, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r54}}}]}}, {{0x8, 0x1, r55}, {0xf0, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r59}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r63}}, {0x8}}}]}}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x40000}, 0x3)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001880)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000525bd700000000000130000002801040014000700080004000200000008000400ff01000044000708080002000400000008000200060000000800010000002a11aa43a8d493f9910000086b77a5b886646ec600020000000000080002a6000000080002007d080002000200000008000400810000002c180700080001001500000008000200060000000800040000000000080004000800000008000400000000000c00010073797a302000000024000700080001001e0000000800030008000000080004007b0000000800040000000000040007003c00070008000100090000000800020051cdbd3808000200a9150000080002000800000080c839aa02000000080002007f00000008000400080000001c00070008000300010001000800040000080000080001001b000000140001696e6b00004800050008000121756470001c0002200800ec03e56785698a49fc0400f3000000080001000000000008000200db0f8f97f518ae7c86813124a5b300000c0002000800030000f8ffff1400020008000100000000d41f4f6a7722069ce4869cbf9c8fcb134ef7b60658a229a0ec2eba0e6ed400a91e0da783b41c47bc9c5e919d26c0107dc10e576eb5a3f2a8086205f1aa9516499485766607561e5c2b59023fc6ee69ca3e4cddd432139d63ea40ec063a07874a8702d43690d86d90ef023dfae56cc6781db4ed024d38fd81c6701a27f14f7a2e0116cb8de8c82eac486d08c46d177830abb83c518e32fe02f4678f19b35a02d71ee733558b"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:01 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[ 2527.325703] binder: undelivered TRANSACTION_ERROR: 29201
01:01:01 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}}, 0x0)

[ 2527.389547] binder: 16029:16034 transaction failed 29189/-22, size 80-24 line 3138
[ 2527.432364] binder: undelivered TRANSACTION_ERROR: 29189
01:01:04 executing program 2:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0)

01:01:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:04 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}}, 0x0)

01:01:04 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000540)='./file0\x00', 0x8, 0x0)
r3 = dup3(r1, r0, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x400804, 0x4)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00)
write$P9_RFSYNC(r5, &(0x7f00000001c0)={0x7, 0x33, 0x1}, 0x7)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f00000008c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r8, 0x649503885e7c7ce, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000800}, 0x14)
preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={0x9c, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1b3b10fbcc64e07c)

01:01:04 executing program 4:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:04 executing program 3:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getcwd(&(0x7f0000000240)=""/81, 0x51)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x100, 0x6)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup3(r2, r1, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0xfffffffffffffdfb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:04 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}}, 0x0)

[ 2530.304113] binder: 16050:16054 transaction failed 29189/-22, size 80-24 line 3138
[ 2530.312585] binder: undelivered TRANSACTION_ERROR: 29189
01:01:04 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}}, 0x0)

01:01:04 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}}, 0x0)

01:01:04 executing program 4:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup3(r3, r2, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000100)=0x1)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x1040, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c)
sendmmsg(r8, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1eb, 0x0)
pipe(&(0x7f0000000000)={<r9=>0xffffffffffffffff})
r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
getsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000000200)={@mcast2, <r11=>0x0}, &(0x7f0000000240)=0x14)
accept4(r8, &(0x7f0000000280)=@ll={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x80, 0x800)
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000cc0)={<r13=>0x0, @rand_addr, @broadcast}, &(0x7f0000000d00)=0xc)
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f0000000d40)={@dev, <r14=>0x0}, &(0x7f0000000d80)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001140)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000001240)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000001280)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000012c0)=0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001300)={@loopback, @loopback, <r17=>0x0}, &(0x7f0000001340)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004dc0)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000004f00)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004f40)=0x14)
accept$packet(0xffffffffffffffff, &(0x7f00000062c0)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006300)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006340)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000006440)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000006480)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r22=>0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000006580)=0xe8)
getsockopt$inet6_mreq(r8, 0x29, 0x0, &(0x7f00000065c0)={@ipv4={[], [], @local}, <r23=>0x0}, &(0x7f0000006600)=0x14)
accept4$packet(0xffffffffffffffff, &(0x7f0000006800)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000006840)=0x14, 0x80800)
getpeername$packet(0xffffffffffffffff, &(0x7f0000006880)={0x11, 0x0, <r25=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000068c0)=0x14)
accept$packet(r8, &(0x7f0000006900)={0x11, 0x0, <r26=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006940)=0x14)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000006980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000006a80)=0xe8)
getsockname$packet(0xffffffffffffffff, &(0x7f0000006ac0)={0x11, 0x0, <r28=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006b00)=0x14)
getsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000006b40)={@multicast2, @empty, <r29=>0x0}, &(0x7f0000006b80)=0xc)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000006c00)={<r30=>0x0, @multicast2, @local}, &(0x7f0000006c40)=0xc)
getpeername(r8, &(0x7f0000006c80)=@xdp={0x2c, 0x0, <r31=>0x0}, &(0x7f0000006d40)=0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000007300)={0x11, 0x0, <r32=>0x0}, &(0x7f0000007340)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000007440)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r33=>0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000007540)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000007580)={0x11, 0x0, <r34=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000075c0)=0x14)
accept$packet(0xffffffffffffffff, &(0x7f00000076c0)={0x11, 0x0, <r35=>0x0}, &(0x7f0000007700)=0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f0000007fc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000007f80)={&(0x7f0000007740)={0x7fc, r10, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r11}, {0x1f4, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xa71f6e}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x1f4, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffe00}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x48}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r22}, {0x170, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x51}}, {0x8, 0x6, r24}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r27}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r28}, {0xec, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x100, 0x3f6, 0x6, 0xc}, {0xd06, 0x7, 0x2, 0x800}, {0x0, 0x10000, 0x8, 0xffffffff}, {0x8, 0xffffffff, 0x7bf, 0x6}, {0x7, 0x1fb, 0xffffffffffffff96, 0x5}, {0x34, 0xfffffffffffffc01, 0x0, 0x7}, {0x7, 0x7fffffff, 0x3ff, 0x8}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r29}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r30}}}]}}, {{0x8, 0x1, r31}, {0x138, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r32}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r33}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r34}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffff80}}, {0x8, 0x6, r35}}}]}}]}, 0x7fc}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={<r36=>0x0, @initdev, @loopback}, &(0x7f00000003c0)=0xc)
r37 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r37, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r38 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r37, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r37, 0x0, 0x2)
sendfile(r37, r38, 0x0, 0x40d09)
r39 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r37, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r40=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r39, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r40}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
r41 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r41, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r42 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r41, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r41, 0x0, 0x2)
sendfile(r41, r42, 0x0, 0x40d09)
r43 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r41, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r44=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r43, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r44}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@empty, @remote, <r45=>0x0}, &(0x7f0000000440)=0xc)
r46 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r46, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r47 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r46, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r46, 0x0, 0x2)
sendfile(r46, r47, 0x0, 0x40d09)
r48 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r46, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r49=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r48, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r49}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
r50 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r50, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r51 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r50, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r50, 0x0, 0x2)
sendfile(r50, r51, 0x0, 0x40d09)
r52 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r50, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r53=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r52, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r53}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
r54 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r54, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockname(r54, &(0x7f0000000540)=@ll={0x11, 0x0, <r55=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x80)
getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000005c0)={@local, @multicast2, <r56=>0x0}, &(0x7f0000000800)=0xc)
r57 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r57, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r58 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r57, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r57, 0x0, 0x2)
sendfile(r57, r58, 0x0, 0x40d09)
r59 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r57, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r60=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r59, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r60}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
getsockname$packet(r0, &(0x7f0000000880)={0x11, 0x0, <r61=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000008c0)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r62=>0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000a00)=0xe8)
r63 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r63, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r64 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r63, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r63, 0x0, 0x2)
sendfile(r63, r64, 0x0, 0x40d09)
r65 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r63, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r66=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r65, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r66}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
r67 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r67, &(0x7f0000000100), 0x18d, 0x6c00)
getpeername$packet(r67, &(0x7f0000000a40)={0x11, 0x0, <r68=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a80)=0x14)
r69 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r69, &(0x7f0000000100), 0x18d, 0x6c00)
accept$packet(r69, &(0x7f0000000ac0)={0x11, 0x0, <r70=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b00)=0x14)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r71=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000c40)=0xe8)
r72 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r72, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r73 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r72, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r72, 0x0, 0x2)
sendfile(r72, r73, 0x0, 0x40d09)
r74 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r72, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r75=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r74, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r75}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
r76 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r76, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r77 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r76, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r76, 0x0, 0x2)
sendfile(r76, r77, 0x0, 0x40d09)
r78 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r76, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r79=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r78, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r79}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000c80)={@remote, @initdev, <r80=>0x0}, &(0x7f0000000cc0)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000d00)={@broadcast, @multicast1, <r81=>0x0}, &(0x7f0000000d40)=0xc)
r82 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r82, &(0x7f0000000100), 0x18d, 0x6c00)
getsockopt$inet6_IPV6_IPSEC_POLICY(r82, 0x29, 0x22, &(0x7f0000000d80)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r83=>0x0}}, {{@in=@dev}}}, &(0x7f0000000e80)=0xe8)
accept$packet(r4, &(0x7f0000000fc0)={0x11, 0x0, <r84=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001000)=0x14)
getsockname$packet(r1, &(0x7f0000001040)={0x11, 0x0, <r85=>0x0}, &(0x7f0000001080)=0x14)
r86 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r86, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r87 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r86, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r86, 0x0, 0x2)
sendfile(r86, r87, 0x0, 0x40d09)
r88 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r86, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r89=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r88, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r89}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001180)={0x11, 0x0, <r90=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000011c0)=0x14)
r91 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r91, &(0x7f0000000100), 0x18d, 0x6c00)
getsockopt$inet_mreqn(r91, 0x0, 0x20, &(0x7f00000012c0)={@dev, @loopback, <r92=>0x0}, &(0x7f0000001300)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001440)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r93=>0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000001540)=0xe8)
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000001e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001580)={0x82c, r10, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r36}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r40}}}]}}, {{0x8, 0x1, r44}, {0x1d8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r45}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r49}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r53}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r55}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x14e}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r56}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r60}}}]}}, {{0x8, 0x1, r61}, {0x1f4, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r62}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r66}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r68}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r70}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r71}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r75}, {0x4}}, {{0x8, 0x1, r79}, {0x1a0, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x1, 0x1, 0x8aad, 0x200}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffff8db}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r80}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r81}}}]}}, {{0x8, 0x1, r83}, {0x1b4, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r84}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r85}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffd}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r89}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r90}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r92}}}]}}, {{0x8, 0x1, r93}, {0x78, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x3, 0x8, 0x1f, 0xb1}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x790}}}]}}]}, 0x82c}, 0x1, 0x0, 0x0, 0x4}, 0x4040)
sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')

01:01:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[ 2530.399425] binder: 16063:16068 transaction failed 29189/-22, size 80-24 line 3138
[ 2530.425331] binder: undelivered TRANSACTION_ERROR: 29189
[ 2530.511357] binder_alloc: 16077: binder_alloc_buf, no vma
[ 2530.544429] binder: 16077:16081 transaction failed 29189/-3, size 80-24 line 3284
[ 2530.553976] binder: undelivered TRANSACTION_ERROR: 29189
01:01:07 executing program 2:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0)

01:01:07 executing program 3:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup3(r3, r2, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000100)=0x1)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x1040, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c)
sendmmsg(r8, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1eb, 0x0)
pipe(&(0x7f0000000000)={<r9=>0xffffffffffffffff})
r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
getsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000000200)={@mcast2, <r11=>0x0}, &(0x7f0000000240)=0x14)
accept4(r8, &(0x7f0000000280)=@ll={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x80, 0x800)
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000cc0)={<r13=>0x0, @rand_addr, @broadcast}, &(0x7f0000000d00)=0xc)
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f0000000d40)={@dev, <r14=>0x0}, &(0x7f0000000d80)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001140)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000001240)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000001280)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000012c0)=0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001300)={@loopback, @loopback, <r17=>0x0}, &(0x7f0000001340)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004dc0)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000004f00)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004f40)=0x14)
accept$packet(0xffffffffffffffff, &(0x7f00000062c0)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006300)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006340)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000006440)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000006480)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r22=>0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000006580)=0xe8)
getsockopt$inet6_mreq(r8, 0x29, 0x0, &(0x7f00000065c0)={@ipv4={[], [], @local}, <r23=>0x0}, &(0x7f0000006600)=0x14)
accept4$packet(0xffffffffffffffff, &(0x7f0000006800)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000006840)=0x14, 0x80800)
getpeername$packet(0xffffffffffffffff, &(0x7f0000006880)={0x11, 0x0, <r25=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000068c0)=0x14)
accept$packet(r8, &(0x7f0000006900)={0x11, 0x0, <r26=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006940)=0x14)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000006980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000006a80)=0xe8)
getsockname$packet(0xffffffffffffffff, &(0x7f0000006ac0)={0x11, 0x0, <r28=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006b00)=0x14)
getsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000006b40)={@multicast2, @empty, <r29=>0x0}, &(0x7f0000006b80)=0xc)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000006c00)={<r30=>0x0, @multicast2, @local}, &(0x7f0000006c40)=0xc)
getpeername(r8, &(0x7f0000006c80)=@xdp={0x2c, 0x0, <r31=>0x0}, &(0x7f0000006d40)=0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000007300)={0x11, 0x0, <r32=>0x0}, &(0x7f0000007340)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000007440)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r33=>0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000007540)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000007580)={0x11, 0x0, <r34=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000075c0)=0x14)
accept$packet(0xffffffffffffffff, &(0x7f00000076c0)={0x11, 0x0, <r35=>0x0}, &(0x7f0000007700)=0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f0000007fc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000007f80)={&(0x7f0000007740)={0x7fc, r10, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r11}, {0x1f4, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xa71f6e}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x1f4, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffe00}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x48}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r22}, {0x170, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x51}}, {0x8, 0x6, r24}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r27}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r28}, {0xec, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x100, 0x3f6, 0x6, 0xc}, {0xd06, 0x7, 0x2, 0x800}, {0x0, 0x10000, 0x8, 0xffffffff}, {0x8, 0xffffffff, 0x7bf, 0x6}, {0x7, 0x1fb, 0xffffffffffffff96, 0x5}, {0x34, 0xfffffffffffffc01, 0x0, 0x7}, {0x7, 0x7fffffff, 0x3ff, 0x8}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r29}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r30}}}]}}, {{0x8, 0x1, r31}, {0x138, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r32}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r33}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r34}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffff80}}, {0x8, 0x6, r35}}}]}}]}, 0x7fc}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={<r36=>0x0, @initdev, @loopback}, &(0x7f00000003c0)=0xc)
r37 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r37, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r38 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r37, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r37, 0x0, 0x2)
sendfile(r37, r38, 0x0, 0x40d09)
r39 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r37, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r40=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r39, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r40}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
r41 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r41, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r42 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r41, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r41, 0x0, 0x2)
sendfile(r41, r42, 0x0, 0x40d09)
r43 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r41, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r44=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r43, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r44}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@empty, @remote, <r45=>0x0}, &(0x7f0000000440)=0xc)
r46 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r46, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r47 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r46, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r46, 0x0, 0x2)
sendfile(r46, r47, 0x0, 0x40d09)
r48 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r46, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r49=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r48, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r49}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
r50 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r50, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r51 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r50, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r50, 0x0, 0x2)
sendfile(r50, r51, 0x0, 0x40d09)
r52 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r50, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r53=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r52, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r53}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
r54 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r54, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockname(r54, &(0x7f0000000540)=@ll={0x11, 0x0, <r55=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x80)
getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000005c0)={@local, @multicast2, <r56=>0x0}, &(0x7f0000000800)=0xc)
r57 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r57, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r58 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r57, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r57, 0x0, 0x2)
sendfile(r57, r58, 0x0, 0x40d09)
r59 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r57, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r60=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r59, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r60}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
getsockname$packet(r0, &(0x7f0000000880)={0x11, 0x0, <r61=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000008c0)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r62=>0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000a00)=0xe8)
r63 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r63, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r64 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r63, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r63, 0x0, 0x2)
sendfile(r63, r64, 0x0, 0x40d09)
r65 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r63, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r66=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r65, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r66}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
r67 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r67, &(0x7f0000000100), 0x18d, 0x6c00)
getpeername$packet(r67, &(0x7f0000000a40)={0x11, 0x0, <r68=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a80)=0x14)
r69 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r69, &(0x7f0000000100), 0x18d, 0x6c00)
accept$packet(r69, &(0x7f0000000ac0)={0x11, 0x0, <r70=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b00)=0x14)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r71=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000c40)=0xe8)
r72 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r72, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r73 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r72, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r72, 0x0, 0x2)
sendfile(r72, r73, 0x0, 0x40d09)
r74 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r72, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r75=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r74, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r75}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
r76 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r76, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r77 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r76, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r76, 0x0, 0x2)
sendfile(r76, r77, 0x0, 0x40d09)
r78 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r76, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r79=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r78, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r79}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000c80)={@remote, @initdev, <r80=>0x0}, &(0x7f0000000cc0)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000d00)={@broadcast, @multicast1, <r81=>0x0}, &(0x7f0000000d40)=0xc)
r82 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r82, &(0x7f0000000100), 0x18d, 0x6c00)
getsockopt$inet6_IPV6_IPSEC_POLICY(r82, 0x29, 0x22, &(0x7f0000000d80)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r83=>0x0}}, {{@in=@dev}}}, &(0x7f0000000e80)=0xe8)
accept$packet(r4, &(0x7f0000000fc0)={0x11, 0x0, <r84=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001000)=0x14)
getsockname$packet(r1, &(0x7f0000001040)={0x11, 0x0, <r85=>0x0}, &(0x7f0000001080)=0x14)
r86 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r86, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r87 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r86, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r86, 0x0, 0x2)
sendfile(r86, r87, 0x0, 0x40d09)
r88 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r86, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r89=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r88, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r89}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001180)={0x11, 0x0, <r90=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000011c0)=0x14)
r91 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r91, &(0x7f0000000100), 0x18d, 0x6c00)
getsockopt$inet_mreqn(r91, 0x0, 0x20, &(0x7f00000012c0)={@dev, @loopback, <r92=>0x0}, &(0x7f0000001300)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001440)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r93=>0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000001540)=0xe8)
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000001e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001580)={0x82c, r10, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r36}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r40}}}]}}, {{0x8, 0x1, r44}, {0x1d8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r45}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r49}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r53}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r55}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x14e}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r56}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r60}}}]}}, {{0x8, 0x1, r61}, {0x1f4, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r62}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r66}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r68}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r70}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r71}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r75}, {0x4}}, {{0x8, 0x1, r79}, {0x1a0, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x1, 0x1, 0x8aad, 0x200}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffff8db}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r80}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r81}}}]}}, {{0x8, 0x1, r83}, {0x1b4, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r84}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r85}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffd}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r89}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r90}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r92}}}]}}, {{0x8, 0x1, r93}, {0x78, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x3, 0x8, 0x1f, 0xb1}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x790}}}]}}]}, 0x82c}, 0x1, 0x0, 0x0, 0x4}, 0x4040)
sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')

01:01:07 executing program 1:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f00000001c0)={0xc, 0x0, {0x55, 0xe543, 0x400, {0x6, 0x8}, {0x2, 0x4}, @ramp={0x2, 0x100000000, {0x7, 0x3f9, 0x9, 0x4}}}, {0x56, 0x3, 0x0, {0x0, 0xffffffffffffffff}, {0xffffffffffff1ba7, 0x40}, @const={0x9, {0x10000, 0x0, 0xffff, 0x9}}}})
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3b)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3b)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r5, 0x0, 0x0)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0xffffffffffffff1a, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r5], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)

01:01:07 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x4d1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe705, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0xffffffd3, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0463b6b72c0d4000000000449d60285064e70d36235c4bb940c44d211ba227495f10496d7ce239e9430764e41ead8fd8b95319f87beaa49a1d1f0587cb9f2869ff071212d663153cd6d28364936a12210c09c6dcd3a1442b3ab4d09cf0da0c5fc0eda977bada465d482c4dbc8430801ab4d2bc17"], 0x0, 0x0, 0x0})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
fsync(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x7f, 0x80000)
ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f00000003c0)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="0000131e4be7448e6780db7242f66ac5ebd4255f4cd8355aa87b50408dc5465b991bb776ebb83abf8ee29a70c69a31f84e1d5e8f28c203f1e9e2d22d9fa94aa9e8bcf7cedaf967d36c66f7061ad112d39f4a0a2c2376bb9fc343dfb7b98c9a5119f58eea6eb280844e625e410df66a8bd55a913f4f27a20c6a47b61dfeecaeaacc5f273c1350f9d13353a48e579d1a0eda5970a2521f84ae21ff4a096ebc2997fab23937780b60840b4d93c9c5c3805a5e22", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
syz_emit_ethernet(0x1e, &(0x7f00000001c0)={@broadcast, @dev={[], 0x16}, [{[{0x9100, 0x0, 0xe6, 0x3}], {0x8100, 0x8000, 0x30, 0x3}}], {@llc={0x4, {@llc={0x1e, 0xe0, "807a", "1dcc78d4"}}}}}, &(0x7f00000002c0)={0x0, 0x4, [0xf12, 0x921, 0x807, 0x644]})
open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)

01:01:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:07 executing program 4:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$PPPIOCDISCONN(r4, 0x7439)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
finit_module(r5, &(0x7f0000000280)='}&GPLposix_acl_access\\#eth0^\x00', 0x1)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000240)='vboxnet0\':eth09GPL::nodev\x00')

[ 2533.336177] binder_alloc: 16098: binder_alloc_buf, no vma
[ 2533.359507] binder: 16098:16102 transaction failed 29189/-3, size 80-24 line 3284
01:01:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:07 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x200})
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd2a, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0xfffffffffffffe66, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800000000487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0xfcde, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x33, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0xffffffffffffff5d, 0x4, 0x7b}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

[ 2533.396693] binder: undelivered TRANSACTION_ERROR: 29189
01:01:07 executing program 4:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_buf(r4, 0x1, 0x1a, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000800)=""/186, 0xba}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, 0x6c00)
ioctl$TIOCLINUX4(r5, 0x541c, &(0x7f00000001c0))
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:08 executing program 1:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup(r0)
stat(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r5, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r5, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0x40d09)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
getresgid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000640)=<r8=>0x0)
stat(&(0x7f0000000700)='./bus\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
r10 = gettid()
ptrace$setopts(0x4206, r10, 0x0, 0x0)
tkill(r10, 0x3b)
ptrace$setregs(0xd, r10, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r10, 0x0, 0x0)
r11 = gettid()
ptrace$setopts(0x4206, r11, 0x0, 0x0)
tkill(r11, 0x3b)
ptrace$setregs(0xd, r11, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r11, 0x0, 0x0)
r12 = gettid()
ptrace$setopts(0x4206, r12, 0x0, 0x0)
tkill(r12, 0x3b)
ptrace$setregs(0xd, r12, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r12, 0x0, 0x0)
r13 = gettid()
ptrace$setopts(0x4206, r13, 0x0, 0x0)
tkill(r13, 0x3b)
ptrace$setregs(0xd, r13, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r13, 0x0, 0x0)
r14 = gettid()
ptrace$setopts(0x4206, r14, 0x0, 0x0)
tkill(r14, 0x3b)
ptrace$setregs(0xd, r14, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r14, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYPTR=&(0x7f0000000580)=ANY=[@ANYRESHEX=r10, @ANYBLOB="042a97dba15c511a636e3442bf262b42e068a1b11e4cf75895c9c50ece96df3cad07f903a5c98fa247de0782a67bc6af20f76c43", @ANYRESHEX=r11, @ANYRES64, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES64=r12, @ANYRESHEX=r13, @ANYPTR64, @ANYPTR64], @ANYRES16=r4, @ANYRESDEC], @ANYRES32=r7, @ANYBLOB="67f236aab195e5f17dcdc2aa68bad8ae7110cc8ed29be43aa3f83158f6ad6dcf7716a064129c9d438de82b47f77faa63cbac2964a08de7570cc6b325defe475373c322ca3019ab5ca8c97c26db957b097a0e1ab7b6bdd8ba6fdc65d14e26995db2c850fad2452067434e62a0a9b38d9794cb7357a50beed14ec59eaf5c72b87ccb98f8bc06d0bc22274be1b22f91827c23321b3b4f344e", @ANYRES32=r7, @ANYPTR=&(0x7f0000000840)=ANY=[@ANYPTR64=&(0x7f0000000800)=ANY=[@ANYRES16=r14, @ANYRESHEX=0x0], @ANYRESOCT, @ANYPTR64], @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES64, @ANYBLOB="08009763", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="10000000000000002000020000000000"], 0xf, 0x1)
r15 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r15, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r16 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r15, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r15, 0x0, 0x2)
sendfile(r15, r16, 0x0, 0x40d09)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000880)=0xffffffffffffff3b)
getresgid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000640)=<r18=>0x0)
stat(&(0x7f0000000700)='./bus\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r17}, {0x2, 0x482af0178714ef63, r17}], {0x4, 0x1}, [{0x8, 0x1, r18}, {0x8, 0x1}, {0x8, 0x60f0c3b60b2d6397, r19}, {0x8, 0x4}, {0x8, 0x3}], {}, {0x20, 0x2}}, 0x5c, 0x1)
r20 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r20, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r21 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r20, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r20, 0x0, 0x2)
sendfile(r20, r21, 0x0, 0x40d09)
getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r22=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
getresgid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000640)=<r23=>0x0)
stat(&(0x7f0000000700)='./bus\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r24=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r22, @ANYBLOB="020063ef", @ANYRES32=r22, @ANYBLOB="040001000000000008000100", @ANYRES32=r23, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0392656ef7", @ANYRES32=r24, @ANYBLOB="08009bf0fd8ea234c7d4050400", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="10000000000000002000020000000000"], 0x5c, 0x1)
getgroups(0x9, &(0x7f00000002c0)=[r9, <r25=>r19, 0xee01, 0xee00, 0xee00, 0x0, 0xee01, 0x0, r23])
write$FUSE_CREATE_OPEN(r3, &(0x7f00000003c0)={0xa0, 0x71ab83c74737d96c, 0x5, {{0x6, 0x2, 0x4, 0x9, 0x0, 0x100000001, {0x3, 0x401, 0x4, 0x4, 0x8, 0x9, 0x7a, 0xffffffffffff526e, 0x5, 0x101, 0x9, r4, r25, 0x6, 0x1}}, {0x0, 0x20}}}, 0xa0)
r26 = dup3(r2, r1, 0x0)
r27 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r27, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r27, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r26, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, '\xa1\x1bA\xcb'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

[ 2533.487507] binder_alloc: 16110: binder_alloc_buf, no vma
[ 2533.493815] binder: 16110:16113 transaction failed 29189/-3, size 80-24 line 3284
01:01:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[ 2533.539935] binder: undelivered TRANSACTION_ERROR: 29189
01:01:08 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00)
accept$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

[ 2533.605893] binder: 16122:16125 transaction failed 29189/-22, size 80-24 line 3138
[ 2533.642725] binder: undelivered TRANSACTION_ERROR: 29189
01:01:10 executing program 2:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, 0x0, 0x0, 0x0)

01:01:10 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:10 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:10 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0x9)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:10 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200"], 0x0, 0x3f}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:10 executing program 3:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
tee(r0, r2, 0x7ff, 0x4)
r3 = dup3(r1, r0, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f00000001c0)=0xfffffffffffeffff, 0x4)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000240))
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
ftruncate(r7, 0x100000001)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:10 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[ 2536.336555] binder: 16136:16144 transaction failed 29189/-22, size 80-24 line 3138
[ 2536.350347] binder: undelivered TRANSACTION_ERROR: 29189
01:01:10 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x8000)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:10 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:10 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[ 2536.400586] binder: 16153:16155 transaction failed 29189/-22, size 80-24 line 3138
[ 2536.410378] binder: undelivered TRANSACTION_ERROR: 29189
01:01:10 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:10 executing program 3:

01:01:13 executing program 2:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, 0x0, 0x0, 0x0)

01:01:13 executing program 0:
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:13 executing program 3:

01:01:13 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @loopback}, &(0x7f0000000240)=0xc)
sysinfo(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup3(r2, r1, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:13 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:13 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200"], 0x0, 0x3f}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:13 executing program 3:

01:01:13 executing program 0:
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:13 executing program 3:

01:01:13 executing program 0:
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:13 executing program 3:

01:01:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[ 2539.472173] binder_alloc: 16202: binder_alloc_buf, no vma
[ 2539.478200] binder: 16202:16203 transaction failed 29189/-3, size 80-24 line 3284
[ 2539.487944] binder: undelivered TRANSACTION_ERROR: 29189
01:01:16 executing program 2:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, 0x0, 0x0, 0x0)

01:01:16 executing program 3:

01:01:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:16 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f00000003c0)=""/211, 0xd3}, {&(0x7f0000000240)=""/159, 0x9f}, {&(0x7f0000000540)=""/118, 0x76}, {&(0x7f0000000800)=""/114, 0x72}, {&(0x7f0000000880)=""/203, 0xcb}, {&(0x7f0000000980)=""/115, 0x73}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000a00)=""/151, 0x97}], 0x8, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
r4 = getuid()
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000b40), &(0x7f0000000b80)=0x30)
getsockname$packet(0xffffffffffffffff, &(0x7f0000002600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002640)=0x14)
sendmsg$nl_xfrm(r3, &(0x7f0000002980)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002940)={&(0x7f0000002680)=@getpolicy={0x2ac, 0x15, 0x4, 0x70bd2a, 0x25dfdbfb, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x6, 0x4e22, 0x61, 0xa, 0x80, 0x60, 0x0, 0x0, r4}, 0x6e6bc0, 0x5}, [@user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, [], 0x18}, @in=@remote, 0x0, 0x2}}, @migrate={0x138, 0x11, [{@in6=@dev={0xfe, 0x80, [], 0xa}, @in=@loopback, 0x33, 0x0, 0x0, 0x3501, 0xa, 0xa}, {@in6=@rand_addr="79fcd90dab3b6fc9140ad822af9f5442", @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6c, 0x2, 0x0, 0x3500, 0x2, 0xa}, {@in=@local, @in6=@local, 0xee, 0x1, 0x0, 0x3504, 0xa, 0x2}, {@in=@rand_addr=0x329400, @in6=@empty, 0xff, 0x3, 0x0, 0x3504, 0x0, 0xd7434a63cabf8b13}, {@in6=@mcast2, @in6=@loopback, 0x9f, 0x3, 0x0, 0x3507, 0x2}, {@in=@multicast1, @in6=@mcast1, 0x3c, 0x3, 0x0, 0x0, 0x2, 0xa}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@empty, 0x3c, 0x2, 0x0, 0x3504, 0x8, 0xa}]}, @coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @migrate={0xb4, 0x11, [{@in6=@ipv4={[], [], @empty}, @in6=@mcast1, 0x33, 0x1, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x47, 0x7, 0x0, 0x3504, 0x2}, {@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6c, 0x0, 0x0, 0x3504, 0xa, 0x2}, {@in=@local, @in=@local, 0x3c, 0x39ef46e03d021825, 0x0, 0x34ff, 0xa, 0x8}]}, @lifetime_val={0x24, 0x9, {0x9, 0x6, 0x2, 0x1}}, @offload={0xc, 0x1c, {r6, 0x1}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x40}, 0x24000000)
r7 = dup3(r2, r0, 0x0)
r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xfffffffffffffe3a, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:16 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:16 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200"], 0x0, 0x3f}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:16 executing program 3:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
tee(r0, r2, 0x7ff, 0x4)
r3 = dup3(r1, r0, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f00000001c0)=0xfffffffffffeffff, 0x4)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000240))
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
ftruncate(r7, 0x100000001)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

[ 2542.392891] binder_alloc: 16208: binder_alloc_buf, no vma
[ 2542.419994] binder: 16208:16217 transaction failed 29189/-3, size 80-24 line 3284
01:01:16 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
flock(r4, 0x8)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[ 2542.447278] binder: undelivered TRANSACTION_ERROR: 29189
01:01:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[ 2542.518722] binder_alloc: 16231: binder_alloc_buf, no vma
[ 2542.526988] binder: 16231:16232 transaction failed 29189/-3, size 80-24 line 3284
[ 2542.536085] binder: undelivered TRANSACTION_ERROR: 29189
01:01:17 executing program 3:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
tee(r0, r2, 0x7ff, 0x4)
r3 = dup3(r1, r0, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f00000001c0)=0xfffffffffffeffff, 0x4)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000240))
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
ftruncate(r7, 0x100000001)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[ 2542.560736] binder_alloc: 16234: binder_alloc_buf, no vma
[ 2542.566612] binder: 16234:16235 transaction failed 29189/-3, size 80-24 line 3284
[ 2542.576879] binder: undelivered TRANSACTION_ERROR: 29189
[ 2542.620824] binder_alloc: 16241: binder_alloc_buf, no vma
[ 2542.629305] binder: 16241:16242 transaction failed 29189/-3, size 80-24 line 3284
[ 2542.638737] binder: undelivered TRANSACTION_ERROR: 29189
01:01:19 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:19 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getuid()
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000280)=@sco, &(0x7f00000003c0)=0x80)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000400)={'ip6gre0\x00', 0xea})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup3(r2, r1, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="845d8bee83a12b90cf7bbe284199db483e5e584c65e07664f5b101828c", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f00000001c0), &(0x7f0000000240)=0x4)

01:01:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:19 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:19 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:19 executing program 2:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:19 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:19 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2545.414413] binder_alloc: 16249: binder_alloc_buf, no vma
[ 2545.425696] binder: 16249:16256 transaction failed 29189/-3, size 80-24 line 3284
[ 2545.436458] binder: undelivered TRANSACTION_ERROR: 29189
01:01:20 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
add_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/user\x00', 0x2, 0x0)
fcntl$setflags(r1, 0x2, 0x1)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup3(r3, r2, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYBLOB="6239f39e35fcb4cc259fd80800000000000000a2bf74b34a2e02ad2e9f52ecde227036319e03ba8c3eded5ceafd236e2ab31b5f6bc92e675ef36fc73bfbd007dc2dc870b6c5ee2df7c8cd935c87b6e23a6094639ac0d4e381cbbee9c96036c730ea1314d8871b658d251f81469c57feab3a6a2282d928a196d03d01bfc294d5fa6babadb27dbbadf930cfde458cc7b972c3b1e8d34a0fc8263c2ae4aed64b309c281de5455adb748caea95ede2c0b0ea5faf5532af4f447456975f17096f05b412354b6b4c76a1ffe3356251593a4875c35700b1b52651db238b68e6", @ANYRES32=r4], 0x3}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)
setxattr$security_smack_entry(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='security.SMACK64MMAP\x00', &(0x7f0000000440)='system\x00', 0x7, 0x2)

01:01:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[ 2545.499475] binder: 16263:16267 transaction failed 29189/-22, size 80-24 line 3138
[ 2545.535985] binder: undelivered TRANSACTION_ERROR: 29189
01:01:20 executing program 2:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:20 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[ 2545.560655] binder: 16277:16278 transaction failed 29189/-22, size 80-24 line 3138
[ 2545.570386] binder: undelivered TRANSACTION_ERROR: 29189
01:01:20 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:20 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()

