10) fcntl$setstatus(r7, 0x4, 0x400) write(r10, &(0x7f0000000400)="d385da37c48985c8025f716720c975d335d669a55b5c6a5fa1148f7a463900c3fdc9e1a87e69cef2573eea1fd88efc8cb589e051525b152f9c65ac21e640a009eada93923d9f1f83bab17c8dea", 0x16f7a96b) write$selinux_load(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) 04:58:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8001, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x1f) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x3}, 0x28) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@ipv4={[], [], @multicast2}, 0x4d5, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x5, 0xc71}}, 0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 04:58:26 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000000)="12cb96df", 0x4) getsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000140)={{0x0, 0x1}, 0x7, 0x603}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) bind(r3, &(0x7f0000000280)=@nfc={0x27, 0x1, 0x0, 0x3}, 0x80) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 04:58:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 04:58:26 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:58:26 executing program 0: socket(0x5, 0x3, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x200200, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000280)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000200)={0x5}, 0xffffff9a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0xca184, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffc9, 0x2000, 0x0, 0xfffffffffffffc7c) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) write(r4, &(0x7f0000000380), 0xfffffffe) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x4200, 0x0) recvfrom$inet6(r4, &(0x7f0000001840)=""/17, 0x11, 0x120, &(0x7f0000001880)={0xa, 0x0, 0xb, @mcast1}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x2, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r6 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 481.059126] binder: BINDER_SET_CONTEXT_MGR already set [ 481.064995] binder: 16016:16018 ioctl 40046207 0 returned -16 [ 481.069136] binder: BINDER_SET_CONTEXT_MGR already set [ 481.069144] binder: 16019:16021 ioctl 40046207 0 returned -16 04:58:27 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r1}) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x201, 0x0) fcntl$getflags(r0, 0x401) 04:58:27 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup3(r4, 0xffffffffffffffff, 0x0) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'eth1em1'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '/\x05'}, {0x20, '/dev/binder#\x00'}, {0x20, '.selinux%'}], 0xa, "0a3995e10b77deeb25725377eea44fc9588decb9d3aa2a016224fd7db9f8a071a55bc9a4d7d74f3e9a2b0490276cb64f483d4a0de361757ac8a02985e25bdbe261ddc030ae94398a8a2d3f9b93ada1d89c1008bea3b98b4696c6af8f0dfab9ef440eca5cd5285770c19e70a57145d8f55d825c7fbbb7bcd0fb503972e256b86ce6514c67691f922b2d834016fccbf4cfccc0694a1be286ddfbd851581133fac95e7a64300d4e0b9e0248e660c30d6d432e75a0c2a1a5fbaf83e2b234efe3a4ba8a"}, 0x10b) 04:58:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="3900000010000904b9fe8c002bde26dea8a5d1b11900000046000107030002400e000100f00000000000005efabc4e2c000000000000000000", 0x39}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) 04:58:27 executing program 1: pipe(&(0x7f0000000340)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fcntl$dupfd(r0, 0x0, r1) socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/relabel\x00', 0x2, 0x0) socket$inet6(0xa, 0x4, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x9, 0x80000, 0x5, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') [ 481.670921] binder: 16033:16034 got transaction to invalid handle [ 481.677964] binder: 16033:16034 transaction failed 29201/-22, size 0-0 line 3014 [ 481.688417] binder: undelivered TRANSACTION_ERROR: 29201 [ 481.704750] nla_parse: 6 callbacks suppressed 04:58:27 executing program 2: open(0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x2000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(r1, 0x127b, 0x0) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0xfffffcec) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f00000001c0), 0x8000fffffffe) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000500)) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000000400)) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r7, &(0x7f00000017c0), 0x333, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') preadv(r8, &(0x7f00000017c0), 0x333, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r9, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = timerfd_create(0x0, 0x0) timerfd_settime(r13, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f00000006c0)) dup3(r13, r12, 0x80000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r14, &(0x7f00000001c0), 0x526987c9) r15 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r15, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r15, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) io_submit(r16, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r15, &(0x7f0000000000), 0x10000}]) io_submit(r16, 0x4, &(0x7f0000000180)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x0, r9, &(0x7f0000001880)="6f772c8d8670a3b3d5f7cc26253d165b067f913fa4c4650ed22a457f76f352d656a2367f11bd9bf3f20c1ad922daacdd342e7dc021663151bdbe580d150742694648599cb31ad072b6252b131fa86110bb9f16c1eb8bd4461b4618b40180a7e9efd7129ca8689630fb9c47ca5330eb66ff8af422164e13549a5145a06c1c2167ae280fa0466eb921281c459d7d0aa74923c34648b6e35049752604018f69c03ddcd08eab2ce2c868d41e41fb44aec2fbf2bc15281ee33297370817ad6990bf61f8f3e565e4f092c6c755518c9fd417eb43df9f7f78e6b9b65ef94744cfd9624641b15a1f9b31f71e937e507b9214", 0x29, 0x80, 0x0, 0x1, r10}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000780)="06e98b32af8313bb72b489cc592d2cc8b80022f8e540eef75fa0d4d8b36d66b9bd917db4d280bb3ed0dc967396e1e049fbdd5f91236c2d8aeb188d40efe177611a0ac0c4b744eaafa2a99ba668c9caab2fff79fbd4c6f09c03160ce2a5918ca84a8bec648eee7ebc6db94250ef1c8771c7ada8bb848bc787d06a1d4302831de02ff56555e7fccf18ffa5dadca9f1218f47cb32216a9866d79ab2d9a5fb9336b00c45ee2138c8947952b0d71956e056b4e487ef116d83ddef1ba31c42c9863ee0f06fe510304b0319719354e162da0887afb61f7fc543965b6f79a68da4fe0e597b47a07be9f66a24922bd70bb9507df1e30a09b7e9482ad742afcb8ae7c44f04333c7d0ddc95d3205f6f02580b70ff0796085ab1f4b35c381334a39aebc924e6d06d346cd45ccc552c868e94635538bba4c0ec03db6741ecd2352133cdbbade04ca59ffbb148eab8db7d25c5055d53a8919ee6c4b27f86f6316b74254cb95ecf853be2d8cab3fccb88cae6b52761025dfaf6e3c9c537a1dc49bf0572b10f3e890dc322cebf7d0e8455941ac547fd825994d6d00fa4e8f884a0f94cc81f2f0072ba9a31e239b898d456cbb5ed6064bf641bafa8b7f5a739fcce3bcf29b53f9b13e730d836b23411a109a0ac947053ab31e6e2388e6db4105251ee878bacf65e1e43429b7f4d4c2cbceb8dd5c22ddf922c1ba5e68e2b34a308da7cd50b689fc65dd0ff93a48d158397e9fd82bd5d009eeb57bdea84222549e8eb8e4178067725dc0321d827ede458dfe97334acaeb127128a5a5877ef327126db1e2329d8ad3cfcdd9bb036a8b1ceed6fd83b151dd079c148e6e46df9eb1d34a50d894c73c9d95a911dd09648c63af9aaba37ce52798216d0a834c818b8aa5b6b5ca399228d1abfef78aab54a817672b8e0329c5492583a666c54463bed07fa9de3d40aa7be5e9d64559a88548f989a2e3b9fb492eada3071339605a929549bea62ae5b7eec0c0af0081336a67364a6b6108bbf453cb162c18fec5dc179bce10c26e4af188d34da264c38208a3dcc10f82bcb317dce86a5ea76640617b323c66ec432d15563909e720ac61e57c0aef5b8b2962cebbe53aae4c01001286a059f3a053f4c449ce08e5a3ccd1bd0253ebb7b3f6fa3520fffd59223a09e6b8340c7588f00d8abbd0aa35a2bd6426d5a570352b22add7a569f2007e6539a7fd388119d3a6322d96dd4adfdc5f3c002cd0c7da3a86695bd72d06f63ebcfc549a5ff4d2e4e5522987760528304140924e50dd7e2f9f007ee5a48bf80db7c851c8c6d49a7da1300570173a4e00568068e25a6e378c2a8d967fa66f03b4b194d07da86ca06a360ec6ef0b9606c540c60b8a5f4dc66d017d5bd804a0701d3d2d96e484fad66bc823dce84c5bf25e45eacdad0fd127626eb2cac9ae7c8b0f75cdd0883c26d0944f3eb607d40403f1b589dbeaf87799124b1923515c8ab4e1bc2bbc691bd7c3188db4c6b86d23bdbbdf6c2353a0c0e3fe799afa0f0cdc77193ca3bcfe0788fa903cb1b9ab02e43172ea2edea973f2b552e522eb83dea264840ba01771162328028bd927c40b36f1f9a8be0b0026b710e1ff7c02377582c6be74a16e64cb5f70be5216d0ce34ed4913b13bdaaa184e8c162fa03d3bf8aebaddc7c043c950ce9f50623c9b42a57265b31112437eb79dd21e2ef30d0d1c2bb8bc47262f1ac594bf0020e1ba34155f80d0ce1621442d431853d71b366f0078a08a11c25196301603809693963d740397fab881c5ae5ba088e9858d6cf27be2b2c7a2a9999e2cb9bf54b3192ea0a374b1d4b7fb06da11ef0a8a9f986d53aaeb174d52002c6124b72dc40802f7f4220b8b36151682e2b38738cbc4821881de893cac71ab73cf11b19352396b23dd4caf414aab355799cf070ba743448e9205618b97b34baa10e5eaef087ffa89248dc5c310f5f12c125071be51754a851cfeb98302f9bb44bb5a1a5774e6c3c5d0406b36838021a3c240731377a88737d0bb8e1f732da7e40ea69dd78c23ba6c1de63e416831fea5e93995e9b1fe39d20534b5e0daecc90f8c0fd16178405c99da57fc0817f85752ffd29fdf45797cc8e74b1b8e4ddd22a071390027fda600a2bc7438b8e1caa410a273ae35a29105894ab97c014fb31a5a8c82e62e2a199afd843cc9e309480b8bf3fc5435d9e25988d51fa73973799878bf36b2494099667778f9a1a058036d9a8bbefb143f3153db0c94a218b853ac0b17ed89e2f0ffa16a54ddc0e772873f5873a0492402050434c249c7bec7187bcd83b09f9b5ae6095c5296195331219f36a2988f0d3a11a35bd5af32a77f3cb26a37ea138a3c063c02f240bc75526f2d1ee58c4e18d11fe0c2c2bcc77463374d1fbb5b3b13502962224ab4ecf0f9a20c5168016be0bcaf0f3e3ab05ab25d08596fbc1c51a8759b25fded4c36af8998f7c9363320b360f452841f6d1eaa7cc956bc2e5f535e215c4a4afdd4842f4f79a7ccc8cfc52657ade34c9b5b2f0680a21e7d617102fe97df3c583ebd2f3f22620699022a55044d2d269819aff5763a3f77264188bb6466cbac8dae24908807899aeca6025f16206bdfc587f19a2bb22a5503ca91c28baac2d7815f003c9cd13a295a56c86663787e6c93e64790888a2c20dd852d5f9de71b33a4e8470bac66b22f45ef62cb2a3ae3436cf74dad56b5414e006b59b653054d19977de12a68cc95cfa51dbf12ef5ebe2ecdd18b8d58e70dd2ec30a71f90524c33be0f61fe021fa88ed6deb266d26694a7f437ac3074b4455c2d4752f06460b72823bc00836bb85e246bb03dcaa31db02042fca6cf39a944dda323509a95aa24ba32c47a93a23aae7d28fc9162cb06a8841af67be4075ce76db6636697514a020a0122c9ac87487f47f7a7076ac4fcc1a1319ce4adfa1bfb619298d39bcd54a9b700f015a80d6e81827708e157f0ede38483d8b9b2ee652a3a0c25a62a5cbc210e9c49b0aa8bf6663b077768d7651cb05c224adb117c5ffb84a5dd3ce6908d037be0d0a02a99d095a814c9e963298030a418c49f707f160f3aee8c91bc0bc3916abc56a8ee056a22ebd9cf566df5845928263c2ff9d2cc78a0d782a7a213def02883ab92630fe02656568c79cb11955670f607d720b52a9b7612977e5db1b86ff10a9a410f7196538bfeb5c6502a8614030dc2feb7f2986ab86c55d3c806b959b31283a91c1198c653b33f61796ba58ae77cef8bfef6d987ce287437b4b2e468dadecfe37cddb95948d5b7cf575400593044b17d8bf99f91df041408afd05022cf8e7dc384378313b4a7c5c9970cb1a73dd66e0ec024d6c53da0c65c3f894d282e72585ce8f2580ce6f2cbeacc71faaf7d99e768c73b2e04d3ac887a677f3459189aef6a0a43ee668496d0223133bda3ab9590c62654d947bbf9ad754dd9e52cce423d651777f8b0ebd0e0dba7dc67a366e2adf0c4a02fcf26a66b81d218b86bea773668bcdb0ce5c2f79fe91b1a823b941ecb3c1afd2c1103db83ec17b22cd90b594d0373977749e15585529888a50bcce84847a7b4c2e453e7587c1955679fab80eeed577488680fd61b78b326c4e827849e10f2031f7bb2846a4ef1cbb7e938f6eeed9e1eaf586eaceadb0a1b578c6d027b0068212305768028b833b80b387cfc5534e93457c40d9f41debbcd808065bc253d0d2d7c60c6e7f8606f31317bea0240f1a0fad343ee3a4239173631d13324ee3c5435e9c5c34a69633c068404a0906383f00faa760c8aa3e33f6440e58aa57f8d64263f5ff92d7a6bff85dd74a49bab48d384e66bbeb4eb05763bbd69b096fbe0438c9222cd01870b28640d663fa0a3587ccb166ac69e1f42e6fed9148e255247e51cc6919b90348679982e0e1c74bef5d5eb82d425cdb4e70597e2c0e1dfe8bd829996b2286de7316e5c2a0fb82381364d01d7aebe133dc661adbe9fb5e7a0e8c023ed294f827dcd8c9216fd6bc3270110e23975d24f0e3550972238df40ce1fa2c8ba157af61b388cc28b4886f7438a71fe74af043c4678e2b9cc1e364feb0d3781af1020537309e5752743a2f955315ea5f3d023f64961dc14cc28f8d99e4ff87a82917c526206fbfbaf0ca003085b1a1d8f229b8b19b0b74c5fc459621dff8d9fa1897a109353b39f870064087903b4f739f3f7cee70168a13d1b4b02aa6b6daa5a241c85012a8eb353dbec08f3d4e2ab99892588fc438d23037b0017197a93aacfea074f0886b22b47e1af6d9f5c9bc3834b286bb275ba273bc993bd3ae55aaf334eddc34302c0fab4b1132f3500358b5a829309499f1dd5ff80e2661455e67cc10e5529951fdf2a09a906ec406dc3dd09a020ef7b88d81eddbb0c26ff31fe3cf33d51562b15e78d702d921c4441a72a029b6af058b3c121ce4830cf4eeb3f34e2d8966cb86fde5a49779f253d4271cfe9bee64bdc3620aa5d4ec8310a57447e21a6648e354b3d83fdf51fe7b72c6e97d2e13e572d7c1253780c1f2b13608c4d1305a2b4335d78b274dcb0ae96f733e553af28bbff5f21441fecbc99458631316800dbe02f46429a2d271d9bf45b6630ee385e5ebe1850b0849700ca45580acc615cc39eec385a0137b41b73ab098a3e10cc74bb3247eaf300c2872eeb0382cb138c7892d7a20b97abe0654ef60e7a310ae1f3b8d8b93e7e6465580f1f888cd7ae17841a1472032b4c3f3195ce9110fce7979c646c8c0ea84e97de5934358a8a6e95406565e510f62cfa2fcb1cd52d7111290b164d30adda5e520d8ad9d6eb3ddc3b095221b71feb31867bc2059bfd16d3a0ebd4231a1d9cea0f5f401dfd666ee92931540968c84797b911ff421b497de3f3f562c395d25fbccd35edf759f518ad4dd7598fba3e9dabff0362a5856f00fc2741f92d160744c0bb2cabbbce78d2f58402abc5d4c44887b2e601da942c25018bf715520b5b0ec315f0abebecc5e8d25a9ac065aa03ffcd34aa09256f6599fefcd7ed4fa374b9c58116296338992bc79aed181ef5d7720374daf022affacccf0b5b5fa4405348a2e6e30fba53a8c455177704d3577c925a407e4be3f2241650d3a0806d91a516964c464b00523be0e6fee6a4fb2eb75689edf56db5dff90dd5870102db101c5ccfb0a75aa0677450cfeefc5e290e3b629b7181428b1f5235c07f3452f14f8d0f7c13fc8017ec08be1528ca80e3f2442735e0fbafbde1da701f1a08acece177a60293e0113130583cab454a2088ab23428d4ee98a2f9e73f7b4184e200d40ec0ce5dcce425de4ca41d98283fa690b6050bc6fe059ee2d8e6281ebcfded1f67f21975ff3e0691f125ddb761a3c608f8f5903d2fda7d84a84a8da10b1c83c780d8c0bdc5fbd79b1bc88af91a10b3ac855e996763fbd20972dfcdaf056dc673039f76eb00e107653d152cd9afb8aa5f6da806fc082e75b2094970cb376252d3417f1395b1ab393fece857324729cb8b792dccab1cff1548a904cad5baa18ece611b829110ce07138ab1c9a5e29d8b4d6b7b83d24ff9d691aa88f42c3a7c517677c9fd7e37090cb17e7005d448958c4f46ac94eadb9cb1138d8e055b19d370cf2aa82bf144a2fe5387c39155f7f6e91fdd79490225efce65eb17965b65b8751267581a48ac9c3511adc5022bd6a6fe72d3c1d93519ed3de4afbadf2c556a70486a84a601ba00e57549c778bc33fd937aa4e06eaa94f460ba28d0641d0d8ddd232ef3c2649b0f501cd6321f6b17a31727b15a98b0f3f0542d8c2a8bfe19ade21420d26a4b321eb8ba97a1370dd9c1ca12b88c1ba44c1e8a4a288e", 0x12be, 0x300000000, 0x0, 0x1}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x1, 0x2, r11, &(0x7f00000017c0)="4e4f8e7762fa9c3947781b4691ba464bcfde3695ac9794623df10180a3ef66f3688dd984d7e83c25d082cd4b4625804e8f895fabed67ccc7b4cc8d6422b2bdd6305b932254acde564ba214284c98c6485b07910ad2267e2437de92", 0x5b, 0x4, 0x0, 0x1, r3}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x1, 0x2, r12, &(0x7f0000001a00)="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", 0x1b4, 0x2, 0x0, 0x0, r14}]) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000300)=""/65) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x218302, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendfile(r2, r5, 0x0, 0xa5cc554) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x800, 0x4dff8868581ae3ea}, 0xffffffffffffff95) [ 481.717951] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 04:58:29 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:29 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r4, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) fadvise64(r1, 0x0, 0x0, 0x5) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r4, 0x0, 0x180003) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r6 = dup3(r3, r5, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @remote}, 0x8, {0x2, 0x4e20, @remote}, 'veth0_to_hsr\x00'}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x24010, r2, 0xffffd000) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) getsockopt$inet_buf(r0, 0x0, 0x50, &(0x7f0000001440)=""/4096, &(0x7f0000000000)=0x1000) 04:58:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:58:29 executing program 0: socket(0x5, 0x3, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x200200, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000280)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000200)={0x5}, 0xffffff9a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0xca184, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffc9, 0x2000, 0x0, 0xfffffffffffffc7c) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) write(r4, &(0x7f0000000380), 0xfffffffe) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x4200, 0x0) recvfrom$inet6(r4, &(0x7f0000001840)=""/17, 0x11, 0x120, &(0x7f0000001880)={0xa, 0x0, 0xb, @mcast1}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x2, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r6 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 483.848008] binder: BINDER_SET_CONTEXT_MGR already set [ 483.853630] binder: 16069:16077 ioctl 40046207 0 returned -16 04:58:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 04:58:29 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) vmsplice(r1, &(0x7f0000000180), 0x0, 0xe) fchdir(r0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0) getpgid(0x0) write$FUSE_LK(r2, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@remote, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0) socket(0xa, 0x800, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) fadvise64(r3, 0x0, 0x200, 0x7) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r7 = open(0x0, 0x0, 0x1c0) syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000740)=ANY=[@ANYBLOB="b88f5a0000d2f18c1f4da3c0cfecb52c87820000e1aaaba313358d42f8b81fda95e83eb1e183af83c0ce7d5a0d4ea909b1d89dbe5e9aad8dd46f387240e5f0f95fb7e7a5bdc1b585", @ANYRES16=0x0, @ANYBLOB="84b3291629355b67d2f5c2ac8fbf626ef3af1232ebf0b2ece42c37118572075f21a29acd255b61d134af0ebe0295d8c28d8c1dcd38e371bf177c63c2fb917961df9090a5f8ad30f0880cdf3ec86d08084146d7f629ffb893754d5e235852bdc8afe5ead7a5ee937f040a905b87219b812d53ff0700004ab0df69b9d7dd0b14856e4ed415fdaf232158"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000413) write$cgroup_type(r6, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f00000000c0)='./file0\x00') r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4943, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) r11 = geteuid() r12 = eventfd2(0x0, 0x0) fcntl$getownex(r12, 0x10, &(0x7f0000000140)) fstat(r12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r15, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r15, r13, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) r16 = eventfd2(0x0, 0x0) fcntl$getownex(r16, 0x10, &(0x7f0000000140)) fstat(r16, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r19, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r19, r17, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) r20 = eventfd2(0x0, 0x0) fcntl$getownex(r20, 0x10, &(0x7f0000000140)) fstat(r20, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r23, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r23, r21, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) r24 = eventfd2(0x0, 0x0) fcntl$getownex(r24, 0x10, &(0x7f0000000140)) fstat(r24, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r27, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r27, r25, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) r28 = geteuid() r29 = eventfd2(0x0, 0x0) fcntl$getownex(r29, 0x10, &(0x7f0000000140)) fstat(r29, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r31 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r31, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r32, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r32, r30, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) getresuid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f0000000640)) r34 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r34, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) getsockname$packet(r34, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) fstat(r34, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r9, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000840)={{}, {0x1, 0x3}, [{0x2, 0x1, r10}, {0x2, 0x0, r11}, {0x2, 0x7, r15}, {0x2, 0x6, r19}, {0x2, 0x0, r23}, {0x2, 0x1, r27}, {0x2, 0x6, r28}, {0x2, 0x13819d08f9b11bb2, r32}, {0x2, 0x2, r33}], {0x4, 0x7}, [{0x8, 0xe, 0xee00}, {0x8, 0x4419de6a8dc427f2, r35}], {0x10, 0x5}, {0x20, 0x3}}, 0x7c, 0x2) mkdirat(r8, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r8, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 04:58:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'bcsh0\x00', 0x4000}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000001c0)={@ipv4={[], [], @multicast1}, 0x0, r4}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) dup3(r1, r2, 0x0) close(r0) [ 484.082268] binder: BINDER_SET_CONTEXT_MGR already set [ 484.088423] binder: 16088:16091 ioctl 40046207 0 returned -16 04:58:29 executing program 1: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet(0x10, 0x80003, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xffffff03) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f000000ed80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f000000eb40)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f000000ec40)=[{&(0x7f000000ebc0)="a1c6e8f331d9c047d51158fb67e571238ba8ae5082749f933f79bba1bf9036685003acafbbfd6de1e1c03f5e835d90b7af0e0d857261f17b3346bb76de428044749687a5de", 0x45}], 0x1, &(0x7f000000ec80)=[{0x40, 0x10b, 0x300, "857eab923541a97c95c7248932c98917ab101bd76b5800aa2baec82edd84f4a86a3ea51a39ac7999811f"}, {0xa8, 0xac263a820e23e2ed, 0x43, "d9da910b578e8631db494b7c56161755c8d0413a2758a4baec768a22bd598e2294a6268ba556c77508c2c9d796e217c67c7917f315dd7e0ddd817bfe15bf6c30d7c3729c4128669259989f58518de040dfb74244066f01c2318602fd150a49d56f843efc4d808a1b4f2692a1d95e7b911611f368bc03f98b023139af266724f24ba67bb84a4e25d963263ff8a404a69a93e0"}], 0xe8}}], 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) r10 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r10) r11 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r10) r12 = add_key$keyring(&(0x7f00000009c0)='\x00\x00\x00\x00\xfb\xff\x00', &(0x7f0000000a00)={'\x00\x03\x00', 0x0}, 0x0, 0x0, r11) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="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", 0xfe, r12) r13 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="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", 0xfe, r13) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="2b24d6fc806704d67b63619207a7b867c2202224ffddd7bb59b6466de07602ef6f4aea79e4f65937579064ba9e931af05d701619f6bdc5e4e90262ab3e553386faa49f542f54c2999aeeb7db0000", @ANYRES64, @ANYPTR64, @ANYRES64=r12, @ANYRESOCT=r13, @ANYRES64, @ANYRESDEC=r7, @ANYRES64=r8, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRESDEC=r2, @ANYRESOCT=r9, @ANYRESDEC]]], 0x8}}, 0x24000886) setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r14 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r14, 0x2007ffc) sendfile(r8, r14, 0x0, 0x8000fffffffe) 04:58:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = eventfd(0x0) read(r4, &(0x7f0000000300)=""/205, 0xcd) io_submit(0x0, 0x20000000000004c0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x0, 0x0, r3, 0x0, 0x5ef, 0x10000000, 0x0, 0x7, r4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 04:58:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x430701, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={0x0, 0xfffffffffffffec3, 0xfffffffffffffebd}, &(0x7f0000000380)=ANY=[], 0x0, 0x0) r2 = gettid() ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x5e9, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x480}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8001) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x8, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) r10 = timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r11, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)) r12 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000040)) r14 = inotify_init1(0x0) fcntl$setown(r14, 0x8, 0xffffffffffffffff) fcntl$getownex(r14, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0xffffffffffffffff, r15, 0x0, 0x0) ptrace(0x4207, r15) ptrace$getregset(0x4204, r15, 0x202, &(0x7f0000000000)={0x0, 0xfea2}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100082480}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8ddbad255c69402bcc3f3f7d85e18d8fb7db3f205204474821ffeb4417180cab2c56c15080688f519235389cce2b290e98346258f2793be3985c0afbb525c618c62028f7ab903285ada", @ANYPTR64=&(0x7f0000000b80)=ANY=[@ANYPTR64=&(0x7f0000000600)=ANY=[@ANYPTR64, @ANYRESDEC=r7, @ANYRES64=r2, @ANYRESOCT=r8, @ANYBLOB="ede0397bb71e0a3b548e2429f68e17d2e552e79a6451bab6a6b2ea6f48559ba30b1d64e2390652e97f4a84fd65098b2322bdd7ca3f5447dc03e01a710ced2d6785f17d0fb6dfb2c0528ad7dfac45e39a4489700702212bd08c27ca1d2331e19dd53441400210e0096a35a95cb2ea368ce66a3e290924879677591cced4358f0d2d5c4bdce77e35b52e7b5e8c242d66ac19a7eae57e97cc96a4"], @ANYBLOB="fd1f6659da68ba27a8e85f9192a74feef7f73fff4b93989d8399159337b70ac034e2bb5aa7cc3a71827cfad3759ff2ed0c0906120de5c8ed9e39e4f116689ca432002a1b473659091850c878693f093c47ad653892c3476f3712e856bbc7b92efd29bd85e57e8c12008deb8e8458b09fa1595b9107d9e9aaaf60513d356805e5a80300000000000000b5deb054e77bdcdec95342a68126a5b714902affb482b5664b3339fc0f6c05251fb181de7c94f2ac945881491d8c117564912b00bbbb42af31855d951d578a6bca293588c4a7d9cedc5b9b5ba894b80a6f5d859a5b67f05644de64cd6d3badd02bfd0cde7102219a8dddf0cb03aa69006c29e51cdf5ffc6ab7ef75059c741b5a3b9ceab7a4521ce955b62d53015137f12c04b7d0310bf1e96eee5fdf4184eb6477adbd6f556e6b9d61efed4e5a78eb6c678d4dce074759e293ff38b6fc392647e815837adba270aa52f5e1c89173075fa511e0967e287f14b4d554fad32104721deb07b8ee73fad3ccd407cac9cdc100c7de673cde5f40be97ac538d36379a7040130cfd6944675c93d109a64e48923ea4dc632d899571695966c6d553961086c81a0cf27ddf05eb4ee7c4c1a4c58059c07085e07d50f7a07d1f57b22637d35fa38a1c5d5846145afe7409f3afdd9ee7ad27a0ba22db35f56a301408ad3f9c0009649d1c4a99bf4f9b2b32ec000000000000000b23747dd818ee486f4c865b7518745a33deaa75eda3dd98eed87b0dbd866b4fa7a41175f21ef3db24f7ac17a4cf5e38904eb2756582554925ab2ed35cbd77c5ed2b20deead13a2ac889deaaba22eba80a3a806dd851327eb8eca89f4e6dc93572a854375cc36c533b29d2fe05a57cad371891f37559a8b0e3df1e9cfee4f80bc88c002127a3095d359f6296255158fbebd18da7b95f41238202e0d5545efce67a660ccb0a0b5e1f175ce3e24dd5c4685f24fc67c22a11be6cd9", @ANYRES32=r13, @ANYRESHEX=r0, @ANYRES64=r15, @ANYRESHEX, @ANYRES64=0x0], @ANYBLOB="020025bd7000fbdbdf2501000000000000000b0000f7ff0e0014ff0f000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) r16 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffd64) ioctl(r16, 0x20000, &(0x7f00000001c0)="ab58b876e7f2d826a351f1c5e8df51f3d588c8cd745497") r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r17) r18 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r18, 0x8200) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r19, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) ioctl$sock_TIOCINQ(r16, 0x541b, &(0x7f0000000140)) ftruncate(0xffffffffffffffff, 0x0) ftruncate(r18, 0x81ff) 04:58:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 484.701261] binder: BINDER_SET_CONTEXT_MGR already set [ 484.707029] binder: 16119:16120 ioctl 40046207 0 returned -16 [ 484.773565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 04:58:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x430701, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={0x0, 0xfffffffffffffec3, 0xfffffffffffffebd}, &(0x7f0000000380)=ANY=[], 0x0, 0x0) r2 = gettid() ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x5e9, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x480}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8001) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x8, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) r10 = timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r11, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)) r12 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000040)) r14 = inotify_init1(0x0) fcntl$setown(r14, 0x8, 0xffffffffffffffff) fcntl$getownex(r14, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0xffffffffffffffff, r15, 0x0, 0x0) ptrace(0x4207, r15) ptrace$getregset(0x4204, r15, 0x202, &(0x7f0000000000)={0x0, 0xfea2}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100082480}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8ddbad255c69402bcc3f3f7d85e18d8fb7db3f205204474821ffeb4417180cab2c56c15080688f519235389cce2b290e98346258f2793be3985c0afbb525c618c62028f7ab903285ada", @ANYPTR64=&(0x7f0000000b80)=ANY=[@ANYPTR64=&(0x7f0000000600)=ANY=[@ANYPTR64, @ANYRESDEC=r7, @ANYRES64=r2, @ANYRESOCT=r8, @ANYBLOB="ede0397bb71e0a3b548e2429f68e17d2e552e79a6451bab6a6b2ea6f48559ba30b1d64e2390652e97f4a84fd65098b2322bdd7ca3f5447dc03e01a710ced2d6785f17d0fb6dfb2c0528ad7dfac45e39a4489700702212bd08c27ca1d2331e19dd53441400210e0096a35a95cb2ea368ce66a3e290924879677591cced4358f0d2d5c4bdce77e35b52e7b5e8c242d66ac19a7eae57e97cc96a4"], @ANYBLOB="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", @ANYRES32=r13, @ANYRESHEX=r0, @ANYRES64=r15, @ANYRESHEX, @ANYRES64=0x0], @ANYBLOB="020025bd7000fbdbdf2501000000000000000b0000f7ff0e0014ff0f000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) r16 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffd64) ioctl(r16, 0x20000, &(0x7f00000001c0)="ab58b876e7f2d826a351f1c5e8df51f3d588c8cd745497") r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r17) r18 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r18, 0x8200) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r19, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) ioctl$sock_TIOCINQ(r16, 0x541b, &(0x7f0000000140)) ftruncate(0xffffffffffffffff, 0x0) ftruncate(r18, 0x81ff) [ 484.856414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 484.959007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 04:58:32 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x430701, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={0x0, 0xfffffffffffffec3, 0xfffffffffffffebd}, &(0x7f0000000380)=ANY=[], 0x0, 0x0) r2 = gettid() ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x5e9, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x480}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8001) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x8, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) r10 = timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r11, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)) r12 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000040)) r14 = inotify_init1(0x0) fcntl$setown(r14, 0x8, 0xffffffffffffffff) fcntl$getownex(r14, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0xffffffffffffffff, r15, 0x0, 0x0) ptrace(0x4207, r15) ptrace$getregset(0x4204, r15, 0x202, &(0x7f0000000000)={0x0, 0xfea2}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100082480}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8ddbad255c69402bcc3f3f7d85e18d8fb7db3f205204474821ffeb4417180cab2c56c15080688f519235389cce2b290e98346258f2793be3985c0afbb525c618c62028f7ab903285ada", @ANYPTR64=&(0x7f0000000b80)=ANY=[@ANYPTR64=&(0x7f0000000600)=ANY=[@ANYPTR64, @ANYRESDEC=r7, @ANYRES64=r2, @ANYRESOCT=r8, @ANYBLOB="ede0397bb71e0a3b548e2429f68e17d2e552e79a6451bab6a6b2ea6f48559ba30b1d64e2390652e97f4a84fd65098b2322bdd7ca3f5447dc03e01a710ced2d6785f17d0fb6dfb2c0528ad7dfac45e39a4489700702212bd08c27ca1d2331e19dd53441400210e0096a35a95cb2ea368ce66a3e290924879677591cced4358f0d2d5c4bdce77e35b52e7b5e8c242d66ac19a7eae57e97cc96a4"], @ANYBLOB="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", @ANYRES32=r13, @ANYRESHEX=r0, @ANYRES64=r15, @ANYRESHEX, @ANYRES64=0x0], @ANYBLOB="020025bd7000fbdbdf2501000000000000000b0000f7ff0e0014ff0f000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) r16 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffd64) ioctl(r16, 0x20000, &(0x7f00000001c0)="ab58b876e7f2d826a351f1c5e8df51f3d588c8cd745497") r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r17) r18 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r18, 0x8200) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r19, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) ioctl$sock_TIOCINQ(r16, 0x541b, &(0x7f0000000140)) ftruncate(0xffffffffffffffff, 0x0) ftruncate(r18, 0x81ff) 04:58:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x430701, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={0x0, 0xfffffffffffffec3, 0xfffffffffffffebd}, &(0x7f0000000380)=ANY=[], 0x0, 0x0) r2 = gettid() ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x5e9, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x480}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8001) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x8, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) r10 = timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r11, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)) r12 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000040)) r14 = inotify_init1(0x0) fcntl$setown(r14, 0x8, 0xffffffffffffffff) fcntl$getownex(r14, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0xffffffffffffffff, r15, 0x0, 0x0) ptrace(0x4207, r15) ptrace$getregset(0x4204, r15, 0x202, &(0x7f0000000000)={0x0, 0xfea2}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100082480}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8ddbad255c69402bcc3f3f7d85e18d8fb7db3f205204474821ffeb4417180cab2c56c15080688f519235389cce2b290e98346258f2793be3985c0afbb525c618c62028f7ab903285ada", @ANYPTR64=&(0x7f0000000b80)=ANY=[@ANYPTR64=&(0x7f0000000600)=ANY=[@ANYPTR64, @ANYRESDEC=r7, @ANYRES64=r2, @ANYRESOCT=r8, @ANYBLOB="ede0397bb71e0a3b548e2429f68e17d2e552e79a6451bab6a6b2ea6f48559ba30b1d64e2390652e97f4a84fd65098b2322bdd7ca3f5447dc03e01a710ced2d6785f17d0fb6dfb2c0528ad7dfac45e39a4489700702212bd08c27ca1d2331e19dd53441400210e0096a35a95cb2ea368ce66a3e290924879677591cced4358f0d2d5c4bdce77e35b52e7b5e8c242d66ac19a7eae57e97cc96a4"], @ANYBLOB="fd1f6659da68ba27a8e85f9192a74feef7f73fff4b93989d8399159337b70ac034e2bb5aa7cc3a71827cfad3759ff2ed0c0906120de5c8ed9e39e4f116689ca432002a1b473659091850c878693f093c47ad653892c3476f3712e856bbc7b92efd29bd85e57e8c12008deb8e8458b09fa1595b9107d9e9aaaf60513d356805e5a80300000000000000b5deb054e77bdcdec95342a68126a5b714902affb482b5664b3339fc0f6c05251fb181de7c94f2ac945881491d8c117564912b00bbbb42af31855d951d578a6bca293588c4a7d9cedc5b9b5ba894b80a6f5d859a5b67f05644de64cd6d3badd02bfd0cde7102219a8dddf0cb03aa69006c29e51cdf5ffc6ab7ef75059c741b5a3b9ceab7a4521ce955b62d53015137f12c04b7d0310bf1e96eee5fdf4184eb6477adbd6f556e6b9d61efed4e5a78eb6c678d4dce074759e293ff38b6fc392647e815837adba270aa52f5e1c89173075fa511e0967e287f14b4d554fad32104721deb07b8ee73fad3ccd407cac9cdc100c7de673cde5f40be97ac538d36379a7040130cfd6944675c93d109a64e48923ea4dc632d899571695966c6d553961086c81a0cf27ddf05eb4ee7c4c1a4c58059c07085e07d50f7a07d1f57b22637d35fa38a1c5d5846145afe7409f3afdd9ee7ad27a0ba22db35f56a301408ad3f9c0009649d1c4a99bf4f9b2b32ec000000000000000b23747dd818ee486f4c865b7518745a33deaa75eda3dd98eed87b0dbd866b4fa7a41175f21ef3db24f7ac17a4cf5e38904eb2756582554925ab2ed35cbd77c5ed2b20deead13a2ac889deaaba22eba80a3a806dd851327eb8eca89f4e6dc93572a854375cc36c533b29d2fe05a57cad371891f37559a8b0e3df1e9cfee4f80bc88c002127a3095d359f6296255158fbebd18da7b95f41238202e0d5545efce67a660ccb0a0b5e1f175ce3e24dd5c4685f24fc67c22a11be6cd9", @ANYRES32=r13, @ANYRESHEX=r0, @ANYRES64=r15, @ANYRESHEX, @ANYRES64=0x0], @ANYBLOB="020025bd7000fbdbdf2501000000000000000b0000f7ff0e0014ff0f000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) r16 