[ 2545.632696] binder: 16284:16285 transaction failed 29189/-22, size 80-24 line 3138
[ 2545.659017] binder: undelivered TRANSACTION_ERROR: 29189
01:01:22 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:22 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()

01:01:22 executing program 0:
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:22 executing program 2:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()

01:01:22 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="000525bd700000000000130000002801040014000700080004020200000008000400ff01000044000700080002000400000008000200060000000800010000000000080002000000000008000200a6000000080002007d480000080002000200000008000400810000002c000700080001001500000008000200060000000800040000000000080004000800000008000400000000000c00010073797a300000000024000700080001001e0000000800030008000000080004007b0000000800040000000000040007003c00070008000100090000000800020051cdbd3808000200a915000008000200080000000800020002000000080002007f00000008000400080000001c00070008000300010001000800040000080000080001001b0000001400010062726f6164636173742d6c696e6b00004800050008000100756470001c00020008000400f3000000080001000000000008000200db0f00000c0002000800030000f8ffff14000200080001001300000008000300000000007dfa3ef7a251b5257e9946924b2ea6511ce948ba1c9fe78d34afe6f4285d80a766c7dadf43614c6f016392629b3af694152149df69ca925657da08fbff7afadd0ac1724255f85ea5bfe3606bdfb14a2489203fd3179042e2a73c3c95fb9f245a87c0e9a2dc977678d76ea7a0480423f7fd10902502b311c28f0e68b6c29e191f374d2e5327a07510124a961f5e38471abbb5259d80f5e898cf55af1720afaa5277a832d4f9be9b59802a6863505c2fecd5d24cd6fd74ce1667176a1710e385af1b04fb67f49317ad1df9c9ddc69958923dff4c4a918a7a137da46c9f351da58125965b7ef39a451eb4fa1f8b790dcf8c89bb241a02e0abe3a8276198ac845bf4c73e026d7b7ee20bfec5e4e58f356712a0da2aaf59c9f6e8dd6dc4ce4949492bea73a9c88ff641101ce73b81a8f0ab898fb5515758987a1b4853ee390032950e8e90b7c89dfa2ec28fba6cfa65e08af41272e48338143efde0995b370875d704f52dd63eeac39af11139a93020d37b9a3104164c7d6ff8d75adaa842451cbe46f7387f446529815b1a9df929b65e94ff58f08fd7705427b4b53d61be6bd62d0236d1eb109db4b6b216c682496322812f52b2527c6178ba21afd68978efff2b06592fd41b3b320d0dd30fc1bfb5421c6ed28677572def2c41"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:22 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()
creat(&(0x7f0000000200)='./bus\x00', 0x0)

01:01:22 executing program 0:
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:22 executing program 2:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)

01:01:22 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:22 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:23 executing program 0:
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[ 2548.559566] binder: 16330:16332 ioctl c0306201 0 returned -14
01:01:25 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:25 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup3(r2, r1, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000280)={0xaa, 0x2, 0x200}, 0xc)
setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xdb, 0x7, 0x7, "70374f4d4bf759492645ce0ed5b42f0f", "c57b3097314fa00771f81ca70f014419804de1cddbe3a37bf6f549a4c55408fc4ed2a29fd7ab4b3ffc409505d5bae4d23c267011fa934153ed09f51763d8115a7fe799f33f8af8649db695b872abb876ce67ba901ac9e21654a75d6438a413ca6747444257d8138974821fea9b949778e7b7658dec7c2387ac0fae159dd2407a44e0245f66db0f3c7eaebc39be3c50fab6219e4b3ed67d34d5fb1810aa720d810b3cd91139d7b02826fa98f907c059f3c5669bb11fc066ae7aa311ee9567988addd94c2d4420"}, 0xdb, 0x1)

01:01:25 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)

01:01:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

01:01:25 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)

01:01:25 executing program 2:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})

[ 2551.443576] binder: 16337:16345 ioctl c0306201 0 returned -14
01:01:25 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})

01:01:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

01:01:26 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)

01:01:26 executing program 2:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()
creat(&(0x7f0000000200)='./bus\x00', 0x0)

01:01:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:01:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2551.554496] binder: 16353:16359 ioctl c0306201 0 returned -14
01:01:28 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:01:28 executing program 1:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x1ff)
r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
write(r5, &(0x7f00000002c0)="8848c07b90393d50371cbecd4dde36657e4dd534fe29fa740eb61136b157caadb38305d2f240a01a5b48f161187cffc17107e7ced07855548e5e870f775a7d875afd0a1b0a03fc7779a293ac15dfbf363754fd48b02fb53408432d8f3017255df96c4abe02f75fa33812846df4720273d904d877560e66a432fe80030e69b5e34a256208fe7daff7f52eb8ef7ea6c519935a875867d304e6ce0c45050a61e254182fd59c320f05f91e5a402f6bf52e568721e3bc01117d7ed0936590dad755fe973dc8509da674f9bdf03ad765aaacd4c0020a69a420e77a6b82ad10bc4623cb6d115a39e6dfa3616d89c78b11986ca73735b938", 0xf4)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r6, 0x100, 0x70bd26, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xad}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2a000080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x8c, r6, 0xb00, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xaca8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48801}, 0x8000)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:28 executing program 2:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r2, 0x0, 0x2)

01:01:28 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={<r2=>r0, r1, 0x0, 0x18, &(0x7f00000001c0)='-mime_typeuser{-keyring\x00', 0xffffffffffffffff}, 0x30)
rt_sigqueueinfo(r2, 0x9, &(0x7f0000000280)={0x1c, 0xffffffffffffff99, 0x6})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstatfs(0xffffffffffffffff, &(0x7f0000000800)=""/4096)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = dup3(r4, r3, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:28 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})

01:01:28 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x39b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa18e, 0xffffffff}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = eventfd2(0x6, 0x1)
readv(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/64, 0x40}], 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup3(r2, r1, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000d7b4a31c013025acf6603aa29f57021941d85fd818bfd1efac1a80", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})

01:01:29 executing program 2:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)

01:01:29 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="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"/383], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})

01:01:29 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})

01:01:31 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})

01:01:31 executing program 2:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})

01:01:31 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r2, 0x0, 0x2)

01:01:31 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0x40d09)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
getresgid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000640))

01:01:31 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
r1 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x50d, 0xca100, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7679fff3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x9, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0xb0f, 0x0, 0x0, 0xac0002928e42b2e9}, 0x0, 0x2, r0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0)
r3 = dup3(r2, 0xffffffffffffffff, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0})

01:01:32 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0x40d09)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
getresgid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000640))

01:01:32 executing program 2:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x141000, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getuid()
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0x40d09)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
getresgid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000640))
stat(&(0x7f0000000700)='./bus\x00', &(0x7f0000000740))

01:01:32 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x70d00, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
write(r2, &(0x7f00000002c0)="8848c07b90393d50371cbecd4dde36657e4dd534fe29fa740eb61136b157caadb38305d2f240a01a5b48f161187cffc17107e7ced07855548e5e870f775a7d875afd0a1b0a03fc7779a293ac15dfbf363754fd48b02fb53408432d8f3017255df96c4abe02f75fa33812846df4720273d904d877560e66a432fe80030e69b5e34a256208fe7daff7f52eb8ef7ea6c519935a875867d304e6ce0c45050a61e254182fd59c320f05f91e5a402f6bf52e568721e3bc01117d7ed0936590dad755fe973dc8509da674f9bdf03ad765aaacd4c0020a69a420e77a6b82ad10bc4623cb6d115a39e6dfa3616d89c78b11986ca73735b938", 0xf4)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00')
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000540)={0x6b, r3, 0x100, 0x70bd26, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_INACT_CONNS={0xfffffffffffffe18, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xad}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x180802}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, r3, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10010}, 0x4000)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup3(r5, r4, 0x0)
r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
alarm(0x4)
ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000100)=0x1)
write$UHID_DESTROY(r7, &(0x7f00000001c0), 0x4)
sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
dup(r0)
sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010804000000b2233a5b56e7e579899edc4b00", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0})

[ 2557.542061] binder: 16425:16427 got transaction with invalid offset (0, min 0 max 0) or object.
[ 2557.574833] binder: 16425:16427 transaction failed 29201/-22, size 0-24 line 3379
[ 2557.584131] binder: undelivered TRANSACTION_ERROR: 29201
[ 2557.604673] binder: 16437:16438 got transaction with invalid offset (0, min 0 max 0) or object.
[ 2557.621489] binder: 16437:16438 transaction failed 29201/-22, size 0-24 line 3379
01:01:32 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2557.671680] binder: undelivered TRANSACTION_ERROR: 29201
01:01:34 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0})

01:01:34 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x80000001, 0x200, 0x2, 0xb1, 0x8, "9e0f3f7b7fe9a4106bd79c9a8ff2b06e4986bc", 0x100000001, 0xc3d})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:34 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:34 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000006c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x48, r3, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xee}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x24001011)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$GIO_FONTX(r5, 0x4b6b, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
write$binfmt_misc(r6, &(0x7f00000002c0)={'syz0', "d8ee7efee659f4ebe9b578a7bd0a4a742bcbaced675c493178bd273935e49df179ca9c397b3097e75f476aae92f2ebae3bfffa4233de58071eba015bd3cc7c789f5e8aae71ff9c55b8300a4273bb44408057b5b2b1af63024d2fe3e4aebc6f07a2953690a769a438c9c2e65e309d2f949a01efb6c5feb6418397c98cbb3a4fb216aee965af2c49a39ef02831f5e0e4e309933c109b9fa2e66e0f9e52d847ecaec77800a0858cbf507dfca97f6fc0209e9b8f68c6591d33a2dcf0bfb9a6c3e55bdf71a392f51eb91b7aaa92d451b3deec2f52195d64a7694fdea761e0cbcae704a0768805c57ba5c54dfb0dcff9f651"}, 0xf3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xc0, &(0x7f0000000500)={0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xfffffffffffffffc, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0xc62}}, 0xffffffffffffffb7)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f00000000c0)='sysfs\x00', r7}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r4, r5, 0x0, 0x7, &(0x7f0000000040)='vmnet0\x00', r7}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={<r8=>r2, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='@\\^-\'\x00', r7}, 0x30)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r8, 0x0, &(0x7f0000000140)=""/73)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3050001f60000"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r9, 0x0, 0x0)
tkill(r9, 0x3b)
ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r9, 0x0, 0x0)

01:01:34 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x400, 0x101, 0x7fffffff, 0x5, 0x0, 0x3, 0x120040, 0x4, 0x5, 0xb0f, 0x3, 0x6, 0x3, 0x9, 0x9, 0x7ff, 0x100, 0x1ff, 0x4, 0x8, 0x10001, 0x9, 0x70000000000, 0x0, 0x44, 0x4, 0x3, 0x400, 0x4, 0xb, 0x7fffffff, 0xfffffffffffffff7, 0x1, 0x5, 0x400, 0xff, 0x0, 0xfffffffffffffff9, 0x3, @perf_bp={&(0x7f00000001c0), 0x6}, 0x2, 0x8001, 0x3, 0x5, 0xa7fa, 0x4, 0xa5}, 0x0, 0xd, r0, 0x5)
perf_event_open(&(0x7f0000000040)={0x1, 0xffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup3(r3, r2, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x6, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:34 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140))
r2 = creat(&(0x7f0000000b80)='./bus\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x6609, 0x0)
dup2(r2, r1)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000500))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3b)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x2}, 0x39c)
tkill(r4, 0x3b)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)

01:01:35 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f00000016c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)=""/138, 0x8a}, {&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000400)=""/155, 0x9b}, {&(0x7f0000001540)=""/232, 0xe8}, {&(0x7f0000001640)=""/121, 0xffffffffffffff1c}], 0x8, 0x6c02)
ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x800, 0x5})
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000000c0)=""/14, &(0x7f0000000140)=0xe)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3819000010003b0e0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000500767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000000c0)={@flat, @flat, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[ 2560.515905] binder: 16456:16466 got transaction with invalid offset (0, min 0 max 0) or object.
[ 2560.529387] binder: 16456:16466 transaction failed 29201/-22, size 0-24 line 3379
[ 2560.552260] binder: undelivered TRANSACTION_ERROR: 29201
01:01:35 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003b0e00000000000000000000000027262f90a091bf61bda30f9b3ce293bcd561814db2ac0283936f96fda7749198c970b3af5c", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1)
r2 = geteuid()
fchown(r1, r2, 0x0)
quotactl(0x8, &(0x7f0000000340)='./file0\x00', r2, &(0x7f0000000380)="731b155d06333a2f06513e1c32cce531771629bb3410a8a7679ad1")
quotactl(0x6bc, &(0x7f0000000240)='./file0\x00', 0xee01, &(0x7f00000002c0)="0bc6bc30b76a6827428bb2e278933990fae4ec2209d17c7656d546f5d2fe174c1f9b16e23ddf8456e447b2e6782b707027f8ba141643ff73d6b6e042c70a22b440bb513733f80d4a069a0e94e3")
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xe4)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000140)=""/61, 0x10}, {&(0x7f00000001c0)=""/84, 0x1b}], 0x2, 0x6c00)
setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000003c0)=@dstopts={0xc}, 0x8)

01:01:35 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x400)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000000c0)={@flat, @flat, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[ 2560.601584] binder: release 16480:16481 transaction 73 out, still active
[ 2560.612808] binder: undelivered TRANSACTION_COMPLETE
[ 2560.643383] binder: send failed reply for transaction 73, target dead
[ 2560.672656] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2560.674056] binder: release 16489:16492 transaction 75 out, still active
[ 2560.674061] binder: undelivered TRANSACTION_COMPLETE
[ 2560.684468] binder: send failed reply for transaction 75, target dead
01:01:38 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:38 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x4, 0x80000, 0x5b0e00, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(r2, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000100)=0x1)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16=r3], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x148, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d07}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x759}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdb66}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4008008}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r4 = accept4(r0, &(0x7f0000000400)=@nfc_llcp, &(0x7f0000000480)=0x80, 0x800)
setsockopt$inet_tcp_int(r4, 0x6, 0x4, &(0x7f0000001640)=0x8001, 0x4)

01:01:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000000c0)={@flat, @flat, @fda}, 0x0}}], 0x0, 0x0, 0x0})

01:01:38 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8)
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0x40d09)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
getresgid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000640)=<r5=>0x0)
stat(&(0x7f0000000700)='./bus\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r4}, {0x2, 0x482af0178714ef63, r4}], {0x4, 0x1}, [{0x8, 0x1, r5}, {0x8, 0x1}, {0x8, 0x60f0c3b60b2d6397, r6}, {0x8, 0x4}, {0x8, 0x3}], {}, {0x20, 0x2}}, 0x5c, 0x1)
chown(&(0x7f00000001c0)='./file0\x00', r1, r5)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = dup3(r8, r7, 0x0)
r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r10, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:38 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
tkill(r1, 0x11)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x57d, 0x3, 0x0, 0x3, 0x11, 0x207, 0x44a6, 0x401, 0x7, 0xfff, 0x8, 0x100})
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
socket$inet6_udp(0xa, 0x2, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)

01:01:38 executing program 3:
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x1000)=nil)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0})

01:01:38 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
setpriority(0x3, 0xffffffffffffffff, 0x7fff)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2563.543908] binder: release 16503:16506 transaction 77 out, still active
[ 2563.554499] binder: undelivered TRANSACTION_COMPLETE
[ 2563.576527] binder: send failed reply for transaction 77, target dead
01:01:38 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000040), &(0x7f00000000c0))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:38 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003b0e0000000000000096ea0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$RTC_PIE_ON(r1, 0x7005)

01:01:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x478, 0x0, 0x250, 0x138, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000040), {[{{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, @mac, {[0xff, 0x0, 0x0, 0x101]}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0x0, 0x0, 0x0, 0x7f, 0xff]}, 0xfffffffffffffff9, 0x1, 0x1, 0x7, 0xffffffffffffffc1, 0x746, 'netdevsim0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x0, 0xc0}, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7f, 'syz0\x00', 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x14}, @rand_addr, 0x0, 0xffffff00, @mac=@local, {[0x0, 0x181, 0x0, 0x0, 0x0, 0x1fe]}, @empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0x101]}, 0x5, 0x6, 0x20, 0x6, 0x5, 0x0, 'bcsh0\x00', 'hwsim0\x00', {}, {}, 0x0, 0x1ab}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x23}, 0xff, 0xffffff00, @empty, {[0x0, 0x58d7ae0e9038854, 0xff]}, @empty, {[0x0, 0xff, 0xb6f8f8e468ee3e21, 0xff, 0xff]}, 0x7fff, 0x8, 0x1, 0x6, 0x2, 0x1, 'veth1_to_bond\x00', 'teql0\x00', {0xff}, {0xff}, 0x0, 0x3cad21c50540fff5}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@link_local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xd43924f22c8410ed, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8)

[ 2563.611522] binder: 16516:16524 got transaction with invalid offset (0, min 0 max 0) or object.
[ 2563.624710] binder: 16516:16524 transaction failed 29201/-22, size 0-24 line 3379
[ 2563.638731] binder: undelivered TRANSACTION_ERROR: 29201
01:01:38 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$packet(0x11, 0x1, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000400)=@req3={0x1, 0x7, 0xa35, 0x2, 0x5, 0xffff, 0x4}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14)
r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r0, &(0x7f00000003c0)={0x2})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2400008}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=@bridge_newneigh={0x78, 0x1c, 0x200, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x32, 0x20, 0x6}, [@NDA_VLAN={0x8, 0x5, 0x4}, @NDA_LLADDR={0xc, 0x2, @broadcast}, @NDA_MASTER={0x8, 0x9, 0x5}, @NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_PORT={0x8, 0x6, 0x4e23}, @NDA_DST_MAC={0xc, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NDA_PORT={0x8, 0x6, 0x4e21}, @NDA_CACHEINFO={0x14, 0x3, {0x2, 0x0, 0x200, 0x9}}, @NDA_PORT={0x8, 0x6, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r6 = dup2(r0, r2)
recvfrom(r6, &(0x7f00000001c0)=""/228, 0xe4, 0x40000000, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2563.709628] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2563.729282] binder: 16537:16539 got transaction with invalid parent offset or type
[ 2563.729324] binder: 16537:16539 transaction failed 29201/-22, size 80-24 line 3454
[ 2563.731051] binder: undelivered TRANSACTION_ERROR: 29201
[ 2563.735282] binder: 16537:16544 got transaction with invalid parent offset or type
[ 2563.735319] binder: 16537:16544 transaction failed 29201/-22, size 80-24 line 3454
[ 2563.736178] binder: undelivered TRANSACTION_ERROR: 29201
01:01:41 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:41 executing program 0:
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000540)=[@increfs={0x40046304, 0x1}, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={@fda={0x66646185, 0x1, 0x1, 0x31}, @flat=@weak_handle={0x77682a85, 0x1}, @fda={0x66646185, 0x3, 0x2, 0x10}}, &(0x7f00000002c0)}, 0x40}, @decrefs={0x40046307, 0x3}, @request_death, @release={0x40046306, 0x3}, @register_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffd84, 0x1aa, &(0x7f0000000480)={@fd={0x66642a85, 0x0, r0}, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/40, 0x0, 0x2, 0x13}}, &(0x7f0000000500)}}, @decrefs={0x40046307, 0x3}], 0x349, 0x0, 0x0})

01:01:41 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0)
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f00000003c0)=0x81)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup3(r5, r4, 0x0)
r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
dup2(r2, r7)
ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000100)=0x1)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
ppoll(&(0x7f00000001c0)=[{r8, 0x4240}, {0xffffffffffffffff, 0x2101}, {r9, 0x8813e856df5750d2}, {r5, 0x3000}, {r1, 0x10062}, {0xffffffffffffffff, 0x2}, {r0}], 0x7, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f0000000280)={0x7}, 0x8)
r10 = gettid()
ptrace$setopts(0x4206, r10, 0x0, 0x0)
tkill(r10, 0x3b)
ptrace$setregs(0xd, r10, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r10, 0x0, 0x0)
sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:41 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}, 0x1, 0x0, 0x0, 0x814}, 0x0)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x144000)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x70, 0xffffffffffff2d41, 0x8, 0x1, 0x3, 0x0, 0x1, 0x0, 0xd67756d3dc3d9ac4, 0x0, 0x80000000, 0x9d6, 0x5, 0x1, 0x401, 0x2e5, 0x40, 0x0, 0x6, 0x100000000, 0xa66, 0x9, 0x9, 0x6, 0x7, 0x8, 0x7fffffff, 0x101, 0x6, 0x5, 0x8, 0x4, 0x10001, 0x7fff, 0x1, 0x74, 0x9, 0x0, 0x9, 0x4, @perf_config_ext={0x6e7, 0x8}, 0x844, 0x200, 0xffff, 0x3, 0x0, 0x2025, 0x9}, r1, 0x8, r2, 0x3)

01:01:41 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpgrp(0x0)
capget(&(0x7f0000000040)={0x6006256e, r1}, &(0x7f00000000c0)={0x9b1e, 0x0, 0x5, 0x385, 0xdc88, 0x6})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}}, 0x800)

01:01:41 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'user.', '\x00'}, &(0x7f00000001c0)=""/231, 0xe7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:41 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20200, 0x0)
ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000001c0)=""/150)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="de0000000000000018000000000000003000000000000000e8d67a6dbab07011c67b6b792b"]], 0x0, 0x0, 0x0})

01:01:41 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r3, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0x40d09)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
getresgid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000640)=<r6=>0x0)
stat(&(0x7f0000000700)='./bus\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r5, @ANYBLOB="020063ef", @ANYRES32=r5, @ANYBLOB="040001000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08009763", @ANYRES32=r7, @ANYBLOB="0800080005d4fd675498f0e3f7969c7183fefb8be4d7486ff5d731", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="10000000000000002000020000000000"], 0x5c, 0x1)
r8 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r8, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r9 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r8, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r8, 0x0, 0x2)
sendfile(r8, r9, 0x0, 0x40d09)
getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
getresgid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000640)=<r11=>0x0)
stat(&(0x7f0000000700)='./bus\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r10}, {0x2, 0x482af0178714ef63, r10}], {0x4, 0x1}, [{0x8, 0x1, r11}, {0x8, 0x1}, {0x8, 0x60f0c3b60b2d6397, r12}, {0x8, 0x4}, {0x8, 0x3}], {}, {0x20, 0x2}}, 0x5c, 0x1)
getgroups(0x1, &(0x7f0000000980)=[<r13=>0xffffffffffffffff])
setresgid(r6, r11, r13)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="d3d2ab3c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
r14 = gettid()
ptrace$setopts(0x4206, r14, 0x0, 0x0)
tkill(r14, 0x3b)
ptrace$setregs(0xd, r14, 0x0, &(0x7f0000000080))
rt_sigsuspend(&(0x7f0000000180)={0xfffffffffffffffd}, 0x8)
ptrace$cont(0x7, r14, 0x0, 0x0)
r15 = gettid()
ptrace$setopts(0x4206, r15, 0x0, 0x0)
tkill(r15, 0x3b)
ptrace$setregs(0xd, r15, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r15, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="82091a39c7d894eef3c28d80328fd4bf1c25a6ee22207c53752cc104e8a29fe3abdfce543a4783b2331536066b9fab809d1665557a5c4c6cd62bc52212c623836ab5f950db4af9cb18609cf4a4f7292bb0bc52548909", @ANYRESDEC=r14, @ANYRES32=r2, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESOCT=r2], @ANYRES16=0x0, @ANYRESOCT=r0, @ANYBLOB="9a8b74cf531e2121675e98bd2c319698345a64629d0200000036d137030000d188cc556f3653bb9a305d3889023fb454568d8e7e47f6826ce9f945b4d0e1bb17adb3808b4fc044cca9c3bf9440c0e475f9b2c095161091c17c2dc734378449e5defa4f547650f6c853ae2191b2c1628b96b7bacc3cbc7456d33c7ba0dfa4cf64f6096dff02c705c650ca7b59eac00432474003952034a0d3d2b75b08e195359f2502f63dabc19fbb00f405cce715a141363b479e4dfa39d7373ed888", @ANYRESDEC=r0, @ANYRESDEC=r15], @ANYRES16=0x0, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x50}, 0xfffffffffffffeaa)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000640)=[&(0x7f0000000240)='-wlan0\x00', &(0x7f0000000280)='eth1\x00', &(0x7f00000002c0)='procmd5sum\x00', &(0x7f0000000300)='&bdevmime_typekeyring]\x00', &(0x7f0000000340)='selfposix_acl_accessvmnet1cpuset\x00', &(0x7f0000000500)='\xed\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='.vmnet0+vmnet0vmnet0\\}\\)ppp0$\x00', &(0x7f00000005c0)='security[!(wlan1-\'%', &(0x7f0000000600)=')]bdev[\x00'], &(0x7f0000000900)=[&(0x7f00000006c0)='em0\\\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='!(\x00', &(0x7f0000000780)='nodevsystemvmnet1:\x00', &(0x7f00000007c0)='-ppp0lo\\@@mime_typesystem\x00', &(0x7f0000000800)='vmnet1^%vmnet1eth1\x00', &(0x7f0000000840)='vmnet0wlan0wlan1-\x00', &(0x7f0000000880)='ppp0GPL\'\x00', &(0x7f00000008c0)='#\x00'])

[ 2566.690864] binder: 16575:16577 got transaction with invalid offset (222, min 0 max 80) or object.
01:01:41 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_netdev_private(r1, 0x89f9, &(0x7f0000000000)="c12100aa0382166c26eaf131acf53b6f7e568fed550611ce382d815ce7867bba8c786e7dab2b1167f85db302bb007195baf01d0f0d263dd39b7cac2058c4755875da9c948a6c9a1a")

01:01:41 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
ioprio_set$pid(0x5, r2, 0x8)
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800224}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x190, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}, @SEG6_ATTR_SECRETLEN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4444)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0)
r5 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="d3d2b92c024f170b96c5e75863670d1f8a4cd3"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRESDEC=r4, @ANYBLOB="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"], 0x0, 0xfffffffffffffd31, 0xffffffffffffff89}, 0xfee8)
tkill(r5, 0x3b)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r5, 0x0, 0x0)

[ 2566.734774] binder: 16575:16577 transaction failed 29201/-22, size 80-24 line 3379
01:01:41 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000240)=""/193, 0xc1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462012000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x37fd62bd)
tkill(r1, 0x3b)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r3 = dup3(r2, 0xffffffffffffffff, 0xc0000)
write$FUSE_STATFS(r3, &(0x7f0000000000)={0x60, 0xffffffffffffffda, 0x5, {{0x9, 0x4, 0xffffffffffffffe1, 0x2, 0x5, 0x6, 0x80000000, 0x782}}}, 0x60)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2566.781461] binder: undelivered TRANSACTION_ERROR: 29201
[ 2566.791164] binder: 16575:16592 got transaction with invalid offset (222, min 0 max 80) or object.
[ 2566.803338] binder: 16575:16592 transaction failed 29201/-22, size 80-24 line 3379
[ 2566.820342] binder: undelivered TRANSACTION_ERROR: 29201
01:01:44 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:44 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000001200)='./file0\x00', 0x100000, 0xc5)
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
write(r1, &(0x7f00000002c0)="8848c07b90393d50371cbecd4dde36657e4dd534fe29fa740eb61136b157caadb38305d2f240a01a5b48f161187cffc17107e7ced07855548e5e870f775a7d875afd0a1b0a03fc7779a293ac15dfbf363754fd48b02fb53408432d8f3017255df96c4abe02f75fa33812846df4720273d904d877560e66a432fe80030e69b5e34a256208fe7daff7f52eb8ef7ea6c519935a875867d304e6ce0c45050a61e254182fd59c320f05f91e5a402f6bf52e568721e3bc01117d7ed0936590dad755fe973dc8509da674f9bdf03ad765aaacd4c0020a69a420e77a6b82ad10bc4623cb6d115a39e6dfa3616d89c78b11986ca73735b938", 0xf4)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r2, 0x100, 0x70bd26, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xad}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00000011009fb44ae11b1a3f", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(r5, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000100)=0x1)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16=r6], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1800010}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x310, r6, 0xa0a, 0xfffffffffffffe01, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4c0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xcc, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x582}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @empty, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfff, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x716}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x1b4, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x380000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffc1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x96a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcd2b101}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8e8}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x800, 0x0)
ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000040))

01:01:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:44 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)={0x15c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}]}, @TIPC_NLA_MEDIA={0x108, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd26}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc00000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffeffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9b1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x367805bc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ad6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb38}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20020814)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup3(r2, r1, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:44 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
write$P9_RREAD(r0, &(0x7f0000000000)={0x2c, 0x75, 0x2, {0x21, "48ac23d840997278d3127bd10b9bd1ab17f3ffe8342f13c61ef0b39f8a4a9325ab"}}, 0x2c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x20}, 0x40008048)

01:01:44 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c2edee56ad69f1c7aff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
accept4(r2, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000140)=0x80, 0x100000)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={<r3=>0x0}, &(0x7f0000000040)=0xc)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, &(0x7f00000001c0)=""/81)

01:01:44 executing program 2:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
r3 = accept4$inet(r2, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f00000001c0)=0x10, 0x80000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0, r3}, 0x68)
getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000280)=""/133, &(0x7f00000000c0)=0x85)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008007e00767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}}, 0x40000)
connect(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @remote}}}, 0x80)

[ 2569.622227] binder: 16610:16616 got transaction with invalid parent offset or type
[ 2569.649906] binder: 16610:16616 transaction failed 29201/-22, size 80-24 line 3454
[ 2569.656218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
01:01:44 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="000525bd700000000000130000002801040014000700080004000200000008000400ff01000044000700080002000400000008000200060000000800010000000000080002000000000008000200a6000000080002007d480000080002000200000008000400810000002c000700080001001500000008000200060000000800040000000000080004000800000008000400000000000c00010073797a300000000024000700080001021e0000000800030008000000080004007b0000000800040000000000040007003c00070008000100090000000800020051cdbd3808000200a915000008000200080000000800020002000000080002007f00000008000400080000001c00070008000300010001000800040000080000080001001b0000001400010062726f6164636173742d6c696e6b00004800050008000100756470001c00020008000400f3000000080001000000000008000200db0f00000c0002000800030000f8ffff1400020008000100130000000800030000000000"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:44 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080))
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003b0e00000000006487ac012503e3e13f550b1bec4fba00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
fcntl$setflags(r2, 0x2, 0x3)
ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000000c0))

01:01:44 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003b0e0000000000000000000000005bf22f8803a5e50e6730ba25a25c114863e34a888def6680eae687c5fd45a022621a8191002aaedf2a05134fc40c8a770c2f23175a7ade728b0e122a3546a98ca12e659e765bb4404a052611503957f6a408290d1e9998adb1883d3dc3b5adf9a5e027a907b06c4f825bc3ef19697aa5ac8db3625733737c9416e0ac23ff1db660d3937479001d361cffdd2c3a3f7a4efff27415766337a9613b879496", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000))
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffff0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}}, 0x2000c805)
socket$inet_udp(0x2, 0x2, 0x0)
accept(r2, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000000c0)=0x80)

01:01:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0xec1, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[ 2569.657763] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2569.706631] binder: undelivered TRANSACTION_ERROR: 29201
[ 2569.753460] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2569.786163] binder: 16644:16646 got transaction with invalid parent offset or type
[ 2569.794652] binder: 16644:16646 transaction failed 29201/-22, size 80-24 line 3454
01:01:44 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

[ 2569.804868] binder: undelivered TRANSACTION_ERROR: 29201
[ 2569.829672] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2569.859839] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2569.870506] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
01:01:47 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:47 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x201002, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffffffffffc1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3a3528d3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4004)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r5 = open(0x0, 0x0, 0x0)
ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x26f)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8)
r7 = request_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)=')wlan0\x00', 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r6, r7)
r8 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r7)
keyctl$negate(0xd, 0x0, 0x4, r8)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}}, 0x4004010)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600), 0x1a2, 0x0, 0x0})

01:01:47 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
r2 = socket$netlink(0x10, 0x3, 0xc)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x9c, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x30}, 0x4020)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:47 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1b)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r2 = getpgrp(0xffffffffffffffff)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r2, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup3(r3, r1, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x8, 0x4}, 0x0, 0x0, &(0x7f00000002c0)={0x4, 0xc, 0x2, 0x7}, &(0x7f00000003c0)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=0xc418}}, 0x10)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:47 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xe, 0xffffffffffffffff, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:47 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x8000000000000002, 0x4)

01:01:47 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:47 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00')
write$FUSE_POLL(r1, &(0x7f0000000040)={0x18, 0x0, 0x8, {0x4f69}}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:47 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2572.645278] binder: 16662:16672 ioctl c0306201 20000440 returned -14
01:01:47 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)

01:01:47 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:47 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003b0e000000000000000075b5b9810d52b11bd800000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:47 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
ioprio_set$pid(0x2, r1, 0x800)

01:01:47 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2572.744418] binder: 16697:16699 got transaction with invalid parent offset or type
[ 2572.764467] binder: 16697:16699 transaction failed 29201/-22, size 80-24 line 3454
[ 2572.780442] binder: undelivered TRANSACTION_ERROR: 29201
[ 2572.800798] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2572.804006] binder: 16697:16712 got transaction with invalid parent offset or type
[ 2572.804043] binder: 16697:16712 transaction failed 29201/-22, size 80-24 line 3454
[ 2572.804371] binder: undelivered TRANSACTION_ERROR: 29201
[ 2572.890742] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
01:01:50 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
sendmsg$nl_netfilter(r2, &(0x7f00000001c0)={0x0, 0x386, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x280, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'netdevsim0\x00', {0x2, 0x4e23, @empty}})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$KDADDIO(r4, 0x4b34, 0x44f)

01:01:50 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0xfff)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:50 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000001c0)={{0xff, @local, 0x4e22, 0x1, 'rr\x00', 0x6f, 0x200, 0x50}, {@loopback, 0x4e20, 0x0, 0xfffffffffffffffb, 0x2, 0x1}}, 0x44)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8d4ac7846fd255cc, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xf, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:50 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0xefde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, 0x0, 0x0, r1, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000010003b0e00"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:50 executing program 5:
sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="ed22a1d4c2084764d1d420218d7211f70dcfe461fdb96e60b7d4300498ea0f34da81a3312904d2dd9b03ea70c9f6978957ad78693e572ccef46fdc5bea467fffd507bed12fd7a8a661e32cb5052c2e2a97beae857560afe47001175607e0f836c7da4e00e420c81bdc3f203ddae3b58e07de3973ecbcddebfd15e14c980d84b5904db7a766d0e87e5591237b435d43c6f8033cf7f09395274d7a8aebffc6aba35e660f2527479cc4e668920ffdfaf91fbbd97fb8df760ab068d412bc0440fbf8a0efbf0053ed06051419cf75a1da42a85d73", 0xd2, 0x20008000, 0x0, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
ioctl$TIOCNXCL(r0, 0x540d)
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc0400001}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x9c, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000)
r5 = dup3(r2, r1, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:50 executing program 0:
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000000)='fdinfo\x00')
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3)
r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:50 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800976859c03710fa484600001020f0229b8547a265192f253b0e00"/39, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2575.633633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15104 sclass=netlink_route_socket pig=16725 comm=syz-executor.2
[ 2575.650052] binder: 16721:16727 got transaction with invalid parent offset or type
01:01:50 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
fremovexattr(r4, &(0x7f00000001c0)=@known='system.advise\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="fcad164414e4553a84935801fc00", @ANYRES16=r3, @ANYBLOB="000129bd7000ffdbdf2510000000100007000c000300070000000000000080000100080003000700000014000200080001000e000000080003000000000008000300070000000c00010069623a73697430002c00020008000400fdffffff08000400a900000008000400040000000800030000000040080001000000010008000300008000001800010069623a76657468315f746f5f62726964676500003400060004000200040002000400020004000200080001000180000008000100030000000800010080000000040002000400020020000600040002000400020004000200080001000000000008000100000000004c000900080002000200000008000200cf14000008000100010000000800010051d8f573080001000500000008000100ff070000080002000800000008000100ff07000008000100680000007c00050024000200080003005106000008000200090000000800030032f9000008000100130000004c0002000800020002000000080004000900000008000300f00f000008000300e500000008000300ff00000008000300001000000800010006000000080001001200000008000300ffffffff08000100696200003c0007000c000400030000000000000008000200e70600000c00030000000000000000000c00040003000000000000000c000400e0ffffffffffffffac00010054000200080004007c050000080002000300000008000200000000000800020054a100000800010013000000080003004000000008000100200000000800020003000000080001001e000000080003000000000044000400200001000a004e22000000400000000000000000000000000000000106000000200002000a004e2100000040ff010000000000000000000000000001ff0f000008000300060000000800030073090000200006000400020004000200080001000300000004000200080001002000000034010500140002000800030005000000080001000b0000004c00020008000100050000000800040005000000080001001200000008000200090000000800030009000000080001000700000008000300010000000800030001000000080003000900000008000100696200002400020008000300ff07000008000200008000000800040001000000080004000000000008000100657468002400020008000300dc2bea6c08000300020000000800030000010000080004000400000008000100756470001400020008000400010400000800010011000000540002000800040000000100080004000100008008000300d3000000080004000800000008000200ff0f0000080003000100000008000300ff0000000800010007000000080003000100000008000100140000000800010075647000"], 0x3fc}, 0x1, 0x0, 0x0, 0x840}, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x1, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})

[ 2575.650094] binder: 16721:16727 transaction failed 29201/-22, size 80-24 line 3454
[ 2575.650279] binder: undelivered TRANSACTION_ERROR: 29201
01:01:50 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:50 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e000000003bc521ab303b8a29", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}], 0xa, "d289f131e8609108c781007de8082f17a690abc4bac3f3d6800052c57e69fab3f253be9b7844cbaef031dc08348f539f25a3afefd84205ed39854fb52d27a3e1417d6d0c1bb259ac5f944f701e9ec6639ea6ccbd434b7f241d3e6cbfea411c3af6311b4f26351d46bfac3dfe8ac08d691f3ca61170c49cb60a3559783e547e4c5c4a84f2e46ebc848389114503f55c13b203eee1e48a539129a10fa1a478"}, 0xb7)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1063385795b89327b5860000"], 0x305, 0x0, 0x0})

01:01:50 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:50 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1230, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0x7f, 0x3f, 0x6, 0x0, 0x5, 0x20, 0x4, 0x1, 0x2, 0x8, 0x8, 0x5, 0x3, 0x5, 0x6b2, 0xed59, 0x3, 0x40, 0x0, 0x3, 0x2, 0x0, 0x400, 0x8001, 0x0, 0x0, 0x8, 0x1000, 0x1, 0x5, 0x400, 0x10, 0x400, 0x8, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbf58}, 0x20000, 0x788, 0x101, 0x1, 0x7, 0x2, 0x6}, r1, 0x4, r2, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2575.719487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49241 sclass=netlink_route_socket pig=16742 comm=syz-executor.3
[ 2575.728573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49241 sclass=netlink_route_socket pig=16744 comm=syz-executor.3
[ 2575.839241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26159 sclass=netlink_route_socket pig=16764 comm=syz-executor.0
[ 2575.861628] binder: 16760:16764 unknown command 1463313168
[ 2575.870354] binder: 16760:16764 ioctl c0306201 20000440 returned -22
[ 2575.878634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26159 sclass=netlink_route_socket pig=16771 comm=syz-executor.0
01:01:53 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, <r1=>r0, 0x0, 0x4, &(0x7f0000000000)='*,{\x00', 0xffffffffffffffff}, 0x30)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8001)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e000000000000010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:53 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x80480, 0x80)

01:01:53 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0xbc332482776b996d, r1, 0x0, 0x0)

01:01:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x0, 0x3}, @fda={0x66646185, 0x8, 0x0, 0x37}, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

01:01:53 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000280))
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x8)
r3 = dup3(r2, r1, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r6, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r7 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r6, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r6, 0x0, 0x2)
sendfile(r6, r7, 0x0, 0x40d09)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
getresgid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000640)=<r9=>0x0)
stat(&(0x7f0000000700)='./bus\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r8, @ANYBLOB="060063ef4b4f67b4147ffd4b", @ANYRES32=r8, @ANYBLOB="040001000000000008000100", @ANYRES32=r9, @ANYBLOB="05028000", @ANYRES32=0x0, @ANYBLOB="08009763", @ANYRES32=r10, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="10000000000000002000020000000000"], 0x5c, 0x1)
mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)='fuse\x00', 0x200001, &(0x7f0000000900)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x2000}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize'}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '&'}}]}})
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r11, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000001c0)=0x16)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000001000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140)="5393b1e1da02392f86b25067abdfb055d36493e85f17f8ca5c6f04f80a7030bc60c83f16d8cf0e1cbf034fd45a28352ff4410ce940a1eda0d48f0cd8d91e9cd64cab14677dff390bd81030eac7ce77eee6400b94bed92ffa9caae053648730ce44a8a271052e55bad6219405d479d2b917547dc9ec770ab1f06b019168c0dc4878093354918909f1feb7fd98f0bd85e7f700bc484850944630aa465b9ff7794e858ed7", 0xa3, r2}, 0x68)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[ 2578.659777] binder_alloc: 16776: binder_alloc_buf, no vma
[ 2578.669597] binder: 16776:16779 transaction failed 29189/-3, size 88-24 line 3284
[ 2578.678571] binder: undelivered TRANSACTION_ERROR: 29189
01:01:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xffffff14, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/62, 0x0, 0x0, 0x3d}, @flat, @fda={0x66646185, 0x0, 0x0, 0x38}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:53 executing program 3:
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}, {0x0, 0x7530}})
lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:apt_var_lib_t:s0\x00', 0x23, 0x1)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2578.701363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16783 comm=syz-executor.2
01:01:53 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
recvfrom$inet6(r1, &(0x7f00000001c0)=""/167, 0xa7, 0x40, &(0x7f00000000c0)={0xa, 0x4e20, 0x4b48, @ipv4={[], [], @rand_addr=0x4}, 0x7fff}, 0x1c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10800, 0xcddaf0a177b7bb4f)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
getsockopt$inet6_mreq(r3, 0x29, 0x266487ee9b954d2b, &(0x7f0000000100)={@initdev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010003b0e0000000000000000000000006eae961ea271f2c632a5558545c4ec1b9988a66975006cf1417b7b19ff3dd2bb7f68b181c54dbe9167656ed9889dffced4cf986b55048bb87524450f4139b8c6c444efe0d39f9b88464660bac7b48c5ae474fdf2df6bb332631ee3bb9293b7fae9c10ebaec311851972a107a64b91738f4f9f927c1e3731e04dbfccc40a2bd386ca09af43715f50e90580516fdd1fb5bcf81ca861a03cada24f8501230ddf2e8cbd3933dfc96608c9ff9f049d69e8bc3c731e75efb7404c53ee6988c557cec5b3ce06c95b539090c91a9592c2ff3743ee3", @ANYRESDEC, @ANYRESOCT], 0x3}}, 0x0)

[ 2578.705972] binder: 16789:16790 got transaction with invalid parent offset or type
[ 2578.706010] binder: 16789:16790 transaction failed 29201/-22, size 80-24 line 3454
01:01:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
ioprio_get$pid(0x0, r2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:53 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2578.706294] binder: undelivered TRANSACTION_ERROR: 29201
[ 2578.791342] binder: 16798:16800 got transaction with invalid offset (24, min 40 max 80) or object.
01:01:53 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
prctl$PR_SVE_SET_VL(0x32, 0x1c181)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xe2aed8bc69ff9ba2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x206, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10)

[ 2578.791371] binder: 16798:16800 transaction failed 29201/-22, size 80-24 line 3379
[ 2578.792316] binder: undelivered TRANSACTION_ERROR: 29201
01:01:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000000, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000040000000000000000000000000000008561646600000000000000000000e0000000000000000000000000000000006c24d69a1e0004928b8a2131843e3a9618a48ee9226d8f257c267402bbcf964e2c848b8bf029c8a9c7f8f6d1fc54775ab919b4dd865ec800c35a605a3d7cad899b95986517b5a4b7ed33bc7892d493b1b3497f710a3e38b8a06925aca0c5b1d8c2746fb0f240b5d6e06cfc3585938ef9ab0ed284ec24e25b92dd2da86fbf0ee99dca25871cc401990e305cb6d148dc038c2edd2a4d7ea7aafa0cc1cd470f147d0eef89e28ea26161446ac761ab7d0a7d33a1a5fc6bc069109480f67171f3f78af4"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16=r4], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0x3c8, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff000}]}]}, @TIPC_NLA_BEARER={0xf8, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @local, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdc2}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @rand_addr="ec8f1bc1cb320ee860fcb44fdb40a68d", 0x200}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x302, @mcast1, 0xffffffffffff0001}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @mcast1, 0xfffffffffffffffe}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}, @TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffa23}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x89}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf879}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x690e57f2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6ce}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NODE={0x44, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)

01:01:53 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f00000001c0)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:53 executing program 2:
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x3ed, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10002040}, 0x4000000)
syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x20000)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x8140c2, 0x0)
ioctl$TCSETSF(r4, 0x5404, &(0x7f00000001c0)={0x101, 0xffff, 0x7fffffff, 0x1ff, 0x4, 0x3000000000000000, 0x5, 0x1ff, 0xfff, 0x7, 0xff, 0x7})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3804000010003b0a20000000000000802a22c0ead61efb4fe60b00000100558bbb5fa8ee84c8dd6500ddb3f02405cf8ab24b44b88d81dc9219df9c5d2de5d35e7226d7309bb7da662a1737b274e4eef85540cb694c90928bd4588c40f14c80211d29ba809728cdb5fbeccfab3cc559434d2730ddfaf904c6", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
lookup_dcookie(0x800, &(0x7f0000000200)=""/39, 0x27)
preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00)
setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f00000000c0)=0x581, 0x4)

[ 2578.802838] binder: 16798:16803 got transaction with invalid offset (24, min 40 max 80) or object.
[ 2578.803007] binder: 16798:16803 transaction failed 29201/-22, size 80-24 line 3379
[ 2578.803655] binder: undelivered TRANSACTION_ERROR: 29201
[ 2578.960598] binder: 16821:16825 got transaction with invalid parent offset or type
[ 2578.970267] binder: 16821:16825 transaction failed 29201/-22, size 80-24 line 3454
[ 2579.003684] binder: undelivered TRANSACTION_ERROR: 29201
[ 2579.024045] binder: 16821:16833 got transaction with invalid parent offset or type
[ 2579.034386] binder: 16821:16833 transaction failed 29201/-22, size 80-24 line 3454
[ 2579.048590] binder: undelivered TRANSACTION_ERROR: 29201
01:01:56 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000000)="6793c6da888b678784b36336b1ac75156b46daabd93e01dc776db577b2f7d0faaa2e68382d0f1caa50f33f7f499bb6f2f11045af2a8b9a9bf411addaf1bfdcc171bc365416e3df6485676d5915117c5e5c99464b2ac89d6e15ce451036fe6f234b8c1c525de25cdd")

01:01:56 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x501080, 0x0)
geteuid()
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0x401)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:56 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000400)=0xc)
mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuseblk\x00', 0x804004, &(0x7f0000000540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}], [{@subj_user={'subj_user', 0x3d, '#[posix_acl_accessselfnodevposix_acl_accesscgroupvmnet0loproc\xcecgroupnodeveth0'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@smackfstransmute={'smackfstransmute', 0x3d, '/selinux/avc/cache_threshold\x00'}}, {@dont_hash='dont_hash'}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_type={'obj_type', 0x3d, '/selinux/avc/cache_threshold\x00'}}]}})
r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000140), &(0x7f00000000c0)=0x14)

01:01:56 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:56 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3b)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3b)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r5, 0x0, 0x0)
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x3b)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r6, 0x0, 0x0)
r7 = gettid()
ptrace$setopts(0x4206, r7, 0x0, 0x0)
tkill(r7, 0x3b)
ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r7, 0x0, 0x0)
r8 = gettid()
ptrace$setopts(0x4206, r8, 0x0, 0x0)
tkill(r8, 0x3b)
ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r8, 0x0, 0x0)
r9 = gettid()
ptrace$setopts(0x4206, r9, 0x0, 0x0)
tkill(r9, 0x3b)
ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r9, 0x0, 0x0)
r10 = gettid()
ptrace$setopts(0x4206, r10, 0x0, 0x0)
tkill(r10, 0x3b)
ptrace$setregs(0xd, r10, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r10, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRESOCT=r0, @ANYRESHEX, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRESOCT=r7, @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES64=r8], @ANYPTR64=&(0x7f0000000480)=ANY=[], @ANYRES16=r6], @ANYRESHEX, @ANYRESDEC, @ANYBLOB="ca790f99667f8366d674d848c29bd7f9eb873b29791fe96f58c077b3b61a7d126e113248f972520911dba24934840a7492faba05e79e0092919efa56d36631808e976d36da4cbca2a537343cd8ae0e50dfdc930a5ce91afc673da1e2f22759c1a2834f24d1ea1754642ac274a2fdef97024e64614417e969c49a8ea7b25dc26dbdf0f44582314c9f6c89c05ba5cd7960c97320083c19e6e1b988e8", @ANYRES16=r7], 0xf8}}, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

01:01:56 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$int_out(r0, 0x2, &(0x7f0000000180))
ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000140)=0x10001)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x22c)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x7, 0x2, 0x9, 0x81, 0x0, 0xffffffff80000000, 0x6, 0x2, 0x5b, 0x7fffffff, 0xffffffff, 0x4})
r4 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r4, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r4, 0x3b)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)

01:01:56 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
r2 = accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x1c0000)
accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14)
sendmmsg$sock(r2, &(0x7f0000001000)=[{{&(0x7f00000001c0)=@ll={0x11, 0x15, r3, 0x1, 0x80, 0x6, @random="42ad80e10baa"}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000240)="e63eb77e9deb97c35b6a09c0bbb41c020a54c371ee143316e44eebbacf369aaad5611ddc0f7172bedbf26118808ed7f0516ef4b604a04f53660edc888e0efbf549b079d9631db9c384f0eccb2bd58530cf3703f745ea2327758b5c312d12bd4e4955f703c830dbc9de6fbe8fb369a0d85c9bac8b726d755919d47beed1586c68d61dba6522dd1061355cc16fe8ee45d15e02ec5f8005a6ed17", 0x99}, {&(0x7f0000000300)="732edd56716331fe04ff7ff13b7d193f075d6410341838bf8839351a609e500890f230ed4e58c41810a5f292751485f8fe7d0fc90f929d3538f46880900f8d854a57e5ae6aaa1066ed84f895350cf901528f04de0f993d20fb9c4eebf5c4197bc2dbf62cfc88a661d6393a648b7c19e0dfbbe84c29117781241d9953455839ed7e26ce20ffd4c7987f01e4d84541f6fa0dabe68bdd83704d3bb7060bca09d13003bb978944b3383315cb7c7197b48999b26c74baf7e39e066706d4cd1bf8cc61cdbba27db8c0b29ecb49a9237237ea64af4c30c395274c9d", 0xd8}, {&(0x7f0000000400)="f897b94de8a525cc515cb7f52b90946b54928cab04c8c5ca20441f64a8fec6725c129cef5d0bfe45367401290c80f4969d5111d4ff1794a67d145b278c7eb88b1640a5d1051343038570a026127573cc35e57e21639e71eb4906a41822bb206f532f38de4f86654bf9ddaf4f1ed4fee92ec60792b2977f41dbb377ca7838e65114a47e82154ee1aafa1b11a423921fe666795b475c81a269ace7d4634acdb6b50fe7516e778fbc7840f4", 0xaa}, {&(0x7f0000000540)="fff64ed4aaa75f19e3bb2990788cd767fc93e9b7b1cabaa37d1ea79bd2331384f717fe1dfc610a7c07f1cde7c4b0427ae096ac881ccd45052efb065af8af623cf2feca2f3824b98715eabdacd17b32a0b2fe5f8d715df2ba9a4af60524b3045c0fdf8186eaf8d2cd777d161ebf516efacbdfe7d1636e143a12c4ba13d0bdf9c8c5b789f74dff681b33912e146d78f86ff6a31c0b29ae430111d4e3f0d30b5fefbd5a816a86ff34846eb31b60201c2c997feacde50a606cf2bb0bd9c267c0093b00cb81a5b0f0a8c73dcc37a9fbca0fcf247a", 0xd2}, {&(0x7f0000000640)="84df06e074d6b23ee475ce78b8d78d91bdbd8a73b2f2de1353d02c5cc8394604c964d74eb28fb705acec74efc0492b246c4a6cf59f8588d2928c58c76877dfe4382ca971c96a933b88f3c4ecf5281fc4abcc0c3382fcb6350f530f214602f4e216ddcc57fd1ec9706b1119b41bfa380435ae24c017482f6c703186598b521088711237ade30abd819914b2a297d7a5cf6757ff6580d6d3899500401316eb4c90bb29d6880e065ad1f78483c548517f85ed08c7a6867eb2f76fc360ce9985a4f0196035d6d50ee6d52017c4", 0xcb}, {&(0x7f0000000740)="8e431412f34d419779171fa9ccb368521923d3e8d9a93a0477181547bc2dea3f5f71b66434b7852b1de1cc690701722794419f4eb4c58303abab25d68fc3ba183d129f84f69a86f1ea0e6571f38703ce183263c3d1cd7638637f3a6645a028fd1ec5252d024839fc965b1ecfa7945f13786403bcd1d14198633821b16156b0973de777eac429b2a41e0a05002bab3e0acc9d46c01aeedd7c17c7da33e62e07ad7b5029725e6ec1aa059ed3b5ded0692be28a72ac3de139573d878c42317da860fcb7e78bf6f3d7", 0xc7}], 0x6}}, {{&(0x7f00000008c0)=@ipx={0x4, 0x800, 0xfffe00000000, "f8571133e7ae", 0x2}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)="72651972d06d4dcbf237c2ace1776259abb55e", 0x13}, {&(0x7f0000000980)="c9a9a075209382e06207c1cac3182e38eb35cfad3d4447bc2c1c7bb9ab34ef3c12f6a05f56bf58c4c9860f139c15bca2ce86f077f97299fbdbda942ebf8a6a7493a9ba8146f4987124a495cc33dfc542eb55a195cb7e76c4f66d552f4d096d541866e73185e8d7587fabd3e6306e0e077f3118e80d22fc63576459cf731604c4680ccaf99e08eb942d47f1d5db42b163c2c67dcb38ff65e20380d479e383cb9c8a5bd033cde0bc906b980690ae684eb245b401c010fe79afb28a48a59f19", 0xbe}, {&(0x7f0000000a40)="d4dea2dd66c12acf13e40a9af4884534e491fcbf5e6aaf0a3d1eee066dab13343c953d571bc352b85bac3a3f590616fd8b678f2fe62066371c2d278014aad5a2fbefb24e0bdc4ee794e00541b1a951", 0x4f}, {&(0x7f0000000ac0)="4e592a50047a76b963619abefda04335352e1318d0512c5c8fcf96817ff83bcc296d5c1a29bc4d09d55bed95418fd74d96fe7725906a9f3a63c8452f5a8df4df915755db6d913b694d6dfa6e0857fe48efd763f78ee4a0390897a0229128003f916c8a60f06ec76701d06fcd7fbde466cf6d3840dd30c06c5a429aaa4663b7c1907ca1b496ba04d7b490f47fc30346bd185229ea734774745c7cb29bfdff4d2d9eaa05433bcad1dea7b8ab8613d873b74afa0c95d5ce8132dc05b291f9520ba6b0e376cafa4c81753bbb32316fbc1fa8bbae637c75b50b69c92c103a4959f45684", 0xe1}, {&(0x7f0000000bc0)="8b2ceb41db42ecd556406fead551daebbe3aecfbfd91abf734474f39d1eba64863da2ac55dada1ae6139bbd1d425cead9a5d", 0x32}, {&(0x7f0000000c00)="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", 0xff}], 0x6, &(0x7f0000000d80)=[@txtime={{0x18, 0x1, 0x3d, 0x1f}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x6808f52a}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000e80)="e57cc32a75deb0b42eb666c72498d49d745bd9994cef715107ef287bbf06d57053f2cdf36cee0b77805436f1abcea173534559d667979ebaf227b77213069d32cfaf8f5c5f82a314a49d3e06025e8d686193b3ec8d57d2801ba53b62887b2fb4a378eb3de772cd8b4d9f887ee34771e9abc0c9fdadd4a0aca68192409d50dab1c6ad82e56e65c5fc19f2e645fc30983af3513c0aa5878ef46ae702ffe8f5ab12d2c8d22aa8132f6f02da349bcaa4778ec28c2b08699f581f7a5e984da81f4d52afd6d48c02a71c99edfbf09184a5a302ef8566f5", 0xd4}, {&(0x7f0000000f80)="c34145979fa7e41d4cc1a00545a292c95fbcf5e851e3fe59eaa6571277665e044c3e69e7de2f27484e18cd1f0463830800e129", 0x33}], 0x2}}], 0x3, 0x20000000)

[ 2581.688860] binder: 16845:16849 transaction failed 29189/-22, size 80-24 line 3138
[ 2581.701422] binder: undelivered TRANSACTION_ERROR: 29189
[ 2581.711214] binder: 16845:16849 transaction failed 29189/-22, size 80-24 line 3138
[ 2581.733384] binder: undelivered TRANSACTION_ERROR: 29189
01:01:56 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:56 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:01:56 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x37a, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:56 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c0002000800028003ff0002"], 0x38}}, 0x0)

01:01:56 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$BLKFRASET(r4, 0x1264, &(0x7f00000001c0))
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="04010000a7b088c8d7b72cf8df98d576c09fb5f0c95d0931262f169fc50ec9bb11269860d9d994b71c25d82424aa032376c4b410fa7aa113c90e70de15aca5b9fc296ab696f25cc8528e26bda13ae758f34534cdbc0dd8981940f519bb97263281414150f906f805df83", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:56 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:56 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:01:56 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000, 0x4)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000000c0))
syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$BLKPG(r3, 0x1269, &(0x7f0000000240)={0x7, 0x7f, 0x72, &(0x7f0000000140)="480dfc36a979c4516bf362c5fa0cb7335318a4a5243dc48d5d377a2416ae0e84b4584b75ebcc2ab415a89aeeb4937ac3a3d436d7ea017843fbd81b0351be15699616465baa864b193e58bde1018bdf4f124623a3c98f6b8f8d7e6786c9b0a1ebd69e1b479faa124a5eccb3bc881d242e6054"})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163484002000000000000000000000000000000000000001000"/52, @ANYPTR=&(0x7f0000001480)=ANY=[@ANYBLOB="852a64660000da20f514a5df27f21128b90044c60000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a747001000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB='\x00'/4096], @ANYBLOB="000000000000000002000000000000000b00000000000000852a62770b110000030000000000000000000000000000007d9d4319365cdcdb74de181056acc613e51ad52a6ac652113b6cf64ceaa97315110757dbef98f13b48bdf2fde7b539e2cd54c962dce66a52c10ba0a1d5e73862d63055f47a47a06fc67b7fd6ab77ff821018873ebed6c66e54f794af47661df6e6a3c58c425fb505e7b8a38245e6e85a650a0b5251ad6ed0aa8e692846e9bba213dd5d2868a4723024b4a6ee62af3840cb04b7eb9a79d7414d2e6e6a774cd5db7327c52f112aff5deff58b07b6bd12"], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/24], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xd3dcea252c58eb0c, 0x0, 0x0})

01:01:56 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2581.867441] binder: 16877:16882 got transaction with invalid parent offset or type
[ 2581.879665] binder: 16877:16882 transaction failed 29201/-22, size 80-24 line 3454
[ 2581.891232] binder: undelivered TRANSACTION_ERROR: 29201
01:01:56 executing program 3:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xfffffffffffffff8, 0xa6d, 0x6, 0xff, 0x0, 0x80, 0xc938e71df19e464e, 0x1c, 0x3, 0x400, 0x5, 0x7, 0x100, 0xd8, 0x2b, 0x5, 0xa3, 0x4, 0x5c, 0x7, 0x7921, 0x1ff, 0x7, 0x5, 0x3f, 0x4, 0x100000000, 0xa508, 0x7, 0x8, 0x8, 0x7, 0x80, 0x0, 0x9, 0x7, 0x0, 0x5bb3, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x800, 0x2, 0x1000, 0xd, 0x17, 0x7ff, 0xffffffffffffffff}, r3, 0x4, r0, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x1, 0x9, 0x3e, 0x5})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002f052cb851b88dab19bb5f56ef00510eb3aa4ca822d3ae322367bdcd6688444c48ed2956361bf884dd6e914086bbf3c308b8564e507ca7ac912f1422d96aafd2d66120ed42fbe88ea725ce284f729e7f541a7107f6dbcaf138512464199f59d14ea86ab81b1bb337fd900cc1f44e6e3a4be0e8610617d8fe8a35813ae6b7905efd9cc46ea4ff1e3d9069e7b9b99919d8e82e3e82f68169c5fe8bb11fb347ed45eec9a5ac1480c36fc074a67c880"], 0x38}}, 0x0)

[ 2581.989295] binder: 16900:16904 ioctl c0306201 20000440 returned -14
[ 2582.000678] binder: 16900:16909 ioctl c0306201 20000440 returned -14
01:01:59 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fstat(r0, &(0x7f0000000000))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

01:01:59 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(0x0, 0x3b)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, 0x0, 0x0, 0x0)

01:01:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000480)={0x8, 0x6, 0xb9, 0xfa10, 0x14, 0xfffffffffffffff7, 0x80000001, 0x1, 0x5c1bf0f2, 0x5390})
ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000400))
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000380)=0x1)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_getmulticast={0x14, 0x3a, 0x400, 0x200000000070bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048808}, 0x4000044)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="df0000a9"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff24, 0x18, &(0x7f0000000000)={@flat, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/154, 0x0, 0x0, 0x3a}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0xfffffffffffffe69, 0x0, 0x0})

01:01:59 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x250400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xdc, r1, 0x3344f1e1bef09348, 0x70bd25, 0x25dfdc01, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x27}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7fe00}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd08}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x50000000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x12}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa9c5}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x2000091)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
readahead(r3, 0x5, 0x1)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:59 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$cgroup_int(r4, &(0x7f0000000240)=0xff, 0x12)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:01:59 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000002940)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002980)={0x14, r2, 0x824, 0x0, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
sendmsg$NET_DM_CMD_START(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000003}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="000000bcbd00ad0018001200a03c0800e5ff7674690282638839c5ef82b4108b2449750c0acb9dcfd469929df7b47f00000000000000d900e2c13fbd03f91339c9af8c11e8066650b515907f4d1f450a02d031c800"/104], 0x38}}, 0x0)

01:01:59 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="397b282deed352f530d6528abc3e0a6d", 0x10)

01:01:59 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(0x0, 0x3b)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, 0x0, 0x0, 0x0)

[ 2584.737430] binder_alloc: 16917: binder_alloc_buf size -192 failed, no address space
[ 2584.756592] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 2584.768755] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2584.778388] binder: 16917:16920 transaction failed 29201/-28, size -220-24 line 3284
01:01:59 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:01:59 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(0x0, 0x3b)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, 0x0, 0x0, 0x0)

01:01:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0xffffffffffffff73, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x80000001, 0x800, 0x6, 0x6, 0x7fffffff, 0x3, 0x3, 0x7, 0xee, 0x38, 0x101, 0x4, 0x5, 0x20, 0x1, 0x0, 0x7, 0x7fff}, [{0x2, 0x7, 0x3, 0x7, 0x5, 0xfffffffffffffc00, 0x6, 0x2}, {0x6, 0xfffffffffffff000, 0x100000001, 0x2, 0x80, 0x3, 0x8001, 0x3}], "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", [[], [], []]}, 0x1378)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000001480))
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r5 = dup2(r3, r4)
ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f0000000040))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5)

01:01:59 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x4, 0x7, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2584.812840] binder: 16917:16920 ioctl c0306201 20000440 returned -14
[ 2584.835704] binder: undelivered TRANSACTION_ERROR: 29201
[ 2584.916228] binder: BINDER_SET_CONTEXT_MGR already set
[ 2584.921518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16954 comm=syz-executor.3
[ 2584.937464] binder: 16953:16955 ioctl 40046207 0 returned -16
[ 2584.978261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16967 comm=syz-executor.3
01:02:02 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@empty, <r2=>0x0}, &(0x7f0000000180)=0x14)
sendto$packet(r1, &(0x7f0000000240)="20186251065ac36cb0d1729045dc8477bfe13bb9932a1809299405fde5e1437d80ee9e5e96c3af5975a5e9693962f89e58fe7e91b3ce15cb7d2ac0066f694fec65d634177f336a2a84afbf0ba4c5b27a779c82ae39cc88a3b8271f51c494c080c4ddd8932d92ef5c9bced24c98820dd527f68d30bcbfb0410e4ff303bc8afc3794d9aed274b86825581fbf7c7254d762c12e0c3deb2112e3a30e535e0f21b169ff2c6c17395638", 0xa7, 0x10000015, &(0x7f0000000300)={0x11, 0x1, r2, 0x1, 0x6, 0x6, @remote}, 0x14)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)

01:02:02 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:02 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xdec4c90ffb8a5d52}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8aa5c1aa6de4636e}, 0x8000)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:02:02 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$9p(0xffffffffffffffff, &(0x7f0000000000)="cdef6b0040fc38c6fd02ac3ee23792d17849be5fee01eb60b0f1691d57fee86000a3c8efaf16c950fe40f630194de485fa5757592fe142ab45ea891c2034e708d08f2437a72a1402d1c4b2a9065eb7941e16c09f720c82e9fe7f4124b6e8c6df70e9bb3b57f636e89f8b4176fc24", 0x6e)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'ipddp0\x00', 0xf03de70a9a7b31eb})

01:02:02 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38000000100000000000000000040000000000001a355a562158c29236d3921dd6c403aecbe40da6e3ed96108d8f3a9b0b51775c095a78e5a1273f84483ee904f0771dd0d8c3dc363b711ec1a1a40ec447f3b6705f2f95e153df5d8f8595fc32da1dbd0c94ffed07ea30eec07f107d1cb1a0ecbcb86bcb86e6eceb300aad2631ffaa40655d6d8793be467660781fc8ab07b130a638f9d2bf9af35b7c497da7cadc6f42c8d5a4ac19c24d033f8d1263bdb935a50813be1a158898bb3171ec8ee634858ad71292ef652c433ec1afa2042179a65ecce1c00d195d101dbfd0e26cd0f5f10a37e3ddbe8ae8", @ANYRES32=0x0, @ANYBLOB="ed000000000000001800120008000100767469360c0002ce43000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x31)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="840142f783eef5e3501cd73ea22098c4b50000", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3800000010003b0e00000000000000000000000028be18059776836325ad6260e588dfcb737b1cbac75541a6304855914444925a60c479561b8752dfc47b00c505f3ed90012126a6c9f7e003f87bd6e8767b67be03f17c31ffe42c29e13637cf4144cd3d0ed88f8fc61db6c4c23dd1af816ab8a0096c7978b1c2855e4a736ab05f0410a459d3b3107fade84bae6159aa545de6abac6637e18ce0388af6705d7d2f1e7147bacb78c9950226373998f287d91fcb", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r8 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r8, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r9 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r8, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r8, 0x0, 0x2)
sendfile(r8, r9, 0x0, 0x40d09)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0x35)
setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r11}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000280)={'team0\x00', <r12=>r11})
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000002c0)={'team0\x00', r12})

01:02:02 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$RTC_AIE_ON(r1, 0x7001)

01:02:02 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:02 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:02 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = gettid()
syz_open_procfs(r1, &(0x7f0000000000)='fd/3\x00')
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x9041c2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2587.798545] binder: 16974:16979 got transaction with invalid parent offset or type
[ 2587.810555] binder: 16974:16979 transaction failed 29201/-22, size 80-24 line 3454
[ 2587.827031] binder: undelivered TRANSACTION_ERROR: 29201
01:02:02 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

01:02:02 executing program 3:
r0 = socket$inet6(0xa, 0x80000, 0x5)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @loopback}, 0xfff, 0x3, 0xff, 0x0, 0x2040000, 0x2}, &(0x7f0000000040)=0x20)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
personality(0x400000d)

[ 2587.851915] binder: 16974:17002 transaction failed 29189/-22, size 80-24 line 3138
01:02:02 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f00000000c0)=0x54)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2587.899775] binder: undelivered TRANSACTION_ERROR: 29189
[ 2587.955631] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2588.064718] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
01:02:05 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0x40d09)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r5}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x34, 0x26, 0x102, 0x70bd2a, 0x25dfdbfe, {0x0, r5, {0x6, 0x7}, {0xfff2, 0x1}, {0xffff, 0x7}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x8800)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x460042, 0x0)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x2}]}, @fwd={0xb}, @restrict={0x7, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000400)=""/53, 0x48, 0x35, 0x1}, 0x20)
fchmod(r8, 0x134)
linkat(r6, &(0x7f0000000000)='./file0\x00', r7, &(0x7f00000000c0)='./file0\x00', 0x30a3ad37e6f57c9)

01:02:05 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000380)="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")
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:02:05 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000001c0)=""/135)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}}, 0x0)

01:02:05 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="000525bd700000000000130000002801040014000700080004000200000008000400ff01000044000700080002000400000008000200060000000800010000000000080002000000000008000200a600000081cbb2ed7d480000080002000200000008000400810000002c000700080001001500000008000200060000000800040000000000080004000800000008000400000000000c00010073797a300000000024000700080001001e0000000800030008000000080004007b0000000800040000000000040007003c00070008000100090000000800020051cdbd3808000200a915000008000200080000000800020002000000080002007f00000008070008000300010001000800040000080000080001001b0000001400010062726f6164636173742d6c696e6b00004800050008000100756470001c00020008000400f3000000080001000000000008000200db0f00000c0002000800030000f8ffff14000200080001001300000008000300"/382], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:02:05 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(&(0x7f0000000140)=0x2, 0x1, 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f0000000240)=0x1, 0x1)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029fba741efca44f937d049248200837296d9b5dd9cb04e2e0c73"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
fcntl$addseals(r2, 0x409, 0x1)
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000000)={{0x3, 0x2, 0x76af, 0x4}, 'syz1\x00', 0x11})