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffd64) ioctl(r16, 0x20000, &(0x7f00000001c0)="ab58b876e7f2d826a351f1c5e8df51f3d588c8cd745497") r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r17) r18 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r18, 0x8200) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r19, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) ioctl$sock_TIOCINQ(r16, 0x541b, &(0x7f0000000140)) ftruncate(0xffffffffffffffff, 0x0) ftruncate(r18, 0x81ff) 04:58:32 executing program 2: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000580)=ANY=[]) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000003c0)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) lstat(0x0, 0x0) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) memfd_create(&(0x7f0000000040)='comm\x00\xf5\'\xd5\x1eZ[E\x9bH\xe7]\\C\x12\xf6\"t`\x16\xed6\xeb\x0e\xdc\x1b\xdf\x93\xed\xff\x81\"\x98\x89\x14\xb1\xfc\xfa\x02\xbe\xf7)\xf2\xffI\x91\x0e\xf7_J\x9a}XF)\x1d:\x87>t=\xf6\xf1\xfd\x8e\x06\xd6\xd6L\xc4\x87\xfe\xab\x7f\xc8(S\x8c:\x06\x00\x00\x00\x00\x00\x00\x00\x8c\x8a\x02V\x033\xf0\x89\xd8N+\x151J\x96\xdf&\xe0>\xadu\x15\xed\x94\xec%5\x80\xa7~\xbc\x9c3\x90\x97\x1d\xd8j\x0e]P\x0f\xa9*a2\x89Y\xcc$=\xb7\x0f\xd1\x807 T\xec\xb2\xfd\x88M\x99\xa9\xf9\x10t\r\xea\xabv\x1dn\f\x88[\x18\xa6\xcfE\"\x9c\xc1\xdbYW\xac&\xc5\x11c\x85#;\xf9\x9a\x9f9\xd7&\t\x99\xfd\x010\x98/\x13\xe1\xf3\x81\xb3m\xaf\x11\xb3\x9e\xd1\xd7\xc6\x92m\xdd\xba\x01\xbc\xed\x9dl:\x1e\xf8o\x190\xf9\xb2\x1e~\x1fHQ', 0x0) getpid() fchmod(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) pselect6(0x40, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x1f, 0x0, 0xfffffffffffffff7, 0x0, 0x1}, &(0x7f00000000c0)={0x0, 0xa9a0, 0x1000, 0x0, 0xf8, 0x1f, 0x0, 0x7fffffff}, &(0x7f0000000140)={0x0, 0x4, 0x5a, 0x81, 0x0, 0x0, 0x731, 0x5}, 0x0, &(0x7f0000000440)={0x0}) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) r6 = eventfd2(0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgid(r7) syz_open_procfs(r7, &(0x7f00000001c0)='maps\x00') close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000c85000)) r8 = dup(r4) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) socket$key(0xf, 0x3, 0x2) r9 = eventfd2(0x0, 0x0) fcntl$getownex(r9, 0x10, &(0x7f0000000140)={0x0, 0x0}) r11 = getpgid(r10) syz_open_procfs(r11, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) sendmsg$key(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000680)=ANY=[@ANYBLOB="588d3ec2bfc2e13de2dba362f501c7489fc0083085bb6b2684ae4cd6e4deb2dbb7795dcaf3406f96ec5616dccf246a492c9be0e1037b5112a328be142984fac867d75e89acec8af74cc8727c8f2bb4d5898faf1b33470ab6239bd65277513009176b88f2c8fc8f04fa9969b5ed581ee919599bebe56c455917c94d8e4e1d7bdc568244cea3cf94c4566be1d1352552578277221f7a93ca8096090e2e1fb3eccba032ffc85882ae9a977e1d5d88ccb2", @ANYBLOB="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"]], 0x8}}, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) [ 486.928648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 486.939836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 04:58:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 04:58:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x430701, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={0x0, 0xfffffffffffffec3, 0xfffffffffffffebd}, &(0x7f0000000380)=ANY=[], 0x0, 0x0) r2 = gettid() ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x5e9, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x480}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8001) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x8, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) r10 = timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r11, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)) r12 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000040)) r14 = inotify_init1(0x0) fcntl$setown(r14, 0x8, 0xffffffffffffffff) fcntl$getownex(r14, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0xffffffffffffffff, r15, 0x0, 0x0) ptrace(0x4207, r15) ptrace$getregset(0x4204, r15, 0x202, &(0x7f0000000000)={0x0, 0xfea2}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100082480}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8ddbad255c69402bcc3f3f7d85e18d8fb7db3f205204474821ffeb4417180cab2c56c15080688f519235389cce2b290e98346258f2793be3985c0afbb525c618c62028f7ab903285ada", @ANYPTR64=&(0x7f0000000b80)=ANY=[@ANYPTR64=&(0x7f0000000600)=ANY=[@ANYPTR64, @ANYRESDEC=r7, @ANYRES64=r2, @ANYRESOCT=r8, @ANYBLOB="ede0397bb71e0a3b548e2429f68e17d2e552e79a6451bab6a6b2ea6f48559ba30b1d64e2390652e97f4a84fd65098b2322bdd7ca3f5447dc03e01a710ced2d6785f17d0fb6dfb2c0528ad7dfac45e39a4489700702212bd08c27ca1d2331e19dd53441400210e0096a35a95cb2ea368ce66a3e290924879677591cced4358f0d2d5c4bdce77e35b52e7b5e8c242d66ac19a7eae57e97cc96a4"], @ANYBLOB="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", @ANYRES32=r13, @ANYRESHEX=r0, @ANYRES64=r15, @ANYRESHEX, @ANYRES64=0x0], @ANYBLOB="020025bd7000fbdbdf2501000000000000000b0000f7ff0e0014ff0f000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) r16 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffd64) ioctl(r16, 0x20000, &(0x7f00000001c0)="ab58b876e7f2d826a351f1c5e8df51f3d588c8cd745497") r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r17) r18 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r18, 0x8200) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r19, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) ioctl$sock_TIOCINQ(r16, 0x541b, &(0x7f0000000140)) ftruncate(0xffffffffffffffff, 0x0) ftruncate(r18, 0x81ff) 04:58:32 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b006108d5cb8022a30a32f068bc70a48c9fd1ffd562641dd6ef22087332812357b48841919771daab5d41a4f955406cfe63bcf3157fb636e2d358e84260cb976a8fa8b225e19458099b4438270583e9768e2c22def9d69629f95b41595bbf5", @ANYRES16=r2, @ANYBLOB="20002abd7000fddbdf250c00000014000100080001000000000008000800fbffffff38000300080007004e220800080007004e20000008000500ffffffff14000600000000000000000000000000000000000800080000000000"], 0x60}, 0x1, 0x0, 0x0, 0x44000000}, 0x4) setresuid(0xee01, 0xffffffffffffffff, 0xee00) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000180)='\x00\xdb\x8e\xf4\x00\x00\x00') getdents64(r4, &(0x7f0000000000)=""/188, 0xbc) getdents64(r4, &(0x7f0000000df0)=""/528, 0x7f355eb8) r5 = openat(r4, &(0x7f0000000100)='./file0\x00', 0x4100, 0x10) getsockopt$inet_tcp_buf(r5, 0x6, 0xb, &(0x7f00000001c0)=""/5, &(0x7f00000002c0)=0x5) clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x1, 0x0) getuid() setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000080)={0x3, 'bond0\x00', 0x2}, 0x18) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xb51807a37eda15a2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r8, 0x0, 0xfffffda9, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r8, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r9 = gettid() recvmmsg(r8, &(0x7f0000000ac0), 0x12f, 0x10100, 0x0) tkill(r9, 0x14) [ 487.113914] binder: BINDER_SET_CONTEXT_MGR already set [ 487.151982] binder: 16166:16167 ioctl 40046207 0 returned -16 04:58:32 executing program 1: openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='\x00\x01ev%k\xe5ycW\xe5\xc0(\x00', 0x8000, 0x0) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') getsockopt$inet_int(r1, 0x0, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7f2, &(0x7f0000000380)) write(r3, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000100)='security.evm\x00', &(0x7f00000005c0)=ANY=[], 0x0, 0x0) read(r2, &(0x7f0000000200)=""/250, 0xfffffe8a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, 0x0, 0xfffffffffffffdc3) r5 = inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000080)=0x7042) sync_file_range(r5, 0x7, 0x1, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/de/ptmx\x00', 0x419001, 0x0) socket(0x0, 0x2, 0x0) [ 487.303046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 04:58:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x1, @local, 0x7fffffff}}, 0x0, 0x9, 0x0, "2afc4a2e9aaf46ef70817d5e5c946ec5bcf35c83e801b544f5cd10adebc230e68240e9c66521c07a3a47912ea5e3f07691a34e762db047b35e3412cbc6f866bb45292fc002d3ae409e0f36adb055a50f"}, 0xd8) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000000)=0x6e, 0x80000) connect(r2, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x2}}, 0x80) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 04:58:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140), 0x0) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 487.739607] binder: BINDER_SET_CONTEXT_MGR already set [ 487.759419] binder: 16201:16202 ioctl 40046207 0 returned -16 04:58:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'lo\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f00000017c0)) syz_open_dev$loop(0x0, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x81ff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRESHEX], 0x4240a5bb) setitimer(0x1, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r6, r1) sendfile(r4, r5, 0x0, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/s\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') r8 = socket$inet6(0xa, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'erspan0\x00', r9}) sendmsg$TEAM_CMD_NOOP(r7, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001380)) r10 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r10, 0x10, &(0x7f0000000400)) fcntl$setstatus(r10, 0x4, 0x6100) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(r10, r11, &(0x7f0000000040), 0x8000fffffffe) writev(r10, &(0x7f0000000680), 0x0) r12 = socket$inet6(0xa, 0x480040004000, 0x6) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xfffffffffffffdc7) setsockopt$inet6_IPV6_PKTINFO(r12, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r14}, 0x14) getsockname(0xffffffffffffffff, &(0x7f0000001480)=@can, &(0x7f0000001500)=0x80) 04:58:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x1, @local, 0x7fffffff}}, 0x0, 0x9, 0x0, "2afc4a2e9aaf46ef70817d5e5c946ec5bcf35c83e801b544f5cd10adebc230e68240e9c66521c07a3a47912ea5e3f07691a34e762db047b35e3412cbc6f866bb45292fc002d3ae409e0f36adb055a50f"}, 0xd8) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000000)=0x6e, 0x80000) connect(r2, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x2}}, 0x80) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 04:58:35 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = eventfd2(0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000140)) fstat(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r6, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r6, r4, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) ioprio_set$uid(0x3, r6, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r7 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) ioctl$KDGKBMODE(r7, 0x4b44, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x1ff) 04:58:35 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = epoll_create1(0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000001}) eventfd2(0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x100, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18, 0x0, 0x1, {0x800}}, 0x18) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) write$UHID_CREATE(r2, &(0x7f0000000140)={0x0, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb5\xac\x00\xef\x9e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\x05\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 'syz1\x00i\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) 04:58:35 executing program 1: clone(0x8ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) request_key(&(0x7f0000000480)='user\x00', &(0x7f0000000000)={'syz', 0x1, 0x74}, &(0x7f0000000540)='\x00vwx\n!p\xdd7\xb8\r\x13\x12\xe5\xec\xc1\xd5\x95bBS\xd9\x97\xdf\xdd\x05\xf8Q5\x1c\x9f\xcc\xf0\x86ax\x86B\x194\x04J\x94\xfa\x9dt\r\xb3-c+/\xc1N:[\xe6(\xca\x8a\x89F7[\xfb8\xba\xee\xe7Amqe\x04\xc6\xd3\xdbT\xb0R}', 0xfffffffffffffffb) [ 489.933034] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 489.948875] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 489.959107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 489.965859] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 489.973181] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 489.981002] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 489.987918] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 489.994690] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 490.010575] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 04:58:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 04:58:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) 04:58:35 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}}], 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3d4, 0x0, 0x4, 0xbe}]}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 04:58:35 executing program 1: r0 = socket$inet(0x10, 0x400000200000002, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) [ 490.105629] binder: BINDER_SET_CONTEXT_MGR already set [ 490.112149] binder: 16246:16249 ioctl 40046207 0 returned -16 04:58:35 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) write(r3, &(0x7f00000001c0), 0xfffffef3) r6 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) read(r2, &(0x7f0000000000)=""/250, 0xedf1d44) 04:58:36 executing program 0: r0 = open(0x0, 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x2000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(r3, 0x127b, 0x0) inotify_init() fcntl$setstatus(r4, 0x4, 0x6100) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0xfffffcec) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r7, &(0x7f00000001c0), 0x8000fffffffe) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000500)=0x0) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r8, 0x80045400, &(0x7f0000000400)) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x210002, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r10, &(0x7f00000017c0), 0x333, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r11, &(0x7f00000017c0), 0x333, 0x0) io_submit(r9, 0x3, &(0x7f0000000740)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x8, r1, &(0x7f0000000540)="5a1d584bbf699e49f977ea853de206f2f992880aec25dc1ebf3047cd60a2302112128f71775354b3afca6564d87e9a4c7983a5246aa09a56d7b58ee1c84f395ae0b6a5fafac596e4c16fe9d3822595d594b86fc6547d77aeede7755190ac79f9bfd4052e35b461c1ead875ec9e8125b2eafdbe7732", 0x75, 0x101, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0xf001, r10, &(0x7f00000005c0)="ad8a441bfb92eb7254e91c9e5a8f7eaab88d927e86da31c81361321650dbb3351d1f9a7ea19c2e8b51a0f541780ac29210429a", 0x33, 0x401, 0x0, 0x0, r4}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x101, r11, &(0x7f0000000680)="f6777f8aed8e95b527993b5d68171409753e05ffa04668b6a95832b26f62bcb950cb9c184f14e34f6ee68ae5bb74f7d489a343cdb206df43a98fb1635dcc71a437735a10f2b43e89fb921005289a58e18c2c62a0779d77b74f0f2da5d2b16175d56c7176ec2f2ae407edecaf3bce802e8060f5", 0x73, 0x0, 0x0, 0x0, r0}]) ioctl$EVIOCGUNIQ(r8, 0x80404508, &(0x7f0000000300)=""/65) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x218302, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendfile(r4, r7, 0x0, 0xa5cc554) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x800, 0x4dff8868581ae3ea}, 0xffffffffffffff95) 04:58:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f00000006c0)) r3 = dup3(r2, r1, 0x80000) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x40201, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@remote, r5}, 0x14) dup2(r6, r4) 04:58:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140), 0x0) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 490.732457] binder: BINDER_SET_CONTEXT_MGR already set [ 490.738168] binder: 16266:16267 ioctl 40046207 0 returned -16 04:58:38 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:38 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7,k\x1a+@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0xc8f, 0x0) r4 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fstatfs(r4, &(0x7f0000002340)=""/4096) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x0, 0x20, 0x8}) preadv(r1, &(0x7f0000000300), 0x34b, 0x2000107c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)={0x3, 'ip_vti0\x00', {0x7fffffff}}) remap_file_pages(&(0x7f0000de3000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x10000) 04:58:38 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c6a0) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x80000239) recvfrom(r2, &(0x7f0000000240)=""/184, 0xfffffe4c, 0x10100, 0x0, 0xfffffffffffffcff) sendfile(r0, r0, &(0x7f0000000180)=0x74000000, 0x5) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x202400, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000080)={0x34}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'tunl0\x00', 0x2000}) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000380)) pwritev(r6, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r6, 0x0, 0x180003) r7 = dup3(r4, r5, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000200)='hybla\x00', 0x6) 04:58:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r1, &(0x7f0000000700)=""/250, 0xffffffc9) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000080)=0x3, 0x4) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) sendmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "1b87e23fb2646cb384d8b49d3247c0d4620673f4762df6cb951508ba86d4f31476f043f7b407a906ef0beaf8aae7507758fcca43360cd27ece12b729dfaf6d"}, 0x80, 0x0}}], 0x2, 0x0) 04:58:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 