[ 2590.796835] binder: 17036:17039 got transaction with invalid parent offset or type
[ 2590.811332] binder: 17036:17039 transaction failed 29201/-22, size 80-24 line 3454
[ 2590.820253] binder: undelivered TRANSACTION_ERROR: 29201
[ 2590.830768] binder: 17036:17051 got transaction with invalid parent offset or type
[ 2590.838994] binder: 17036:17051 transaction failed 29201/-22, size 80-24 line 3454
01:02:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x8000, 0x0)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x338)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00)
r5 = openat(r4, &(0x7f0000000140)='./file0\x00', 0x20202, 0x32)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000180)={{0x3, 0x0, 0x2, 0x0, 0x5}})
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00)
r7 = gettid()
ptrace$setopts(0x4206, r7, 0x0, 0x0)
tkill(r7, 0x3b)
ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r7, 0x0, 0x0)
r8 = syz_open_procfs(r7, &(0x7f0000000040)='net/protocols\x00')
preadv(r8, &(0x7f0000000100), 0x18d, 0x6c00)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat=@binder={0x73622a85, 0x5}, @fda={0x66646185, 0x4}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:02:05 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 2590.847858] binder: undelivered TRANSACTION_ERROR: 29201
01:02:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:02:05 executing program 3:
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4f6c09c6fd79468, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:05 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x800, 0xc6)
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000001c0)=""/130)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00'}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000200)=""/1)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3b)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x5c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="009b4040000000c100000000000000000000000000000000000000000000000000000000181244f6335700080000000000000000", @ANYRESDEC=r4, @ANYRESDEC=r2], 0x0, 0x0, 0x0})
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, r5, 0xabdc702f24d57218, 0x2}, 0x14)
r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={0x0, r6, 0x14, 0x1}, 0x14)

01:02:05 executing program 3:
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:05 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

[ 2590.956342] binder: 17072:17075 got transaction with invalid parent offset or type
[ 2590.964867] binder: 17072:17075 transaction failed 29201/-22, size 80-24 line 3454
[ 2590.973644] binder: undelivered TRANSACTION_ERROR: 29201
[ 2590.982284] binder: 17072:17078 transaction failed 29189/-22, size 80-24 line 3138
[ 2590.990315] binder: undelivered TRANSACTION_ERROR: 29189
01:02:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0063404000000000b1958ae84ee249e90000000000000000000000000100000000000000500000000000000018000000000000002dc9acca1504540767643c006378f462e40b24e192735c35f4a3323db0290c495474b279a8f8d66536f2dc8ccb9103336d718a4be12bf8a1a5cf826781a7fb6c12d157d060bad5e1f3e4f8064339af3e9195d31533aead3ea5b77fb3372348086de61160ec2eeb66a9193fabdab4e0b4d965c6bc32fc3941dae46796a41fa3080d15d1ac7a16d4afed", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
fsetxattr$security_smack_transmute(r2, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x2)

[ 2591.048680] binder: 17090:17092 got transaction with invalid data ptr
[ 2591.059893] binder: 17090:17092 transaction failed 29201/-14, size 80-24 line 3316
[ 2591.069372] binder: undelivered TRANSACTION_ERROR: 29201
[ 2591.077380] binder: 17090:17095 got transaction with invalid data ptr
[ 2591.084764] binder: 17090:17095 transaction failed 29201/-14, size 80-24 line 3316
01:02:05 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000))
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:05 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44813131}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x94, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x344b9a3c}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffffe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0)

[ 2591.093704] binder: undelivered TRANSACTION_ERROR: 29201
01:02:08 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
gettid()
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100699b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600000000000002000000001700080000000000000000000000000000dd5cd38e5d6efff048479d551272119bb1d3ee413a067062e56205b78b711ff26a4b11d0ae1d92f5119a610265f64e7c17659358db832499f5cd82500f2f46"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})

01:02:08 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

01:02:08 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fchdir(0xffffffffffffffff)

01:02:08 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80800, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000040)=0x6, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000aff3b0e000000000000000000084ee0129976717a78d88789e979eb9e2da4b153795f3caaad7e2e8c624cab791ac7475947c13bc308592b02c28c5aa1b82ee38a3d4f748f6f2636180d6c569b1520", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:08 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="00000000b8e06e601d6f80f560f0ff539b6c84e7d37ef8854300e879", @ANYRES16=0x0, @ANYBLOB="000525bd700000000000130000002801040014000700080004000200000008000400ff01000044000700080002000400000008000200060000000800010000000000080002000000000008000200a6000000080002007d480000080002000200000008000400810000002c000700080001001500000008000200060000000800040000000000080004000800000008000400000000000c00010073797a300000000024000700080001001e0000000800030008000000080004007b0000000800040000000000040007003c00070008000100090000000800020051cdbd3808000200a915000008000200080000000800020002000000080002007f00000008000400080000001c00070008000300010001000800040000080000080001001b0000001400010062726f6164636173742d6c696e6b00004800050008000100756470001c00020008000400f3000000080001000000000008000200db0f00000c0002000800030000f8ffff1400020008000100130000000800030000000000"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:02:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000005fb4410e", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})

[ 2593.847999] binder: 17112:17114 got transaction with invalid parent offset or type
[ 2593.855927] binder: 17112:17114 transaction failed 29201/-22, size 80-24 line 3454
[ 2593.864632] binder: undelivered TRANSACTION_ERROR: 29201
[ 2593.871169] binder: 17112:17120 got transaction with invalid parent offset or type
[ 2593.881243] binder: 17112:17120 transaction failed 29201/-22, size 80-24 line 3454
[ 2593.890480] binder: undelivered TRANSACTION_ERROR: 29201
01:02:08 executing program 3:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000040)=0x1)
r3 = dup3(r0, 0xffffffffffffffff, 0x80000)
write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7)

[ 2593.932846] binder_alloc: 17127: binder_alloc_buf size 4611689317201458272 failed, no address space
[ 2593.943022] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 2593.945064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65290 sclass=netlink_route_socket pig=17128 comm=syz-executor.3
[ 2593.946622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65290 sclass=netlink_route_socket pig=17134 comm=syz-executor.3
[ 2593.989797] binder: 17127:17132 transaction failed 29201/-28, size 2305843834086601823-2305845483114856448 line 3284
[ 2594.003762] binder: undelivered TRANSACTION_ERROR: 29201
[ 2594.013902] binder_alloc: 17127: binder_alloc_buf size 4611689317201458272 failed, no address space
[ 2594.024995] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
01:02:08 executing program 3:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$TCFLSH(r1, 0x540b, 0x9af7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38006199a5c44602100010003b0e005adb280005000000000000000001", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x9}, 0x8)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1f}, 0x8)

[ 2594.035097] binder: 17127:17138 transaction failed 29201/-28, size 2305843834086601823-2305845483114856448 line 3284
[ 2594.049596] binder: undelivered TRANSACTION_ERROR: 29201
01:02:08 executing program 2:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2100, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r4 = syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x7, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x3b)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r6, 0x0, 0x0)
r7 = gettid()
ptrace$setopts(0x4206, r7, 0x0, 0x0)
tkill(r7, 0x3b)
ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r7, 0x0, 0x0)
r8 = gettid()
ptrace$setopts(0x4206, r8, 0x0, 0x0)
tkill(r8, 0x3b)
ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r8, 0x0, 0x0)
r9 = gettid()
ptrace$setopts(0x4206, r9, 0x0, 0x0)
tkill(r9, 0x3b)
ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r9, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000100)=ANY=[]}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x14}, 0x10)
r15 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r15, &(0x7f0000000100), 0x18d, 0x6c00)
r16 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r16, &(0x7f0000000100), 0x18d, 0x6c00)
r17 = perf_event_open$cgroup(&(0x7f0000000640)={0x3, 0x70, 0x6, 0xc43a, 0x8001, 0x1, 0x0, 0x5, 0xd30c9dfa4a8e4363, 0x2, 0x100000000, 0x3f, 0x10000, 0xe592, 0x3, 0x2, 0x3ff, 0x80, 0x1ff, 0x1, 0x1, 0x0, 0x4e, 0x1, 0x60000000, 0x7, 0x1, 0x5, 0x7f, 0xffffffff8bb54ecc, 0x5, 0x5ca, 0x2, 0x9, 0x1ff, 0x9, 0x7f, 0x5f, 0x0, 0x3fa19f0, 0x4, @perf_config_ext={0x8, 0xf9bc}, 0x4000, 0xc15, 0x301d, 0x3, 0x3f8000000000000, 0x2, 0xf466}, r15, 0x9, r16, 0x1)
r18 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000007c0)=0xe8)
r20 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r20, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r21 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r20, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r20, 0x0, 0x2)
sendfile(r20, r21, 0x0, 0x40d09)
getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r22=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
getresgid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000640)=<r23=>0x0)
stat(&(0x7f0000000700)='./bus\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r24=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r22}, {0x2, 0x482af0178714ef63, r22}], {0x4, 0x1}, [{0x8, 0x1, r23}, {0x8, 0x1}, {0x8, 0x60f0c3b60b2d6397, r24}, {0x8, 0x4}, {0x8, 0x3}], {}, {0x20, 0x2}}, 0x5c, 0x1)
r25 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r25, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r26 = openat$null(0xffffffffffffff9c, &(0x7f0000000800)='/dev/null\x00', 0xc4622, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)={<r27=>0xffffffffffffffff})
r28 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000880)='/dev/fuse\x00', 0x2, 0x0)
r29 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r29, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r30 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r30, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r31 = socket$inet_tcp(0x2, 0x1, 0x0)
r32 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r32, &(0x7f0000000100), 0x18d, 0x6c00)
r33 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r33, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$ION_IOC_ALLOC(r32, 0xc0184900, &(0x7f00000008c0)={0x6, 0x1a, 0x0, <r34=>r33})
r35 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r35, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
sendmsg$unix(r2, &(0x7f0000000a00)={&(0x7f00000001c0)=@abs={0x2, 0x0, 0x4e22}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000240)="9974bc4d2a5261a4d85258ee47b134c811b6d7bd7f426983194b03e73930243be7ae39044250406cd4cd925319de91c623671c3bdbe5d87b256e355fb09321a48775eaccd824362bd50829458e6887024a93cbed7698974cdbe76c883a90d22c8c3085c97a208f02cdd4dfb4d67ebd81ed842abb177a4f129646084cc11f2c70e6ed38d73e2465fd918f3e129a046af99675cf7b655cd91b9229fdc4d34e", 0x9e}, {&(0x7f0000000300)="94242a45659438cbc3602d1be19124be831fd8beda2c51fb4ce2fc26336616f46db8cbf56ad6750eacfbe034e4a3166428e6104be5215c17c20445e24a170e13b066489fe374abcc6cc4bfa6648c49e7e9e44a12474296178142026b47981b6ac56c9f8f602710c8f68033afeb0eedb5302be07baa319ef34c0b777925ad3269d253d8f657f45d425ff1e48c7cdedb84ceec3fc8b44e4cc0b5c95b13e3502419a012d90feb233cd63f0c5ce6feb77436f462c7b4598f7ad7957eb7310a666f4562835770e33b81d0c94b50346ca16d990524379d053caced0cf0bc7ce2a86051ccc0f0a601977540e362e7cce4", 0xed}, {&(0x7f0000000540)="7aec49467fb2eafeb4c5bd8cef14614b9cc77815bb7b567c9bab3bb5993fd77eabee25022252f86b056ac9eb360aece7c1b7be997fac76a4133b841aed235f9a87c795e99f948190cb019f910d667dead4769da837d592c54e7108d1a9e70f8f2450d66c6341ec4088ac0ae3bd0a6fb040fd365894c67003244cd70be728cb038fe6ce0c24b1c60f8596428b1f4cf17c0ac0526e1daf8506b6398a4c82a3d4a8722ff524714c105ed28c4e71f86bfd309f4a66d3af9278ffdd1257626c46d6a2e85af2a714a212326eb8734e919c50e8f2418d1a15fe67cd3083c56965d278261d20039ad96755ccd4b1858058a8881cd2096787dd", 0xf5}], 0x3, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [r3, r4]}}, @rights={{0x18, 0x1, 0x1, [r5, r10]}}, @rights={{0x34, 0x1, 0x1, [r0, r11, r12, r1, r1, r13, r14, r17, r18]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r19, r23}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r25, r0]}}, @rights={{0x38, 0x1, 0x1, [r26, r0, r27, r28, r29, r30, r31, r34, r35, r1]}}], 0xf8, 0x4000}, 0x20)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:08 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

[ 2594.089419] binder_alloc: 17143: binder_alloc_buf size 844424930132000 failed, no address space
[ 2594.102211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50341 sclass=netlink_route_socket pig=17147 comm=syz-executor.3
[ 2594.122958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50341 sclass=netlink_route_socket pig=17151 comm=syz-executor.3
[ 2594.139281] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 2594.148360] binder: 17143:17146 transaction failed 29201/-28, size 211106232532992-633318697599008 line 3284
[ 2594.172076] binder: undelivered TRANSACTION_ERROR: 29201
[ 2594.179150] binder: BINDER_SET_CONTEXT_MGR already set
[ 2594.185540] binder: 17143:17154 ioctl 40046207 0 returned -16
[ 2594.186829] binder_alloc: 17143: binder_alloc_buf size 844424930132000 failed, no address space
[ 2594.186836] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 2594.186857] binder: 17143:17157 transaction failed 29201/-28, size 211106232532992-633318697599008 line 3284
[ 2594.189801] binder: undelivered TRANSACTION_ERROR: 29201
01:02:11 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000040)='syz1\x00')

01:02:11 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x200, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESOCT=r3, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}}, 0x20000000)

01:02:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x8010810, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.nlink\x00')
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000080000008561646600"/80], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})
lookup_dcookie(0xc2c, &(0x7f0000000380)=""/152, 0x98)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000005c0)={@remote, <r3=>0x0}, &(0x7f0000000600)=0x14)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r4, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r4, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0x40d09)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r7}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r8, &(0x7f0000000100), 0x18d, 0x6c00)
accept4$packet(r8, &(0x7f0000002980)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000029c0)=0x14, 0x800)
r10 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r10, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r11 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r10, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r10, 0x0, 0x2)
sendfile(r10, r11, 0x0, 0x40d09)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r13}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0x5, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
sendmmsg$inet6(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="16f3e8b7f1771a50dc678cf32ab1f686f23598", 0x13}, {&(0x7f0000000480)="df8fa8e3e7429de438710688cda83d3dedf913dbccb57c50e326f6e5eb97c77a8577f99a47b53534f3b6207c548fb6538c1d09ad8c56aa4e14fc59b69649f2b0d73db9ffcbc0d6a8aae91fae3544abebc8233d62127f57916b757573987e89e9d44c4bfa8dc2d53647260f8cf870ac5e80e954c3aa3d0c346525937c0d78a0fca63ecea4e4772fd8ed6e77f753caca3aeb77211e4bcb82a6ea438b22bd320f53699a5811e3d47a5d8b855ca94ba103add66d40903fa26d5d939b5c829fc505e1be21108aa76b5feddf76b0f7384bb0896b8074e888b86914", 0xd8}, {&(0x7f00000001c0)="d561b889645d1f34fde390094c62bef5b8e0827003d734c18ec457493729ff107585ed091f1a2edf67a0277abef797cb3f04d95c1ed28fbde26615cb6da9978867", 0x41}, {&(0x7f0000000280)="c09edb4b5b6552aaf5adcfeab7e36eef3fc9a72e28ed4f9310b2659d951368da569dddb19a7da9ec97d6f82a041110a68de7a1c9987db9f2b0e1d424a9c249f26b55cfc8b3e513f9ba6be5a577cf43147bb30943ed89d88b60bd", 0x5a}], 0x4, &(0x7f0000000640)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr="18bf93909fcaa799a7d238388111d452", r3}}}], 0x40}}, {{&(0x7f0000000680)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x2b}, 0x1}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000006c0)="2865f789f9bb2ce34be55b39e199c386", 0x10}, {&(0x7f0000000700)="ae0740306ea5e477320ab4012cb585d2b50abf9d20b0e1ac4eed0007f01dfa93f1a6e42d2f689b2bf6cf0e5c3411488a8604174bd5838ec77adf822fcba4cb2f72e06df8f5b2cfa1f157f3", 0x4b}], 0x2}}, {{&(0x7f00000007c0)={0xa, 0x4e20, 0xdbe, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xf93}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000800)="05dff5a77a453d8da85be21ec82dc31a83e8861d8f85b1da1b9d2b21e75df251ff87df6469ab95696163dce161cb910f97be99f2ada48aa2bf0c7e16dd5b4642a7da972391737b30d0d52cbbed", 0x4d}], 0x1, &(0x7f00000008c0)=[@rthdrdstopts={{0xf0, 0x29, 0x37, {0x3c, 0x1a, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x3a9d, 0xaf, "5f385281643652acaafdd88b53a7c456eebcf3a1c7584fbe08c7a9323c38fcc9cea1ffff458e8a8b060733cddff2232addc511f35e55ebc2a65a0bfaa8905b9851557f84d29fc85ed7c8f2ad73197c0560d0d5824da980f09bf18630dd3e096c860eb0c991a5e4e609a4dc50b742afd80487ed8eb98341df6919b8a97f1e5016dae0abe896a0bd4167c7dc1d0a400dcc492cdc2418b4086e4937fa29f6d8ed292b4d1a4db57e6a343edf735625fa23"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x14}}, @generic={0xffffffff80000001}, @enc_lim={0x4, 0x1, 0x4}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x1, 0x0, [], [@ra={0x5, 0x2, 0x3}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x0, 0x8, 0x0, [@dev={0xfe, 0x80, [], 0x28}]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x2, 0x4, [], [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x6}}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x190}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000a80)="d01bf7247a41ed0606b0074478957e0184374171f94db438c4feeba3f52917bed81e2955ada1db9f182ba53cb2183739a95f6bee5a130ca4198e82", 0x3b}, {&(0x7f0000000ac0)="4a6008d62db9d931c4247e0eac362b61e6abfc254f2820cf3e435149ff2e791fd92f892edea136882836137b9071c80d560b0431481f99875e8df7505acadc0c616d6955c80004e88cffb68ffbcd511cfa1faca6af53766762c422cebc3787822b953f056e4b8ab4f7e5ed74030911b109d396c45a5701284e4643ac6ccef16d24b789d829cee2dde39a587203fce0dc385dcfa20343d2a100b63f24c9e3d80f30a1f3873d39c1748d12a5f2b912b99980ff867553a90bdb2e4044c0a48a64d0a3f07dc40347657987413063442bcba7ae271c31e6893312ff87f8b35592e638a2fd17629287b3a1284b5b557166d3c5fe4479c665606947ea59af0963f10e5c13076a1317225dbbb8d772c9eebabdfb8e80b2b5802b9264846be8d5fd6829cd283ffaba2d16d2520b76401a18a12d786467b91435e5d504671b5a3d595683bb6cacf6c7d7a32a942fefe990a1af4a60de0136c82d90f3b15ca67bbcf0cba2d469a4a09c41a1d9a744a1cd8e55cbe85113d17a250e1328db6c3994c5798af7a06a8c15752e7310aaa76d9659874d7ada03c575ca40f0aa00e824a725bc2fd805f5ed663eec3a3dfb98d9a4685017fd25c5ae0b28c61cad179a88362cd49f77c2ffd279717d8546827de9561f3390520a59eab227123b47113aadfde0275512dffebfd3e74b958831e987c81889e66c1d0861e1cbd50135d19f9fc02f82628af02dab695fb7bea6236f1c79889318f7d2b8f0adbf279122bf86b270082b330608375e9baad9fb6c7f6b8b1cf01975fea8ceac763c2c2764868acf752bbe0dca44363d86e36ae386b0a47f46ff7a0b6ebaf5150b62b532b73738497d6bfb1cd894c0e7d7638107c2b7d6dbb427f21c2d897f66c9efc5627017ea96ebcdbdceeac2809d0058c7459b50117fb4253742974dab6ebd5e95c8fa6f389fbdf1246359db486d1a3ecb44d837ff9eb4a2f20e4cd325a193159163a1a0c0baa760a0d79929bb05b4797350d1a4fd87fd3936e55080959697d3c97eae94c9c196c3ed25fd76c2e2c2dbf6f5192bac921f00dc08314b3dce62d72b1d3789e828ac92fc62f69cbefce91f059776c3e3459179423cfb0befb420bc09c39ad564b3dc1d13f8e99ac235b5b1078c0baa01b715b433f7dab530539082330c0d6b07633e718200ada0a6e60e09c3e0c88cd2e525e69192d3c889b003ec43d42a710a5389a9f1886882c26028238412ed6f0eab126b26b9186714739c588e146c4723bfb0b1901ce955c87a21f70697b47c8e2ab0046eea474f2a39b2353e9c49036b6bbd0d7bbafe03f9a2369402c05c2a5e212f5fa06ec338dc7e3548cfbef635de7a5ba46e95e2b677c53ed4b66b0ae6418e49fc2c8828adfa352bc38d9b2b3ddd924d76c32d85ba0cab0bc547da2956015f1a1d1067ff013b38ad03cca1f5015054b8dc30b50d2738a30c4f116819cf628c91fca9f988bb4bc924af3bb3af104b19726619b9fefbdd69269e424f4518bfbbd310ae65034284755dc8ed4e9e4557fe973d0946d7d875033bdb18bb3ef6f2cf7cc858ee1db60188b1e40bf9b1682c9215a7491c820173f210bbaaeaf89a8d83dc1dc2e95b20736f1f4fb5a7d273217fb43e9e2cc14fc5b01d7653fb94d7d240afc9278ec5b7023fb64d1e6b1e3f4b03566f11382f7e8db01d1c18c54ded83b16b3719ea75f4180504ebc7b9f89574db8c2a7b7902841fb3e2b74f9176cd1092a24dc19b1e611c41b503362782f57c2c5b07cb174aa84afb8ef20829ec3cbc92b785b95a7b3129ca09a08d414961f5bf503e806a42476e56777948a5d8f5a005f6aaea7c8832c8ccb89db2b308d98a09ed31d3432344c1ff4398ff0d57ac984852a84b69399491743cef1cf0e40ed9557ec035abdcc625475153bd077a4ad877ff74453b9114a6d7da66f84f44261f9f62782a4f8bdcb2eba7b77b81bc95aebe0c57e3442772b594af197e44c05d4d6aa1ef16ab841e55282126dcc151d42b3633e83679e1f2a35533518360669b3a11b232c9d52e6b9e11487a2ee7f8f02571e9e801e501b82f909c61f1433657410c5a5dc0816c3754412989feb42807408647b3e493e017f7bc0c71ccbbd89a8dc0443269aaf1e7dc3d38bc9aeba310202d30caf1136674e2fc30cc8f522c57a87aa03340b75e74d35f5e0b61e96ca782241ef1ad43a21fc6a49e47383fdab76ffcaa653fcc3200f807a16f09bd9a4a67d40619bafcf01e79ecc2d1342b4a353ee5bf16d5d024463f9d3a83ca4646e66ef4728f2834ad18ffd34a1ef4b309cb9e90532f295362cab7b327eccf111fa6b2b19b0c72b30bd6a5d69be26a2a9207ae20242511e24005dbdc32f169c45c7f18207a4f5519ee0993b2f00e757b06a9d2c2743d2e0d5256f6de304b0cc157596bb7d90b21e78b30f34ff65373df4f25833a19330484e675aa3f4b474be9ddc4da1d2a1c461ba2dfa77391df31d0274986f4c5e6dfa5e3a5c71533606c6092abdb3d896cc02f62f426928b5728b92bef14769c42032191f32500194891dc40af0814b2b91eb5ac767ad84b26c5597ee0830f4f9a6bafc7c2d3a85cedd9af0cea4a11496b015d2d4f42ad0ad8968bb21677c3dbd23005a43a1908decafa206807c8f66a787050014e10493dc7c513a73ca5bf32f3f96b7c1c6e764c93c3cda8aad0953a3dacb2862b967051daa0d8eaaab09fe36f4f96f7ccd6e96e9befc2d72a4f01c8708f4b76d27918cb4fe24dd335d497e1affb31df1350e506ae15f0c6df20d136b979c022f92ed145299b51e777f8cd30045aacc33d1c9a0672d52f74fde48f92fd782cf69c0a5a59c98b0c462b2f7b0d40c8ca39f808c89a6da082a55280badcfc5fc19886fbfb66b6c0d2fbcdbc8d6f5341ef9a00066e0cba3e20a95060fe5e9e2705d9c184c2610a8cc83481bc6371723b8aec00b8a46149daed60bf66cac2332d4bc6bf7fdf1928a9b14a9aaa8e44b316f344098d7a6aa5c3399cd344a88dcde5977a873649d56d1d267811816829ab30cfc5d5ae6f559fb131bb2a60c4b0df369b8a42c10dbd85d29d8418a67bfb7a0adeb37f3337df5a973b22527fb7b89e6b3fb471b898baa3c63af715100e179e41b391b66fb49c969529334129472609e4a849dee69b03fb611fbb646f7401600ddc8ad9ac56be153abbf89a2893d9a3b766836913b77d719d6837231e09b5a4dfb831d2783c4bc28ee88b5f4ca9cb6259b6d3cdabf8d710e9a62c7715f4f70b09b1188e652b477378182c66859699903acd208e50fcc27f998d462d8b793163220e7b8401cf09adf4698d0e9ee680b88dde6a9374498393190237e7b42cb0a2d911f18ed5b23f86883b5d25d734fb05e278e76b9c19d2925eee28b049e0eb91ee778aa0875092664a5dd6812534224760dc4540adf9951af830113f39af5e1b8ffe5d5dea1dfb9634de87ce2aefe6fdd8382ef52c3d0f76e54a529a155a89e9a31079ce799663b4c32e42c00b7b8788ee4301a1ffad7b62aa3d65d9015c3a1f7460c4b855332ec6c80ac98cfaaab2ad129307214afd305eed2565a93a0b032939ae325a5282526d3374938625e67944ef568babea448c2d10611d60f62d59c69439ca24b3b1a6ed00af854d494cae70cb2caa465fab54e2c560902434b59af33dfe0a3d28576e97af0e8b2abc1e77a99018aa85de5a9994b93a95bc8aac274982c7d6725b0eb72316bf54b8a1902810637197ec893b690059840919b347873cf57d79eddaa9d310b3083f89afa87f1397c8390f62e95a1f2f7ede92e496a65dd24cdcfee40f426f0859f0780afce28c6756bedc3c0445a4487e79325d6fa3fdf01d41bb7096e3d3af821d9643a3286f801e98b0184e0480db3c40c3283526b757b418b011544c2d936567c59db23c71bbffa286c613b800644d236f08f624bc8cc6123b592957c89a1078e560f3a96e68ee1febf20c2619a72a89a3953c85baf7800cfa5f87da225643a347a71c373d6edd18b1c0b6ac080cbc14f5c14bacbb4c5605579d1dc08f9dbefab8b80e595259c1671ef4a6c80bffe632a93471c25662c2ea22c22a1d277c459ae166550e80ff5694816b321fa0c942366aad989c32c27bfffd18d1afe11985eb8eaf4cd7c209150bcaea9c286c9ef935ca03e00ca121124d3ade6b964e89bc8d7d79654e333b3de0514767a25c714040a4a5bb9ebb9d59e5938f7c8bcee0a5a4506658748675d888ded4422942c2d83367772e3517e70abe1f01abb54fddb1bd65f84a7d87949df4c5a9a66f455ea5a5a075fbcecc70195c8da3c1a9eddfeb1c4e5feff3fdf4bbbb3f7969a03d12ecaa8d3feadc4d7fe2bc998256c1e947eaea941f1dc473fdf9220ba7dbe9845fbc1ca4a4e23cac9e33966de4ef7d7513d5490ea074f9bf4f54775054cd7cadb5036735c4bc3793018c1bb9a14713fb7f926d5790adb6b1aced6ed5674e582d899aa5900fc01ba2bac97b483312201f504f8f80b75b09675e6dc25fa86db37541a9aa20434a4015c1145334215834d87b2924f2e97a8a9db9cc982c94780050891e781729a0aed1fb12b03c5fff8ab81bc6f9e135cdcb012d35466fcff87ce453e9bf5897ee956903efc66287a752dc4b0161e210f641ccdf201a20085bcae5cebc44a2fc9ea84fd4709bd8d4ec16789e4e1eaf9c578735222ef59991e966f26b581d7abd02ece31a36762cd65c3c4fbf3082ee31685a5c6b1793d5e887d69d2687ae13ca45d51c2816aa3360f4097deac681b956e153f7ab40b95c809cf0e2c337445105c4308685628fd079ab9516be2de8c8286e2aa08120770dc6c760bb26093603931568ae32b9e7ce5c4270af712ce24cad46fe8a80d27b3bffe01b2cdc644551cc641755bd64c45f7c68fc51333c62632e9d9c9ad6283247daea6434beaed35864abd1ec5fa4ef5a56b2a07d9523ffdf6d3821ae2890941b6f7f9f54fb5231a67ad1008e7c2d325e407ed9966a3f776fa56fb19f7f0eb9b0ffb014f0d580cc65c21c9763de2d5af88c9faa53a15b39be074bd2e48cb4c2e33f774887b8def2c36a3b13258f08c285161cb8479810a984d3328861bca2144b6eff9eff28f297f91c667f41672a3694809dd6b44ee3eda65e47cd69b91cdb53dacf3967228f67f6b524adc31008cd5d1e2a8acfcddf85a340f8c1254141a2083a1ae9a80368bb28b205bbaa823ebaf96488b1a8a5119e5520588966a754c48faa45c6cf6b8dd1872ee9f39cbe17405f2a7d552e012573e5c5c52367aa35b4182cf916b1559a71261f66309d27f1e2d48eeee5e4c72c0563061a5c7edace7a56a9aedf29183ab40e9f89dbdb78a3d8c72d8f9ef0a38ad3e80283385efb3e8cdacbf4f41b3f145fbbb9e58572b4d243da093388901afa73b5df4db9512f7659ef718cef34711a73635eb61ccdf63cf021e2c930644eb1c02791363c415ad577917d92000b3057684172689b8c5183059cf2c1dce9018ad5a8f05e335e61814a3ff04a82a4709385e9440696a1da54f5b03ff048d7b5413f044e3d5ad0f206a25f46851df628eb5a43a62cdcdc5cb76d79657669a9d88557ec910c6127c11613a2803a25d7305324689bf675b17c51882484b3c2b196ed47286882e09fdc7874c1fc1a5f1965467778aaf64ba9ca39052ec4c20fd4df3e629a944a06b2be9effa89befaa0cedfd2f99786fc88f37c29cd798195d5056fb8761559d145baef3dfd7a848bb7b54e9dc9f4c19d8f6c2bf9d0843c8452757a1778d5856805b9ae61a1dc56e68473eed53d761b03919f61ed1b0", 0x1000}, {&(0x7f0000001ac0)="845871fae19b7f6445", 0x9}, {&(0x7f0000001b00)="5fa1821d2bb67f583af991c4b96e8c34b71057296b4aa8c60eb024081b9b0a34044c07b2b26aceef98c487c1118cbc7ad6de9b9e2400aa518c3416ea23559c383427887800b6a805aa3f6262ead8b48bb87bfeccb606d170", 0x58}], 0x4, &(0x7f0000001bc0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xe39a}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r7}}}, @dontfrag={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x8aa}}, @flowinfo={{0x14, 0x29, 0xb, 0x2b6}}, @dontfrag={{0x14, 0x29, 0x3e, 0x200}}], 0xa0}}, {{&(0x7f0000001c80)={0xa, 0x4e21, 0x2, @remote, 0x4}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)="c54b022f9af182510e942e5cd3bd54dc0bd8c560728105d8694c304948d0476dd2f1a02d833b4b19c67c5104d2b6876f760d679e8811de468ef4253b706b9334088eb9a91be12ec9795531637c4d2a9411191511993a1e199154e473d3d11e7876a20f80d14e8c2f99d2e627dde35bfd1d31defd8d8e45974be104158dc43fd36ce33bbe3faf341ccfb4410269eb3dd73472038453d6d19ba1936a97e3ac845b78858b2112ff91a8f15623bd6fda44e68ee59b3ac6b2e0e8fa4d45d90ef5b17aa72b30c7963271fcf65f2a31b9010be1a7adcb1bf056c37672fa0ce36ee9355df80ca8a9d9e6a1f5feed56377f645a12da2484d89117fe5eda027754", 0xfc}], 0x1}}, {{&(0x7f0000001e00)={0xa, 0x4e21, 0x8, @local, 0x5}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000001e40)="df867864f7fac57dd9d50be07320f61d983b7d4131b812f5f4fe6ec536b4e687ef6a2c99c7e19b3d5b52c592bce0e091bd4528de0e0bafb26a725b6c02e0ab6613999eb7e50be093ada4691b5110", 0x4e}, {&(0x7f0000001ec0)="52c98c122858b9adf0abfcd3f30f4ad4d8e52beaaace3cd4930e3f667d0ededed321058e9c79a01726ef985afbb1db69909307eff25db65d8f4850a55de935432228cec8a055f75ef69bd0e18b07494553e4e309f420caa3f907", 0x5a}, {&(0x7f0000001f40)="88473d5525dda9e70094718e8a3021207d2f2dab1f94bf3d6f6d1f10c017ec968dd33025a484078ca1f947cd6eba99eeb408a028ebf1a16b5fb531d89ffa223a91d131e24b74d2a0c769972e1d4dc46a90e4eac75e0b74dee07d185431b35f3d3e46d3e08b14a4c32c0ed3d40434f03ce41d47c46c6f2514be7260f4b3208af3906fe87f49f57a1264fbcdbdc6dea0566c396470181d118dae5002506f20b80410465796eaac4b1468b450028174f4177115775f2a32d94371a089f45d7eee742192861ff1aca73bafa1f25b02854dcd", 0xd0}, {&(0x7f0000002040)="bd19b0f9b3d8ea0caa5af82714a5cdbc985a0d5d2055d90387245969bb6e8270623cb922ac1429c87c6f1172f10bd997d2837db6ef1cfeadfef6258425cd16d683ec70bfaefd8e58b062f6145cdfbddf61c7ee480140d9585ce8f489f01be1aa01c04618722485a6cb28e7402410c60731d0dd48c529ce8f75bf2de0be74588311cb45c1187ad55e49a8c478f43227175cc3556a9f10997e2335d8612b582f9c9657fd0fb0a69af70931fc4198e6bd03e8ba6a5c7b4c3dd7bb068d440fcc2186e6de24f8f166fc4e1b9149b6deb3eb40d54c67a7e0f3b9e54c4ef95c3c52efcccffae2a71191428a5be3f495ea340a", 0xef}, {&(0x7f0000002140)}], 0x5, &(0x7f0000002200)=[@hoplimit={{0x14, 0x29, 0x34, 0x5dd}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x8, 0x6, 0x0, 0x8, 0x0, [@empty, @ipv4={[], [], @multicast1}, @rand_addr="65425d67175cd8d27ab8665a503f193e"]}}}, @tclass={{0x14, 0x29, 0x43, 0x494}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x32, 0x20, [], [@ra={0x5, 0x2, 0x2}, @pad1, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}, @enc_lim, @generic={0x9, 0x3d, "5da29203ace9f8887b0d394e14b44848bcf2c638494d7269b6e0a6b79e69a0ac8d5272265f03d2cf89e66d69827c419b0a72476e561aec14d9d1698fcd"}, @generic={0x400, 0xad, "a8ef752dc2aceb64e979c9e4f5245fd236f08392d90c2faa3e3a226fefff8954401b5e8ab0aaee6866c4cbebf5a186e5efd95cd6bb317d1676b629c7d6e0fd04d15bb1c5c05afe2a6b6855b446c39eb29fe0c046885d0b0e1600ae369b8226d058e49fa5d32065168e90d33179077bcfbd64c670a95e985a52184587c343e49146a833cbf33e46c8bb978e15d167c449f535adb56af96893cc88cf61e918d24e50079b5481f2050600e1978ddb"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4f9e}}, @hopopts={{0x108, 0x29, 0x36, {0x73, 0x1d, [], [@enc_lim={0x4, 0x1, 0x1}, @generic={0x8a, 0xbd, "29f36a03a8812fe5235abf0e406fd19793f4e1a880c7d7367fba268dfa1648c0f596c2408cf235fb9632ffeb530efb7e2005289d69cbc9ed683ccbbebc4c2bcb7fdc359919af232a50059bc6e08e26c4b203c199253984d3b3648b9233c4128ad0a98a158633d0ae3650ba904e04f0fbbca8b7b6cc2221ff8ac0f3d5a496e73c2e630ecf161dc93f96b947d22fe14ae66edbfa76f44b605622db2f44ee61d98fca1fbd2755f3504c6e176e488bd16c17370b638927c042bce7355361e0"}, @calipso={0x7, 0x28, {0x13bb9c9d, 0x8, 0xd1, 0x7, [0x7f, 0x13, 0xa2, 0x0]}}]}}}, @dstopts={{0x20, 0x29, 0x37, {0xa9, 0x0, [], [@padn={0x1, 0x1, [0x0]}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x33, 0x9, [], [@hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @calipso={0x7, 0x28, {0xff, 0x8, 0x204000, 0x5, [0x4, 0x43, 0x0, 0xffffffffffff8740]}}, @jumbo={0xc2, 0x4, 0x401}]}}}, @rthdrdstopts={{0x128, 0x29, 0x37, {0x33, 0x21, [], [@generic={0x9, 0xd2, "82260a9250f5defaf8091c5fde2f7869d4bd1527e8723f044de483d2545f0d00762b5006df3c711c053820853738ead47c5a9e6da13a31b292569bc14c5e51d694cc8f9e8bb0cc5258bbdca2ffedeedc0cfe4543df752afaa2c19c14d76e464011eafa87256c86cd196a665d50d9181e5fd986dfa4fa3ad67e321476c70d9d1cfa3de5fd7c733afdac098aa8333450e89c262130607e2f19f8caafb99431676f477a56a465ebb432f5b58ffc7f8edaa93e86e9d882cd4bda0bf1bd26f0883eb5308290ca011462150effb590ea8096c9581d"}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr="4ee0fb40b4e0cf24fdbb4e4aa5cc025b"}, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0xf5c}, @pad1, @pad1, @pad1]}}}, @hopopts={{0x30, 0x29, 0x36, {0xe8, 0x2, [], [@hao={0xc9, 0x10, @local}]}}}], 0x498}}, {{&(0x7f00000026c0)={0xa, 0x4e23, 0x6, @empty, 0x9}, 0x1c, &(0x7f0000002940)=[{&(0x7f0000002700)="aaff4e68452ccfac14094dd468376d309de665973f6d647a73fe97588cf4ed98111407076d7fc9237525ad696e307ac5c0824fc3d88a7207da36247e5ad8d111604d2f78e82182a333e60d578eda4bf567cc37047283b655d3c76006fd07342ed350a071e462975fb8b343ea6ff63776ec27acf9a0020c61e63cc5b7fa87c6e476e316698b49ad98d1937a3924f0e5ba2396c3293e2793", 0x97}, {&(0x7f00000027c0)="43d387e94ab676ee5d09e4ce4a6139c4be10589ab3ca04dabc353035c8e875591d4289f302b29d142fb180dc41c0e87d067b22de75f22af37fe25326b8407a229430ea7d4572e22fc11d97b7b87116d063b4d64d90eb64e1", 0x58}, {&(0x7f0000002840)="b30e2de897e169d9358d8fd47fa796a0b9e1a321908ff8b3775e1e61ad637162cef69f5ea378bb6f25e714a9cb3ff6cf9e3fe6a17e91e74d6aeee5a12d73e636e5e89de18b4c96dbad34c8aa4455a322e58be8322a3c03bbccf4d64a80d266b1d3f5fffdd254ae91bf8ddd4b028d8363c45a4b226265ebb6ca598ce9aff2a05ed33ea35dfdf722609af1da38893b8468e6431e4ce0c3eb238155e04fdd416742a3680d7158731e335fc764ed370d8a37db448edf2456bf47c2e6f6c00097913d34b7e7875af41e8e88b4ab95b493516698", 0xd1}], 0x3, &(0x7f0000002a00)=[@rthdr={{0x98, 0x29, 0x39, {0x11, 0x10, 0x333597108491a4e9, 0x2, 0x0, [@remote, @dev={0xfe, 0x80, [], 0x11}, @empty, @ipv4={[], [], @broadcast}, @rand_addr="547297c0ac9d2d81108f02f70eda3ef8", @loopback, @local, @mcast2]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x11, 0xa, 0x2, 0x4, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, @local]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r9}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r13}}}], 0x1b0}}], 0x7, 0x4)

01:02:11 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000002806000000120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000000)=""/40)

01:02:11 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
socketpair(0x4, 0x1, 0x8, &(0x7f00000001c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:02:11 executing program 1:
lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="cd8000000000000000"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:11 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
sendfile(r1, r0, &(0x7f00000000c0), 0x0)
ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x3f, 0x3212, 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}, 0x1, 0x0, 0x0, 0xc2cc9a9420708a02}, 0x0)

01:02:11 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

01:02:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0xf)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x100, 0x200)
fsetxattr(r2, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000140)='wlan0\x00', 0x6, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
capget(&(0x7f0000000180)={0x20080522, r3}, &(0x7f00000001c0)={0x8, 0x3, 0xa1, 0x3, 0x6, 0x66b})

[ 2596.948265] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2596.959649] binder_alloc: 17172: binder_alloc_buf, no vma
[ 2596.959669] binder: 17172:17181 transaction failed 29189/-3, size 80-24 line 3284
01:02:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x64)
ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000280))
r3 = getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x9, 0x9, 0x4, 0x8, 0x0, 0x36f5, 0x10008, 0x4, 0x40, 0x5, 0x4e80000000000000, 0x8, 0x7, 0xfffffffffffffffd, 0x1, 0x2, 0x1, 0x0, 0x1, 0x8000, 0x80000000, 0x2a9, 0x252, 0x1000, 0x100, 0x0, 0x9, 0x1f, 0x8, 0x1ff, 0x9, 0xfffffffffffff1dd, 0x80, 0x8, 0x1, 0x5, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000002c0), 0x265498fbcc125972}, 0x400, 0x3ff, 0x2ee7, 0x0, 0x5, 0x4, 0xfff}, r3, 0x10, r2, 0x2)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0)
accept4$inet6(r4, 0x0, &(0x7f0000000140), 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
pipe(&(0x7f0000000180))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="00b76b25ca4716c7c1e5bf412305000000000000000000020000003000"]], 0x0, 0x0, 0x0})
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$UI_END_FF_ERASE(r5, 0x400c55cb, &(0x7f0000000200)={0xb, 0x1, 0x4})

01:02:11 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
write$binfmt_aout(r2, &(0x7f0000000800)={{0x10b, 0xfffffffffffffff8, 0x10001, 0x347, 0x3c5, 0x7, 0x4a, 0x1}, "c493996fc9e7cb9db6c949685039846c66f72760b9c6c77f7c364a2a9293214a8fbc34533dca91a79d67b2dad2e3cb5cf62941bbc2b6debe2c5addf860f825d716866550fa57e6fc4378d68c1413932c7b66227e6f26c233fdf11a0531c22b89d1e019e044c38a783aa42e40d5c6e2a1079d", [[], []]}, 0x292)
r3 = dup3(r1, r0, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

[ 2596.964540] binder: undelivered TRANSACTION_ERROR: 29189
[ 2596.966106] binder_alloc: 17172: binder_alloc_buf, no vma
[ 2596.966128] binder: 17172:17184 transaction failed 29189/-3, size 80-24 line 3284
[ 2596.969331] binder: undelivered TRANSACTION_ERROR: 29189
[ 2597.016232] binder: 17192:17194 got transaction with invalid parent offset or type
01:02:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x27, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})

[ 2597.016882] binder: 17192:17194 transaction failed 29201/-22, size 80-24 line 3454
[ 2597.023825] binder: undelivered TRANSACTION_ERROR: 29201
[ 2597.069812] binder: 17198:17199 got transaction with invalid offset (-4101011477137475840, min 0 max 80) or object.
[ 2597.069841] binder: 17198:17199 transaction failed 29201/-22, size 80-24 line 3379
01:02:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a6273000000000000000000008f78af00000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})
r2 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xee184df716cc7d80)
ioctl$void(r0, 0xc0040c29)
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000040))

[ 2597.071277] binder: undelivered TRANSACTION_ERROR: 29201
[ 2597.073621] binder: 17198:17199 got transaction with invalid offset (-4101011477137475840, min 0 max 80) or object.
[ 2597.073649] binder: 17198:17199 transaction failed 29201/-22, size 80-24 line 3379
[ 2597.074491] binder: undelivered TRANSACTION_ERROR: 29201
[ 2597.118618] binder: 17204:17205 unknown command 926363952
01:02:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3b)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3b)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r5, 0x0, 0x0)
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x3b)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r6, 0x0, 0x0)
r7 = gettid()
ptrace$setopts(0x4206, r7, 0x0, 0x0)
tkill(r7, 0x3b)
ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r7, 0x0, 0x0)
r8 = gettid()
ptrace$setopts(0x4206, r8, 0x0, 0x0)
tkill(r8, 0x3b)
ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r8, 0x0, 0x0)
r9 = gettid()
ptrace$setopts(0x4206, r9, 0x0, 0x0)
tkill(r9, 0x3b)
ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r9, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x24, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r9, @ANYRESDEC=r1, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYBLOB="aa41350593d91098a96ae4e7d6d9c24f668e3057f5fe7a1ab3d79324eb36291f7f7796f76f9eb6c4a476d6b5ce2e182333a8d939c17b544a74fdd144c85615908bc94cf8715f7432993ddd4fcab31f0821a38058c1013dfb2ee034188f37ba6e6a25eaf6edc2343ece56a5816370b20bb6", @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES16=r5, @ANYRESOCT=r0, @ANYRES64=r2, @ANYBLOB="2ac5bbff860f3ea004183e4edfe2086619c00c28913592b94f33f412d645ae08686a77224c5c1214fb8ab8728eef453e36c23320e079af0b09a46f1d2dcef9dc1643ffbdb181d6f3a39a1ec34d7def5ea5122e747a3a88f72821a4248e65975d07eb0220c4401628b5389c60d7c2be60c5ea2534800a5996acf95b8598328368ef7bc2ec1632ce0657d9aedfdaf718010548020d68"], @ANYRESHEX=r3, @ANYPTR=&(0x7f0000000180)=ANY=[], @ANYPTR64], @ANYRES64=r4, @ANYRES32, @ANYRESHEX, @ANYPTR=&(0x7f0000000480)=ANY=[], @ANYRES64=0x0, @ANYRES16=r6], 0x0, 0x0, 0x0})

01:02:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/se\x03\x00\x00\x00\x00\x00\x00\x00s\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x601}, "7bfe8cc1ed537ab6", "5185e040702945c67a7eeda243429c4cfa1cf153e7fb58153d21aea54476dda3", "34d108b8", "7e78a291049bbb34"}, 0x38)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[ 2597.118626] binder: 17204:17205 ioctl c0306201 20000440 returned -22
[ 2597.120277] binder: 17204:17206 unknown command 926363952
[ 2597.120285] binder: 17204:17206 ioctl c0306201 20000440 returned -22
[ 2597.147812] binder: 17208:17209 got transaction with invalid offset (24, min 24 max 80) or object.
[ 2597.147850] binder: 17208:17209 transaction failed 29201/-22, size 80-24 line 3379
[ 2597.147999] binder: 17208:17209 ioctl c0040c29 0 returned -22
[ 2597.148500] binder: undelivered TRANSACTION_ERROR: 29201
[ 2597.150120] binder: 17208:17210 got transaction with invalid offset (24, min 24 max 80) or object.
[ 2597.150154] binder: 17208:17210 transaction failed 29201/-22, size 80-24 line 3379
[ 2597.150236] binder: 17208:17210 ioctl c0040c29 0 returned -22
[ 2597.150480] binder: undelivered TRANSACTION_ERROR: 29201
[ 2597.156892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=839 sclass=netlink_route_socket pig=17211 comm=syz-executor.5
[ 2597.232013] binder: 17217:17218 got transaction with invalid parent offset or type
[ 2597.232051] binder: 17217:17218 transaction failed 29201/-22, size 80-24 line 3454
[ 2597.232294] binder: undelivered TRANSACTION_ERROR: 29201
[ 2597.234856] binder: 17217:17219 got transaction with invalid parent offset or type
[ 2597.234892] binder: 17217:17219 transaction failed 29201/-22, size 80-24 line 3454
[ 2597.235148] binder: undelivered TRANSACTION_ERROR: 29201
01:02:11 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
fcntl$setpipe(r1, 0x407, 0x9)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="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"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20082, 0x0)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040))

[ 2597.373800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=839 sclass=netlink_route_socket pig=17223 comm=syz-executor.5
[ 2597.425785] binder: 17224:17227 got transaction with invalid parent offset or type
[ 2597.433802] binder: 17224:17227 transaction failed 29201/-22, size 80-24 line 3454
[ 2597.442864] binder: undelivered TRANSACTION_ERROR: 29201
[ 2597.451383] binder: BINDER_SET_CONTEXT_MGR already set
[ 2597.456966] binder: 17224:17229 ioctl 40046207 0 returned -16
[ 2597.463264] binder: 17224:17227 transaction failed 29189/-22, size 80-24 line 3138
[ 2597.471747] binder: undelivered TRANSACTION_ERROR: 29189
01:02:14 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb822ec510100019b3d7280437a7462b615d4c325f6917829a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:14 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r4=>0x0)
capset(&(0x7f0000000040)={0xf1504, r4}, &(0x7f00000000c0)={0x101, 0x240, 0x68fc, 0x9, 0x2, 0x7f9af3e3})
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3b)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r5, 0x0, 0x0)
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x3b)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r6, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="28f891440f35aae61039cfc237e981425daea15a73ee60d8c32162128d98762c9b4ffa0a7970a3cb229628fb8886d99c47bcff3839fabed6aef2dae430928507c4909f6aa572b4df56610a9f49263ba3f6dce49bdb71dec7165f36d2c5f13fde0dc275fe882a87859725818fc8d8a7d9ec466c87020777da19f8c4e05482a1b21ff32687f57b6215ae21dc25727d34e5c23c4cca49e531543d493e1f62a04db0b16d61573fdc00c6a7414903819f1c3bbf2f2d900ac78541cabd2f413b4e401f6e4f34ef109cc25782402228ed2bffe48b1360d8980f5d44000000001000", @ANYRES16=r3, @ANYRESHEX=r1, @ANYRESHEX=r5, @ANYRESDEC=r6], 0x5}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

01:02:14 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

01:02:14 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
r4 = accept$inet6(r3, 0x0, &(0x7f00000001c0))
shutdown(r4, 0x1)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:02:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:02:14 executing program 2:
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000000), &(0x7f0000000040))
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4500000010003b0d000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@dev, @multicast1, <r5=>0x0}, &(0x7f00000000c0)=0xc)
sendmsg$sock(r4, &(0x7f0000000b00)={&(0x7f00000001c0)=@ll={0x11, 0xf7, r5, 0x1, 0x1, 0x6, @dev={[], 0xf}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)="59184c74eb3958509ab38f68709f299291497beeebbce06b6190a4eb3521e09015c0de73d719aa4ec5963a8a4cd1c05aee245ae705f576cef311723233f6e0e8fd3fa71ba0dcc5f8575bd3a0137a428b3801417f", 0x54}, {&(0x7f00000002c0)="7a010a142043fe9947c3a2fea5619c4895311ee9bc78f5ca45dcefddd0ab0892386c829a0d99319ace35e6670382d189c57083a37a0e25da4497d5f33dbcf56b8f45ebde5c51ce0286e8e47875af03acc29ddd60fd301f5c7d974d65fd8513ca7d5caca7", 0x64}, {&(0x7f0000000340)="07e93fa2cd709b24b7630c13671b72dba9ffc6e9bb3e62a729ea049a69594f02fe35cd6b8e116ca7ab05b3967e52b92c8e35c319cdef62acba10ffa24e2325ba1f4b9bb3e71a7b1e69b651287942ce98a6dd56447608f46a40c609cf71fd8805f225a0092be0786b3ce8c83bcbe1473b0eea3dbefa8df07315b7187a30059a61834871071694d4489acdf3010d1bdad3a18634913da687e225f2c066fba4b74df2723b7a9d70638b78bb4e77e2b69d8d14ecd5e073a5832bc34b", 0xba}, {&(0x7f0000000140)="8abc60fa7402be450580e7fdb9688643c13b66a128cddd3ce8f6f79438cec4cf63f94eef", 0x24}, {&(0x7f0000000a00)="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", 0xfb}], 0x5, &(0x7f0000000480)=[@timestamping={{0x14, 0x1, 0x25, 0xffffffffffff0000}}], 0x18}, 0x40080)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000540)={0x1, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x1, 0x8, [{{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @rand_addr=0x4f46}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e23, @multicast2}}]}, 0x490)

01:02:14 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
time(&(0x7f00000000c0))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000018005200cb90c1abd8970741717ead88e7d1ddd65355554354d1a548636ee5110800010076"], 0x38}}, 0x0)

01:02:14 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
flock(r0, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x15, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="0000816a4d9000000000000018001200080001007674693618d5020008000280ffff00029d20269d45e6a0cb571936777ad4116016db406be82b5ea655405018c4005eb07e110d097a2848f5a38e2c3a9092ac6defa7aec944399e74afae9cfdd66fe82c342e034a87be0ce8e9aa2019c8046203f347059ba7"], 0x38}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x812ae93f4788b362)

[ 2599.976112] binder: 17234:17240 transaction failed 29189/-22, size 80-24 line 3138
[ 2599.998719] binder: undelivered TRANSACTION_ERROR: 29189
01:02:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
ptrace$cont(0x9, r1, 0x4d, 0x8)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0)
ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0)

01:02:14 executing program 2:
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xdd)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$notify(r0, 0x402, 0x28)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="000001007e7469360c00020008000280ffff000200"/32], 0x38}}, 0x0)
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000640))
openat$cgroup(r2, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0x40d09)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r5}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@polexpire={0xec, 0x1b, 0x100, 0x70bd2d, 0x25dfdbfc, {{{@in=@multicast1, @in=@remote, 0x4e21, 0x7, 0x4e24, 0x1, 0x2, 0x80, 0x0, 0x29, r5}, {0x7, 0x56fa, 0x101, 0xfffffffffffff801, 0xeca, 0x1, 0x9, 0x9}, {0x18, 0xe25, 0x2, 0x5}, 0x40, 0x6e6bb9, 0x1, 0x2, 0x0, 0x2}, 0x40000000000000}, [@policy_type={0xc, 0x10, {0x1ffd0bfdacd4a84a}}, @mark={0xc, 0x15, {0x350759, 0x8}}, @policy_type={0xc}, @etimer_thresh={0x8, 0xc, 0x3ff}]}, 0xec}, 0x1, 0x0, 0x0, 0x2000}, 0x20)
ioctl$int_out(r1, 0x2, &(0x7f00000000c0))
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f00000003c0))
preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000000)=""/36)
ioctl$BLKTRACESTOP(r6, 0x1275, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff9000/0x2000)=nil, 0x2000}, &(0x7f00000001c0)=0x10)

[ 2600.037250] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
01:02:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34f, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRESHEX=r2, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES64=r3]]], 0x0, 0x0, 0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f00000000c0)=0xe8)
getresgid(&(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000380)=<r5=>0x0)
lchown(&(0x7f0000000000)='./file0\x00', r4, r5)

01:02:14 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
fsetxattr$security_capability(r1, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0xffffffff7fffffff, 0x10001}, {0x8}]}, 0x14, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2600.091712] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2600.107188] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2600.181523] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
01:02:17 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d6b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:17 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3b)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r5, 0x0, 0x0)
write$FUSE_LK(r4, &(0x7f00000003c0)={0x28, 0x0, 0x3, {{0x4, 0x2, 0x2, r5}}}, 0x28)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)
r6 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x8000, 0x0)
r7 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
write(r7, &(0x7f00000002c0)="8848c07b90393d50371cbecd4dde36657e4dd534fe29fa740eb61136b157caadb38305d2f240a01a5b48f161187cffc17107e7ced07855548e5e870f775a7d875afd0a1b0a03fc7779a293ac15dfbf363754fd48b02fb53408432d8f3017255df96c4abe02f75fa33812846df4720273d904d877560e66a432fe80030e69b5e34a256208fe7daff7f52eb8ef7ea6c519935a875867d304e6ce0c45050a61e254182fd59c320f05f91e5a402f6bf52e568721e3bc01117d7ed0936590dad755fe973dc8509da674f9bdf03ad765aaacd4c0020a69a420e77a6b82ad10bc4623cb6d115a39e6dfa3616d89c78b11986ca73735b938", 0xf4)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r8, 0x100, 0x70bd26, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xad}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)={0x12c, r8, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f7b}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x89}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x200}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffffffffffc7}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20}, 0x20004000)

01:02:17 executing program 0:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@struct={0x7, 0x8, 0x0, 0x4, 0x7fffffff, 0xfff, [{0x3, 0x0, 0x9}, {0x6, 0x5, 0x9}, {0x800, 0x2, 0x2}, {0x6, 0x2, 0x8}, {0x10, 0x0, 0xfff}, {0x9, 0x5, 0x401}, {0x0, 0x0, 0x9}, {0x5, 0x4, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xf, 0x3}, {0x6, 0x5}, {0x9, 0x5}, {0xf, 0x1}, {0x10, 0x5}, {0x4, 0x3}]}]}, {0x0, [0x0]}}, &(0x7f0000000780)=""/200, 0xcf, 0xc8}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000880)='/dev/fuse\x00', 0x2, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ppp\x00', 0x1, 0x0)
r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002500)=ANY=[@ANYBLOB="3800010000003b0e00000000000000000000004041dfc79649ed922425310f0e68b6d680bb22ff7c0737a4acdde6c72f737bd7fc453c528510930ebd7d35a79390dc9d1aaa4a31d9d942836f40d878326af55afaf4581e402141d5259c5d714c772edbcc125804f36340aa119e5c7eacf3661bd137f185b163", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r13 = signalfd4(r12, &(0x7f0000000940)={0x83}, 0x8, 0x800)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008b43a0abbba1c6be56c945f000280ffff0002"], 0x38}}, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r16 = socket$inet_udplite(0x2, 0x2, 0x88)
r17 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767669360c000200080002f5e40b9ccb24e8129880ffff0002"], 0x38}}, 0x0)
r18 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r19 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3810600010003b0e1600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r20 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='cpuacct.usage_all\x00', 0x0, 0x0)
r21 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r21, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r22 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r22, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r23 = signalfd4(r22, &(0x7f00000009c0)={0xb9}, 0x8, 0x800)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000a00)=<r24=>0x0)
r25 = creat(&(0x7f00000000c0)='./file0\x00', 0x1)
r26 = geteuid()
fchown(r25, r26, 0x0)
r27 = getgid()
r28 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r28, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r29 = timerfd_create(0x8, 0x80800)
r30 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000a40)='/selinux/validatetrans\x00', 0x1, 0x0)
pipe2$9p(&(0x7f0000000a80)={0xffffffffffffffff, <r31=>0xffffffffffffffff}, 0x2000)
r32 = gettid()
ptrace$setopts(0x4206, r32, 0x0, 0x0)
tkill(r32, 0x3b)
ptrace$setregs(0xd, r32, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r32, 0x0, 0x0)
r33 = getpgrp(r32)
r34 = getuid()
lstat(&(0x7f0000002340)='.\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, <r35=>0x0})
sendmmsg$unix(r0, &(0x7f0000002440)=[{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000380)="b352d2231a2667c59647027e1f2b561f905c5add1cf8999c57f715da66a6c9f60c21774c0ff52885c98ea4518ab1996e4611b3e2f800b03f2d62d9f4e70f230c05db1b9b53fe802d4b2c435b4a67878dbd426dd016d78a47d51d4ef6582b724dc62f5eac0654661049fdb3428f50ca8b19fa5a025e4f90275d517e1e1e1b40e841345bc0bf3d1b68849a67cb813e09014f78ab77baec83a4fd2c7ef3882fbc0c1ab99f5c1fdf94d04c5391b163209f4b887337817eb347d02c0e41b6", 0x99}, {&(0x7f00000001c0)="0531881fe23c2378566a7e0e1fa8e79b259bb9439cb10193756b270e8fde94b15485a606a06d523f1f6241f6f9d495fd3099f295cbb88f3d85a41b01613e81a74c3fc0e68ff1a35b42c4057b83ef89ec89b688f21cf3c99c4e1ed29ca328ebd81db1bd0940c72eee638c492b7d27e8a742ccd36365b6038a4fd1f549", 0x7c}, {&(0x7f0000000480)="0af8cba6775d7e5254715beb7e6f8b22ded0d74fbaf35f52dfa63af3ba258f036379d2644e72cb3dad3dde43d3164724e209f07f7513e084391a42f7412b7d93cff776cd4e107a03b72d3877adcfed3d27848df0af60b0d5eacfa7abcd72dd06971c3ac1dff849a24a343a6b9d8706533ad15d797a1f0b4da6301637db1c71e36aa267131c999d923ed3cd6fa3a590bc0734", 0x92}, {&(0x7f0000000540)="485c427db525b084890fe62ccc24b6baea61a07f17f633ef1c10ce5cddd821fdf615e70680ed0c0e5f95a673aaac20f021d27757dd50bedda6eb484bab7c2c27cd174eabee5527479acf05c6e17435b311696b3bedc5942416c9146b2e3eaa1778055a7141ab70685c7fea8376f7dd565310b8bb66b75477acefaf66630d300545ef280f74b057cba85ae8df9222aa73d51ac61775ed3c71da51e623f4d52c416a6a64d90435f41e39bc111bef2b67cc8408080903a8e748cbdd16011608", 0xffffffa3}, {&(0x7f0000000280)="102b42e48f126c95df10492d60a88c025e300336fceb0717da6594555ea891f5cfd4e91f518862f5b278a10000bb258173725df02dca796a6c3c6f849dc1167be82eba9c254b", 0x46}], 0x5, &(0x7f0000000ac0)=[@rights={{0x2c, 0x1, 0x1, [r1, r2, r3, r4, r5, r6, r7]}}, @rights={{0x34, 0x1, 0x1, [r8, r9, r10, r11, r13, r14, r15, r16, r17]}}, @rights={{0x2c, 0x1, 0x1, [r18, r19, r20, 0xffffffffffffffff, 0xffffffffffffffff, r21, r23]}}, @cred={{0x1c, 0x1, 0x2, {r24, r26, r27}}}, @rights={{0x20, 0x1, 0x1, [r28, r29, r30, r31]}}], 0xd8, 0x180}, {&(0x7f0000000bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000c40)="4064aff88b15d1568aae506d851cc35053eaa8afa66af77acf6b31650bab", 0x1e}, {&(0x7f0000000c80)="15220fbea2cf07899d5417da891ee9d8e43a8629d419933df0a365f96569d401e61711847e23b846d14ff32e357dff150baca71359826bec0e57c7a23e85182e53aa9ca160d45184e2a302d75964adf5dde42459b647535091da009970bdb01069d82d30bccbe998767b217ab0e62393679054aef03f19d2c060684d2fc406ead9d95a5a51948b2d23e1a74b42e649ec16b24e5f0e66aff64a336eaaf11f6a5202e53bdb4c8ea53dccaef6524a690a126e818e3a52d2105b5129c964e01c99a827515e487b225315c9428941c6e799d1c206e2e14d6ac0aae8c718f266311f0c2eb8b01306049e9b030af61db454", 0xee}, {&(0x7f0000000d80)="ddf23b0212eb9a826f0bce0cfc06a455628eafa37dd13ef556bcc0483017be03d86ab9474b173bbf83e50804ee43b2b86c54582b3efcfc72f932525ba90341cdea1032b9038dc27d52a07fc7473c1f107f95df8afc98f006eb83ba3987109c261bc3d924d9d35aa11ba2fab2fb7977bcf9866d4b0544d5e1cb89edf7d11db25177a62cf122d2a31720273e72791619036fae82de5bd4a7f246fb81c7", 0x9c}], 0x3, 0x0, 0x0, 0x1}, {&(0x7f0000000e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000000f00)="18e5fc0646aa4f9af3d7be4ae87a0cee5a447c798bcd3ba0739da8c4ba86387f9cb6f9153c3bf31a993b74578e6fbc2af61f26427f69e276333ae21d76db6c7e98a59dbaefd926b2c4b9e47e3cca5873c2667c3bf584b24d6b9bd04b234125657166e83b5929123849afbe2d5240b77d39d4fb0395e6d630d6e071c0831c04294fa23837e33659bcf30907206c90bd4744abe7737ae967f1c6752603108d3b13ead8bc43189b26c8bf2500d604cb03226cf72e", 0xb3}, {&(0x7f0000000fc0)="26be35d966a82c6270aeb9f52b199cd45eb243235a86df43357947c4ee56cbd204ca63fb2550a969a4f30b4f5cbb728f21c6aa8308054948e3feb9e83a06dfc5d42c0a1afbd0034b2248b581a8ae9acf3e8f92a577935245672eb3b255b9b7561427c72494893381f08810d4f4629c1f34cbf4228d", 0x75}, {&(0x7f0000001040)="4698e8eae6be1b2615cc74f48c08e2bb929dd241610c8c6c7f95c4934948cc6d26a0ec4296bc2442db0ceda00673247996076a14b1e64507f333dba6eda25b7f934e2ed64704d402506496912ae081670af9067b9ae39c67a8dd13b82ddb812d05cb4242096a57f065126c06100bbf0893c83d615f3cf8ae8645e4027738efaa0fab1eb9e4b949bcf089576f", 0x8c}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000002100)="8402ef749f2cdfc7df3e5e8438962632265d4ffc2de9a6a5656fe68e5af6d53442d91dd46efa9cb2ae349c4fce2a750f64a9477cfff47820f3d43fe577eeb2cdee1b9f0ce46e6e6dc8d2e96ed6f4150bc451d787090713d07ee2747f8bb00352d2", 0x61}, {&(0x7f0000002180)="7a14566a9fca309d97f6e1f4207f53f4d64ab0eec99e3af1b01d4ccbee607820cec585ec72edb9282830d5f37a5f69799158be78bbb457a870c6569b84cc57ad2918121b264cb4ca5d55a0ac72263df9a3a5fe9bf05f7af02c0af6c199eba1497b2f64aaaaa35b371dcc8f18e03535892704d164cd7e033197befce2e20dcd2f3d109c4a09726ee1a6481e483cde1d05b6637f7750e2ec2183880874566d5dba633d4f1d3d363404ca9e46813d279b5076014f9636b01dfdc646c58fba2a58ce281ec254f21a8afd", 0xc8}, {&(0x7f0000002280)="e261e58a05d9974a4d25fe513b2585ceb1596c7b5daa74cf3dfe01c10df63c047377", 0x22}], 0x7, &(0x7f0000002400)=[@cred={{0x1c, 0x1, 0x2, {r33, r34, r35}}}], 0x20, 0x48001}], 0x3, 0x800)
r36 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r37 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r37, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r37, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r36, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:02:17 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:17 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000000)={0xf2}, &(0x7f0000000040), 0x8)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setxattr$trusted_overlay_origin(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b1e0000000c8f00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}}, 0x4)

01:02:17 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

01:02:17 executing program 3:
write(0xffffffffffffffff, &(0x7f00000001c0)="e5748adebcf88a97e6c19563ec2c5407a32b2921ee4b3285d69158e8599962f39a9b7548be4e21028e4c81dfca808dbc5c8e20538b6ade6631d006a6b626f6d7032d4900d643409821ef7df92ad33bd0baad881c77f430ede5e0f5a6953e976893d09ceaa4a6d809cfe8b6c6c516916f65e197567250742bb3516d46df2722b3640611974d5a9e4fc2e2b87ddf09d7eb3ea06402e377dc3a587c423c2c6ab8596cda4755b5f221a918993eb8ff2d5efe7409c9d43f56d04d3c3815ebc4daedc50fc417f81c43c1a2d49f2577021b7335485f6c2deaa379ec5613731f7eb4e1", 0xdf)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x830000, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)=0x1)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='+vboxnet0:/]}\x00')
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000007469360c00020008000280ffff000200"/32], 0x38}}, 0x0)

01:02:17 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=@random={'user.', 'nodevsecurity(\xa8vboxnet1security\\mime_type\'vmnet0nodevself\xf8vboxnet1-selfvboxnet1\x00'}, &(0x7f0000000340)=""/214, 0xd6)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="0000150000000000180004000542aa8c4b2108000100767469360c0002000000"], 0x38}}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@local, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8)

[ 2603.033425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17288 comm=syz-executor.0
01:02:17 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ptrace$peek(0x2, 0x0, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:17 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008002b007669b0360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2603.076372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2603.097853] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
01:02:17 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000001c0)=""/164)
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4a0000006f0200050008000000000400000000000000020400000005000000000000000121000000050000009b9cf400000000ef01000000060000000000000042020000000000000000"], 0x4a)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0xe9054eb9ba23fa45}, "6eccaddfbad8be27", "56ce6b43f7cd5ab148f35bf170d7fd6e87c796240184566975791f6e74819305", "38bcc82f", "77de0bfc2d7435fc"}, 0x38)
r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r3, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0x40d09)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x14, 0x1c, &(0x7f0000000640)="9e3940ad732ec595fab910e8e4fbcf50fcf493b6", &(0x7f0000000680)=""/28, 0x7fff}, 0x28)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r7}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x2, &(0x7f00000000c0)=@raw=[@exit, @exit], &(0x7f0000000100)='GPL\x00', 0x1c, 0x83, &(0x7f0000000300)=""/131, 0x40f00, 0x3, [], r7, 0x16, r1, 0x8, &(0x7f0000000140)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xe, 0x1f, 0xffff}, 0x10}, 0x70)
fchdir(r8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[]}, 0x1, 0x0, 0x0, 0x804}, 0x0)