04:58:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) dup3(r2, 0xffffffffffffffff, 0x1c0000) recvmsg(r2, &(0x7f0000000400)={&(0x7f00000001c0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/190, 0xbe}, {&(0x7f0000000300)=""/106, 0x6a}], 0x2, &(0x7f00000003c0)=""/30, 0x1e}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000440)={@dev={0xfe, 0x80, [], 0x29}, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9, 0x0, 0xff3c, 0x300, 0x0, 0x1, r3}) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000080)=0x54) 04:58:38 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 493.132317] binder: BINDER_SET_CONTEXT_MGR already set [ 493.148571] binder: 16308:16309 ioctl 40046207 0 returned -16 04:58:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 04:58:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140), 0x0) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 493.757872] binder: BINDER_SET_CONTEXT_MGR already set [ 493.764262] binder: 16320:16322 ioctl 40046207 0 returned -16 04:58:39 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) dup(r2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r5 = creat(0x0, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x297) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x800, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x1b4) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r8, 0x541d) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a0000000000000000000099fa669900000000000000000000000000000000000d000800e0020000b89c0fa2f2922b93a719968d48d8ee000000809ac1ec3d95c9a2af6fa7fe171ac34721f755b088c2a08594e34e879491dc92009f826a43c24c9f77b57b998a0f1c13d856458947ad58949107c4f162427d0ee72d9739fb0b5b848af139db"], 0x9e}}, 0x0) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00'}) r10 = socket$key(0xf, 0x3, 0x2) getsockname$packet(r10, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f669900000000000000"], 0x2e}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x39e) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000540)='\x00+\xa6\xf2\xb4t\x95\x87J\x00', 0x0, 0x0) ioctl$TIOCCONS(r11, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000340)={'team0\x00'}) socket$key(0xf, 0x3, 0x2) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r12, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000340)={'team0\x00'}) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, 0x0, 0x0) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, 0x0, 0x0) getsockname$packet(r14, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r15 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCCONS(r15, 0x541d) pipe(0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000480)=0x14) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@remote, @multicast1}, &(0x7f0000000280)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, 0x0, 0x810) r16 = socket$inet_udplite(0x2, 0x2, 0x88) r17 = memfd_create(&(0x7f0000000080)='#em3#/\x00', 0x0) fcntl$dupfd(r17, 0x0, r16) getsockopt$inet_pktinfo(r16, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @multicast2}, &(0x7f00000002c0)=0xc) r18 = socket(0x11, 0x800000003, 0x0) bind(r18, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r18, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) pipe(&(0x7f0000000000)) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000100)={0x1fe}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) fchdir(0xffffffffffffffff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:58:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) dup3(r2, 0xffffffffffffffff, 0x1c0000) recvmsg(r2, &(0x7f0000000400)={&(0x7f00000001c0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/190, 0xbe}, {&(0x7f0000000300)=""/106, 0x6a}], 0x2, &(0x7f00000003c0)=""/30, 0x1e}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000440)={@dev={0xfe, 0x80, [], 0x29}, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9, 0x0, 0xff3c, 0x300, 0x0, 0x1, r3}) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000080)=0x54) 04:58:40 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 494.623479] binder: BINDER_SET_CONTEXT_MGR already set [ 494.629157] binder: 16337:16338 ioctl 40046207 0 returned -16 04:58:40 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x800000000000000}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f00000000c0)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 04:58:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000580)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, {0x0, @dev={[], 0x1f}}, 0x10, {0x2, 0x0, @broadcast}, 'veth1_to_bridge\x00'}) setsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f0000000140)=0x6, 0xffffffffffffffe3) r4 = socket(0x18, 0x0, 0x3) connect(r4, &(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x2, 0x4, 0x31, 0x80, "15d0f8f238b5c51bbef4ca856c7afc4d0e0c940e5c816a36d1ca9a9028ee9f5f437d803c8623c65c3cb58ff542be1975c07b0c0a481fc5c440b52091f575d0", 0x2c}, 0x80) setsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f0000000040)=0xfffffffffffffffc, 0x4) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket(0x0, 0x80, 0x5) r6 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r6) r7 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x6, 0x105082) r8 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r8, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x80ffe) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed6) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r9, &(0x7f00000002c0)=[{{&(0x7f0000000080)=@nfc={0x27, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000100)=@x25={0x9, @null=' \x00'}, 0x80, 0x0}}], 0x2e1, 0x0) fcntl$setstatus(r1, 0x4, 0x1) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000740)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r10, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r7, r6, 0x0, 0x80005) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000340)=0xb84699fd) syz_open_procfs(r12, &(0x7f0000000180)='ne\x8f/p\x00\xc9\xfc\"\'_\x8f\x93\f\xb9\x00\x00') r13 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$dupfd(r10, 0x0, r14) [ 494.749418] binder_alloc: 16341: binder_alloc_buf, no vma [ 494.755361] binder: 16341:16342 transaction failed 29189/-3, size 112-24 line 3137 [ 494.764165] binder: undelivered TRANSACTION_ERROR: 29189 [ 494.771470] binder_alloc: 16341: binder_alloc_buf, no vma [ 494.777256] binder: 16341:16342 transaction failed 29189/-3, size 112-24 line 3137 [ 494.786920] binder: undelivered TRANSACTION_ERROR: 29189 04:58:40 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) dup(r2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r5 = creat(0x0, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x297) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x800, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x1b4) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r8, 0x541d) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a0000000000000000000099fa669900000000000000000000000000000000000d000800e0020000b89c0fa2f2922b93a719968d48d8ee000000809ac1ec3d95c9a2af6fa7fe171ac34721f755b088c2a08594e34e879491dc92009f826a43c24c9f77b57b998a0f1c13d856458947ad58949107c4f162427d0ee72d9739fb0b5b848af139db"], 0x9e}}, 0x0) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00'}) r10 = socket$key(0xf, 0x3, 0x2) getsockname$packet(r10, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f669900000000000000"], 0x2e}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x39e) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000540)='\x00+\xa6\xf2\xb4t\x95\x87J\x00', 0x0, 0x0) ioctl$TIOCCONS(r11, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000340)={'team0\x00'}) socket$key(0xf, 0x3, 0x2) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r12, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000340)={'team0\x00'}) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, 0x0, 0x0) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, 0x0, 0x0) getsockname$packet(r14, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r15 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCCONS(r15, 0x541d) pipe(0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000480)=0x14) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@remote, @multicast1}, &(0x7f0000000280)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, 0x0, 0x810) r16 = socket$inet_udplite(0x2, 0x2, 0x88) r17 = memfd_create(&(0x7f0000000080)='#em3#/\x00', 0x0) fcntl$dupfd(r17, 0x0, r16) getsockopt$inet_pktinfo(r16, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @multicast2}, &(0x7f00000002c0)=0xc) r18 = socket(0x11, 0x800000003, 0x0) bind(r18, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r18, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) pipe(&(0x7f0000000000)) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000100)={0x1fe}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) fchdir(0xffffffffffffffff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:58:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 495.479735] binder: BINDER_SET_CONTEXT_MGR already set [ 495.485305] binder: 16358:16359 ioctl 40046207 0 returned -16 04:58:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 04:58:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='\x00etoarp\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pwritev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="0e1e2f4aa59a48c10ee6f67c6a6b64", 0xf}], 0x1, 0x4081806) sendfile(r0, r2, 0x0, 0x20020102000007) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xb4, 0x7, 0x3, 0x8, 0x4, 0x3, 0x0, 0x1b7, 0x40, 0x168, 0x9, 0x9, 0x38, 0x1, 0x7fff, 0x1000, 0xfffe}, [{0x3, 0x3, 0x7ff, 0x3, 0x1, 0x2909, 0x0, 0x7fffffff}, {0x7474e551, 0x7, 0xbb, 0x6, 0x3, 0x4, 0x20, 0x5}], "04797fc2d5bb5712df01594a345d963c183d7a95f8ee8c473a5059b160ca5d6173a15a4b5c81a02522eed9b1062a6f93580e1209f4b323734fa93aefd245c29eed34e6aca66fa05bccd944d2b489690e6a7182ae96e493539937f53e935e78cac45cd2e7b359963433fee76a9a635dc459e497a024712d9289dc9ff0028bb851eae1842c73aac2681722c96c2d9c77d83af9f53843103c", [[], [], [], []]}, 0x547) write(r5, &(0x7f00000001c0), 0xfffffef3) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r5, &(0x7f0000000280)=ANY=[], 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0x526987c9) r9 = openat$cgroup(r8, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) r10 = geteuid() r11 = eventfd2(0x0, 0x0) fcntl$getownex(r11, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgid(r12) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = eventfd2(0x0, 0x0) fcntl$getownex(r14, 0x10, &(0x7f0000000140)) fstat(r14, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r17, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001cc0)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r17, r15, 0x4, 0x10000, 0x9, 0xfffffffffffffffe, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x3}}, 0x29) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) r19 = eventfd2(0x0, 0x0) fcntl$getownex(r19, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgid(r20) sendmsg$netlink(r6, &(0x7f0000003fc0)={&(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003f40)=[{&(0x7f0000000e40)={0x11f0, 0x29, 0x204, 0x70bd28, 0x25dfdbff, "", [@generic="86cb801921e41e78201091e2591165227a3a8e0cbf11e8f59b04bf5d7a976c2eef192d24549fb5d87c57a2da5e1f715c381594bc1658aa78f63be825f895e1920a5f10c15fce7cdbca801674691be7c21bcae613300be3d516bdd46680d3dddf133e326559ef5b026b45452f6ba58ce6b48985bdde68ab18a86c8c50e9233a318660b9fe25f420479f24fcb8d8490c2a1b6f1271e8363dd2379a41d948e0286a7c4977d62546e59cba996ab37978e195e6e0318f3a0995dfebd6fbfc354a96d4", @generic="a931be45139c7d4ade86cf7a5e02333148e51d7d821eb59dffbb844fd0a361917ef5e52b51925a4149890d3b399eadc683dbbc2c4b9543bb13ce446263eac9c5dd127c106b5781", @typed={0x4, 0x18}, @generic="b0c92dc7aa0cb04cb528c5b99c097272c92359c3843f935eff6d098e6d6b629fd87f9059e40c31d4b5539db50af7b939c02ab7727d42998bac78673eb9244ac9a1292d6c2017196c2cd42ad307a6e914cbe0e5cd723b1903", @nested={0x107c, 0x72, [@generic="9060344b5b79367b8a1a02b6c1ad7f60526f01f5b1ecb13c5a97f9d55d8235ab80cb76ba6ff2895c5fc0104b4704b87480788e526b8948ba3545f588", @generic="16cec9cd8cd7ffda6562b830a8b0869f580145e36cdd8ec512df4a92bbde3cff993fbad41ae4a17c52b081062037631848a9b53b02b6f02277b42e31", @generic="415f261b22da392e9d25446d5eafe9b0451d9d5de00109ee4faf8ea78adcc4f04dafb45e72c4c2810ee385642349fc1ad43a948b462d4c3bd26ab1789d7fdac0680e1324653346002abe7c7fdb0a30c93270cead71d5a9e89e5e179fc92c822b5532040d1aa4cd5d86b7da34dcacfb3a928e9b52a778ece513c8a3aaa971467851fb6154472838bb1145375c0c25eabbc64175a6f4f162b323ae71c60227ae578e126bb17fc25580698d06daae6e3e786af7c64ab289ea7ad65e721c9576cb1be19787bfaaf3ac5be54b257b8b24f4e28522cb584f8a6b40aaf30dce458091d4c0d0df61ffe291d2af0cb203474b94284929b5aecc46021bdf4e894ac3df69188b82c4f32c1128fcd6be324e99e4c4bcb5d645064db21443c37c111a695be533461a7e5ba48a33c834634c0bf26863946aacb1e78fbba9dffe91023b0123048169a4ddf61dc522316724fd0bb9e608e7fba2acc0ebe90f032d7553bf3beed9742b965a97734ee725f809b5995b88f34c000a7a031e244b21f5d42432e5a5dac2e59f3ee707cf3da5811c3b1673ccca09fc918fc054b531c7287ca8d6348bb6439fd3734a5b478e18bd1b67aa862cdf21d5d1acf65ef82a943a8ed7d07cd79baa998211337786b4bd817c4886e8765b988d1cb18ba3c64f1916eab570072779d91f1683ffa4aa04a1bb350d1084072d11351340e057b0cf430f0aa4abd8a4cdc9d3c9f42b683c398c783e0f99950ae4218c0cfb5346989b71b60b0428d6d5dd00d284a0139325b1efa8253541c21ae1858b476061c88218f8da13aedfc7d1a5622ea9668602745d2631af13085b38861dc9135918f9d3b545a91c532f56feba4a4622becf9b2517ac2871e3b26f249f1e91c8f33b997c3d37d586b14075207841fbb468edc7e0a55a057a38477ce2bfaefc792a8514540b10103395d8954e8d33180fb6f5f39ab55b86a4fc83e16455e9b46d80e41f05302c76d5bb30d609583453d9dec69b2c56b14c14c3b47c77122d3934d4b8ab636bc8862427f2f82eeead93ef71f8b3dc81605e4e46c195f1e23f1a95bc78f0075d27502cfb0f38335ebc23a0c5bfa2ad3038d016e45219171d38c19a14a6b552b60febea5ba4106126c5b813cba646f2f381bddc868f4dcbb863239eddf09dfe655ce3b6f47ac153eea1566aa95f445a55c7058c17f52a5bf9ee8be35733cc05903c74baf9d6e8c451129f8e06862a21d08b04dc6aec141aba6f218c290b81af68db29398b4d0d5558e538102498c5cd45729a2292a3a9d9b4e3eead9cf7a871bfa4ec08b63a6a81632953da6f484a378672350d3e4fbe9d3689d5c5d0a2de029de2d1da643772bbd9807f0f05f433072a29362c6e16b9ca55583fcdddfceae74d4c857047a95a573af7cd781bdc88e909ede5c13a9bbec338ea3f22afc5ade5a4a9dd06257a4d4b3581138ee018bf7e1f1a43b8d7823c1754338dd09723b8cd426ac7a8e6612ab5c2b6bad2cd8b2c6a10388b3371431a6cf9b3e26a9e6f6c960b0a6b724c8eb6c6a4d879a69d829aa1a02191f0c67982ef6523b5964b000f139d65d1aa38f09af725ccb8800fc06f0591087a83548fe1cce5dd1e9ae24d1ec5938797090541c2f11a8df4c19fbc31339f10015f7b4d67eedae32d9972ed1bddc51f86480159754e3ce28d54339e6c0597f15300111173f19e2d3dadf3681c007d308f883d954d78e87dab94946cc7f6afc653b48cd45c11d96b49734a9f71713e00b0e76ce336320c510ca7bba4dc904253c7beb7c38b1a053771f8fd303093f91a207a9ad0e94bf651faf517a36063402a4ed98a07dfa335e9ef9472ff1df0ab96f0ffe9ad8b954ca80d6c96324f0f7e8e7f8a5d63d93ce3fbea8e8b79ef9832965db226697209198da25363514bedf76a59b234e17f9906bf6e351e8e89f8c9f04e8d00fface0ac89c47a56eeae404b6e7bb6fd5107b72fe667cc27c41225157cf3d62865f007929ef0ea40293f124750631d99520d7a543e2bd1b23dba968f82c6f5da3da15690304ed6f8b64771a5cbab9d3e2bb56e3dc8c6e58800a3fc420cab4dd6f9d6c4033ebc44331d8aec8b820dfa7451af07e8090ad4a0161b2fd2d900de019a29b4f7127b6e0c0f6db6e3d922428a15bdeb15faffa89f64169c352e5b7df92244ee435911e0404768b7062e275fc9586d1fd5cc16cb97f6a5fd461204b311fdc2b824b4f8f588a5074819e1c25e15a278e1ed8b75ea69811a9d5b03ffc634b7ba1334b074066a1362f9861758984de52daaf458b052191137ef97d4717e2c822db41b194d4e4ede0ca8130da925103d16011439595b9d0ebbf0aa131761182707ca6eeab93458542e235ea0b0651943d1eabb75088f5aadbf4b1db3c3b0ac5018b153cee4c8534cdf5bb821738d6e5c2c067a45c79ad707c9e5d67775e38ed823da3bf548d6a5f7063405bd9000dcb8c6bca222d99e9151e31d74238b123b3642ca94dccba990d149ba40d3397b2c6989049825abee5b28ed32d56a22249cff64f9cea24f32470c69ad8d882f6c8f6c13e21c810604495c48e5e796b665f416d0559d8060ab375eed55c499c691876d0e9c246d284295f9174649c9c82e424cd48433fa33318f46125cf022c2b689bfd1c04aa5a871379ba75c13a691f268373123fcee4ec8f57974771ae5aefb850c25639d0aadc04d6cceb83f030c92d39bd263a922a6f08eed1e397f2a9e74c5f164eac5597844ae48ec61babb53d6cf8c4ceb775ec86ce1a59bb6b57665f8922be91f71c1040256dd45a94b06ae738c1b3dd8903ec01d8886471554512e7235969053c0a2c26f9bb71d1bb1f893b865ccc0595b930c1ac7d0642a6ed741246449b19708bfae7de74b68d83c06c813b8cdbf1a35e6fba4a4a29993fe8107614f516ea1c29587d733ea09acba39d5056665311721d8c53922d449d467f5902ab6a41eb95fa75500c2538ebf2fc478c72bb12106afa0db355202b0fa1f6c0c5344ff38ea7f32a3d395a6e2478b4c9fbbd9cdae15195c86e8b99f52ae8b3b055b4ad55706ef12bae6be9b76ba891e99bff847c549179600356555b4e799016122344b7cc0ef1f0c0f72a88b793d7ef0d22b8004989a395fe358104172781253a1bbfc37404427b0e17d1895328b26f4927bc0e00438be0f52e0638659b6f52bbeb1a31d5112e99a5d2c4377f2286bb3469a3c60ff3d7ad71bc3cadb7bbc615eadfc37b67bce642267c7861c81dd3288ed757dfa0465ed8802cac6a620fab0943770e5d43a60fc81d3ab6d886f0a7365963a722baa970a6b2ccf391f0e694a39b1be2c22d339fa76568b05f1bdf7f307cc61f86eb2962a51e6d10b0ecf936840a530b4b6ba2b5b8e365d3f3585644290a853a8f9068dce65eadfff546fd0bab82e28edb0ca962061cf4401843a4442a0f9721b2bf4864fbef244acf13b5450b0202d07e4e9b740d8952f7d9bfeb16230a36f09d0b0ba23519c5584057c9b00357991fd404f3e42ab977f006d54190a05bbd8ec1f332f92efa55af190af1839227a9ea1237e0fe67e5dbeaf1bc55cc287fe5a8406c773b8da284b4a7df61cc6e07938fe272558b6be8563b02b95370f382d3949222ed997d0040c623dd1f7432a1a195e9c6bc669efdedf0f70f226a8242053adbd6479201a095af383dcc139e69a2ccbc5ec4c597a06e4ed54d007fc039f7e7e867d6646143d27f030609538176c151290777245a7383139e44bd65c7cf872f0cfeba127ff32d9f6d233