01:02:17 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRESDEC, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}}, 0x0)
close(r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2603.138650] audit: type=1400 audit(1567645337.602:44): avc:  denied  { wake_alarm } for  pid=17283 comm="syz-executor.0" capability=35  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1
01:02:20 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000095}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)={0x2a, 0x4, 0x0, {0x4, 0x2, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:20 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:20 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c000200644c878c4dcb0800"], 0x38}}, 0x0)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f00000001c0)={0xf97cff8c, 0x8, 'SE Linux', "0eceaf0d396f8c6eb7d9dc4479c5d84f6db71857f171e9a352bf5777e72c477feef3b99c3fb152139850a18431a94bcec6401ebfd56878adedcab0d11f76fdda2a88f4caf000f5e476dd68022a1e8e882db0343af511c0fe3ebe291722ac6a941e5709c4d9551eada3042844bd282dc883b2cb1c8b9c82b901fd8f3604275c345322b19ab859034074d052ac7744095762a422a7af1f3184dc5475cf0ee740d1a281520b42eda872d6e3bb9e01947e8498c64dfb462477a8775c11f059b575897cc6a6feef"}, 0xd5)

01:02:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
timerfd_create(0x3, 0x80000)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:02:20 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x2, 0x0)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
fcntl$setstatus(r0, 0x4, 0xa800)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="6aef07c41315359e31266c2db289", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:02:20 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2606.033863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2606.055186] binder: 17328:17337 got transaction with invalid parent offset or type
[ 2606.065400] SELinux:  policydb version 229625358 does not match my version range 15-30
01:02:20 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="caf496198205cad31800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:20 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
finit_module(r1, &(0x7f0000000000)='\x00', 0x2)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2606.067684] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2606.078312] SELinux:  policydb version 229625358 does not match my version range 15-30
[ 2606.114837] binder: 17328:17337 transaction failed 29201/-22, size 80-24 line 3454
01:02:20 executing program 3:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x44af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3b)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3b)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r5, 0x0, 0x0)
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x3b)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r6, 0x0, 0x0)
r7 = gettid()
ptrace$setopts(0x4206, r7, 0x0, 0x0)
tkill(r7, 0x3b)
ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r7, 0x0, 0x0)
r8 = gettid()
ptrace$setopts(0x4206, r8, 0x0, 0x0)
tkill(r8, 0x3b)
ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r8, 0x0, 0x0)
r9 = gettid()
ptrace$setopts(0x4206, r9, 0x0, 0x0)
tkill(r9, 0x3b)
r10 = gettid()
ptrace$setopts(0x4206, r10, 0x0, 0x0)
tkill(r10, 0x3b)
ptrace$setregs(0xd, r10, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r10, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f00000007c0)="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")
ptrace$cont(0x7, r9, 0x0, 0x0)
r11 = gettid()
ptrace$setopts(0x4206, r11, 0x0, 0x0)
tkill(r11, 0x3b)
ptrace$setregs(0xd, r11, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r11, 0x0, 0x0)
r12 = gettid()
ptrace$setopts(0x4206, r12, 0x0, 0x0)
tkill(r12, 0x3b)
ptrace$setregs(0xd, r12, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r12, 0x0, 0x0)
r13 = gettid()
ptrace$setopts(0x4206, r13, 0x0, 0x0)
tkill(r13, 0x3b)
ptrace$setregs(0xd, r13, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r13, 0x0, 0x0)
r14 = gettid()
ptrace$setopts(0x4206, r14, 0x0, 0x0)
tkill(r14, 0x3b)
ptrace$setregs(0xd, r14, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r14, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2, @ANYRES16=0x0, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRESHEX=r11, @ANYBLOB="20c0754f42fc3fc9cd03ce29c69a3a2f8edf098cae1cfabe0d4c0c"], @ANYRES64=r1, @ANYRESHEX=r3], @ANYRESDEC=r4, @ANYBLOB="6d233c02a60d3e300ef5508cb002cef906598443b091503376704b81b5c68ab735a3bf5fe629d9ffcc4b73ec57da859aabf839e0d7daa2ab80862f884707d2f2ed7693ca58009347f0220b08fce51f5390ccb55b3c4db17da8b2062ba3ce8bf5063a7e0e8435c3b43b113ecbc980f9da189b56de92246d090c72c7f3aa9b5ff6e95a869cb6c9e2e5c057991e3f4076fe7a68b3c4e0571fd4", @ANYRES64=r2, @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR64, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYBLOB="3f73c5c6932337f8db139203675b05ee333ea50bbaf0ae7132ae7dee6b874fc4ba2c801a1d10e5dbae175f599ee3220cbf40c955850c063a8f642e00800000fba9cf25528b18de5d6c3182d55101840100010005f4be8775d38e92bcca908183c3171da12951f2d68111ef83fdeb4623078800762808afae0d378e5e2db3bb806c78539cfef41f6210737c43cf7ac7859192844d21503ee4cb9a0000", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES64=r12, @ANYBLOB="74d8f300b9aed002b8040392d14310e071ee5c0d1c9e7ac1e61447ec4b040a751723cf64ac3e74bdd0", @ANYBLOB="938bd62327380727bf42003bdc6cecf2a7c9305c59544d40a221cda4100a3027ab0f4872", @ANYRESDEC=r13, @ANYRESHEX=r14]]], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYPTR, @ANYRES64, @ANYRESOCT=r5, @ANYRESOCT], @ANYRES16, @ANYRESHEX=0x0], @ANYRESOCT=r9, @ANYPTR, @ANYRES32=r5, @ANYRESOCT=r8, @ANYRES16], 0xa}}, 0x0)

01:02:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
timer_create(0x3, &(0x7f00000001c0)={0x0, 0x12, 0x2, @thr={&(0x7f0000000000)="ce05491bcddd435eaf133e02eec76c1b0159109ed68c70c2342fb702cd05fdf45ead6b97a80472675cda5399f96b3de487d1485ef993631e343d57a9ceea16ce339d9b3f1b91777ced32510fe9ccc02770f6c3da91b402ee7f514d7589ae3e295584f1a4c605a1fee2fd5f23fe", &(0x7f00000000c0)="e3f080f0c15636d9e9c7dbc6a3da39868fd503b1bd6e430b9b8064ebac5a410f2fe646aabd9f33f151d1d9c76728dd1ad773bb6f42b9960c56e04203140215cab140441ca306f19e3eac53446bc0b4f067a15da064b2ec9a31de10149a69ffa9b9143c1b86dbd14cee969795d5de053aeacf5a71db2b82800f7fe9936b9760c7102ca51e5bc530c0432ad8a042a4ac1d0bb41d7de2f86c41d688ba234fa3251873b54c8d9057609989342794469997841da87cd4637f3ef4106a431ca653022f58174e5e1e4ace41405bc7"}}, &(0x7f0000000200)=<r3=>0x0)
r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
openat$cgroup_ro(r4, &(0x7f00000006c0)='cgroup.stat\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={<r5=>0x0, <r6=>0x0})
timer_settime(r3, 0x0, &(0x7f0000000280)={{r5, r6+30000000}, {0x0, 0x989680}}, &(0x7f00000002c0))
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0xffffffffffffffff}], 0x25a, 0x0, 0x0})
mount(&(0x7f00000005c0)=@filename='./file0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='iso9660\x00', 0x200484, 0x0)
r7 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x8201, 0x122)
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r8, &(0x7f0000000100), 0x18d, 0x6c00)
r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r9, &(0x7f0000000100), 0x18d, 0x6c00)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.stat\x00', 0x0, 0x0)
r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)={0xa4, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10a}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x180000000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000000}]}, 0xa4}}, 0x6073c874d8e7db1b)

[ 2606.130122] binder: undelivered TRANSACTION_ERROR: 29201
01:02:20 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0))
syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0)
ptrace(0x4206, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000))
ptrace$setregs(0xf, r0, 0x0, &(0x7f00000003c0)="094d5ff17d9f93b4042c541f5782e6b71a9c8eaa9243243b514673dffcde373a16ca11176151452e9d60d15fee7245c806b53bc32451305102391abbc6e27eab5948ec5c2d1144801a")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={0x0})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r2, r1, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000800)={0x47, 0x7, 0x6})
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/155, 0x9b)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

01:02:20 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2606.202824] binder: 17360:17363 IncRefs 0 refcount change on invalid ref -1 ret -22
[ 2606.210981] binder: 17360:17363 unknown command 0
[ 2606.215989] binder: 17360:17363 ioctl c0306201 20000440 returned -22
[ 2606.247506] binder: 17360:17369 IncRefs 0 refcount change on invalid ref -1 ret -22
[ 2606.258646] binder: 17360:17369 unknown command 0
[ 2606.281630] binder: 17360:17369 ioctl c0306201 20000440 returned -22
01:02:23 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
tkill(r0, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

01:02:23 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)=0xfffffffffffffffa)

01:02:23 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

01:02:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000002000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})

01:02:23 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:23 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x6, 0x0, "7c629cee765ffb57311966b81ae79fa619fb80394666f6adc6b5bdc7fa994d0a820269e36556a4f330481ca3632fa7105ffb02d28d4bd3b6ea5e257aeb3e065f", "ce9819553b5d4393db05d997f9c8bf77a65956c758cb5e6c0f3844608bf298c1", [0xe1b, 0x1000]})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e23, @broadcast}})

[ 2609.071931] binder: 17386:17392 got transaction with invalid parent offset or type
[ 2609.079942] binder: 17386:17392 transaction failed 29201/-22, size 80-24 line 3454
[ 2609.088573] binder: undelivered TRANSACTION_ERROR: 29201
[ 2609.109168] binder: 17386:17396 got transaction with invalid parent offset or type
01:02:23 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000000000000000deff02", @ANYRES32=0x0, @ANYBLOB="0000120008000100767469360c00020008000280ffff000200000000c19aa4bb102b2a074f585692ac1f6f48c5b796747e0f3f9ada44baf66a922c7f3088442b087e78ce0486c9184bf50e72ff8698f788c6af6b343c7e2923cb9520aef1e94e2447c4a4572c169b246ce4960b85b41700"/123], 0x3}}, 0x0)

01:02:23 executing program 0:
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000000)={0x0, 0x1000, 0x7, 0x7})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="de5200000000000000000c00020008000280ffff000200"/36], 0x38}}, 0x0)
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x17c, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})

[ 2609.118423] binder: 17386:17396 transaction failed 29201/-22, size 80-24 line 3454
[ 2609.127854] binder: undelivered TRANSACTION_ERROR: 29201
01:02:23 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd8, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x60000000000000}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xc3}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x96aa}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xd8}, 0x1, 0x0, 0x0, 0x320ab9ceffcaebff}, 0x14018008)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x103000)
clock_gettime(0x0, &(0x7f00000000c0)={<r3=>0x0, <r4=>0x0})
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00)
setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000400)=@ccm_128={{0x304}, "bbfcfcc16ab0ff20", "c8c191b70de6d1594a3d7f4742887b1f", "afb7ed90", "d52c0ae389ccf963"}, 0x28)
clock_gettime(0x0, &(0x7f0000000140)={<r6=>0x0, <r7=>0x0})
futimesat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={{r3, r4/1000+10000}, {r6, r7/1000+30000}})
perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="0000e7ffffff0000180012000800010076747e360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:23 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
write$binfmt_elf64(r2, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x6219, 0x6, 0x12e, 0x9, 0x200, 0x1, 0x6, 0x9b, 0x5d, 0x40, 0x401, 0x9, 0x0, 0x38, 0x1, 0x1, 0xfffffffffffffff9, 0x9}, [{0x1, 0x200, 0x4, 0x9, 0x6a, 0x6, 0x8, 0x95}], "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", [[], [], [], [], [], [], [], [], []]}, 0x1978)
r3 = dup3(r1, r0, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:02:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(r2, &(0x7f0000000380)=""/39, 0x23, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r5=>0x0)
perf_event_open(&(0x7f0000000200)={0xac582018e4148a66, 0x70, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x10904, 0x338dbc3df685bfdd, 0x0, 0x7, 0x4, 0x5, 0x8, 0x8, 0x0, 0x81, 0x0, 0x0, 0x3ff, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x8, 0x10001, 0xffffffffffffff7f, 0x2, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x10, 0x1, 0x6, 0x5, 0x9, 0x3f, 0x800}, r5, 0x10, r4, 0xb)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
dup2(r4, r2)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0)
ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000000040)={0x9, 0x80000000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000004a1acb00"]], 0x0, 0x0, 0x0})

[ 2609.169114] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2609.195598] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
01:02:23 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={r3, 0x0, 0x6, 0x0, 0x78ba9dfd})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2609.304199] binder: 17417:17426 got transaction with invalid offset (1894326593262714880, min 0 max 80) or object.
[ 2609.317417] binder: 17417:17426 transaction failed 29201/-22, size 80-24 line 3379
[ 2609.422995] binder: undelivered TRANSACTION_ERROR: 29201
[ 2609.433674] binder: BINDER_SET_CONTEXT_MGR already set
[ 2609.439014] binder: 17417:17431 ioctl 40046207 0 returned -16
01:02:26 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b91c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:26 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:26 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200000, 0x8)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$FUSE_WRITE(r2, &(0x7f0000000140)={0xfffffffffffffff9, 0x0, 0x8, {0x200}}, 0x18)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040))

01:02:26 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0xa4, 0x3)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:02:26 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000004", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})

[ 2612.098876] binder_alloc: 17438: binder_alloc_buf size 288230376151711848 failed, no address space
[ 2612.108356] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 2612.118124] binder: 17438:17441 transaction failed 29201/-28, size 80-288230376151711768 line 3284
[ 2612.130161] binder: undelivered TRANSACTION_ERROR: 29201
01:02:26 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010003bfd0f803effffffffffffffd30000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00024e252547afed0008000296ffff0002"], 0x38}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/20)

01:02:26 executing program 2:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000001c0)={0x101, 0x0, 0x9})
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
write$selinux_load(r2, &(0x7f00000002c0)={0xf97cff8c, 0x8, 'SE Linux', "6c051eebb2bd292548d9297e411d9db6a9029ce41601446dc7ce2da604c9fe4ce2c1c020e87e51a27c594db37896135689c7cc3c5eb736dd5ad053a39819513c01784c60a7710aa3885d91c04a561bd7bff870e4ad433fd6c32b433e8fa0944437f14e4ff29b8aeae8c5ed866179504a45be150b94b3808c1666c515a9dc6869ee3ddb77db58609453f120aa0446734ef67ffd6feaa748e7cc090f0b2565a72f2eb5e9dea5f5beca"}, 0xb8)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f00000000c0)=""/18, 0x12)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff00028fbb3ba80710e7f0fdbd44613dc79c9223d6f6283c32237da03a21a5372671775cd340cf58c9e9f2cd29d692be892d7a403fbf4fec0da69ce03bb28fd70576ca02694c60a28efb1e12cb1f42415e025df5"], 0x38}}, 0x0)

[ 2612.142622] binder_alloc: 17438: binder_alloc_buf size 288230376151711848 failed, no address space
[ 2612.152121] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 2612.170096] binder: 17438:17452 transaction failed 29201/-28, size 80-288230376151711768 line 3284
[ 2612.185138] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
01:02:26 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x8fcb2232ebd6bd48)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2ab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:26 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x443, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0xc8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x100000015}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x2400c05c}, 0x40000)

01:02:26 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101400, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x1a, 0x1, 0x8}, 0x6}}, 0x18)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000000c0)={0x9, 0x4, 0x1})

[ 2612.194378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2612.220635] binder: undelivered TRANSACTION_ERROR: 29201
01:02:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000180)='team_slave_1\x00'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000010000000000000000ba233fa53000c1"]], 0x0, 0x0, 0x0})
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00)
r5 = getpid()
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x1)
r7 = geteuid()
fchown(r6, r7, 0x0)
fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
r9 = fcntl$getown(0xffffffffffffffff, 0x9)
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r11, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r12 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r11, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x0, 0x9, 0x2, 0x9, 0x9, 0x5, 0x9, 0x34a800000000000, 0x4, 0x6})
lseek(r11, 0x0, 0x2)
sendfile(r11, r12, 0x0, 0x40d09)
getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
getresgid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000640)=<r14=>0x0)
stat(&(0x7f0000000700)='./bus\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r13}, {0x2, 0x482af0178714ef63, r13}], {0x4, 0x1}, [{0x8, 0x1, r14}, {0x8, 0x1}, {0x8, 0x60f0c3b60b2d6397, r15}, {0x8, 0x4}, {0x8, 0x3}], {}, {0x20, 0x2}}, 0x5c, 0x1)
r16 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e000001000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r17 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
pipe2(&(0x7f0000000780)={<r18=>0xffffffffffffffff}, 0x4000)
r19 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r20 = socket(0x11, 0x6, 0x4)
r21 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/net/tun\x00', 0x200, 0x0)
r22 = gettid()
ptrace$setopts(0x4206, r22, 0x0, 0x0)
tkill(r22, 0x3b)
ptrace$setregs(0xd, r22, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r22, 0x0, 0x0)
r23 = creat(&(0x7f00000000c0)='./file0\x00', 0x1)
r24 = geteuid()
fchown(r23, r24, 0x0)
getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=<r25=>0x0)
r26 = gettid()
ptrace$setopts(0x4206, r26, 0x0, 0x0)
tkill(r26, 0x3b)
ptrace$setregs(0xd, r26, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r26, 0x0, 0x0)
r27 = getpgid(r26)
r28 = getuid()
r29 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r29, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r30 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r29, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r29, 0x0, 0x2)
sendfile(r29, r30, 0x0, 0x40d09)
getsockopt$inet6_IPV6_XFRM_POLICY(r29, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r31=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000b00)=0xe8)
getresgid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000640)=<r32=>0x0)
stat(&(0x7f0000000700)='./bus\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r33=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r31}, {0x2, 0x482af0178714ef63, r31}], {0x4, 0x1}, [{0x8, 0x1, r32}, {0x8, 0x1}, {0x8, 0x60f0c3b60b2d6397, r33}, {0x8, 0x4}, {0x8, 0x3}], {}, {0x20, 0x2}}, 0x5c, 0x1)
r34 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r34, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r35 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r34, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r34, 0x0, 0x2)
sendfile(r34, r35, 0x0, 0x40d09)
getsockopt$inet6_IPV6_XFRM_POLICY(r34, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r36=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
getresgid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000640)=<r37=>0x0)
stat(&(0x7f0000000700)='./bus\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r38=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r36}, {0x2, 0x482af0178714ef63, r36}], {0x4, 0x1}, [{0x8, 0x1, r37}, {0x8, 0x1}, {0x8, 0x60f0c3b60b2d6397, r38}, {0x8, 0x4}, {0x8, 0x3}], {}, {0x20, 0x2}}, 0x5c, 0x1)
getgroups(0x5, &(0x7f00000008c0)=[0xffffffffffffffff, 0xee00, 0xee00, <r39=>r33, r37])
sendmsg$unix(r4, &(0x7f00000009c0)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)}, {&(0x7f0000000380)="d5d8d182b2b295e266647255bba71db1ab34ef2c6ed711b7fcc00e7f9ab52374143396a16f84dac6fe9dd38f3930d1853ad33b3b6e3d2ee5628c0cc6bc46222d95565ce9f8c138441311", 0x4a}, {&(0x7f0000000480)="bafd6bd3ca60b7e242300126ecd7dbd75566d278d56d763b86d2d49974742dde18cad35e590fcc42e3ae9c3859731bdb20fd646db7127e9f442521eee963ac10c36ee891243e0a602e0bd8234cc4048afadf4f68eb8c05ef1e", 0x59}, {&(0x7f0000000500)="48620d8b41d05e253027d677216946230dfb1928bc06574d5fec76064408ac8a2a8bbcfb51030d5f056e25748680c36f3faaa7d5e4dd45e4d61de75a44f9d607ff220f90949ad80c897439f953cd3fa966c56b6f29659cd72aa4a1871d50c53d71368af19a08b032487a994df803ef50f88c9774a681ed5255ba5d7724ef30", 0x7f}, {&(0x7f0000000580)="a48a594dac47a7b517a62a5e80a2d963444f1a5c423ad43da39636e32db8863e9b1aaab6c2b4bfed5b3bf1a115981471adba00591b36836721aa221934bd9194821138de161015efd6463421ad387f2dfca7872b06457b6c70f6c6a47437e6ba725ce3ba64d6ff6a03f6df8623c3cddc7ea4817d9dc433ed1985edc7", 0x7c}], 0x5, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r15}}}, @rights={{0x30, 0x1, 0x1, [r16, r17, r18, r2, 0xffffffffffffffff, r19, r20, r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r24, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r39}}}], 0xc0}, 0x10)

[ 2612.297563] binder: 17474:17475 got transaction with invalid offset (72057594037927936, min 0 max 80) or object.
[ 2612.308213] binder: 17474:17475 transaction failed 29201/-22, size 80-24 line 3379
[ 2612.326476] binder: undelivered TRANSACTION_ERROR: 29201
01:02:29 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

01:02:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000e6370000000000000000500000000000000018000000000000fa7e00", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})
ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000140))

01:02:29 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x5, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x1001, 0x0)
socket$inet(0x2, 0x2, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000380)={@ipv4={[], [], @broadcast}, <r2=>0x0}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=@deltclass={0xd84, 0x29, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, r2, {0xfff3}, {0x4, 0xfff2}, {0x4, 0xffe0}}, [@tclass_kind_options=@c_cbq={{0x8, 0x1, 'cbq\x00'}, {0x84c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x81, 0x6bd, 0x7fffffff, 0x1, 0xfff, 0x5, 0x100000000, 0x3, 0x1, 0x18, 0xfff, 0x3455, 0x0, 0x9, 0x8, 0xfffffffffffffffa, 0x9, 0xe39, 0x1, 0x10001, 0x3, 0x5, 0x7708, 0x2, 0x1ff, 0x200, 0x3, 0x100000000, 0x10000, 0x232, 0x8443, 0x100000001, 0x7fff, 0x4, 0x1, 0x4, 0xeb8, 0x7, 0xffffffffe9dcb2de, 0x8, 0x4, 0x51e327f1, 0xffffffffffffff8f, 0x10000, 0x4, 0x9, 0x9, 0xffffffffffffffc1, 0x1, 0x8001, 0x1, 0x7, 0x7ff00, 0x5, 0x3abd, 0x2000000000000000, 0x8, 0x2cec3dfc, 0x5, 0x80000000, 0x5, 0x8, 0x7fff, 0x3, 0x7, 0x8, 0x4, 0x0, 0x47ecf17e, 0x401, 0xfffffffffffff801, 0x4, 0x7, 0x6, 0x200, 0x4, 0x0, 0xffff, 0x2, 0x3, 0x2, 0x2, 0x6, 0x80000000, 0x4, 0x1, 0x80000000, 0xb253, 0x7f, 0x4, 0x100000000, 0x2, 0xaa, 0x2, 0x4, 0x7f, 0x81, 0x6, 0x800, 0x8001, 0xd8a2, 0xfa2, 0xe5, 0x4, 0x1, 0x1, 0x5, 0x3, 0x80000000, 0x42, 0x0, 0x5, 0x1, 0xffff, 0x5, 0xc00000, 0x319c, 0x3, 0x5, 0x8884, 0x9, 0x2, 0xfffffffffffffff8, 0x9, 0x7f, 0x7, 0xfffffffffffffffe, 0x3, 0x2f9, 0x3, 0x24000000000, 0x7fff, 0x0, 0x100000000, 0x1, 0xeb97, 0x5, 0x8, 0x3, 0x4fb, 0x400, 0x2, 0x4, 0xfffffffffffffffe, 0x9, 0x7, 0x29d3, 0x9, 0xffffffffffff7fff, 0x2, 0x6, 0x4, 0x2fc0, 0xfffffffffffffbff, 0x7, 0x4, 0x33f, 0x80000000, 0x0, 0x7ff, 0x8, 0xacc, 0x0, 0x8, 0x8, 0x9, 0x96c, 0xffffffffffffff7f, 0x87a, 0x0, 0x30, 0x7, 0x5, 0x6, 0x8, 0x6, 0xad06, 0x40b, 0x0, 0x3f, 0xfffffffeffffffff, 0x7f, 0x5, 0x60f, 0xbce, 0x9, 0x7, 0x40, 0x7, 0x200, 0x1, 0x9, 0xc798, 0x2, 0x1ff, 0x2, 0x736e, 0x1, 0x6, 0x400, 0xffffffffffffffff, 0x7, 0x0, 0x2f8, 0x80000001, 0x8, 0x9, 0x68a2, 0xffff, 0x7, 0x1bf5, 0x740, 0x3f, 0x2, 0x81, 0x24, 0x8, 0x1, 0x5, 0x81, 0x3a, 0x10001, 0xae, 0x9, 0x2, 0x5, 0x3, 0x6, 0x100000000, 0x0, 0x6, 0x0, 0x34, 0x0, 0x80000001, 0x5, 0x3, 0x1, 0x3ef9, 0x10000, 0x40, 0x2, 0xff, 0x2b173030, 0x6, 0xff, 0x100, 0x5, 0xe27, 0x0, 0x3, 0x5, 0xba3, 0x0, 0x1000, 0x7fff]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x5, 0x6, 0x2, 0x3, 0x1, 0x7ff}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x1ff, 0xa12, 0x6, 0x40, 0x5, 0x400, 0x9, 0xffff, 0x7, 0x5, 0x9, 0x25, 0x4, 0x3, 0x5, 0x8, 0x6, 0x39068bbc, 0x70, 0x7, 0x3, 0x3, 0x80000001, 0x5, 0x101, 0x4, 0x800, 0x3, 0x7, 0x400, 0xffff, 0x3, 0x8, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff7, 0x6, 0x6, 0x6, 0x10001, 0xffffffff00000001, 0x7, 0x1, 0x0, 0xfffffffffffffffe, 0x7fffffff, 0x1ff, 0x40, 0x2, 0x400, 0x40, 0x44c5, 0x101, 0x3, 0x11, 0x7fffffff, 0x9, 0x3b6c, 0x7ff, 0x800, 0x957, 0x5812, 0x7, 0x6, 0x1, 0x0, 0x1, 0x2, 0x7f, 0xfffffffffffffffc, 0x3, 0x4, 0x7ff, 0x800, 0x5, 0x5, 0x101, 0x528, 0x100000000, 0xff, 0x6, 0x0, 0xfcf, 0x8, 0x80000001, 0x56, 0xeb48, 0x4, 0x3f, 0xfffffffffffffff9, 0x2, 0x52, 0x3, 0x6, 0x0, 0x9, 0x10001, 0x3, 0x6, 0x7fff, 0x1, 0x20, 0x3, 0x7, 0x8, 0xfff, 0x2, 0x7, 0xffffffff80000001, 0x2, 0x40, 0x2c25, 0x6, 0x8, 0x5, 0x2, 0x3f, 0x6, 0x20, 0x8, 0x4, 0x6, 0xdb6e, 0x6af, 0x4, 0x4, 0x1ff, 0xffffffffffffff15, 0x0, 0x7, 0xfff, 0x5, 0x4b3, 0x1, 0x3f, 0x100000001, 0x3b4, 0x401, 0x1, 0x3, 0x80000000, 0x1000, 0x3, 0x20, 0x200, 0x80000000, 0x1, 0x8, 0x7, 0xfffffffffffff000, 0xfffffffffffffff7, 0xffffffffffffff89, 0xff, 0x10, 0x9, 0x80000000, 0x2, 0x4, 0x5, 0x6, 0x9, 0x0, 0x0, 0x6, 0x1, 0x8, 0xc68d, 0x7f, 0x1, 0x8e5e, 0x8000, 0x7, 0x8, 0x2, 0x20, 0x4, 0xffffffffffffffd7, 0xffffffff, 0x7, 0x4000000000000000, 0x400, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffffffffff46d, 0x2, 0x20, 0x9, 0x3, 0x4, 0x2, 0x81, 0x0, 0x5, 0x0, 0xa8, 0x9, 0x0, 0x5, 0x8, 0xfff, 0x0, 0x8e, 0x7ff, 0x101, 0x5, 0x121, 0x3ff, 0x800, 0x5, 0x100, 0x1, 0x1, 0x6, 0x9, 0x1000000000000000, 0x2, 0x6, 0x0, 0x20, 0xfffffffffffffffe, 0x1, 0xc58e, 0xfa57, 0x7, 0xffffffffffffffff, 0xfffffffffffffffe, 0xb9e, 0x0, 0x0, 0x6, 0xffffffffffff0001, 0x8, 0xfa0, 0x4, 0xec, 0xfffffffffffeffff, 0x9, 0x80000001, 0x7, 0x10001, 0x400, 0xffffffffffff0000, 0x9, 0x1, 0xfffffffffffffffd, 0x5, 0x8, 0x3, 0x800, 0x7, 0x401, 0x4]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x18030, 0xc}, 0x100000000, 0x1}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x1399211148cb8374, 0x13}, 0x400, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x401, 0x2, 0x45, 0x38a8, 0x4, 0x6}}]}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x8, 0x5, 0x8000}}}, @tclass_kind_options=@c_cbq={{0x8, 0x1, 'cbq\x00'}, {0x74, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x1f, 0x0, 0x1d, 0x0, 0x2, 0x0, 0x2, 0x5}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x8}, 0x4, 0x3ff}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x4, 0x1, 0xe, 0x3, 0x3, 0x3ff, 0x7ebc, 0x100000001}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x8000, 0x3, 0xae5, 0x2, 0x5, 0x2}}, @TCA_CBQ_RATE={0x10, 0x5, {0x8000, 0x3, 0x0, 0x0, 0x5}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x0, 0x2, 0x1, 0x0, 0x4, 0x80}}]}}, @TCA_RATE={0x8, 0x5, {0x7, 0xff}}, @tclass_kind_options=@c_cbq={{0x8, 0x1, 'cbq\x00'}, {0x468, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xffff, 0x3, 0xffffffffffffffff, 0x40, 0x0, 0x3}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x0, 0x0, 0x4, 0xd7b4, 0x400000000, 0x7f}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0x3}, 0x100, 0x100000001}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x5, 0x3, 0x1, 0x6, 0xffff, 0x8, 0x6, 0x4, 0x8, 0x80000000, 0xa00000000000, 0x6f3, 0x100000000, 0x7f, 0x200, 0x100000000, 0x0, 0x4, 0x3, 0xffffffffffff067b, 0x4, 0x5, 0x9, 0x1, 0xfffffffffffeffff, 0xffffffff, 0x6, 0x6, 0x1, 0x59f6, 0x8, 0x6, 0x7, 0x2, 0x7, 0xfffffffffffffffa, 0x0, 0x3, 0x1, 0x3f, 0x9, 0x0, 0x131, 0x0, 0x3, 0x7ff, 0x9, 0xff, 0x0, 0xe973, 0x6, 0x10001, 0x0, 0x10000, 0x7, 0x1f, 0x1ff, 0x8000, 0x2, 0x2, 0x5, 0x2, 0x1, 0x3, 0x80000000, 0x80000000, 0x8001, 0x1, 0x9, 0x7f, 0x2, 0x6, 0x7f, 0x80, 0x9, 0xffffffffffff0001, 0x700000000000, 0x8, 0x5, 0xfffffffffffffffb, 0x1000, 0x5, 0x518, 0x7800000000000000, 0x8, 0x3, 0x8001, 0x3, 0x1700, 0x9, 0x200, 0x200, 0xfffffffffffffffb, 0xadc, 0x9, 0x47e, 0x40, 0x7, 0x800, 0x2, 0x2, 0xff, 0x8, 0x80000000800000, 0x5, 0x1, 0x3, 0xfe87, 0x20, 0xfffffffffffffffa, 0x2, 0x0, 0xbd, 0x1, 0x1, 0x0, 0x3, 0x0, 0x6, 0x2, 0x6, 0x61, 0x3, 0x2, 0x5, 0x7, 0x0, 0x3, 0x2, 0x5, 0x2, 0x3, 0x6, 0x101, 0x3, 0x8, 0x5, 0x10000, 0x100, 0xfffffffffffffffe, 0x4, 0x3, 0x7, 0x20, 0x9, 0x2, 0xfffffffffffffffb, 0xfff, 0x1, 0x0, 0x3, 0x8, 0x7a83, 0x0, 0x3f, 0x7fff, 0x8, 0x400, 0x400, 0x7, 0x10001, 0x1, 0x9, 0xfffffffffffffff7, 0x5, 0x8, 0xffff, 0xffffffffffff0000, 0x6, 0xf2, 0x8000, 0xd2, 0x6, 0xdd, 0x6, 0x3, 0x4, 0x7, 0x4, 0x6, 0x3, 0x81, 0x8, 0x1f8, 0x4, 0x7, 0x93, 0x8, 0x3, 0xffffffffffffff01, 0x6, 0x800, 0xd8, 0x2, 0xba0, 0xadcc, 0x9, 0x8, 0x0, 0x70d7, 0x800, 0x6, 0x3, 0x8, 0x8000, 0xffff, 0x80, 0x0, 0x4, 0x3, 0x7bc, 0x2ce, 0x3, 0xffffffffffffffc1, 0x8001, 0x7, 0x40, 0x1f, 0x100000001, 0x6, 0x8, 0x4, 0x800, 0x43, 0x1, 0x1, 0x2302, 0x1800000000000, 0xc2, 0x80, 0x7ff, 0x6, 0x7, 0x7fffffff, 0xa5f800, 0x1, 0x3, 0x3ff, 0x2000000000000, 0x5, 0x2, 0x9, 0x8d79, 0xfffffffffffffffa, 0x2, 0x8, 0x2ed08946, 0xfffffffffffffffa, 0x40, 0x2, 0x1000000000000000, 0x5, 0x2, 0x6]}, @TCA_CBQ_RATE={0x10, 0x5, {0x400, 0x3, 0x9, 0x17, 0x3, 0x3f}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x81, 0x8, 0x2, 0x2, 0x3ff, 0x2}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x8}, 0x2, 0x6}}]}}]}, 0xd84}, 0x1, 0x0, 0x0, 0x14}, 0x8049)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = open(0x0, 0x0, 0x0)
ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x26f)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8)
r6 = request_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)=')wlan0\x00', 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r5, r6)
r7 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="2c8fbf2c761b9a7a57a1b3d19518e9f8cd3299270ec287657afac655d4ea7920b9a4cbef0deba4d49000a266d7a149e395422798d572aaaca22ac1c57ab95456a4ceeb2ec75174d35c629d6b3467bdd74c0911097619698ef3b471542ec37285a73cac1029fcd674523f5efc4eb7015e6f14be2ccbf80aaf75b2e1efa034463fa4f37670f9ba69caf15c7b8365c0e8e90bae3d8646", 0x95, r6)
r8 = open(0x0, 0x0, 0x0)
ioctl$UI_SET_KEYBIT(r8, 0x40045565, 0x26f)
r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r9, &(0x7f0000000100), 0x18d, 0x6c00)
r10 = socket(0x0, 0xa, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xffffffffffffff85)
r12 = request_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)=')wlan0\x00', 0xfffffffffffffffc)
keyctl$get_persistent(0x16, r11, r12)
keyctl$instantiate_iov(0x14, r7, &(0x7f0000000340)=[{&(0x7f00000002c0)="b74dfc7a08f774febcf06cc07bbf36f8a60d9e9bbc7707d85e8da0f11fd21bf0b87087ceb7c6648c281753745c9a4467c77ac2afea0a64873b807da5d59efdcec1ae7b7a39b6ab453bfb048eee855ad02fa033432abe7e7de639bde1f8029e9fc34fce6aa640a3599c1b068d574bf9", 0x6f}], 0x1, r12)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r13, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$TCSETAW(r13, 0x5407, &(0x7f00000000c0)={0x773, 0x2, 0x0, 0x53e, 0x3, 0x7bca, 0x100, 0x2, 0x8b, 0x3})