076ca3dffac24abb9b14a598d5e8ab0ea9a5c01e945904d2a25b5a83a38dd5ec2fd46d569e90d48a9bdb508046d36c20ffcd18dbd24e0e938a93752a97df77bb6abdb675a3a7f34fe25df6e64237cb91c83bbb0f473f125aabc42a6536d1aef88f1e664f912ff20f46ea78ae40d1ac1aceb1f91ac163eb3b14101ce4b27397b5c7bee5bc4ad744f5e780c74cd1d7c3bb750d980bf93c97c15fb8991796a523a4a78ab0f329708966558a794d1da295c8f7ecd5a5daf963d52ad5bcd042666826e85267d5c370ffd04e137e464cd1e6ac47757f80d78cca036624753ed0bf69103265a9ffd635fa54e189addbc443710e921d258cea1016f664fa4771ffd859defb6a93ecde472a2fe822fbaba06166dda76c02de52256ce1c6064175d1f4f71458e3577f4bb72d3dcc18b1e589954acddf37a0ce4f0c436bb5ecc2218c54a2ff893f724990880939ee18c9d26acc65dcfefa66091e9dae811d4748d5e596a79b4c806ae4fcf80aa87b0d946f66ba0cf23a2f18d86bbc24795e04ddbd5a310d016a7fd22622a54da27beda54b614e714817f86254c61a87ff18381d1dd0d6535fbbaa862a08398cd6030b4f191704f93cafac4589e049a4b9f9452fd43ead52ad021a667346fd7773bba9337a805e2bc5e96f51c25aca377388283bc990cac8037228eeb77ffeb222b925aad8effb55a0206a92e348f963d4ebb28dba3e01146951bd373eeb877cdd6054d927816fcb80871f8ae69a9caba44f022b559f243d28168d072fa91811b93b400d266226c5fe115b82d6fed1359483e056d8d6b9f6e005f7a3b6e0df84b6b05c25f45b709f785b0638e5396074aa61ee4ba2c93c006d49a1da60cb68584a95c3df1dbe90a450410d9fff3d00caac04d59038fd3ca73cc7a785b6694047bf55af852391c6520cce835aa5753039d735f1183d2bd909db06ce6d06fcb969695d0f1e5f559c681c9a77bace6a1b94389a2e7085eac6fc895b15fcd6b9d358eaa372f470a5ebc8215ffb3428d731388c83d88de6ee1713f283ce2b9b999fc01ff450740ca154853d100b33e7f417c011da533c407e12a0fc2ad15ebc53d260b85e65ffab5cd3ca0c55276211384e5da6b21d251c8dea96b3d3eff44e56996cf9b7cd49772785d0859d960edfbb731b78ddb07fdde6cb37f763ba5b590bf826171d30bc1b1c47c888fd2b848ec6f7d6e9b0f7ce25cdb54e9ae3eef2162c648f5dcc5c99eb042f1aa7da4c802c8538491f51d738b111b5a5fd34998ceab66b3e97c5b5bb19cd480986736875d4c3acabfcac17d0117834c6dc4c41cceb2d7e6a27f0ffc4820a91b607d56cd78ba3ab3a87b0a5e504f6fd37b49d055bb6c774c30f452f9ed740f7b937b873ee6893dd4cb7ee812f4fa2b3ec33a0322157ce25d4b3792924ef345f5f2bebe623f1b6209ed857116e45e3f4b340e897363c2181edc41d2a6c5345774e4fa9705a3e05f88b59fe8e393e58ae81cc26bb9ba90eb0c2184fe697a57ab9af7f2324b14f188e0df522f397d941ef8843ad8c4e8ede6d95d49d88896ed93b6c5861f69da4536ecd12c9abeafb1c30b01a45346a6f1542d4373e8a1f50959835d6b96dd58db2d808de5ff7b2380f41573034e17b294497f184605efe9bd8d6b3b659b66f8abcecffc2781c8e91d3c4280f7d171e56b448625c59d20b2c8117ac21e28527054ba228cb163ba28dbf0affffa9afcca3f3fbf5d04a90c3a3959b4e79c13c0498b79220c7e5d6679c13e73380df3e2a58a9db9da26673a4c116f5bfbbb6fbd7978807fd09a592664fc93e3a65f958ec20ab208afce87671c3e14c114eb7a366a058b6b988f38daf571a4101a965a64614115de22fcbf2ffde2921d0e1c75be473da473c45f0ddcc85bc8dac334e4fc04aeed8ae01469700382dc72d994ee17443a59e7f7027d9c807807a389629c0b2f176b3272b77c95647cfe63d0641a846a2be72e8875463a6ad3b2b4c08c5aebc2c271fd2c0aca86fd9bddfc6f5c743c0379c5f0fcf35df"]}]}, 0x11f0}, {&(0x7f0000000340)={0x18, 0x29, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x87, @fd=r7}]}, 0x18}, {&(0x7f0000002040)=ANY=[@ANYBLOB="041800001f00040028bd7000fcdbdf25dc010c0008007900", @ANYRES32=r9, @ANYBLOB="fa4cee6aede215813bc96b784138f91039ae5063d1b0d14e47a83ad0ed0569d65938ad35b89c3c26b73d5149376c5444b86fb849f9eab7b27ac7b64691ed33c9bf8998a6f055c3a5762f7e7324d3cf0094750baf8db63b69fb4e39a9e93014053cfe186f794f5a22e219dc2d0a2bec814576b312a971b98fc3d7919602e5dd97f55103210e7cf9eb7b2e3fb954c3c1012cfea724a88904e75284bc32194561b069416394346048092304f01c9831101abfd6a10cee3dd14a282c58db97875b7ead0f2522fdfb8e3fb1afaca3cef2637980ae1c66edf26abef99f5245555d4a461a76543e11de1eeaa25858fbc267b3ae88b8fe023a8d25d0f07a1047d558609047307933bacc4bf331fec4544418cc30ffdb9abfb98083bb1672b086e910ac8fa755e6757d1e1a1af584658da4462574519eb17e61cd785d95cf0c60d5684f4d50b52a64f357c66527606b35baaa5d96da95b7a7cf5bc5c9476c7207286866dda4e7d5966848735e2fa7467b0daa5a89591868c71ce1dcb05903e7973fa14a0b22293d9355f287fc4278cabe35e42ecdac4f6c47c1c62c38330521c812b4c4f8410f476df9a0d9ddc608001700", @ANYRES32=r10, @ANYBLOB='\b\x00\"\x00', @ANYRES32=r12, @ANYBLOB="0c004a00544950430000000008001b00", @ANYRES32=r13, @ANYBLOB="00003bf2b64e03fcdbe4cc2409f25912f89b4c11d3ff4758aaf3c5b2f66eed6f4d13e159e34486051cd6c72608f7e38721f035bb07d439d581a63227a404008f0008001d00", @ANYRES32=0x0, @ANYBLOB="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"], 0x1804}, {&(0x7f0000003880)={0x6ac, 0x1e, 0x3a99cd024491cc74, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x1f, @ipv4=@broadcast}, @nested={0x170, 0x2a, [@typed={0x14, 0x24, @ipv6=@loopback}, @generic="a00ea5e6065670af1a0e3fe5ae236bd7fcb230bceb9acdeac2c4a900a58317fb4103e5f5a396f7f64899d906f1edf749b55513f4277e5b3758ef05ad05cc4b96e35df96cdca33450304c82", @typed={0x14, 0x2e, @ipv6=@mcast1}, @generic="8ae4e51ae54ad7257eaea068670e2969fa30c580dbab43d7aa02e4d346ab85054bce806bc887550534fa4c41801a494182e401a4e2fb7b6ddf9d201959c2f2ede7e2b8eca016dd8657ae817f402e4f78f4d2d008fd31b336e5afb595555e1a405d44ae5459bce2586df3666b7fd8490c07969cc00d82738fcf57e0a3eee718a588448a6b16c01f5369467d78b4795128247e508785cb8b84961b4a5ae96abbc068b81cec31c42625badb", @generic="988cdcd4d50621a0052a8756edc5d67d7d8c08b3637c4649cc8c4250b5650605019d9e9e63fc2729f36020e12cd60babcbffae488573275339055ab0", @typed={0x8, 0x6c, @uid=r17}, @typed={0x8, 0x91, @pid=r18}]}, @generic="68e4fbb384a38a4ca4681b", @nested={0x1c, 0x58, [@typed={0x4, 0x4}, @typed={0x14, 0x65, @ipv6=@ipv4={[], [], @loopback}}]}, @nested={0xec, 0x4, [@typed={0x14, 0x6c, @ipv6=@local}, @generic="0c95d84f27e69e1f9aed0db47a3da797afa75524f02422f20c83e241e37751972828856257106ba3121906808034632a9d6429c184c8e8a945bf052f199ecda4b6d80c66786449b3a5ef81755e1694cba21581a192ad69557a37c9b29faa9154be33b84dbe80d3a6408e3738b4321469966de560f3c472e6c26d3d27f01ad22d55b8ae93fff2bd1b02115d2af26f91f87f89f2e2e2243fde9f4283a4d99e2c6c660cbef3cc8e02d0f094c8b7ec299a3408759452abef71622a8b417d33b7a44df9e6ac099ef9b9f881cbee647ea089f2f1e5219a"]}, @nested={0x308, 0x25, [@typed={0x14, 0x95, @ipv6=@ipv4={[], [], @remote}}, @generic="45bb3c49ed146de9beb0e10fd2fcbf82a860de9ed72e320e04de57c62b443cdc9e0ddae363710282cde8607d83e6ea1023dc47a0fa277d58ed695903bd4625a897bbc91560ce199bcc6119c1d8c82091254bfbbd71cd63fb501fc2f2b84c814fcc341c69d5987d972ceac3b90319229cc432244a5605b0eeb8715732a4d61296e8878073b2", @generic="58f4457669a64b984c0528b0424cabb8c45ba0e44e66c385c029f1f74b02f9dbdb36ccbf13f67670b1d9fecf9738f674ed878b87550f36f0b29fcfdeddf8fca8c0030c685de15353b2f2dc3dad59bf548e5265a0d2f5a992e867aef6bda0115670c95ee8bbced507642d75c3e4cb3925d164607b4f6eaa9e42f5e309c8747b250a1887218a2c337e19d16024f8a7f83a3e70d11343855c5ff1e0a80211f8c4d1e65399632f0f3ff06142982687cb8d1ce069ce5af102e6f4053c9cac4d272513bc3cd37860413549c277c9e95ab9b033ba6edc709028bc0d0107bc04f9ce94e64884a9726ea312b25ba140b24125bf64364b85", @generic="935f435ce1cb9f7af6d510ab7ddb15e5ba8ae880afa8f9154d335ffc075e7dea277ffc76a28cd904d074a06ea05fe97e80615364e0c903b17a5e258fdbbb4189548d057c7c135038cba3de4202c25107aee181065e03972ab77c7b66449a9f969585671b884a220d4c84c77515d2ddfae5c46416bc66a550a003138bcc7046e5c044985cacffb6c6ae5e64b003a2fef44748cbaf5cefc7bc410928db081ce941195d184dd9d5b84a53e7aba09b5c54c1b813033fd98fae", @generic="8aded56552938de07954337d4822518b5dea9b8e3e2d5fab7ab2e77f9d28f99d572a05720642c67a04ffc1b7fec8a36ee49c7eae6d50aa646de0a693332bdd98c49f4bd4b6ab80b1c03684a42443a78d4c96c90897b1c8b73c8afcdbf21dd3e43e6aae3b213a8e5145b1950f7713b11a9579bedf279e7c4dcbf734145a3dff2194636059ac6bcd4c9670ceb6628149a649e849ded4632619bf29c6d219012783153575a699639d9768017a11faba1d1071c0ddad41eb2ee28a8fcccb97ce"]}, @nested={0x108, 0x50, [@generic="550d08689e2c7c3ae04be066bc56711e972c4438ac3b9be6f03858b134e4fae89b8e39e8c364010c354365fd3c94cc4ff58a872e779fe23a10416e52fe53a17bb1369730bf700688e9c79033279af20def181848824823efbd65eafde9cca2a05ebbb0f3184d03b5df4b909f3ac1e04c6423ba5ff602e1dfb5afc134c9af9c4516e2b78cf7fcc3ec5d027ae4f69be1f3585c0c6fb16087f61bf0bb0b7da6cef3d9374a031730902111e20f7c568351c90f9befc927466b8971e94e08e3ab7e5487fc2de2ee2347a53dd5cffcbf1d29eed7220fdb21e57ff2ce99109668c36975a1f5664d0fd6382e92108a8c53ed", @typed={0x14, 0x20, @ipv6=@mcast2}]}]}, 0x6ac}, {&(0x7f0000000640)={0xb0, 0x2e, 0x0, 0x70bd25, 0x25dfdbfe, "", [@nested={0x98, 0x78, [@generic="7d035019dee8b2896060166601479e2563a040df6851d0e3fb93c1fce7d840ad957afc66574fe31e6837c2b8b73718dbe8d0c3849254590d76f36c334fbaeecedff7e1acd3f35f63df45329751fc4d836c352176dfbefb35d1b898da2d2639db04b2ddae827a120483edddb2dc1ea590d223b687a2c2c3550e72d61536", @typed={0x8, 0x2a, @pid=r20}, @typed={0x8, 0x42, @fd=r1}, @typed={0x4, 0x72}]}, @typed={0x8, 0x76, @u32=0x9}]}, 0xb0}], 0x5, &(0x7f00000005c0), 0x0, 0x8004}, 0x80) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) fcntl$setstatus(r0, 0x4, 0x2800) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r21, &(0x7f0000000700)=""/250, 0xffffffc9) pipe(&(0x7f0000000540)={0xffffffffffffffff}) r23 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r22, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r23, 0x800, 0x70bd28, 0x7, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4) sendmsg$TIPC_CMD_SET_NETID(r21, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r23, 0x910, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x7fff}}, ["", ""]}, 0x24}}, 0x20000000) 04:58:41 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 496.142911] binder: BINDER_SET_CONTEXT_MGR already set [ 496.149524] binder: 16369:16371 ioctl 40046207 0 returned -16 04:58:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 04:58:42 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) dup(r2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r5 = creat(0x0, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x297) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x800, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x1b4) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r8, 0x541d) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a0000000000000000000099fa669900000000000000000000000000000000000d000800e0020000b89c0fa2f2922b93a719968d48d8ee000000809ac1ec3d95c9a2af6fa7fe171ac34721f755b088c2a08594e34e879491dc92009f826a43c24c9f77b57b998a0f1c13d856458947ad58949107c4f162427d0ee72d9739fb0b5b848af139db"], 0x9e}}, 0x0) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00'}) r10 = socket$key(0xf, 0x3, 0x2) getsockname$packet(r10, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f669900000000000000"], 0x2e}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x39e) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000540)='\x00+\xa6\xf2\xb4t\x95\x87J\x00', 0x0, 0x0) ioctl$TIOCCONS(r11, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000340)={'team0\x00'}) socket$key(0xf, 0x3, 0x2) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r12, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000340)={'team0\x00'}) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, 0x0, 0x0) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, 0x0, 0x0) getsockname$packet(r14, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r15 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCCONS(r15, 0x541d) pipe(0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000480)=0x14) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@remote, @multicast1}, &(0x7f0000000280)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, 0x0, 0x810) r16 = socket$inet_udplite(0x2, 0x2, 0x88) r17 = memfd_create(&(0x7f0000000080)='#em3#/\x00', 0x0) fcntl$dupfd(r17, 0x0, r16) getsockopt$inet_pktinfo(r16, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @multicast2}, &(0x7f00000002c0)=0xc) r18 = socket(0x11, 0x800000003, 0x0) bind(r18, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r18, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) pipe(&(0x7f0000000000)) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000100)={0x1fe}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) fchdir(0xffffffffffffffff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:58:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 496.735350] binder: BINDER_SET_CONTEXT_MGR already set [ 496.743204] binder: 16383:16385 ioctl 40046207 0 returned -16 04:58:42 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='V./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fcntl$dupfd(r2, 0x0, r3) fchdir(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) open(0x0, 0x141042, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) syz_open_dev$mice(0x0, 0x0, 0x86cc6e9a4ca3192) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) eventfd(0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) readv(0xffffffffffffffff, 0x0, 0x0) 04:58:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x4e22, @multicast2}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001f0, 0x3004c014) 04:58:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x4, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x78) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0xfc64) recvmsg(r2, &(0x7f0000000380)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000001580)=""/146, 0x92}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendto$inet6(r4, &(0x7f00000002c0)="2059ae6e6dbba3a79ffe", 0xfffffffffffffe56, 0x0, 0x0, 0x0) 04:58:42 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8001) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) unlinkat(r2, &(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000e6ff0000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a900"/88]) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, 0x0, 0x0) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x103042, 0x0) pipe(&(0x7f0000000340)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffe14) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f00000002c0)={0x77, 0xdf, [0x4, 0x0, 0x7f, 0x1, 0x8001], 0xc88}) close(0xffffffffffffffff) 04:58:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:58:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 497.572964] binder: BINDER_SET_CONTEXT_MGR already set [ 497.578478] binder: 16417:16418 ioctl 40046207 0 returned -16 04:58:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8001) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) unlinkat(r2, &(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000e6ff0000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a900"/88]) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, 0x0, 0x0) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x103042, 0x0) pipe(&(0x7f0000000340)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffe14) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f00000002c0)={0x77, 0xdf, [0x4, 0x0, 0x7f, 0x1, 0x8001], 0xc88}) close(0xffffffffffffffff) 04:58:44 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x200000, 0x0) write$UHID_INPUT(r1, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000280)={0x0, r1, 0x91, 0x0, 0x0, 0x5}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000240), 0x2008000fffffffe) syz_genetlink_get_family_id$tipc2(0x0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)=ANY=[@ANYBLOB='\t\x00'/34]) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x808}, 0xc, 0x0}, 0x20000004) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x8000) r3 = syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x14) setxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000400)='TRUE', 0x4, 0x2) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = timerfd_create(0x0, 0x0) timerfd_settime(r9, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f00000006c0)) dup3(r9, r8, 0x80000) r10 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r10) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r10, 0x0) fcntl$setstatus(r10, 0x4, 0x0) readv(r10, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) r11 = fcntl$getown(r3, 0x9) write$cgroup_pid(r6, &(0x7f0000000100)=r11, 0x12) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r13 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r13, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000080), 0x10) sendto$inet6(r13, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r13, &(0x7f00000092c0), 0x4ff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) 04:58:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$cont(0x7, r2, 0x0, 0x0) 04:58:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 04:58:44 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 499.179674] binder: BINDER_SET_CONTEXT_MGR already set [ 499.185326] binder: 16441:16442 ioctl 40046207 0 returned -16 04:58:45 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) fcntl$setstatus(r2, 0x4, 0x0) readv(r2, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000080)=0x401) fchdir(r1) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) inotify_init() fcntl$setstatus(r3, 0x4, 0x6100) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f0000000140)) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r6, 0x0, 0x8000fffffffe) sendfile(r3, r6, 0x0, 0xa5cc554) 04:58:45 executing program 1: clone(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = syz_open_procfs(0x0, 0x0) ppoll(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000008) ioctl$TIOCNOTTY(r0, 0x5422) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, 0x0, 0x80000001, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) getpeername$inet6(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0xa, 0x0, 0x100, 0x0, 0x17, 0x8, 0x0, 0x0, 0x3, 0x0, 0x2, 0x2}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x16d2) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r5, 0x0, 0xfffffffffffffffc}) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r8 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x16d2) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000100)={0x0, r9, 0x0, 0xfffffffffffffffc}) fallocate(r9, 0x10, 0x4, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x0, 0xfffffffffffffffc}) r10 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r11 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x16d2) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000100)={0x0, r11, 0x0, 0xfffffffffffffffc}) syz_open_pts(r1, 0x80100) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2}) syz_open_pts(r12, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r13, 0x40045431, &(0x7f00003b9fdc)) r14 = open(&(0x7f0000000140)='./bus\x00', 0x100, 0x785089d427f3c4ea) r15 = creat(0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80) fallocate(r16, 0x0, 0x3, 0x16d8) ioctl$EXT4_IOC_MOVE_EXT(r14, 0xc028660f, &(0x7f0000000100)={0x0, r15, 0x0, 0xfffffffffffffffc}) 04:58:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:58:46 executing program 2: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000147) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x2797ef3f}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) select(0x40, &(0x7f0000000040)={0x1f, 0x6, 0x0, 0x0, 0x9265, 0x3f}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800, 0x3f, 0x0, 0x9}, 0xfffffffffffffffd, &(0x7f0000000180)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='comm\x00') pselect6(0x19c, &(0x7f00000001c0)={0xfffffffffffffffc, 0x3, 0x5, 0x5, 0x8, 0x100000000, 0x10001, 0x401}, &(0x7f00000002c0)={0x3, 0x3, 0x5, 0x40000000, 0x0, 0x2, 0x0, 0x6}, &(0x7f0000000300)={0x0, 0x2004, 0x7fff, 0x0, 0x1, 0x40, 0xc03e, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={0x6740}, 0x8}) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) r5 = dup3(r4, r3, 0x0) r6 = dup3(r4, 0xffffffffffffffff, 0x1c0000) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) getsockopt$packet_int(r6, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000200)=0x4) r7 = socket$inet6(0xa, 0x2, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') pread64(r8, &(0x7f00000006c0)=""/4096, 0x1000, 0x6) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0x526987c9) inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000680)={0x0, 0x0, 0x10000, 0x8001}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) r10 = inotify_add_watch(r5, 0x0, 0x1) inotify_rm_watch(0xffffffffffffffff, r10) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) [ 500.589408] binder: BINDER_SET_CONTEXT_MGR already set [ 500.595487] binder: 16463:16464 ioctl 40046207 0 returned -16 04:58:46 executing program 1: clone(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = syz_open_procfs(0x0, 0x0) ppoll(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000008) ioctl$TIOCNOTTY(r0, 0x5422) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, 0x0, 0x80000001, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) getpeername$inet6(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0xa, 0x0, 0x100, 0x0, 0x17, 0x8, 0x0, 0x0, 0x3, 0x0, 0x2, 0x2}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x16d2) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r5, 0x0, 0xfffffffffffffffc}) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r8 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x16d2) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000100)={0x0, r9, 0x0, 0xfffffffffffffffc}) fallocate(r9, 0x10, 0x4, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x0, 0xfffffffffffffffc}) r10 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r11 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x16d2) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000100)={0x0, r11, 0x0, 0xfffffffffffffffc}) syz_open_pts(r1, 0x80100) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2}) syz_open_pts(r12, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r13, 0x40045431, &(0x7f00003b9fdc)) r14 = open(&(0x7f0000000140)='./bus\x00', 0x100, 0x785089d427f3c4ea) r15 = creat(0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80) fallocate(r16, 0x0, 0x3, 0x16d8) ioctl$EXT4_IOC_MOVE_EXT(r14, 0xc028660f, &(0x7f0000000100)={0x0, r15, 0x0, 0xfffffffffffffffc}) 04:58:46 executing program 1: clone(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = syz_open_procfs(0x0, 0x0) ppoll(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000008) ioctl$TIOCNOTTY(r0, 0x5422) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, 0x0, 0x80000001, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) getpeername$inet6(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0xa, 0x0, 0x100, 0x0, 0x17, 0x8, 0x0, 0x0, 0x3, 0x0, 0x2, 0x2}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x16d2) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r5, 0x0, 0xfffffffffffffffc}) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r8 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x16d2) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000100)={0x0, r9, 0x0, 0xfffffffffffffffc}) fallocate(r9, 0x10, 0x4, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x0, 0xfffffffffffffffc}) r10 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r11 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x16d2) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000100)={0x0, r11, 0x0, 0xfffffffffffffffc}) syz_open_pts(r1, 0x80100) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2}) syz_open_pts(r12, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r13, 0x40045431, &(0x7f00003b9fdc)) r14 = open(&(0x7f0000000140)='./bus\x00', 0x100, 0x785089d427f3c4ea) r15 = creat(0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80) fallocate(r16, 0x0, 0x3, 0x16d8) ioctl$EXT4_IOC_MOVE_EXT(r14, 0xc028660f, &(0x7f0000000100)={0x0, r15, 0x0, 0xfffffffffffffffc}) 04:58:46 executing program 1: clone(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = syz_open_procfs(0x0, 0x0) ppoll(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000008) ioctl$TIOCNOTTY(r0, 0x5422) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, 0x0, 0x80000001, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) getpeername$inet6(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0xa, 0x0, 0x100, 0x0, 0x17, 0x8, 0x0, 0x0, 0x3, 0x0, 0x2, 0x2}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x16d2) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r5, 0x0, 0xfffffffffffffffc}) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r8 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x16d2) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000100)={0x0, r9, 0x0, 0xfffffffffffffffc}) fallocate(r9, 0x10, 0x4, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x0, 0xfffffffffffffffc}) r10 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r11 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x16d2) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000100)={0x0, r11, 0x0, 0xfffffffffffffffc}) syz_open_pts(r1, 0x80100) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2}) syz_open_pts(r12, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r13, 0x40045431, &(0x7f00003b9fdc)) r14 = open(&(0x7f0000000140)='./bus\x00', 0x100, 0x785089d427f3c4ea) r15 = creat(0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80) fallocate(r16, 0x0, 0x3, 0x16d8) ioctl$EXT4_IOC_MOVE_EXT(r14, 0xc028660f, &(0x7f0000000100)={0x0, r15, 0x0, 0xfffffffffffffffc}) 04:58:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:58:46 executing program 2: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000147) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x2797ef3f}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) select(0x40, &(0x7f0000000040)={0x1f, 0x6, 0x0, 0x0, 0x9265, 0x3f}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800, 0x3f, 0x0, 0x9}, 0xfffffffffffffffd, &(0x7f0000000180)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='comm\x00') pselect6(0x19c, &(0x7f00000001c0)={0xfffffffffffffffc, 0x3, 0x5, 0x5, 0x8, 0x100000000, 0x10001, 0x401}, &(0x7f00000002c0)={0x3, 0x3, 0x5, 0x40000000, 0x0, 0x2, 0x0, 0x6}, &(0x7f0000000300)={0x0, 0x2004, 0x7fff, 0x0, 0x1, 0x40, 0xc03e, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={0x6740}, 0x8}) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) r5 = dup3(r4, r3, 0x0) r6 = dup3(r4, 0xffffffffffffffff, 0x1c0000) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) getsockopt$packet_int(r6, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000200)=0x4) r7 = socket$inet6(0xa, 0x2, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') pread64(r8, &(0x7f00000006c0)=""/4096, 0x1000, 0x6) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0x526987c9) inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000680)={0x0, 0x0, 0x10000, 0x8001}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) r10 = inotify_add_watch(r5, 0x0, 0x1) inotify_rm_watch(0xffffffffffffffff, r10) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) [ 501.465605] binder: BINDER_SET_CONTEXT_MGR already set [ 501.473089] binder: 16501:16505 ioctl 40046207 0 returned -16 04:58:47 executing program 1: clone(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = syz_open_procfs(0x0, 0x0) ppoll(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000008) ioctl$TIOCNOTTY(r0, 0x5422) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, 0x0, 0x80000001, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) getpeername$inet6(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0xa, 0x0, 0x100, 0x0, 0x17, 0x8, 0x0, 0x0, 0x3, 0x0, 0x2, 0x2}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x16d2) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r5, 0x0, 0xfffffffffffffffc}) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r8 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x16d2) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000100)={0x0, r9, 0x0, 0xfffffffffffffffc}) fallocate(r9, 0x10, 0x4, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x0, 0xfffffffffffffffc}) r10 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r11 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x16d2) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000100)={0x0, r11, 0x0, 0xfffffffffffffffc}) syz_open_pts(r1, 0x80100) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2}) syz_open_pts(r12, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r13, 0x40045431, &(0x7f00003b9fdc)) r14 = open(&(0x7f0000000140)='./bus\x00', 0x100, 0x785089d427f3c4ea) r15 = creat(0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80) fallocate(r16, 0x0, 0x3, 0x16d8) ioctl$EXT4_IOC_MOVE_EXT(r14, 0xc028660f, &(0x7f0000000100)={0x0, r15, 0x0, 0xfffffffffffffffc}) 04:58:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 04:58:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$cont(0x7, r2, 0x0, 0x0) 04:58:47 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 502.194464] binder: BINDER_SET_CONTEXT_MGR already set [ 502.200430] binder: 16521:16523 ioctl 40046207 0 returned -16 04:58:47 executing program 2: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000147) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x2797ef3f}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) select(0x40, &(0x7f0000000040)={0x1f, 0x6, 0x0, 0x0, 0x9265, 0x3f}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800, 0x3f, 0x0, 0x9}, 0xfffffffffffffffd, &(0x7f0000000180)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='comm\x00') pselect6(0x19c, &(0x7f00000001c0)={0xfffffffffffffffc, 0x3, 0x5, 0x5, 0x8, 0x100000000, 0x10001, 0x401}, &(0x7f00000002c0)={0x3, 0x3, 0x5, 0x40000000, 0x0, 0x2, 0x0, 0x6}, &(0x7f0000000300)={0x0, 0x2004, 0x7fff, 0x0, 0x1, 0x40, 0xc03e, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={0x6740}, 0x8}) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) r5 = dup3(r4, r3, 0x0) r6 = dup3(r4, 0xffffffffffffffff, 0x1c0000) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) getsockopt$packet_int(r6, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000200)=0x4) r7 = socket$inet6(0xa, 0x2, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') pread64(r8, &(0x7f00000006c0)=""/4096, 0x1000, 0x6) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0x526987c9) inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000680)={0x0, 0x0, 0x10000, 0x8001}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) r10 = inotify_add_watch(r5, 0x0, 0x1) inotify_rm_watch(0xffffffffffffffff, r10) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) 04:58:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 502.303380] binder: BINDER_SET_CONTEXT_MGR already set [ 502.311026] binder: 16533:16534 ioctl 40046207 0 returned -16 04:58:48 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 502.490634] binder: BINDER_SET_CONTEXT_MGR already set [ 502.496332] binder: 16541:16542 ioctl 40046207 0 returned -16 04:58:48 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 04:58:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000041c0)=[{{&(0x7f0000000000)={0x2, 0x4a21, @remote}, 0x10, 0x0}}, {{&(0x7f0000000700)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000007070000890804ac1414bb00"], 0x18}}], 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000080)={0x6, 'veth1\x00', {0x9}, 0x21d2}) 04:58:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r2, 0x208200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f00000006c0)) dup3(r8, r7, 0x80000) setsockopt(r7, 0x3, 0x8, &(0x7f0000000080)="70d0d1bf2cdfd3a6", 0x8) r9 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6100) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000000c0)={0x0, r6, 0x1, 0x85, 0x9}) 04:58:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r1, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BLKRAGET(r3, 0x127c, &(0x7f0000000180)) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 04:58:48 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004800, &(0x7f0000000240)={0x2, 0x4f23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 04:58:48 executing program 2: openat$keychord(0xffffffffffffff9c, &(0x7f00000003c0)='-dev/keychord\x00', 0x40c000, 0x0) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000180)=[{0x0, 0x2af}, {0x0}, {0x0}], 0x3}, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7f2, &(0x7f0000000380)) write(r3, &(0x7f00000001c0), 0xfffffef3) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0207000000d4c6c3bc799dd222a748844f02020000000000200046370800af296fc06065478d7a084c6f653c10d01bbfb4c70aa8ab86379e5e008000000000000086d7830000000000000000491921d0a4060000009a11d7debafa974ec5a9e4fb24a47c99a1406ad49d7f3d3066e90c4c8c418f445e000000070000c7540597506bf07c678030060000d098b29dfc007661058fbb167149000010000000000790887032d7a05b5562f87617783ebcbc3c74aa479bac6ef7367cf7c2288f4df22543790f8fc30571350a2c246607383fe66bd486265e108871dc10bd87764f0fcef438121b1f4b2d0cf209022765b923c63618b90bc087a7ece74b66a958443192aae0751093d521ff2cdfa9a7218987054e877f587f3d7f20f05ed32b8d80cfd2ddb1aae239290c02b26b4dab8b125b552d85ab5cc9b036d0c329d705b4c8a1366b3447049611667d9fe94b874b1e0bf5c33275561afb5bbdd4f03314f264a470af4d28aa015289d980831878091dd4024456760a0765d0dad16f1a9b71e1b563457e0a8110e3d8d71bc65bbf7e24a9d28e197fcfce7ee1c8eb0478a5f1bd4790cb3b88"], 0x1, 0x0) read(r2, &(0x7f0000000200)=""/250, 0xfffffe8a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r4, &(0x7f0000000700)=""/250, 0xffffffc9) write$binfmt_elf64(r4, 0x0, 0xffffffffffffff4b) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(0x0, 0x10) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000080)=0x7042) sync_file_range(0xffffffffffffffff, 0x0, 0x2, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='\xe7\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) 04:58:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) tkill(r1, 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 04:58:50 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) rt_sigqueueinfo(r0, 0x9, &(0x7f0000000440)={0x24, 0x3c380, 0x80000001}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendmsg(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@ethernet, 0xffffffffffffff22, 0x0}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000100)='posix_acl_access\x00', &(0x7f0000000140)='pagemap\x00', &(0x7f0000000180)='pagemap\x00'], &(0x7f00000003c0)=[&(0x7f0000000200)='pagemap\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='#\x00', &(0x7f00000002c0)='pagemap\x00', &(0x7f0000000300)='pagemap\x00', &(0x7f0000000340)=':', &(0x7f0000000380)=']wlan0cpuset$\x00'], 0x1000) 04:58:50 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:50 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:58:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x20) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20008088) write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0x8db9) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000000)=ANY=[@ANYRES32], 0x2ca) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x4}) sendfile(r3, r4, 0x0, 0x8000fffffffe) pipe(0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240), 0xc, 0x0}, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 04:58:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$cont(0x7, r2, 0x0, 0x0) [ 505.214296] binder: BINDER_SET_CONTEXT_MGR already set [ 505.225956] binder: BINDER_SET_CONTEXT_MGR already set [ 505.231848] binder: 16582:16586 ioctl 40046207 0 returned -16 [ 505.255645] binder: 16589:16591 ioctl 40046207 0 returned -16 04:58:50 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) rt_sigqueueinfo(r0, 0x9, &(0x7f0000000440)={0x24, 0x3c380, 0x80000001}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendmsg(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@ethernet, 0xffffffffffffff22, 0x0}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000100)='posix_acl_access\x00', &(0x7f0000000140)='pagemap\x00', &(0x7f0000000180)='pagemap\x00'], &(0x7f00000003c0)=[&(0x7f0000000200)='pagemap\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='#\x00', &(0x7f00000002c0)='pagemap\x00', &(0x7f0000000300)='pagemap\x00', &(0x7f0000000340)=':', &(0x7f0000000380)=']wlan0cpuset$\x00'], 0x1000) 04:58:50 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 505.421817] binder: BINDER_SET_CONTEXT_MGR already set [ 505.427838] binder: 16612:16613 ioctl 40046207 0 returned -16 04:58:51 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)}, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) llistxattr(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)=""/133, 0x85) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000340)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 04:58:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 505.551274] binder: BINDER_SET_CONTEXT_MGR already set [ 505.557276] binder: 16619:16620 ioctl 40046207 0 returned -16 04:58:51 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:51 executing program 2: r0 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r4, 0x8004700d, 0x0) geteuid() request_key(&(0x7f0000000080)='id_legacy\x00', 0x0, &(0x7f00000001c0)='\x00', 0xfffffffffffffffb) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x1000002a5) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = dup(r5) write$P9_RREMOVE(r6, &(0x7f0000000200)={0x7}, 0x7) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000180)='./file0\x00', 0x28) getsockopt$inet_mreqn(r7, 0x0, 0x0, &(0x7f0000000080)={@broadcast, @dev}, &(0x7f00000000c0)=0xc) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400972a7646714f4c584bc2883542450000", @ANYRES16=r8, @ANYBLOB="01002dbd7000fddbdf250100000008000a004e22000008000600000001ff"], 0x24}, 0x1, 0x0, 0x0, 0x49091}, 0x4000) readlinkat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)=""/177, 0xb1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000340)='./file0\x00', 0x115240, 0x80) r9 = open$dir(&(0x7f0000001280)='./file0\x00', 0x105000, 0x0) openat(r9, &(0x7f0000000000)='./file0\x00', 0x2042, 0x0) io_setup(0x9, &(0x7f0000000440)) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000031c0)=""/4096) 04:58:53 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) tkill(r1, 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 04:58:53 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@ipv4={[], [], @local}, @remote, @dev, 0x0, 0x280}) r0 = socket$inet(0x10, 0x3, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x4cd38bb531d7ae15) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x100) 04:58:53 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r0, 0x0, 0x213, 0x0, 0x0, 0x0) close(r0) sendto$inet6(r0, &(0x7f0000000100)="2afdad38c02bcb2f9672896187e85ebd4848af0e725ea20ead354cff56935895d45307d65245f5b919c79b9edf6539e8c8b55a59767c3922d74df0bac8a7825da7b75387b35ab439d07b708a5e7109be97041b3a46509e32909c889e6a2ced559318b24c9b99a63fe22fe9e80cde29f33820635b5c5c7a9c0b9162a54f0eaff7ca2a46dcec7809a5cf", 0x89, 0x2f46db0439b91642, &(0x7f0000000000)={0xa, 0x4e22, 0x59d, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3ff}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:58:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:58:53 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 508.240959] binder: BINDER_SET_CONTEXT_MGR already set [ 508.257402] binder: 16649:16653 ioctl 40046207 0 returned -16 [ 508.264686] binder: BINDER_SET_CONTEXT_MGR already set [ 508.270340] binder: 16654:16659 ioctl 40046207 0 returned -16 04:58:53 executing program 1: socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/241, 0xf1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xbc\xc8\xf3\xe4G`\"\x8b\xd2\xed{E\xbb\xf8', 0x200002, 0x0) write$FUSE_POLL(r1, &(0x7f0000000040)={0x18, 0x0, 0x1, {0x8008001}}, 0x18) fchdir(0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(0x0, 0x3623d36479b03943, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x20, 0x0, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000000)=0x7) r3 = gettid() clone(0x4000a000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') socket$netlink(0x10, 0x3, 0x8) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r4, 0x200004) syz_open_dev$char_usb(0xc, 0xb4, 0x81) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = timerfd_create(0x0, 0x0) socket(0x2, 0x3, 0x80) timerfd_settime(r7, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f00000006c0)) dup3(r7, r6, 0x80000) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000080)=ANY=[]}, 0x1, 0x0, 0x0, 0x35}, 0x4) wait4(r3, 0x0, 0x2, 0x0) 04:58:54 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:54 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r0, 0x0, 0x213, 0x0, 0x0, 0x0) close(r0) sendto$inet6(r0, &(0x7f0000000100)="2afdad38c02bcb2f9672896187e85ebd4848af0e725ea20ead354cff56935895d45307d65245f5b919c79b9edf6539e8c8b55a59767c3922d74df0bac8a7825da7b75387b35ab439d07b708a5e7109be97041b3a46509e32909c889e6a2ced559318b24c9b99a63fe22fe9e80cde29f33820635b5c5c7a9c0b9162a54f0eaff7ca2a46dcec7809a5cf", 0x89, 0x2f46db0439b91642, &(0x7f0000000000)={0xa, 0x4e22, 0x59d, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3ff}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:58:54 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:54 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) tkill(r1, 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 04:58:56 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0xa2, 0x8, @loopback}, 0x1c) write(r0, &(0x7f0000000000)='g', 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 04:58:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r0, 0x0, 0x213, 0x0, 0x0, 0x0) close(r0) sendto$inet6(r0, &(0x7f0000000100)="2afdad38c02bcb2f9672896187e85ebd4848af0e725ea20ead354cff56935895d45307d65245f5b919c79b9edf6539e8c8b55a59767c3922d74df0bac8a7825da7b75387b35ab439d07b708a5e7109be97041b3a46509e32909c889e6a2ced559318b24c9b99a63fe22fe9e80cde29f33820635b5c5c7a9c0b9162a54f0eaff7ca2a46dcec7809a5cf", 0x89, 0x2f46db0439b91642, &(0x7f0000000000)={0xa, 0x4e22, 0x59d, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3ff}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:58:56 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:58:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 04:58:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8000, 0x8, 0x2, r1}) fcntl$setsig(r2, 0xa, 0x3a) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$keychord(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = dup(r3) write$P9_RREMOVE(r4, &(0x7f0000000200)={0x7}, 0x7) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000200)={0x1b3}, 0xffffff9a) ioctl$TCSETXF(r5, 0x5434, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(r3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) sendto$inet6(r8, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @rand_addr="005e03dd72c5a98dea0aad9100", 0x200005}, 0xffffffffffffff75) write(r7, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r7, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r10 = accept4(r6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x2, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYPTR, @ANYRES16, @ANYBLOB="000129bd7000ffdbdf25020000000801004e23000014000700fe8000000000800100000000000000bb0400050008000800e000000114000900fe880000000000001000000000000001", @ANYRES32, @ANYBLOB="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"], 0x5}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendto$inet6(r10, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 511.262225] binder: BINDER_SET_CONTEXT_MGR already set [ 511.268691] binder: BINDER_SET_CONTEXT_MGR already set [ 511.274625] binder: 16712:16716 ioctl 40046207 0 returned -16 [ 511.282745] binder: 16713:16717 ioctl 40046207 0 returned -16 04:58:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "e59b133cc78cecc57debbcd162da13cd1a1514ae"}}]}, 0x150}}, 0x44) 04:58:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:58:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "e59b133cc78cecc57debbcd162da13cd1a1514ae"}}]}, 0x150}}, 0x44) [ 511.457437] binder: BINDER_SET_CONTEXT_MGR already set [ 511.463246] binder: 16740:16743 ioctl 40046207 0 returned -16 04:58:57 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r6, &(0x7f0000000700)=""/250, 0xffffffc9) r7 = accept$unix(r6, &(0x7f0000000180), &(0x7f0000000200)=0x6e) sendfile(r7, r5, 0x0, 0x80001d00c0d2) write(r3, &(0x7f00000001c0), 0xfffffef3) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'bridge_slave_1\x00', r9}) read(r2, &(0x7f0000000000)=""/250, 0xedf1d44) 04:58:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 511.583405] binder: BINDER_SET_CONTEXT_MGR already set [ 511.589098] binder: 16761:16762 ioctl 40046207 0 returned -16 04:58:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 04:58:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) tkill(0x0, 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 04:58:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r0, 0x0, 0x213, 0x0, 0x0, 0x0) close(r0) sendto$inet6(r0, &(0x7f0000000100)="2afdad38c02bcb2f9672896187e85ebd4848af0e725ea20ead354cff56935895d45307d65245f5b919c79b9edf6539e8c8b55a59767c3922d74df0bac8a7825da7b75387b35ab439d07b708a5e7109be97041b3a46509e32909c889e6a2ced559318b24c9b99a63fe22fe9e80cde29f33820635b5c5c7a9c0b9162a54f0eaff7ca2a46dcec7809a5cf", 0x89, 0x2f46db0439b91642, &(0x7f0000000000)={0xa, 0x4e22, 0x59d, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3ff}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:58:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x35, 0x0, 0x0, 0xfffff000}, {0x80000006}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r3 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0x1) fcntl$setstatus(r3, 0x4, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000200)=""/104) readv(r3, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000600)}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) dup3(r5, r2, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x1c0000) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0xd, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x400000000003}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) 04:58:59 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:58:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 514.284960] binder: BINDER_SET_CONTEXT_MGR already set [ 514.292594] binder: BINDER_SET_CONTEXT_MGR already set [ 514.298353] binder: 16773:16781 ioctl 40046207 0 returned -16 [ 514.311263] binder: 16780:16782 ioctl 40046207 0 returned -16 04:59:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) tkill(0x0, 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 514.488349] binder: BINDER_SET_CONTEXT_MGR already set [ 514.494276] binder: 16792:16793 ioctl 40046207 0 returned -16 04:59:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) tkill(0x0, 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 04:59:00 executing program 1: clone(0x8000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f00cff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc158bb2b03b5b2461179f5f90bba001b5080da6218a8106df2858ec973328e5a2c078a3fe3b520202035be", 0x70}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = eventfd2(0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgid(r4) ptrace$cont(0x9, r4, 0x200001bb, 0xfffffffffffffffd) [ 514.642753] binder: BINDER_SET_CONTEXT_MGR already set [ 514.649138] binder: 16797:16798 ioctl 40046207 0 returned -16 04:59:00 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = creat(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) write$P9_RSTAT(r2, &(0x7f0000000300)=ANY=[], 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) sendfile(r3, r1, &(0x7f00000000c0), 0x9001) 04:59:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 514.745178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket [ 514.755783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 514.766645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 514.776660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 514.789274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 514.799153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 514.809135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 514.811158] binder: BINDER_SET_CONTEXT_MGR already set [ 514.811168] binder: 16807:16808 ioctl 40046207 0 returned -16 [ 514.832266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 514.849270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 514.864995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket [ 514.875299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 514.886336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 514.896340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 514.906298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 514.916407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 514.926560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 514.936530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 04:59:00 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) socket$netlink(0x10, 0x3, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x0, 0x7, @loopback, 0x8}, {0xa, 0x4e21, 0x0, @remote, 0x3}, 0x0, [0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3]}, 0x5c) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfb120eb7) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x1d2, 0x0) mmap$perf(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r2, 0x4) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = open(0x0, 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r5, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000940)=[{&(0x7f0000000440)="c3c2c4e746a1b5f2b319bb52ba27d018ddcae19580c5789028de916e139a72f3f15e1c4b69379c06792a0a3882480c56459e092c20821c0b09225eb89c65449bf45d3172f4c0872edc30e0ee319ee29cd4383d0f315976589a711520087125c2a7ac1ec832254703724250de8464b6b2fa3f5edc2596cd9a8c2150cc5fe58dd89d6eb2833adb1f9e47bf16d5ad2a38d0832b92ed7f7e32dd538bad0c2af1e887658f3723890c9ab968c7b8dc547603", 0xaf}, {&(0x7f0000000580)="0b935fd14a05bf2a4db7de43ef511717ea6c82f7b3890c57f8bcbf9c71f8f8dbb2fb039748f75372bb16302efe02ad59b084e4179ae391a8a41147821e8f9ea1f1c59828f1879134b91a5769d67f7889934a1431867ae117f712a23cb730537ff696", 0x62}, {&(0x7f00000006c0)="20b6a5f8ff32347ab9e51f6fe1777b780da932e6c6245f9be7a6d1959c1682990ca659cb146d24cc7385718d16cafd28c1511caaa2f8b636a9d711327ba492f2951530b9c22263ac6ff6f6df693140b5d4199c24e27851079b4a4158a6a2026d03ed4a48fe0f1af30b074a11b09d36", 0x6f}, {&(0x7f0000000740)="7687a69cf07653f9a03952e2b2db9497b21c34599461aed900186ac4919f50797a282504494cbc974337659056026fdc02c8437c55bb92acac9b5612d2448adf8cbcbd8a91493d89c3c306eaaa126015ff02471b960bad6709ef4df480a7b8eb22cac92f302c77d0800ae69a65ebe6ff635066022579898ef8669da3fb31d8", 0x7f}, {&(0x7f00000007c0)="136173534a80e811704e640702e04f20985c79d323fa286ebd9c36447ab6131bf457bb71ec436a9777ecd3e4b7fe7f9d3b469fb85b77d304fd4ed7514a910eab8ccb432f07", 0x45}, {&(0x7f0000000040)="bc6e431e02cf1c728a", 0x9}, {&(0x7f0000000840)="fa6c9cf8791c5a85a5afd08374eaf27c8a3ad88b602eaad0ddb3ab0b387ceb44f8f9678cc2dd3f08e62ef882cb461b7039a911773132b9410816de2f240be18c6bb12a132d1269e0b7c477a14ed33b3035e7160f49c33bea3ac28e9b30962a0bf368b50c6a8b", 0x66}, {&(0x7f00000008c0)="b22de04ca73308b6d10a89c1ece06cd1ab2f581ba3186ae6ab3b47fee109485a202bd5b07153668fd9faf76fcb265dfb44982ff4bb17b7920608a394f2351f53adb840a5dd06853bec998bc66eee01f1039b7f235651c46a626a54936802ee135ad80be034ce71ccffac247154e42e97ec72294c23", 0x75}], 0x8) [ 514.946699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 515.125796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41286 sclass=netlink_route_socket 04:59:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 04:59:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r0, 0x0, 0x213, 0x0, 0x0, 0x0) close(r0) sendto$inet6(r0, &(0x7f0000000100)="2afdad38c02bcb2f9672896187e85ebd4848af0e725ea20ead354cff56935895d45307d65245f5b919c79b9edf6539e8c8b55a59767c3922d74df0bac8a7825da7b75387b35ab439d07b708a5e7109be97041b3a46509e32909c889e6a2ced559318b24c9b99a63fe22fe9e80cde29f33820635b5c5c7a9c0b9162a54f0eaff7ca2a46dcec7809a5cf", 0x89, 0x2f46db0439b91642, &(0x7f0000000000)={0xa, 0x4e22, 0x59d, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3ff}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 04:59:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:59:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) socket$netlink(0x10, 0x3, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x0, 0x7, @loopback, 0x8}, {0xa, 0x4e21, 0x0, @remote, 0x3}, 0x0, [0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3]}, 0x5c) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfb120eb7) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x1d2, 0x0) mmap$perf(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r2, 0x4) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = open(0x0, 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r5, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000940)=[{&(0x7f0000000440)="c3c2c4e746a1b5f2b319bb52ba27d018ddcae19580c5789028de916e139a72f3f15e1c4b69379c06792a0a3882480c56459e092c20821c0b09225eb89c65449bf45d3172f4c0872edc30e0ee319ee29cd4383d0f315976589a711520087125c2a7ac1ec832254703724250de8464b6b2fa3f5edc2596cd9a8c2150cc5fe58dd89d6eb2833adb1f9e47bf16d5ad2a38d0832b92ed7f7e32dd538bad0c2af1e887658f3723890c9ab968c7b8dc547603", 0xaf}, {&(0x7f0000000580)="0b935fd14a05bf2a4db7de43ef511717ea6c82f7b3890c57f8bcbf9c71f8f8dbb2fb039748f75372bb16302efe02ad59b084e4179ae391a8a41147821e8f9ea1f1c59828f1879134b91a5769d67f7889934a1431867ae117f712a23cb730537ff696", 0x62}, {&(0x7f00000006c0)="20b6a5f8ff32347ab9e51f6fe1777b780da932e6c6245f9be7a6d1959c1682990ca659cb146d24cc7385718d16cafd28c1511caaa2f8b636a9d711327ba492f2951530b9c22263ac6ff6f6df693140b5d4199c24e27851079b4a4158a6a2026d03ed4a48fe0f1af30b074a11b09d36", 0x6f}, {&(0x7f0000000740)="7687a69cf07653f9a03952e2b2db9497b21c34599461aed900186ac4919f50797a282504494cbc974337659056026fdc02c8437c55bb92acac9b5612d2448adf8cbcbd8a91493d89c3c306eaaa126015ff02471b960bad6709ef4df480a7b8eb22cac92f302c77d0800ae69a65ebe6ff635066022579898ef8669da3fb31d8", 0x7f}, {&(0x7f00000007c0)="136173534a80e811704e640702e04f20985c79d323fa286ebd9c36447ab6131bf457bb71ec436a9777ecd3e4b7fe7f9d3b469fb85b77d304fd4ed7514a910eab8ccb432f07", 0x45}, {&(0x7f0000000040)="bc6e431e02cf1c728a", 0x9}, {&(0x7f0000000840)="fa6c9cf8791c5a85a5afd08374eaf27c8a3ad88b602eaad0ddb3ab0b387ceb44f8f9678cc2dd3f08e62ef882cb461b7039a911773132b9410816de2f240be18c6bb12a132d1269e0b7c477a14ed33b3035e7160f49c33bea3ac28e9b30962a0bf368b50c6a8b", 0x66}, {&(0x7f00000008c0)="b22de04ca73308b6d10a89c1ece06cd1ab2f581ba3186ae6ab3b47fee109485a202bd5b07153668fd9faf76fcb265dfb44982ff4bb17b7920608a394f2351f53adb840a5dd06853bec998bc66eee01f1039b7f235651c46a626a54936802ee135ad80be034ce71ccffac247154e42e97ec72294c23", 0x75}], 0x8) 04:59:02 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:59:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140), 0x0) tkill(r2, 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 517.295372] binder: BINDER_SET_CONTEXT_MGR already set [ 517.304565] binder: BINDER_SET_CONTEXT_MGR already set [ 517.312699] binder: 16828:16829 ioctl 40046207 0 returned -16 [ 517.330614] binder: 16821:16824 ioctl 40046207 0 returned -16 [ 517.453460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41286 sclass=netlink_route_socket 04:59:03 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='-\xa2#\x00\x00\x00\x06\x00', 0x1b179ba33883b306, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = open(0x0, 0x475100, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x40) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f00000001c0)) fcntl$setstatus(r3, 0x4, 0x6100) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xffffffffffffffe8) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r6, 0x0, 0x8000fffffffe) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000840)="70956e9de51c0cbeda051a925948a0c3ff3a4a8cb455f3bf6d4b0f86d63136f544fe6813c2c63f498879560ab2a1bcb2ecaa216046ae2615dade84d82579eb2c10a9a58ccfd96c87586b1aefb5f3b13f4f758d11442c224c40f947ea814ba56fd2c6ba42e6b35b6af06175d9f412c79584ba10451d4781ad4da078d28582b5b8b706399533af198f80919f17e6c015904e4fc26d2152f9623de0f68bd84044e88224540176929741270837ccf783e90cbd39be16be57060befa24003f5eeb07c1bd4b3cb", 0xc4}, {&(0x7f0000000580)="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", 0xd2}], 0x10000000000000cb) r7 = memfd_create(&(0x7f0000000140)='selinux:eth0\x82\x00', 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x40, &(0x7f0000001fde), 0x4) pwritev(r8, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl(r7, 0x8912, &(0x7f0000000080)="0a5cc80700") ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"]) memfd_create(&(0x7f0000000180)='u', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r6, 0x0, 0xa5cc554) 04:59:03 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) syz_genetlink_get_family_id$tipc2(0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) fallocate(r2, 0x4000000000000010, 0x0, 0x7fff) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f00000006c0)) dup3(r7, r6, 0x80000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000040)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r10 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) connect(0xffffffffffffffff, &(0x7f0000000180)=@ethernet={0x6, @local}, 0x80) fcntl$setstatus(r10, 0x4, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 04:59:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r7 = eventfd2(0x0, 0x1) fstat(r7, 0x0) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(0xffffffffffffffff, 0xdf9c) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c010000150000042abd7000fedbdf250000000001ac1414bb000008000000000000d1ab3149dc44915320000700008000a2000000", @ANYRES32=r6, @ANYRES32, @ANYBLOB="b46b6e00000000000c001c00", @ANYRES32=0x0, @ANYBLOB="030000000c00100001000000000000000800030000170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d16000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d000000000000409cb20000000000f9ffffffffffffff00000000000000000000000000000000000000007f00000000000000ff010000c06b6e000002000002000020"], 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x0, 0x4e21, 0x3, 0xa, 0x0, 0x20, 0x41, r5}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x200, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'\x00\b\x00'}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0x526987c9) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r10, &(0x7f0000000700)=""/250, 0xffffffc9) timerfd_gettime(r10, &(0x7f0000000100)) syncfs(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x1) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x10000, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000003c0), 0x4) openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x7fffffffffffebb, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r11, &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000440)='y\x00', 0x2, 0x1) 04:59:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r0, 0x0, 0x213, 0x0, 0x0, 0x0) close(r0) sendto$inet6(r0, &(0x7f0000000100)="2afdad38c02bcb2f9672896187e85ebd4848af0e725ea20ead354cff56935895d45307d65245f5b919c79b9edf6539e8c8b55a59767c3922d74df0bac8a7825da7b75387b35ab439d07b708a5e7109be97041b3a46509e32909c889e6a2ced559318b24c9b99a63fe22fe9e80cde29f33820635b5c5c7a9c0b9162a54f0eaff7ca2a46dcec7809a5cf", 0x89, 0x2f46db0439b91642, &(0x7f0000000000)={0xa, 0x4e22, 0x59d, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3ff}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 04:59:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 518.143286] binder: BINDER_SET_CONTEXT_MGR already set [ 518.149026] binder: 16867:16868 ioctl 40046207 0 returned -16 04:59:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r7 = eventfd2(0x0, 0x1) fstat(r7, 0x0) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(0xffffffffffffffff, 0xdf9c) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c010000150000042abd7000fedbdf250000000001ac1414bb000008000000000000d1ab3149dc44915320000700008000a2000000", @ANYRES32=r6, @ANYRES32, @ANYBLOB="b46b6e00000000000c001c00", @ANYRES32=0x0, @ANYBLOB="030000000c00100001000000000000000800030000170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d16000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d000000000000409cb20000000000f9ffffffffffffff00000000000000000000000000000000000000007f00000000000000ff010000c06b6e000002000002000020"], 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x0, 0x4e21, 0x3, 0xa, 0x0, 0x20, 0x41, r5}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x200, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'\x00\b\x00'}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0x526987c9) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r10, &(0x7f0000000700)=""/250, 0xffffffc9) timerfd_gettime(r10, &(0x7f0000000100)) syncfs(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x1) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x10000, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000003c0), 0x4) openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x7fffffffffffebb, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r11, &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000440)='y\x00', 0x2, 0x1) 04:59:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 04:59:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r0, 0x0, 0x213, 0x0, 0x0, 0x0) close(r0) sendto$inet6(r0, &(0x7f0000000100)="2afdad38c02bcb2f9672896187e85ebd4848af0e725ea20ead354cff56935895d45307d65245f5b919c79b9edf6539e8c8b55a59767c3922d74df0bac8a7825da7b75387b35ab439d07b708a5e7109be97041b3a46509e32909c889e6a2ced559318b24c9b99a63fe22fe9e80cde29f33820635b5c5c7a9c0b9162a54f0eaff7ca2a46dcec7809a5cf", 0x89, 0x2f46db0439b91642, &(0x7f0000000000)={0xa, 0x4e22, 0x59d, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3ff}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 04:59:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:59:05 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0xfffffffffffffffc}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2088c503, 0x0, 0x0, 0x0, &(0x7f00000001c0)="329117d380804892b12765d00559bfd10d") r2 = socket$inet_tcp(0x2, 0x1, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0x80000001, 0x98}, {0x2, 0x4}], 0xee00}, 0x18, 0x2) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x3, [], "0d2b9eed4e1c6293c7d0a48eddc10873"}) 04:59:05 executing program 3: pipe(&(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7\t\b\x00\x00@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov=ie\xf3x\xfe[\x90\xe0\xaft\xafi\xd9\xb2\x96ef\x98XL\xe5\xb0\xc6\xac\xcb\x19\xf2\xba25v\xb2-\xc7g\tM\x04_R\x93\x1be\x8f\xacGxWc\xee[\xc0\xe6\xdc\xcc\x8dT[\x85\xb4\xa4@\t\xb3\x1f\b\x9c\xf9\x8d\x9d\x92YJ$\x89\xaa\xcfQ[?`\xf4\xfeg\xd6\xd9`Hpc\xdc@7N\xf4\xee\xfdQ\x1b\t\x00\x00\x00\xfcJ\x7fKC\xa1[\xe4\xc8f|\xe9\xef|\x1b\xf0d\xf0\x89\x1aM\x8b\xc3I&)\xc1\x8a\xc6\x11\x84&3\x02\x88\x97\xb7\xe3[E\x90\x95=\x8e7\x90\xa8,\x16~\x9c\xa1m\xf4F\xfb\x05\x82\x05\'1Q\xe5s\x8f\x13\xfe\xd3Zw\xf4e\xb9*\xcdgBY\xac\x83\xf8\xf9\xf0\xcc\"\xb4\xf4\xa7\'\x98\x1fg@\xbe|\xa72\xbf\vb\xc8y\x9b{\xfc?\x87\x9e\x16\'\'\xbe\xe6B\x9c\x01k\xe1\xa8\\\n\xcd.\xc14O\n\xd1\x14,\xc5\xa1\x1e\x9a\x03jUr\xca\xdb\x88C\x96\xd1\b+,\x8b\x8fTj\x80\'Q\x14\xa9\'L\x85c\x84P\xb1\xe6#\xba\x11+\xd9~\x13\xd44j\xed\x9b2\xc2\xdcT:\x9e\xa0\xe7\xb2\xf8\xf2\xd5\x96\xbe \xfci\xb9\xfa\x11\a\x15\xeb>rK\xaf\x1e\xcf\x1aI\xceM\x82v\xdd\xe4\xc4\xd1M8\xd9;\xb5\x14@K\x81\xcc\x02x\xc9]e\x96\xd57\be\xe5\x89\x9e\xefs\xe3U\xc7\xa1\xdf\x95\xe1\xf3\x0fM\x87\xb3\xd2)\v@w\x9f2\xbd\x8b!\xa2\xd4gv\xb5s\xf8\xc4\xdb\x87\x95dV\x9bc\xa3\a\x16\xba\xe9m/\x8a\x83\x9c\x84\xbes\xf6\xa4\xfb\xe09\xa6p\xcd\xd4*\xccF\xca\x1e\xacC!x\n!{\xc5oE\x00\xc2\xf6\x1f\xcf]\x891') creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) clone(0x1407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="04230f0505c8f2e6fa0f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:59:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140), 0x0) tkill(r2, 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 520.317547] binder: BINDER_SET_CONTEXT_MGR already set [ 520.325984] binder: 16881:16883 ioctl 40046207 0 returned -16 [ 520.326862] binder: BINDER_SET_CONTEXT_MGR already set [ 520.326869] binder: 16887:16889 ioctl 40046207 0 returned -16 04:59:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r0, 0x0, 0x213, 0x0, 0x0, 0x0) close(r0) sendto$inet6(r0, &(0x7f0000000100)="2afdad38c02bcb2f9672896187e85ebd4848af0e725ea20ead354cff56935895d45307d65245f5b919c79b9edf6539e8c8b55a59767c3922d74df0bac8a7825da7b75387b35ab439d07b708a5e7109be97041b3a46509e32909c889e6a2ced559318b24c9b99a63fe22fe9e80cde29f33820635b5c5c7a9c0b9162a54f0eaff7ca2a46dcec7809a5cf", 0x89, 0x2f46db0439b91642, &(0x7f0000000000)={0xa, 0x4e22, 0x59d, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3ff}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) INIT: Id "1" respawning too fast: disabled for 5 minutes 04:59:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) dup3(r2, r1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x1c0000) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pause() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c520f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) tkill(r4, 0x1c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 04:59:06 executing program 1: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) r1 = eventfd2(0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgid(r2) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200055, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, r2, 0x0, 0xffffffffffffffff, 0x0) write$selinux_load(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300020000005f3238da162690f5d8270f2d47af08142e3586f91f2d24cd7674cb42944417aff6de76619d24978539672ec4bdd5a185a1191d2c9af9de30181ad09dc395dcaa18ebeaadd9be64637f801d"], 0xff) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@random={'btrfs.', '/\x00'}, &(0x7f0000000200)='/selinux/load\x00', 0xe, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x526987c9) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000240)={'lapb0\x00', @broadcast}) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) [ 521.162175] binder: BINDER_SET_CONTEXT_MGR already set [ 521.168118] binder: 16906:16907 ioctl 40046207 0 returned -16 [ 521.217098] ------------[ cut here ]------------ [ 521.223533] WARNING: CPU: 0 PID: 16912 at mm/page_alloc.c:3069 __alloc_pages_nodemask+0x11d7/0x14b0() [ 521.233841] Kernel panic - not syncing: panic_on_warn set ... [ 521.233841] [ 521.241445] CPU: 0 PID: 16912 Comm: syz-executor.1 Not tainted 4.4.174+ #4 [ 521.248473] 0000000000000000 8ab8801bd9d57222 ffff8800b287f238 ffffffff81aad1a1 [ 521.256527] 0000000000000000 ffffffff82835ee0 ffffffff82885260 0000000000000bfd [ 521.264604] ffffffff813d12d7 ffff8800b287f318 ffffffff813a48c2 0000000041b58ab3 [ 521.272664] Call Trace: [ 521.275242] [] dump_stack+0xc1/0x120 [ 521.280588] [] ? __alloc_pages_nodemask+0x11d7/0x14b0 [ 521.287413] [] panic+0x1b9/0x37b [ 521.292540] [] ? add_taint.cold+0x16/0x16 [ 521.298332] [] ? warn_slowpath_common.cold+0x5/0x20 [ 521.304989] [] warn_slowpath_common.cold+0x20/0x20 [ 521.311583] [] warn_slowpath_null+0x2a/0x30 [ 521.317631] [] __alloc_pages_nodemask+0x11d7/0x14b0 [ 521.324287] [] ? save_stack_trace+0x26/0x50 [ 521.330258] [] ? kasan_kmalloc.part.0+0x62/0xf0 [ 521.337086] [] ? kasan_kmalloc+0xb7/0xd0 [ 521.342836] [] ? __kmalloc+0x141/0x330 [ 521.348363] [] ? hashtab_create+0x11d/0x210 [ 521.354683] [] ? symtab_init+0x2c/0xb0 [ 521.360643] [] ? common_read+0x1be/0x380 [ 521.366441] [] ? policydb_read+0xc3b/0x2280 [ 521.372527] [] ? security_load_policy+0x23c/0x9c0 [ 521.379020] [] ? sel_write_load+0x175/0xf90 [ 521.385002] [] ? __vfs_write+0x116/0x3d0 [ 521.390707] [] ? vfs_write+0x182/0x4e0 [ 521.396232] [] ? SyS_write+0xdc/0x1c0 [ 521.402631] [] ? entry_SYSCALL_64_fastpath+0x1e/0x9a [ 521.409378] [] ? policydb_read+0xc3b/0x2280 [ 521.415954] [] ? security_load_policy+0x23c/0x9c0 [ 521.422430] [] ? sel_write_load+0x175/0xf90 [ 521.428390] [] ? vfs_write+0x182/0x4e0 [ 521.433917] [] ? __alloc_pages_direct_compact+0x220/0x220 [ 521.441098] [] ? trace_hardirqs_on_caller+0x500/0x5a0 [ 521.447962] [] ? policydb_read+0x7dd/0x2280 [ 521.453945] [] ? kasan_slab_free+0x11a/0x190 [ 521.459996] [] ? hashtab_create+0x11d/0x210 [ 521.465971] [] ? mark_held_locks+0xb1/0x100 [ 521.471951] [] ? check_preemption_disabled+0x3c/0x200 [ 521.479058] [] alloc_kmem_pages+0x12/0x20 [ 521.484854] [] kmalloc_order+0x21/0x70 [ 521.490376] [] kmalloc_order_trace+0x1f/0x1a0 [ 521.496507] [] __kmalloc+0x1c2/0x330 [ 521.501857] [] ? symcmp+0x30/0x30 [ 521.506945] [] str_read+0x2b/0x130 [ 521.512123] [] common_read+0x260/0x380 [ 521.517648] [] ? class_read+0x950/0x950 [ 521.523257] [] ? policydb_read+0x7dd/0x2280 [ 521.529215] [] ? kfree+0xf4/0x310 [ 521.534306] [] policydb_read+0xc3b/0x2280 [ 521.540105] [] ? mark_held_locks+0xb1/0x100 [ 521.546062] [] ? get_page_from_freelist+0x9d8/0x1d00 [ 521.552805] [] ? class_read+0x950/0x950 [ 521.558424] [] ? string_to_av_perm+0x90/0x90 [ 521.564560] [] ? mark_held_locks+0xb1/0x100 [ 521.571041] [] ? check_preemption_disabled+0x3c/0x200 [ 521.577890] [] ? check_preemption_disabled+0x3c/0x200 [ 521.584716] [] ? kasan_kmalloc+0xb7/0xd0 [ 521.590437] [] ? kmem_cache_alloc_trace+0x123/0x2d0 [ 521.597098] [] security_load_policy+0x23c/0x9c0 [ 521.603406] [] ? native_set_pgd+0x50/0x50 [ 521.609203] [] ? trace_hardirqs_on_thunk+0x17/0x19 [ 521.615775] [] ? security_get_bools+0x610/0x610 [ 521.622084] [] ? vmap_page_range_noflush+0x517/0x780 [ 521.628827] [] ? alloc_vmap_area.isra.0+0x810/0x810 [ 521.635484] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 521.642233] [] ? check_stack_object+0x114/0x160 [ 521.648897] [] ? __check_object_size+0x222/0x332 [ 521.655319] [] sel_write_load+0x175/0xf90 [ 521.661107] [] ? sel_read_bool+0x240/0x240 [ 521.669268] [] ? trace_hardirqs_on+0x10/0x10 [ 521.675344] [] __vfs_write+0x116/0x3d0 [ 521.680889] [] ? sel_read_bool+0x240/0x240 [ 521.688149] [] ? __vfs_read+0x3c0/0x3c0 [ 521.693761] [] ? check_preemption_disabled+0x3c/0x200 [ 521.700589] [] ? check_preemption_disabled+0x3c/0x200 [ 521.707418] [] ? rcu_read_lock_sched_held+0x10b/0x130 [ 521.714597] [] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 521.721283] [] ? __sb_start_write+0x14f/0x310 [ 521.727443] [] vfs_write+0x182/0x4e0 [ 521.733176] [] SyS_write+0xdc/0x1c0 [ 521.738531] [] ? SyS_read+0x1c0/0x1c0 [ 521.744537] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 521.751044] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 521.758525] Kernel Offset: disabled [ 521.762275] Rebooting in 86400 seconds..