01:02:29 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x18000, 0x4)
ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000140))
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000000))
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @initdev}, <r3=>0x0}, &(0x7f0000000200)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000240)={@empty, 0x59, r3})

01:02:29 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x400000, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup3(r2, r1, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x19c, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x140, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:02:29 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2615.133958] binder_alloc: 17485: binder_alloc_buf size -432345564227567512 failed, no address space
[ 2615.145641] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 2615.155495] binder: 17485:17494 transaction failed 29201/-28, size 80--432345564227567592 line 3284
[ 2615.166746] binder: undelivered TRANSACTION_ERROR: 29201
01:02:29 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000000)={'nlmon0\x00', 0xeee})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:29 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x5)
getsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000000), &(0x7f00000000c0))

[ 2615.186445] binder_alloc: 17485: binder_alloc_buf size -432345564227567512 failed, no address space
[ 2615.212556] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
01:02:29 executing program 0:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x109000, 0x0)
write$P9_RAUTH(r0, &(0x7f0000000140)={0x14, 0x67, 0x1, {0x20, 0x1}}, 0x14)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="000000bf4056d0561e409700000000003000000000000000fb52763a9a1cda264a4a27c33759d907c54d866038fd"]], 0x0, 0x0, 0x0})

[ 2615.232754] binder: 17485:17511 transaction failed 29201/-28, size 80--432345564227567592 line 3284
[ 2615.245126] binder: undelivered TRANSACTION_ERROR: 29201
[ 2615.267387] binder: 17520:17521 got transaction with invalid offset (6255594718499962880, min 0 max 80) or object.
[ 2615.278999] binder: 17520:17521 transaction failed 29201/-22, size 80-24 line 3379
01:02:29 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x8000000000070, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1000, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003b0e000000000000000000000000d11e15531e6b091c620085f2682312e7cbe2313fa64431a7f5", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x100000001)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={<r3=>0x0, @dev, @multicast2}, &(0x7f00000002c0)=0xc)
sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc4c8615d}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv4_getaddr={0x2c, 0x16, 0x400, 0x70bd29, 0x25dfdbfc, {0x2, 0x38, 0x240, 0xff, r3}, [@IFA_LABEL={0x14, 0x3, 'tunl0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

01:02:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:02:29 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xad}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x34c}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

[ 2615.280342] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2615.302127] binder: undelivered TRANSACTION_ERROR: 29201
[ 2615.315494] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2615.316751] binder: 17520:17532 got transaction with invalid offset (6255594718499962880, min 0 max 80) or object.
[ 2615.316775] binder: 17520:17532 transaction failed 29201/-22, size 80-24 line 3379
[ 2615.317065] binder: undelivered TRANSACTION_ERROR: 29201
[ 2615.342558] binder_alloc: 17535: binder_alloc_buf, no vma
[ 2615.342578] binder: 17535:17536 transaction failed 29189/-3, size 80-24 line 3284
[ 2615.365828] binder: undelivered TRANSACTION_ERROR: 29189
[ 2615.396320] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2615.414353] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
01:02:32 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x400000, 0xfffffffffffffc00, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000000)='syz0\x00')
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:02:32 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800003a2913791a50920a3eb01aece40010009f00000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:32 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:02:32 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 2618.164741] binder: 17552:17555 got transaction with invalid parent offset or type
[ 2618.174901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4905 sclass=netlink_route_socket pig=17557 comm=syz-executor.3
01:02:32 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}}, 0x20885)

01:02:32 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:32 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
r2 = gettid()
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$TIOCGPTPEER(r3, 0x5441, 0x8)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff)
ioctl$GIO_FONTX(r5, 0x4b6b, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x20}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f00000000c0)='sysfs\x00', r6}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r4, r5, 0x0, 0x7, &(0x7f0000000040)='vmnet0\x00', r6}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, <r7=>0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)='selinux\x00', r6}, 0x30)
ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000140))
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2618.182314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4905 sclass=netlink_route_socket pig=17561 comm=syz-executor.3
01:02:32 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xbcb3)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)='eth0)mime_type\x00', 0xf, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:32 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/47)
openat$cgroup(r1, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000140)=0x3)
lseek(r1, 0x0, 0x2)
sendfile(r1, r3, 0x0, 0x40d09)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r5}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x23}, r5}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x2000, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x96)
write$uinput_user_dev(r2, &(0x7f0000000480)={'syz1\x00', {0x1000, 0x1, 0xffe0000000000000, 0x4}, 0x18, [0x2, 0xd20d, 0x9, 0x20, 0x100000001, 0xffffffff, 0xd3, 0x4, 0x9, 0x4, 0x5, 0x8, 0x1, 0x8, 0x7, 0xbae, 0x9, 0x8, 0x3, 0x5, 0x6b, 0x800, 0x3, 0x800000000, 0xffffffffffff60cf, 0x10001, 0x401, 0xfffffffffffffeff, 0x3, 0xc124, 0xffffffffffffffd6, 0x6, 0x3f, 0x3f, 0xf640, 0x0, 0x7a6, 0x0, 0x1ff, 0x0, 0x71, 0xfffffffffffffe00, 0xffffffffffffff80, 0x9, 0xfffffffffffffffa, 0x2, 0x800, 0x401, 0x1, 0x10001, 0x8, 0x2, 0xfffffffffffffff9, 0x21, 0x8b9b, 0x9, 0x10000, 0x7, 0x101, 0x6, 0x131, 0x2, 0x1, 0x7], [0x3, 0x0, 0x1, 0x3ff, 0xcb, 0x1000, 0x8, 0x3, 0x3f, 0x1, 0xe72, 0x8000, 0xfffffffffffffff7, 0x9, 0x2, 0x3, 0x5, 0xbca, 0x0, 0x6, 0x8, 0x1000, 0x1, 0x6, 0x6, 0x4, 0x401, 0x0, 0x7, 0x6, 0x6, 0x8fe, 0x0, 0x3, 0x100, 0x1ff, 0x6, 0x81, 0xde3f, 0x8, 0xb44, 0x200, 0x100000000, 0x1ff, 0x1, 0xa2c, 0x0, 0x0, 0x7fff, 0x7bddb152, 0x4, 0x7fffffff, 0x7fff, 0x9, 0x7, 0xc97, 0x4, 0x3, 0xb0, 0x8, 0x1, 0x1000, 0x8, 0x2e], [0x843a, 0x6, 0x6, 0x0, 0x7ff, 0xffffffffffffffe1, 0x4, 0x622, 0x7, 0x7, 0x1, 0x8, 0x0, 0x5, 0x6, 0x100000001, 0x10000, 0xfffffffffffff001, 0x1, 0x5, 0x7fffffff, 0x7f, 0x1, 0x7, 0x8, 0x9, 0x8, 0x98dd, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffff01, 0x80, 0x4, 0x0, 0x93, 0x98, 0x100000000, 0x4, 0x4, 0x100, 0x5cd4, 0x0, 0x5, 0x80000000, 0x9, 0x80000000, 0x3f, 0x2, 0x7f, 0x9, 0x5, 0x6, 0x2, 0x3f, 0x9f, 0x67f, 0x7fffffff, 0x80000001, 0x7f, 0x80000000, 0x5, 0x5], [0x2, 0xffffffffffffff00, 0x3, 0x0, 0x6, 0x7, 0x20, 0x5, 0x7fff, 0xa9, 0x8000, 0x2, 0x6, 0x8, 0x7fffffff, 0x1000, 0x0, 0x2, 0x4, 0x4, 0x9, 0x4ca, 0x8, 0x200000000000000, 0x80000000, 0xff, 0x3ff, 0xec, 0x0, 0x1, 0x5, 0x2, 0x1, 0x3dfb, 0x3, 0x9126, 0x1, 0x0, 0x4, 0x0, 0x6, 0x3, 0xfff, 0x100, 0xfffffffffffffffb, 0x4, 0x5a, 0x6, 0x8, 0x8, 0x5, 0x2, 0xfff, 0x56c5, 0x3, 0x1, 0x0, 0x9, 0x8, 0x8001, 0xc2, 0x8, 0x1ff, 0x8]}, 0x45c)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xf8ff, 0x7, 0x7, 0x6, 0x4daf})
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[ 2618.239571] binder: 17552:17555 transaction failed 29201/-22, size 80-24 line 3454
[ 2618.257788] binder: undelivered TRANSACTION_ERROR: 29201
01:02:32 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000400", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:32 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000400)='SEG6\x01')
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup3(r3, r2, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000740)={0x0, 0xfffffeac, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="840100003f61a846b9c4478a5441c2a516c9c4d8a069fca6e933b42984f2006382247a0174c5fc17af7b85a021fdf6f84cf2ec48ec9e1cb71676ef1d7a3b79dfb75894ed33db0510f368791d4a55086dadfb7386bd04d0540c2f90a076a6b9f39d5f5ea732a32309827a540e05736d473a72196494a6f1855b507de2d240113e51b792a4d9944de6b3927ab5b9f0059ef21dc372dae03fba26ff1abbe95badbaefb64ffdaadc66d3743419fa8ac6ac9a05c404af8a8330f9383528dfebb597664bd8465c508b11df54fb38e617f3d3b77b2a2000"/222, @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:02:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="852a627300000000000000000000000010000000000000008528627318000000000000000000400000000000000000008561646600000000008000000000000000000000000000000000000000000000dfc97252b5d7db0457e1294c754320461c72fe4b89912e7636dbfbfe510f3b485d6faa619eb07c157e2ca4de18ba3d1f930356d23062f8a9ed1eeda5990012df07a58341aa4862a48cadde885014fae177fe065dc6f9a19161dc74284d8052335d8030dd0e85415a4db7affac0b3ebec0529fa7b4fa712c3904b5d0836a6b80f46c980f03667adf293ca77a8bf84848aa01c344020de6461b9fe72d635f84cb8c0d0df6d"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000ff00"/24]], 0x0, 0x0, 0x0})
timer_create(0x1, &(0x7f0000000000)={0x0, 0x40, 0x4}, &(0x7f0000000040)=<r2=>0x0)
timer_delete(r2)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x410, 0xffffffffffffffff, 0x0)

[ 2618.305086] binder: 17590:17591 got transaction with invalid parent offset or type
[ 2618.314445] binder: 17590:17591 transaction failed 29201/-22, size 80-24 line 3454
[ 2618.335379] binder: undelivered TRANSACTION_ERROR: 29201
01:02:32 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = accept4(r0, &(0x7f0000000100)=@tipc=@id, &(0x7f00000001c0)=0x80, 0x80000)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x20)
write$selinux_attr(r4, &(0x7f0000000040)='system_u:object_r:udev_helper_exec_t:s0\x00', 0x28)
ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f00000000c0))
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="38f3ffff0f003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="0000180400000000767469360c00020008000280ffff00020000000000000000b55068d471933ab034f3a555d6ec3d3a51e00db834e0af5fd221a95ec55146d6ab6eb706778d35b6da23d9e467be515beeb70650bc342ced83cf5c2db95d7369a8df6c1b7aaa3fb8127cb5cc89e07fa55dcd8cb299f7d77124078367ad2a637977579e2dfbcb711ad42c3435187edd677181f3f8471f034cc1cee6987db602c3f36031ded750cff6606082"], 0x38}}, 0x0)

[ 2618.363914] binder: 17596:17598 got transaction with invalid offset (1095216660504, min 24 max 80) or object.
[ 2618.371716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17595 comm=syz-executor.2
[ 2618.374180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17601 comm=syz-executor.2
01:02:32 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r2 = dup3(r0, r0, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f00000001c0)=0x1)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x184, 0x0, 0x500, 0x70bd25, 0x0, {}, [@TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38bdcd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

[ 2618.430118] binder: 17596:17598 transaction failed 29201/-22, size 80-24 line 3379
[ 2618.444239] binder: undelivered TRANSACTION_ERROR: 29201
[ 2618.451156] binder: BINDER_SET_CONTEXT_MGR already set
[ 2618.451164] binder: 17596:17598 ioctl 40046207 0 returned -16
[ 2618.451186] binder_alloc: 17596: binder_alloc_buf, no vma
[ 2618.451204] binder: 17596:17603 transaction failed 29189/-3, size 80-24 line 3284
[ 2618.476474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pig=17606 comm=syz-executor.2
[ 2618.502777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pig=17614 comm=syz-executor.2
[ 2618.532228] binder: undelivered TRANSACTION_ERROR: 29189
01:02:35 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

01:02:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="852a6273000000000000000000000000e288bf26dd1d0000000000000000852a6273000000000000000000000000000000000000000085616466000000000000000000000000000000000000000000000000000000007a59cf229111684a64c0897b8edf28b7a6d391d8a0d9915b24129a3b67e985a587b36723e269ae47295d121112b06fa434c689a937f205538a461e8effb8f5cec7a127511fce3b0f839cf6612d5080bd511e421388bc88fa5828358e3ad93a7de38dda16"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper, @increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x2008, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x1801, 0x7}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/2, 0x2, 0x1, 0x25}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}, @acquire={0x40046305, 0x1}], 0x55, 0x0, &(0x7f0000000280)="e5914ee2ec5a0e61249f343fbea049bf3c3e472094b4a6da48abb289cc78befce0a160806d0915f031b6eb957061c8f4c47839d9822a7842239fa17ed4c7cb016f7486c6dc3d0e9daf6396ecc9e3fadeb3df40735d"})

01:02:35 executing program 3:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x148060, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000001c0))
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:35 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000000))
munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff2002b9c04736cd52db0e5d6d06f1728d3b3612b4942006f9ac935e47435de1081f5e32"], 0x38}}, 0x0)

01:02:35 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3b)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x7, &(0x7f0000000080))
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
sendmsg$nl_netfilter(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x160, 0xb, 0x0, 0x400, 0x2, 0x25dfdbfd, {0x3, 0x0, 0x7}, [@nested={0x3c, 0xe, [@generic="c79082070ffe178f43157ae094168ffac3c0dedd01054bf737f78990f25f05610630a412c27d4b536a300124a3dfbde5e9da57555005"]}, @generic="dfb40675", @typed={0x8, 0x11, @fd=r5}, @generic="4d8de9b461c7f929c29a749ebdf7f84291d32654bbd76a106f3c39445f45e393738c9333ebf70a9b", @typed={0xdc, 0x65, @binary="d46e91edf7efc9a856fbb57378532698ab260fa3fa76e72cb90c5a0d4317d079e19a30b6f9cbdbdfaa3f67322c08f4109fe46d5c2038c29b41ea34d2bd55c13541a3c9123af737279391f99b79821a63e36935cfe9976565d9647de2a91f52f3282ae3fc168b1a1cb377e77c8646b1926ebe7871af762ff5345b3bb041e2564e2b80fffca620f3edaafef8ee900047a4506776844ce2686d9870f7835373f05d0495f49d899aed5b8419765e55d2d9d6a8b6992b54f44a43aaabf469d5a6b4f58e7cda7274a3ad1be7dc58fb9bace9662b7291738bca"}]}, 0x160}, 0x1, 0x0, 0x0, 0xe11bf70aa58ed4a1}, 0x40080a4)
ptrace$cont(0x7, r2, 0x0, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc)
ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000040))
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:35 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

[ 2621.184952] binder: 17617:17622 got transaction with invalid offset (24, min 24 max 80) or object.
[ 2621.194326] binder: 17617:17622 transaction failed 29201/-22, size 80-24 line 3379
[ 2621.204158] binder: undelivered TRANSACTION_ERROR: 29201
[ 2621.210923] binder: 17617:17628 got transaction with invalid offset (24, min 24 max 80) or object.
[ 2621.220405] binder: 17617:17628 transaction failed 29201/-22, size 80-24 line 3379
[ 2621.229255] binder: undelivered TRANSACTION_ERROR: 29201
01:02:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000240))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs, &(0x7f00000000c0)=0x6e)
getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000680), &(0x7f00000006c0)=0xc)
timer_create(0x6, &(0x7f0000000040)={0x0, 0x2b, 0x1, @thr={&(0x7f0000000140)="d39e51794d66fccce7c307d6f47c671ae6e78d6743655b55d15ff8fc3320bfc7c7341ccac6683c47efa9f6b764f6b021bf65ff5a721e790a99c42011a0c305177dc10e9daad42901370efaaa2d35fc6780c1456195877dcb37bdc39d4846d00f0955d708c86c85863148ef36a262d64f934cefd90ec17584cb8265dc8f8a5f83cf09ee62d70e615d99cce45309c865da87e2c5435b385a9a092e0a1527e3ea2c451dbecbef900cedcdad2b3a2ad4152e72ec171c9dbf335af259e86015eb1fba28", &(0x7f0000000480)="267a8c9be8bba0856a3a54c52a7ed40f5fe1be3a840ce9452bfc4bbc3bd189dd05a52cfa654e9b6874901a2eb57ba04ccdf91fa4840628d016a44752bda4b64d52c6f034ebe975a772e60d3eb8a1d59383a34b8d1bc9b061e455a0064f26a52db103a2999cf2f3aca20d686a7a50009589c349dea86f1600cd5428670d54d6612267e3f14473464b89e2e6a5b9fc95d568ab439e87fdea37b8cae460fe6d8b285b743a5c0cab1a839429aea1f50a385fc7ef4aa340b58217027fbee8caec1c116b2029c0e98c"}}, &(0x7f0000000280)=<r3=>0x0)
timer_getoverrun(r3)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000940)=0x8000000)
syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x40, 0x48000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="003b0e0000000000000000001ef500", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r5, @ANYBLOB="000000000000000000000000852a747001000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/187], @ANYBLOB="bb00000000000000000000000000000027000000000000008561646600"/56], @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYBLOB="00000000006233c540aa3c670000001800000000000000bbd64b9c6112b6464cacbd76db8665941356a72c120e41bdd5db674b77ea94508f5809598f4e99d7c78448073661b3ab967a17d57a00"/102]], 0x0, 0x0, 0x0})
r6 = creat(&(0x7f0000000700)='./file0\x00', 0x10)
ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000740)={0x0, 0x100000001, 0x0, 0x8, 0x6, [{0x5, 0x9, 0x81, 0x0, 0x0, 0x8}, {0x8, 0x7fffffff, 0x6, 0x0, 0x0, 0x1680}, {0x100000000, 0x3, 0x80000001, 0x0, 0x0, 0xb00}, {0x786, 0x8000, 0x7fffffff, 0x0, 0x0, 0x800}, {0x1, 0x2, 0x10000, 0x0, 0x0, 0x8}, {0x200, 0x6, 0x4, 0x0, 0x0, 0x3a0a}]})

01:02:35 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c36230002000280ffff"], 0x3}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r2 = dup2(r0, r1)
dup(r2)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xfffffea2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="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"], 0x38}}, 0x0)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
ioctl$RTC_PIE_OFF(r4, 0x7006)

01:02:35 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
perf_event_open$cgroup(&(0x7f0000000000)={0x46870ab72bf23699, 0x70, 0x6, 0x2, 0x56, 0x36, 0x0, 0x43, 0x8000, 0x18, 0x8000, 0x80, 0x7, 0xfffffffffffff000, 0x2, 0x40, 0x7, 0xff, 0x7, 0x100000001, 0x2, 0x1000, 0x9, 0x6, 0xbb87, 0x4, 0x3, 0x400, 0x7ff, 0x4, 0x9, 0x40, 0x4, 0x6, 0x5, 0x6, 0x100000001, 0xffffffffffffffff, 0x0, 0xefc, 0x0, @perf_config_ext={0x9}, 0x4000, 0x8000, 0x85df, 0x2, 0x8, 0x7, 0x7ff}, r2, 0x9, r3, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="c280"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2621.291686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17640 comm=syz-executor.0
[ 2621.308044] binder: 17636:17640 got transaction with invalid offset (-4236935072285982720, min 0 max 96) or object.
01:02:35 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x200000, 0x1b2)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0xc58, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2621.323720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14135 sclass=netlink_route_socket pig=17642 comm=syz-executor.3
[ 2621.348265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14135 sclass=netlink_route_socket pig=17643 comm=syz-executor.3
[ 2621.404714] binder: 17636:17640 transaction failed 29201/-22, size 96-24 line 3379
[ 2621.415567] binder: undelivered TRANSACTION_ERROR: 29201
[ 2621.423533] binder: BINDER_SET_CONTEXT_MGR already set
[ 2621.429240] binder: 17636:17656 ioctl 40046207 0 returned -16
01:02:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000c300000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})

[ 2621.438395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17640 comm=syz-executor.0
[ 2621.451149] binder: 17636:17647 got transaction with invalid offset (-4236935072285982720, min 0 max 96) or object.
[ 2621.451176] binder: 17636:17647 transaction failed 29201/-22, size 96-24 line 3379
[ 2621.451781] binder: undelivered TRANSACTION_ERROR: 29201
01:02:36 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010803b0e000000000000000000002b997c000004a7bbe54d5a1a2c9eedafb745b12d175e06076057b6c0000f3f914adbf1b984aacb7f4ef2ce44d795837743b2123127695ef9f952ea88a79cd3537e518e2aa1a8a9fb6a3c760741b1cebf48256060370a2e441fee7270840af9522ae75cdcf47f602d7adda528971fe68c5a2b4b2ccf44d806c082209a87dda5ae26312066", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x71d048d61ad89a8e)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'irlan0\x00', 0x800})

[ 2621.511591] binder: 17662:17663 got transaction with invalid parent offset or type
[ 2621.519565] binder: 17662:17663 transaction failed 29201/-22, size 80-24 line 3454
[ 2621.529480] binder: undelivered TRANSACTION_ERROR: 29201
[ 2621.553132] binder: 17662:17665 got transaction with invalid parent offset or type
[ 2621.570633] binder: 17662:17665 transaction failed 29201/-22, size 80-24 line 3454
[ 2621.588553] binder: undelivered TRANSACTION_ERROR: 29201
01:02:38 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

01:02:38 executing program 5:
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
sysinfo(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = accept4$inet(r0, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x800)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x6818)
fchdir(r0)
setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f00000002c0)={0x87, @rand_addr=0x2, 0x4e24, 0x4, 'dh\x00', 0x2, 0x7f, 0x22}, 0x2c)
r4 = dup3(r2, r1, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r7 = gettid()
ptrace$setopts(0x4206, r7, 0x0, 0x0)
tkill(r7, 0x3b)
ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r7, 0x0, 0x0)
fcntl$lock(r6, 0x0, &(0x7f00000001c0)={0x0, 0x2, 0xfff, 0x2, r7})
ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000100)=0x1)
sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="040031c19051713aa23c125b210000", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)

01:02:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:02:38 executing program 3:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fdatasync(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001094003b0e0000000000000000000000ea089a8e4747ea45a2fe5e8516916719c413dbd0d9cecee871594305d5df31d5f194f95f1a2a70cb4d3b345b4a348c38aee64c438d252559acf90900000008dcfa124200f43aa03cdd2ad42e1993e89b1f476bad7dd5e24d1702fe85523eb2d6f0b293c66307e680dbf90108d7b7ba07eb714c1e6af738b753eb7e79dff3af80c41dcd9caf8a8f5d4ed0d0bb9fdf", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469361c00020008000280ffff0002"], 0x38}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003b0e0090090000000000000004000fc0756bcfd304b2ea34f4d97c361e1d466562904b34585900a4a6ca2784177317fc5609ec919606f311ca21353c6e65a4e7985fb4dd290b5cee9075c6b574988fa03b7d2a794ea31480da488d7d", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100667469360c00020008000280ffff0002"], 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001cc0)={'bridge0\x00'})
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000740)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00)
getsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000001ec0)={@local, @multicast1}, &(0x7f0000001f00)=0xc)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001f40)='/selinux/checkreqprot\x00', 0x8240, 0x0)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r5, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r5, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0x40d09)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r8}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r9, &(0x7f0000000100), 0x18d, 0x6c00)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002340)='/selinux/enforce\x00', 0x404000, 0x0)
r10 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r10, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)

01:02:38 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0xfffffffffffffdf7, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[]}}, 0x42d9515187e3db09)
r4 = dup2(r1, r0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0)
perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r5, 0x8)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r7, &(0x7f0000000100), 0x18d, 0x6c00)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x733fef0d736317aa}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r6, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r7}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2624.193397] binder: 17677:17680 got transaction with invalid parent offset or type
[ 2624.202078] selinux_nlmsg_perm: 2 callbacks suppressed
[ 2624.202087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37904 sclass=netlink_route_socket pig=17681 comm=syz-executor.3
01:02:38 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2624.203860] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2624.245107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17683 comm=syz-executor.2
01:02:38 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x31}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2624.275256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17692 comm=syz-executor.2
[ 2624.290029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37904 sclass=netlink_route_socket pig=17681 comm=syz-executor.3
[ 2624.292973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
01:02:38 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
sendmsg$nl_netfilter(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000600"], 0x9}}, 0x20048)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x50100, 0x0)
ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000240)=""/170)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
gettid()
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a745efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x26}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3b)
write$binfmt_script(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x122)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)
ptrace$cont(0x20, r4, 0x8, 0x4)

01:02:38 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'bpq0\x00', 0x420000015001})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000002000000000000006031409200442b00fe8000000000000000000000000000001002020e44ff0200000000000000000000000000010003907800000000feca6cd074160c8d800000"], 0xff23)

01:02:38 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
ptrace$setopts(0x4206, r3, 0x20, 0x10000a)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3b)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r0, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000090029a741efca44f937d049248206000000d961244e2e0c73405754"], 0x0, 0x5f, 0xfffffffffffffd47}, 0x20)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
gettid()

01:02:38 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2624.348377] binder: 17677:17680 transaction failed 29201/-22, size 80-24 line 3454
[ 2624.365300] binder: undelivered TRANSACTION_ERROR: 29201
01:02:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x5e, 0x0, 0x0})

[ 2624.433470] binder: 17721:17725 ioctl c0306201 20000040 returned -14
[ 2624.461092] binder: 17721:17729 ioctl c0306201 20000040 returned -14
01:02:41 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

01:02:41 executing program 5:

01:02:41 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
getitimer(0x2, &(0x7f0000000000))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:41 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
getxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580)=@random={'osx.', '/dev/input/mice\x00'}, &(0x7f00000005c0)=""/252, 0xfc)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000)
sendmsg$inet(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="8501fd9a4624990fe3f39d0bdfcb7b2453128283a2f0a0c7affa174a6908edb66e83e7b4b641eba553dd4c66ddb6b9c590a0ed3b6d9f78c4c6cb60ece162030d0bcd8086c5825e396891f6c0dcdb558a544f39b8096d4d584566069afd5c4dc839703e23847c7802a4fe56079ae57baafb2d46eb8543dc6a070c498ad0850084dd59ef70748404fe9f6ee399bc105cf2b42f73", 0x93}, {&(0x7f0000000480)="a3c69317ae14dcad1d890d4052cbc111604f01807bd915fbde4d07555e92290e5b3e17ca99aebdeb7273822036a36cd9db6c78907c53070c9f390935d74eeea53309313f24cf821c398a002b58b14926f824a1956bdc5f9ff335d1d70eba5c50d7fad200fd7a0ff09d5b81e79cce1d0921489320e4151b68cf077eca9a86590c2e3c43bc1fc1843c76b775825164bcdec90fe72e214a9f4d1dea9e5e09da446a17c124eeb6bda4858073593cda9eb22b134212fa92796a9c91d9a5dfd45708e69ed3bf596aa3067b92", 0xc9}, {&(0x7f0000000200)="1ad5a16171a85758c250b6f398facb8315dfdf9a2fad01e2500921bf0b8c8c11", 0x20}, {&(0x7f0000000280)="f38b3369956eb3ad4a4b5a5275a57c726574cf37d916a6e47190b85790a10f066034c4e9fed84aa9e73dc12968c58a6a12b8ad2e1fbe3a3d39ffb87945a8f572ab1a66bbc2301bdd974f3d2673f786101e4a7ff1063a4261ee89237bcc62ff42e6", 0x61}], 0x4}, 0x80)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:02:41 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='selinux(mime_typeppp0proc\x00', 0xfffffffffffffffd)
keyctl$invalidate(0x15, r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:41 executing program 5:

01:02:41 executing program 5:

01:02:41 executing program 5:

01:02:41 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}}, 0x40000)

01:02:41 executing program 5:

01:02:41 executing program 5:

[ 2627.235065] binder: 17736:17742 got transaction with invalid parent offset or type
[ 2627.246130] binder: 17736:17742 transaction failed 29201/-22, size 80-24 line 3454
[ 2627.255456] binder: undelivered TRANSACTION_ERROR: 29201
01:02:44 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

01:02:44 executing program 3:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x800000070, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27)
sendto$inet(r1, &(0x7f0000000540)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bef7aa03059bcecc7a95c25a3a07e7580440800a6f7ae55d88fecf922ae0f731b58855082b9d1256bec66ba", 0xfffffc20, 0x8800, 0x0, 0xfffffffffffffe61)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYRESHEX=r3], 0x3}}, 0x0)

01:02:44 executing program 5:

01:02:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x100800, 0x0)
close(r2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000085616466000000000000000000000000f8ff0100"/82], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})

01:02:44 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5e}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x100000c1}, 0x44840)

01:02:44 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14, 0xd817cac5e10c5686)
getsockname(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000002c0)=0x80)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
wait4(r3, 0x0, 0x80000001, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="dbd2b93c81929e00cd80a90ffe80598b7cd50bb03d682eb35d36f1220a1e2276898c8cf91c670cb2d2347799c5bad124cea7d77edeab8f8a6d5bbf247d197179f4b7c3d7751838746c79531d0d2ee1c9179ee7e7c0993d89f7142007ce1e792668dee546efb8f0b0ddb6bf6ffd606f8a0fb337a2a4a6efec1eb03b698c68bde560fee4aee6ef44b5c12fae035b2673ab20281053f0730fc4299ed896e7584c372d28ec7e13db124b3ab985db73"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a5e62010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x10000, 0x0, 0x4, 0x2f, 0x0, 0x0, 0x800, 0xb, 0x0, 0xffffffff, 0x80000001, 0xc6e000000000000, 0x2, 0x3ff, 0x3, 0x9, 0x0, 0x200, 0x3, 0x4, 0x0, 0x40, 0xfffffffffffffeeb, 0x4, 0x6, 0x100, 0x20, 0x3, 0x1f, 0x0, 0x0, 0x4, 0x5, 0x1, 0x101, 0x563cfdfa, 0x0, 0x7, 0x1, @perf_config_ext={0x6, 0x8}, 0x8310, 0x0, 0xfff, 0x60eec16cb2321a70, 0x10000, 0x1000, 0x4}, r2, 0x8, 0xffffffffffffffff, 0x1)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

01:02:44 executing program 5:

01:02:44 executing program 5:

01:02:44 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000000))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:44 executing program 5:

[ 2630.249155] binder: 17769:17771 got transaction with invalid offset (48, min 48 max 80) or object.
[ 2630.260152] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2630.283463] binder: 17769:17771 transaction failed 29201/-22, size 80-24 line 3379
[ 2630.292602] binder: undelivered TRANSACTION_ERROR: 29201
01:02:44 executing program 2:
prctl$PR_SET_TSC(0x1a, 0x1)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
r1 = inotify_init()
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20000000})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:44 executing program 5:

[ 2630.312590] binder: 17769:17784 got transaction with invalid offset (48, min 48 max 80) or object.
[ 2630.319238] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2630.350042] binder: 17769:17784 transaction failed 29201/-22, size 80-24 line 3379
[ 2630.363287] binder: undelivered TRANSACTION_ERROR: 29201
01:02:47 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

01:02:47 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat=@weak_handle={0x77682a85, 0x10a}, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:02:47 executing program 5:

01:02:47 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380600000000000000000000000000009cc9391125b250431e6866aa03fce227e28152fa00000000975690c6fa4eed98e8e8ed19829bd8413b18b766eef9e26d39af382c78ca5c6b0c224835bc49efcba2dbad3b90a17547a38ac3b6c7ed1587", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000000))
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
symlinkat(&(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00')

01:02:47 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)=0x6)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:47 executing program 5:

01:02:47 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f00000001c0)="c842c43bda8a9ee84ed4cae92e63cc87f84fa2064b8675a563934d801dd108adb28fa2c3d78548fc2c2f9a8444df66e30bbb4b1e0b2821b306e3a397edc6bd183b115d8b1004fe12bd165b1d9aa6ea4d22ee8a670b239a02b0d94da9ea5d948adf125ed017caf1bf06794d86ce740c4ba895e82af3d5b437162051a237eca5801d7b9c79161cf74c128d7974cc5a47028d65bacd8d1eb7dcc6a45ebead1edaa6c1d5d56027637bf2fdd7ed93c708d199", &(0x7f0000000280)=""/201}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:47 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:02:47 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000040))
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2633.286528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17808 comm=syz-executor.3
01:02:47 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="45924c4fd9937e3535ed9a7f3f2fd483", 0x0, 0x0, 0x3}, 0x20)
ptrace$setopts(0x4206, r4, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r4, 0x23)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000e000000000000000000000000000000000000000000000000000000050000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a627300000000000000000000000000852a627300000000000000000000000000004fde685600008561646600"/73], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})

01:02:47 executing program 5:

01:02:47 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2633.288769] binder: 17803:17807 got transaction with invalid handle, 0
[ 2633.288794] binder: 17803:17807 transaction failed 29201/-22, size 80-24 line 3411
[ 2633.289129] binder: undelivered TRANSACTION_ERROR: 29201
[ 2633.290393] binder: 17803:17811 got transaction with invalid handle, 0
[ 2633.290416] binder: 17803:17811 transaction failed 29201/-22, size 80-24 line 3411
[ 2633.290803] binder: undelivered TRANSACTION_ERROR: 29201
[ 2633.328249] binder: 17815:17818 got transaction with invalid parent offset or type
[ 2633.328289] binder: 17815:17818 transaction failed 29201/-22, size 80-24 line 3454
[ 2633.328468] binder: undelivered TRANSACTION_ERROR: 29201
[ 2633.330553] binder: 17815:17820 got transaction with invalid parent offset or type
[ 2633.330591] binder: 17815:17820 transaction failed 29201/-22, size 80-24 line 3454
[ 2633.330839] binder: undelivered TRANSACTION_ERROR: 29201
[ 2633.510440] binder: 17826:17828 transaction failed 29201/-22, size -4611686018427387824-4611686018429485056 line 3284
[ 2633.521932] binder: undelivered TRANSACTION_ERROR: 29201
01:02:50 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:50 executing program 5:

01:02:50 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:50 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$KDSETLED(r1, 0x4b32, 0x5)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe0a, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)

01:02:50 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x80000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:50 executing program 5:

01:02:50 executing program 5:

01:02:50 executing program 5:

01:02:50 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
mlockall(0x8)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:50 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0)
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x410080)
ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)=0x9)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012000800010000ff03ffff0002"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYBLOB="f415671461b99293288dbfe22efc9602c4dbb5f18ee2e5bf5a86a6f32db76c698a663b92bae1cc13a7d50ed798c60e697e7d628c6c69aef36f489e5d9607c113333bb358dbb9707490ab20f0e5806dc17050e9fc09f3934212a1c80dcc4168e0c21e42dac5983de2cc63223f672a37b4123c8aee121c76e04be3d81cc79a307b248326cb4829ec5e5aa9e008d767e97fa8568636362276f08bec3ff3bc81e9ee5164710d92d8f793e8f102ad296e5fd38d0f5e36846551bca1acab7e36b7061fd50ceb02ebd49a9c5d91f276eacf1aa85581b26fca9adb5e4646e1bd15effa3519c98fb504fda68b3f2d3384bda3d0", @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x3}}, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000100)={0x6, 0x4, 0x80000000, 0x1, 0x800, "be6ac442be8b8abe69c07524a31982a0ff99b8", 0x401, 0x20})

[ 2636.315710] binder_alloc: 17852: binder_alloc_buf size 4294966824 failed, no address space
[ 2636.325837] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 2636.335156] binder: 17852:17856 transaction failed 29201/-28, size 4294966794-24 line 3284
01:02:50 executing program 5:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
fallocate(r0, 0x0, 0x0, 0xa6ba0)
io_setup(0x40000100000001, &(0x7f00000001c0)=<r1=>0x0)
io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}])
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x10, 0x3, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)

01:02:50 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2)

[ 2636.347064] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2636.356163] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2636.419029] binder: undelivered TRANSACTION_ERROR: 29201
[ 2636.426317] binder_alloc: 17852: binder_alloc_buf size 4294966824 failed, no address space
[ 2636.437045] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 2636.441889] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2636.455407] binder: 17852:17867 transaction failed 29201/-28, size 4294966794-24 line 3284
[ 2636.464758] binder: undelivered TRANSACTION_ERROR: 29201
01:02:53 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:53 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071")
creat(0x0, 0x0)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
fallocate(r1, 0x0, 0x0, 0xa6ba0)
io_setup(0x40000100000001, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}])

01:02:53 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0)
ioctl$KIOCSOUND(r1, 0x4b2f, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000400000000000007000052715d5e658da23d", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
lstat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r4, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r4, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r4, 0x0, 0x2)
sendfile(r4, r5, 0x0, 0x40d09)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r7}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x1)
r9 = geteuid()
fchown(r8, r9, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)=@updsa={0x29c, 0x1a, 0x200, 0x70bd2a, 0x25dfdbfc, {{@in=@empty, @in6=@local, 0x4e21, 0x3a15, 0x4e24, 0x1, 0x2, 0x0, 0x40, 0x5e, 0x0, r3}, {@in=@remote, 0x4d3, 0x6c}, @in=@empty, {0x3f, 0xd58, 0x4, 0x2, 0x3, 0x3, 0x0, 0x6}, {0xfffffffffffffffd, 0x0, 0x800, 0xffffffffffff0000}, {0x9, 0x800, 0x5b645eab}, 0x70bd26, 0x0, 0x1c, 0x1, 0x9, 0x20}, [@algo_crypt={0xa0, 0x2, {{'cfb(des)\x00'}, 0x2a8, "0a9f02e78bfb91bac0ca9d5cd7460288a8aa63c6cbc52ef595d49eb04bb038e4508f81dab544ce8632fb55875fa3f54b2048ea65089ad22c220f7399f53c97d8d1fc96529381d5d1df6790e288840fe7d9e0dcea57"}}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@ipv4={[], [], @multicast1}, 0x4e24, 0x8, 0x4e22, 0x12c, 0x2, 0x0, 0x20, 0x0, r7, r9}, {@in=@rand_addr=0x5, 0x4d3, 0x92}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x6, 0xffffffffffffd5c9, 0x7, 0x6, 0x9, 0x9, 0x8, 0x1}, {0x9, 0x9, 0x1, 0xfffffffffffffffd}, {0x0, 0x1, 0x10001}, 0x70bd2c, 0x0, 0x0, 0x4, 0x7ea, 0xa}}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, [], 0x1e}, @in6=@empty, 0x2, 0x100000000, 0x1}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
write(r2, &(0x7f00000002c0)="8848c07b90393d50371cbecd4dde36657e4dd534fe29fa740eb61136b157caadb38305d2f240a01a5b48f161187cffc17107e7ced07855548e5e870f775a7d875afd0a1b0a03fc7779a293ac15dfbf363754fd48b02fb53408432d8f3017255df96c4abe02f75fa33812846df4720273d904d877560e66a432fe80030e69b5e34a256208fe7daff7f52eb8ef7ea6c519935a875867d304e6ce0c45050a61e254182fd59c320f05f91e5a402f6bf52e568721e3bc01117d7ed0936590dad755fe973dc8509da674f9bdf03ad765aaacd4c0020a69a420e77a6b82ad10bc4623cb6d115a39e6dfa3616d89c78b11986ca73735b938", 0xf4)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r10, 0x100, 0x70bd26, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xad}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x520100}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x108, r10, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x799c82d627c1259f}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x672c96b049bfb49d, 0x8}}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffff736}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @multicast1}}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x48}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x697, 0x0, 0x0})

01:02:53 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$TCFLSH(r2, 0x540b, 0x2f)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:53 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0xfffffffffffffffa, 0xd087, 0x0, 0x1, 0x8, 0x8, 0x100000000, 0x88b, 0xffffffff, 0xf})
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6005c669eb82eec510100019b3d7280437a7462010000000000001061537bb7f2df76690029a741d9"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000140)=""/82)
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:53 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003b0e000000000000080000000000f0c677fc68b215107ebeeb5aa4b3caf0ed3099049270", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000100))

[ 2639.344414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17901 comm=syz-executor.2
[ 2639.363775] binder: 17893:17897 ioctl c0306201 20000000 returned -14
01:02:53 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
close(r0)

01:02:53 executing program 0:
r0 = socket$inet(0x10, 0x800080003, 0x0)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f000002002808000800040004000300", 0x24}], 0x1000000000000098, 0x0, 0xfffffffffffffee9}, 0x20002800)
r1 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xa, 0x4000010, r1, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="006340400000000000000000000200000000000000000000000000000000000000000000500000000000000018000000000000006b2a9bd3af448707524da26041c8a4023cfb84912120b8bf44566a03277f126ae5c0921d7c9e697c94f6cd03325443a598a7195bd3cfbff29fa676c32772af96be975ccaa75817cd", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})

[ 2639.398084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17909 comm=syz-executor.2
01:02:53 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001900))
r1 = syz_open_pts(r0, 0x0)
read(r1, &(0x7f0000000280)=""/1, 0xfffffece)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000))

01:02:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
read(r0, &(0x7f0000000140)=""/219, 0xdb)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000040000000180000f53aa922003000000000930500"]], 0x0, 0x0, 0x0})

01:02:53 executing program 5:
seccomp(0x1, 0x0, &(0x7f00000005c0)={0x2, &(0x7f0000000040)=[{0x35, 0x0, 0x100000000000001}, {}]})

[ 2639.437865] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2639.446782] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2639.452059] binder: 17918:17922 got transaction with invalid data ptr
[ 2639.452083] binder: 17918:17922 transaction failed 29201/-14, size 80-24 line 3316
[ 2639.452278] binder: undelivered TRANSACTION_ERROR: 29201
[ 2639.494514] binder: 17933:17934 got transaction with invalid offset (274877906944, min 0 max 80) or object.
[ 2639.494541] binder: 17933:17934 transaction failed 29201/-22, size 80-24 line 3379
[ 2639.494739] binder: undelivered TRANSACTION_ERROR: 29201
01:02:56 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:56 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x0)

01:02:56 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x3, 0x220800)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="852a00000000000000000000000000000000850000000000000000000085616466000000000000000000000000fe1fa65729ead24c00000000000000000000000000000000000000000000000000000072a5d8f185268493d0c5ca8ae06498f96cb66757fac3f399576428ffa7bc0cd7aa23aef2c408a2397d406814880c1627bcc1f126a249d832404582a068922cba95659bef970ce917478e65bb94a8848bd2ca787d80a4fc439b5e881eb3ad8f97b86507a1041f2f539eaab8d659e023c8c608c93f312f235015ab160bb2b506e32879732603"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})

01:02:56 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$KDSETLED(r1, 0x4b32, 0x5)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe0a, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)

01:02:56 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0xa, &(0x7f0000002880)=[{&(0x7f00000001c0)="06b05f77ed79eaa7eeb5c51ee718d234e721f400620640eceeaf11719402c31f2760b5870db7c6f8f93db93effebdaf0f4c9731045625d95ce8c779fe81f9992a61c5fa9af7468ee8080ba03cf7fd14f86f3baec0b6e5b965db732f034436893016b7ef67c64cf8a62e97bb83f2f96c543126ea552db21ae3f5cf9afbee8e7de880bd15679cfe4f2f4100d160d89857e3e9f1195c8c81c71e565628aa0c728a5f789394a15a30f3e53fa97f65afbd85915aa080dee7206745dd6954a2d066fe0c1ac6a7f2884eb4e396a4f5906686d9aa2eca444be38e12fae602a619a80e3de3219f4406cebddc5f26febb727ddea", 0xef, 0x2}, {&(0x7f0000000540)="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", 0x1000, 0x1}, {&(0x7f00000002c0)="e9c1c7f68a13de3879f68de24b95dd5c4fdb3ee68ba8cc7559cb6b7d879a98ec29c7aec849b0f73e651528214c888f849dba613235b67ceeffccb12761e7139083127a993f256046c3a0395fd35257b25cacd0661d80155df7bba710b477106977012c61609a12ee46298badc4aff5c5ab3c377ce1ccd95d78906fba470e1be56c80249d1df630bb58910f121984ed760f93286a47c6e0d67d", 0x99, 0x234}, {&(0x7f0000001540)="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", 0x1000, 0x60e}, {&(0x7f0000000380)="dac633e8f4191c6b4e3172a1f770fa8d0ee77bdbba6c375385c98474f87aef1d89d76c4dea50e8c974ba0c71efca6e46efe40b4c9d8bac4561e8f2ed7aa3806e9e3bdb6e8257d7003ff39731b059eeea63e297f362605f6de294421db9ad820e6ffd257f72f03a4fed21a1e05355c4fd12334d65240e6497cf46638fe10428d927089136c66ead209d5b5010f87c131c156329c7e836d9aa4e37666bf8795c220066d35805d0e17be7128fbb063ba873af4af8e7888d3e6058a1db2f86a6a4877284fcad7fbbc49a17d52f354f9a1b3f86c86574df4c5ac8f05729f436ce2b31d076a6abbe6c", 0xe6, 0x4d0a}, {&(0x7f00000000c0)="0dc5c498da5531eafe271d702067ea9ef592b5616b96d54e432ffb6c8ecfcb7f3660b37e87a3cdbb6fa7be3b", 0x2c, 0x4}, {&(0x7f0000002540)="60e07e815fbb0d53b6388f25f6c2f71f3de7698e6d11cf92f4d557794b59116ea6dadc8e22d38630dd3a20ff6ef10590bb7bb8855472b39c8a113919a8249587ef30eb5fc2ed7210a1b8d0d80228e549c21a50ee5032ce05809a88cf5a3fcc2a17766f6a48b387138d1fefb7a54507e6da154faaf6122689ab80d73a3554c5e921a4c533220b2234a0a2a69a7a51f8f58060b22f903d77e27f125d10b0eb9a9870a8780c931cad666a871b9678e02050cdccac7e043e184a67ce3891cf4b01669daa2b13b9987304960ada7f36e7c80d00a88668c8695f864fc8a9bdc4f29bd699af424731fa4d157669ed", 0xeb, 0x401}, {&(0x7f0000002640)="a871a26311f7caf292db75d563c72c0f289a36f048e460e16d7c017ffa889154ddb5a66baa1ed6396f41d2e408fa6541113861e270dac15e209692d11d764f5f5e98e299570621fbc6a2daf9a9d7e607b7c613aa0c859e470023ff4ff32784702847626b8b91d65aaf6e75d099aae4c4a95da3bdcfeee077b4668b69b6c4bbd0533aa002b70e8d8ef380b38a3eb1168e9e8d44d7e39a6a3a1ccc48284a8111a8c86428dbe123b115979fd16ae6bab09f", 0xb0, 0xe29f}, {&(0x7f0000002700)="bea6d43f4753f7ab8f6a9361429f0916e6be7bec49da554e11c67beb4df4f913ea9d7755794a1f036c7df32cdbe60a40cddde1236e7b582565c1f83b5907bcda2363d80f9ae80d29d3bc1af060d56e8cf3", 0x51, 0x101}, {&(0x7f0000002780)="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", 0xfd, 0x4}], 0x20, &(0x7f0000002980)={[{@adaptive_mode='mode=adaptive'}, {@fsync_mode_posix='fsync_mode=posix'}, {@noextent_cache='noextent_cache'}, {@inline_xattr_size={'inline_xattr_size', 0x3d, 0x10000}}, {@test_dummy_encryption='test_dummy_encryption'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}], [{@context={'context', 0x3d, 'root'}}, {@appraise_type='appraise_type=imasig'}]})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000002a40)=ANY=[@ANYBLOB='broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB='\x00'/16], @ANYBLOB='\x00'/120], 0xe8)

01:02:56 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)
ptrace$setregs(0xffffffffffffffff, r0, 0xcd1, &(0x7f0000000240)="3759c33baba76ec38533b04e63151de7b06294c79bdf114433ac6d9b43796f2f0f03c474398161f3370960776dbaa92208d7e1d7fb68533eb7b7cbae157e8b897f1201e626d26de9b1f7c96f92665abfd5c537fb730c489aa6cdc03f905de719add52b850c40be6b87b5a2dd4b35f6bce79e3afd064be9e4707e8c7e0dc727d20276e4df825e023f637c93add65e148e3fdef9409ae9429aad0f96e7071bd3ad3e29072ce2c5350b353c29d66ee05044bf14350cae3c0808ba1b59d8fbb89b7334d1f5c79f7d1aeb5b6f46253d2f625269b58f047ddcb5d00a97cf4f6acf5695f72c994c99157af346ec")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1670)
r3 = gettid()
getsockopt$inet_tcp_buf(r2, 0x6, 0x0, &(0x7f0000000340)=""/146, &(0x7f0000000040)=0x92)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x2e8}, 0x15)
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)

01:02:56 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$KDSETLED(r1, 0x4b32, 0x5)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe0a, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)

01:02:56 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x0, 0x10000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2642.385331] binder: 17940:17949 got transaction with invalid offset (0, min 0 max 80) or object.
[ 2642.397046] binder: 17940:17949 transaction failed 29201/-22, size 80-24 line 3379
01:02:56 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$KDSETLED(r1, 0x4b32, 0x5)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe0a, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)

01:02:56 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
wait4(r1, &(0x7f0000000000), 0xc1000001, &(0x7f0000000240))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r3 = fcntl$getown(r2, 0x9)
ptrace$setopts(0x4206, r3, 0x66f, 0x100000)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3b)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)
sched_setparam(r4, &(0x7f0000000040)=0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2642.425753] binder: undelivered TRANSACTION_ERROR: 29201
[ 2642.443318] binder: 17940:17962 got transaction with invalid offset (0, min 0 max 80) or object.
01:02:56 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x72902f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x408020, 0x0)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000000c0)=0x4327, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x480)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
accept$packet(r0, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14)
r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x100, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r5, &(0x7f0000000100), 0x18d, 0x6c00)
sendmsg$nl_route_sched(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x1a8, 0x2c, 0x2, 0x70bd25, 0x25dfdbfb, {0x0, r3, {0xb, 0xa}, {0x6, 0xa}, {0xffff, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x81}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x16c, 0x2, [@TCA_BPF_ACT={0x138, 0x1, @m_connmark={0x134, 0x17, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x94, 0x20000000, 0x401, 0xffff}, 0x6fd9}}}, {0xfc, 0x6, "b1f5555a388897debd3cf340f0216b6e6defb2e59df67e79129de4891c477c4a5b7ab7d4dfeaf9758e0e02980bc05ea48f8161cb0d70a127dd797508da1f1ad3a0ef5869d597bc22904068aa15f51066f26a8ddb9a91a771620adcae711fd33ce944437da1fd16b573faf5840696431440c048a670a8e4d66b194775633783a94ba3b8ac9f86abe715322eaec0f1b5a0a3fc3804ed3cad825da2ae01544c8becad8ae1ba4defe4c686876b1cf3f7db10b859c888265342536d9b30ff9003a881dd5baf46ba65cf116bd0c9a66f652ece9f0e7bb7f9269167cc1703da18c698555be377eb75b68dd6a1af58e940a5bdedb0d1cee5c67b"}}}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_FD={0x8, 0x6, r5}]}}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}]}, 0x1a8}}, 0xa065e09491d865e2)

01:02:56 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffff76, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2642.470201] binder: 17940:17962 transaction failed 29201/-22, size 80-24 line 3379
[ 2642.504747] binder: undelivered TRANSACTION_ERROR: 29201
01:02:59 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:02:59 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f00000001c0)="c842c43bda8a9ee84ed4cae92e63cc87f84fa2064b8675a563934d801dd108adb28fa2c3d78548fc2c2f9a8444df66e30bbb4b1e0b2821b306e3a397edc6bd183b115d8b1004fe12bd165b1d9aa6ea4d22ee8a670b239a02b0d94da9ea5d948adf125ed017caf1bf06794d86ce740c4ba895e82af3d5b437162051a237eca5801d7b9c79161cf74c128d7974cc5a47028d65bacd8d1eb7dcc6a45ebead1edaa6c1d5d56027637bf2fdd7ed93c708d199", &(0x7f0000000280)=""/201}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="eb398a4453fb3e4ff12277168b222aa828", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000a, 0x810, r2, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$sock_buf(r4, 0x1, 0x0, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x1)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES16=r5], 0x1}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8020200}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x60, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc0b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x696419c2}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8080)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffe73, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda={0x66646185, 0xa}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:02:59 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xfffffffffffffff7, 0x6712, 0xffffffffffffff3e, 0x80000000, 0x3, 0x6, 0x9, 0x81, 0x38, 0x322, 0x83, 0x100, 0x20, 0x1, 0x7fff, 0x5, 0x80000001}, [{0x3, 0xfe99, 0x1000, 0xfffffffeffffffff, 0x8, 0x3, 0x2, 0xcf}, {0x6474e557, 0x5, 0x9, 0x2, 0xf0, 0x200, 0x15, 0xdee}], "37eb07f51b6f24991189810db55e9189afcf92a969dd91fb2b009824786919e59694f374d601", [[], [], [], [], []]}, 0x59e)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="590000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000f20000001800ff01000001007674690008000280ffff000200000000"], 0x3}}, 0x4040)

01:02:59 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$GIO_FONTX(r2, 0x4b6b, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='j\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r4 = getuid()
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r5, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r5, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r5, 0x0, 0x2)
sendfile(r5, r6, 0x0, 0x40d09)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
getresgid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000640)=<r8=>0x0)
stat(&(0x7f0000000700)='./bus\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r7}, {0x2, 0x482af0178714ef63, r7}], {0x4, 0x1}, [{0x8, 0x1, r8}, {0x8, 0x1}, {0x8, 0x60f0c3b60b2d6397, r9}, {0x8, 0x4}, {0x8, 0x3}], {}, {0x20, 0x2}}, 0x5c, 0x1)
fchown(r3, r4, r9)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x20}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f00000000c0)='sysfs\x00', r10}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, r2, 0x0, 0x7, &(0x7f0000000040)='vmnet0\x00', r10}, 0x30)
r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)=r10, 0x4)
fchdir(r11)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:59 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x31}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:59 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000040)={0xfe, 0x3, [0x6, 0xffff, 0x3, 0x4]})
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ipddp0\x00', r3})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2645.384177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64339 sclass=netlink_route_socket pig=17999 comm=syz-executor.0
[ 2645.385190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18000 comm=syz-executor.3
[ 2645.392103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18000 comm=syz-executor.3
01:02:59 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000000))
munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff2002b9c04736cd52db0e5d6d06f1728d3b3612b4942006f9ac935e47435de1081f5e32"], 0x38}}, 0x0)

01:02:59 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="38cd050000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:02:59 executing program 0:
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(0xffffffffffffffff, &(0x7f0000000100), 0x4d, 0x6c04)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000000))
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0x100)
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000), 0xffffffffffffff25, 0x0, 0x0})

01:02:59 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2645.415000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63237 sclass=netlink_route_socket pig=18001 comm=syz-executor.2
[ 2645.452201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63237 sclass=netlink_route_socket pig=18016 comm=syz-executor.2
[ 2645.469803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64339 sclass=netlink_route_socket pig=17999 comm=syz-executor.0
01:03:00 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
tkill(r1, 0x19)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:03:00 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000000))
munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff2002b9c04736cd52db0e5d6d06f1728d3b3612b4942006f9ac935e47435de1081f5e32"], 0x38}}, 0x0)

01:03:00 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x10000, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'ip6_vti0\x00'})
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x800, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
ptrace$pokeuser(0x6, 0xffffffffffffffff, 0xb33b, 0x7)

01:03:00 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2645.571218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18035 comm=syz-executor.2
01:03:00 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000000))
munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff2002b9c04736cd52db0e5d6d06f1728d3b3612b4942006f9ac935e47435de1081f5e32"], 0x38}}, 0x0)

01:03:00 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000100400000000000000000000000000006bb02a0ceac22fc0d59286050d684887d17e00f266e15ed8e1c550039e144cabb7840598fbc99861b1210ac9ec81621c13d405be765db73885e3e6c4b33a4ef51f93b653e7ec7f904431df17fe94f5f89d0150394e8fb3f3a39862bac297dd2cb7c4be7be3d8b440b57484b87ea4b868f0dee83495f4e629ac1c1dff5219fb3f7e2d848cf632a974bfdf8a9f7b523cf903014f96219ae7ee1c4e8cba1d89761cd08b6686395ffc52832b4b047f1feb", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2645.650190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18051 comm=syz-executor.2
01:03:00 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x2000, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x96)
write$uinput_user_dev(r2, &(0x7f0000000480)={'syz1\x00', {0x1000, 0x1, 0xffe0000000000000, 0x4}, 0x18, [0x2, 0xd20d, 0x9, 0x20, 0x100000001, 0xffffffff, 0xd3, 0x4, 0x9, 0x4, 0x5, 0x8, 0x1, 0x8, 0x7, 0xbae, 0x9, 0x8, 0x3, 0x5, 0x6b, 0x800, 0x3, 0x800000000, 0xffffffffffff60cf, 0x10001, 0x401, 0xfffffffffffffeff, 0x3, 0xc124, 0xffffffffffffffd6, 0x6, 0x3f, 0x3f, 0xf640, 0x0, 0x7a6, 0x0, 0x1ff, 0x0, 0x71, 0xfffffffffffffe00, 0xffffffffffffff80, 0x9, 0xfffffffffffffffa, 0x2, 0x800, 0x401, 0x1, 0x10001, 0x8, 0x2, 0xfffffffffffffff9, 0x21, 0x8b9b, 0x9, 0x10000, 0x7, 0x101, 0x6, 0x131, 0x2, 0x1, 0x7], [0x3, 0x0, 0x1, 0x3ff, 0xcb, 0x1000, 0x8, 0x3, 0x3f, 0x1, 0xe72, 0x8000, 0xfffffffffffffff7, 0x9, 0x2, 0x3, 0x5, 0xbca, 0x0, 0x6, 0x8, 0x1000, 0x1, 0x6, 0x6, 0x4, 0x401, 0x0, 0x7, 0x6, 0x6, 0x8fe, 0x0, 0x3, 0x100, 0x1ff, 0x6, 0x81, 0xde3f, 0x8, 0xb44, 0x200, 0x100000000, 0x1ff, 0x1, 0xa2c, 0x0, 0x0, 0x7fff, 0x7bddb152, 0x4, 0x7fffffff, 0x7fff, 0x9, 0x7, 0xc97, 0x4, 0x3, 0xb0, 0x8, 0x1, 0x1000, 0x8, 0x2e], [0x843a, 0x6, 0x6, 0x0, 0x7ff, 0xffffffffffffffe1, 0x4, 0x622, 0x7, 0x7, 0x1, 0x8, 0x0, 0x5, 0x6, 0x100000001, 0x10000, 0xfffffffffffff001, 0x1, 0x5, 0x7fffffff, 0x7f, 0x1, 0x7, 0x8, 0x9, 0x8, 0x98dd, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffff01, 0x80, 0x4, 0x0, 0x93, 0x98, 0x100000000, 0x4, 0x4, 0x100, 0x5cd4, 0x0, 0x5, 0x80000000, 0x9, 0x80000000, 0x3f, 0x2, 0x7f, 0x9, 0x5, 0x6, 0x2, 0x3f, 0x9f, 0x67f, 0x7fffffff, 0x80000001, 0x7f, 0x80000000, 0x5, 0x5], [0x2, 0xffffffffffffff00, 0x3, 0x0, 0x6, 0x7, 0x20, 0x5, 0x7fff, 0xa9, 0x8000, 0x2, 0x6, 0x8, 0x7fffffff, 0x1000, 0x0, 0x2, 0x4, 0x4, 0x9, 0x4ca, 0x8, 0x200000000000000, 0x80000000, 0xff, 0x3ff, 0xec, 0x0, 0x1, 0x5, 0x2, 0x1, 0x3dfb, 0x3, 0x9126, 0x1, 0x0, 0x4, 0x0, 0x6, 0x3, 0xfff, 0x100, 0xfffffffffffffffb, 0x4, 0x5a, 0x6, 0x8, 0x8, 0x5, 0x2, 0xfff, 0x56c5, 0x3, 0x1, 0x0, 0x9, 0x8, 0x8001, 0xc2, 0x8, 0x1ff, 0x8]}, 0x45c)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xf8ff, 0x7, 0x7, 0x6, 0x4daf})
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:03:00 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:03:00 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="004000e4063f00010066008e13760002000000006bbadf78f828d52fc45cc0704dfe32107e6342edcc74769cc98f2126a376003d7ab20cb0683b04825fe965134cde3250b678108c8fd3210837c6d510af191e46dbdd585542cdb740018f3b109828e64dde878222889ec615a33db3cc4339cb4503bfbfa892cc62c260bc0d7ddd3a887601e6351af1406ea28e5b005bcda2163f9e58d7162f37760f971013ea8c001b8e7d0c153360f065c22c70100e30c14524d518633465a501c61e62304b4a67390603bf540a075159cce097bdf02493993c2294ff924509ed7a58a9ae326eceb4a7bcaffb1a090d5f6cd6a4542a328abe823e9daa0498a8c56b2766d692dbf5c19952fc070547d31f3a38c9c8ceb0e3bceac28d5b6d"], 0x3}, 0x1, 0x0, 0x0, 0x20041800}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
setsockopt(r1, 0x3, 0x6b, &(0x7f0000000000)="0d7815b8eadb1af57aef657fe406aab87e82bed91e3295dd9c0cafdc42ecd595f440aa3005d0cc7c41e9c89d25187a5baf710eb8901ce00bb7ab79f1d774ce267eaa5e55b355d6c66aa246086cec7ad4da31", 0x52)

[ 2645.716521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pig=18060 comm=syz-executor.3
01:03:00 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x2000, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x96)
write$uinput_user_dev(r2, &(0x7f0000000480)={'syz1\x00', {0x1000, 0x1, 0xffe0000000000000, 0x4}, 0x18, [0x2, 0xd20d, 0x9, 0x20, 0x100000001, 0xffffffff, 0xd3, 0x4, 0x9, 0x4, 0x5, 0x8, 0x1, 0x8, 0x7, 0xbae, 0x9, 0x8, 0x3, 0x5, 0x6b, 0x800, 0x3, 0x800000000, 0xffffffffffff60cf, 0x10001, 0x401, 0xfffffffffffffeff, 0x3, 0xc124, 0xffffffffffffffd6, 0x6, 0x3f, 0x3f, 0xf640, 0x0, 0x7a6, 0x0, 0x1ff, 0x0, 0x71, 0xfffffffffffffe00, 0xffffffffffffff80, 0x9, 0xfffffffffffffffa, 0x2, 0x800, 0x401, 0x1, 0x10001, 0x8, 0x2, 0xfffffffffffffff9, 0x21, 0x8b9b, 0x9, 0x10000, 0x7, 0x101, 0x6, 0x131, 0x2, 0x1, 0x7], [0x3, 0x0, 0x1, 0x3ff, 0xcb, 0x1000, 0x8, 0x3, 0x3f, 0x1, 0xe72, 0x8000, 0xfffffffffffffff7, 0x9, 0x2, 0x3, 0x5, 0xbca, 0x0, 0x6, 0x8, 0x1000, 0x1, 0x6, 0x6, 0x4, 0x401, 0x0, 0x7, 0x6, 0x6, 0x8fe, 0x0, 0x3, 0x100, 0x1ff, 0x6, 0x81, 0xde3f, 0x8, 0xb44, 0x200, 0x100000000, 0x1ff, 0x1, 0xa2c, 0x0, 0x0, 0x7fff, 0x7bddb152, 0x4, 0x7fffffff, 0x7fff, 0x9, 0x7, 0xc97, 0x4, 0x3, 0xb0, 0x8, 0x1, 0x1000, 0x8, 0x2e], [0x843a, 0x6, 0x6, 0x0, 0x7ff, 0xffffffffffffffe1, 0x4, 0x622, 0x7, 0x7, 0x1, 0x8, 0x0, 0x5, 0x6, 0x100000001, 0x10000, 0xfffffffffffff001, 0x1, 0x5, 0x7fffffff, 0x7f, 0x1, 0x7, 0x8, 0x9, 0x8, 0x98dd, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffff01, 0x80, 0x4, 0x0, 0x93, 0x98, 0x100000000, 0x4, 0x4, 0x100, 0x5cd4, 0x0, 0x5, 0x80000000, 0x9, 0x80000000, 0x3f, 0x2, 0x7f, 0x9, 0x5, 0x6, 0x2, 0x3f, 0x9f, 0x67f, 0x7fffffff, 0x80000001, 0x7f, 0x80000000, 0x5, 0x5], [0x2, 0xffffffffffffff00, 0x3, 0x0, 0x6, 0x7, 0x20, 0x5, 0x7fff, 0xa9, 0x8000, 0x2, 0x6, 0x8, 0x7fffffff, 0x1000, 0x0, 0x2, 0x4, 0x4, 0x9, 0x4ca, 0x8, 0x200000000000000, 0x80000000, 0xff, 0x3ff, 0xec, 0x0, 0x1, 0x5, 0x2, 0x1, 0x3dfb, 0x3, 0x9126, 0x1, 0x0, 0x4, 0x0, 0x6, 0x3, 0xfff, 0x100, 0xfffffffffffffffb, 0x4, 0x5a, 0x6, 0x8, 0x8, 0x5, 0x2, 0xfff, 0x56c5, 0x3, 0x1, 0x0, 0x9, 0x8, 0x8001, 0xc2, 0x8, 0x1ff, 0x8]}, 0x45c)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xf8ff, 0x7, 0x7, 0x6, 0x4daf})
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:03:00 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:03:00 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002f166ddac7e5f834b002e1e1fe2f496d89834faf2dd822089cd5c16463f3cc0504faad957228e6b31c243a2e566b5d98737a3bb0f490a07c1d36e051d9242d452a4fc56b8fa3e940aa9d477228d8ccaaf3fa2a3de1f9ed46a42fb4efede86c91db2457a27641a2445e0ef1ec9cab487ef77bd3cb0f0a767394abc1711f439142c6b94f776024455eac91ac86a2ca2e36ce89f4ac44c25c62c2682d5d087c1486d111aa2502542ecaccc72fff2d9d41899dc91d6dae45e2647b046bef8db07cfba580530c7c29ba9157f120356c6740e88"], 0x38}}, 0x0)

01:03:03 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c000200000280ffff0002"], 0x38}}, 0x0)

01:03:03 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x2000, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x96)
write$uinput_user_dev(r2, &(0x7f0000000480)={'syz1\x00', {0x1000, 0x1, 0xffe0000000000000, 0x4}, 0x18, [0x2, 0xd20d, 0x9, 0x20, 0x100000001, 0xffffffff, 0xd3, 0x4, 0x9, 0x4, 0x5, 0x8, 0x1, 0x8, 0x7, 0xbae, 0x9, 0x8, 0x3, 0x5, 0x6b, 0x800, 0x3, 0x800000000, 0xffffffffffff60cf, 0x10001, 0x401, 0xfffffffffffffeff, 0x3, 0xc124, 0xffffffffffffffd6, 0x6, 0x3f, 0x3f, 0xf640, 0x0, 0x7a6, 0x0, 0x1ff, 0x0, 0x71, 0xfffffffffffffe00, 0xffffffffffffff80, 0x9, 0xfffffffffffffffa, 0x2, 0x800, 0x401, 0x1, 0x10001, 0x8, 0x2, 0xfffffffffffffff9, 0x21, 0x8b9b, 0x9, 0x10000, 0x7, 0x101, 0x6, 0x131, 0x2, 0x1, 0x7], [0x3, 0x0, 0x1, 0x3ff, 0xcb, 0x1000, 0x8, 0x3, 0x3f, 0x1, 0xe72, 0x8000, 0xfffffffffffffff7, 0x9, 0x2, 0x3, 0x5, 0xbca, 0x0, 0x6, 0x8, 0x1000, 0x1, 0x6, 0x6, 0x4, 0x401, 0x0, 0x7, 0x6, 0x6, 0x8fe, 0x0, 0x3, 0x100, 0x1ff, 0x6, 0x81, 0xde3f, 0x8, 0xb44, 0x200, 0x100000000, 0x1ff, 0x1, 0xa2c, 0x0, 0x0, 0x7fff, 0x7bddb152, 0x4, 0x7fffffff, 0x7fff, 0x9, 0x7, 0xc97, 0x4, 0x3, 0xb0, 0x8, 0x1, 0x1000, 0x8, 0x2e], [0x843a, 0x6, 0x6, 0x0, 0x7ff, 0xffffffffffffffe1, 0x4, 0x622, 0x7, 0x7, 0x1, 0x8, 0x0, 0x5, 0x6, 0x100000001, 0x10000, 0xfffffffffffff001, 0x1, 0x5, 0x7fffffff, 0x7f, 0x1, 0x7, 0x8, 0x9, 0x8, 0x98dd, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffff01, 0x80, 0x4, 0x0, 0x93, 0x98, 0x100000000, 0x4, 0x4, 0x100, 0x5cd4, 0x0, 0x5, 0x80000000, 0x9, 0x80000000, 0x3f, 0x2, 0x7f, 0x9, 0x5, 0x6, 0x2, 0x3f, 0x9f, 0x67f, 0x7fffffff, 0x80000001, 0x7f, 0x80000000, 0x5, 0x5], [0x2, 0xffffffffffffff00, 0x3, 0x0, 0x6, 0x7, 0x20, 0x5, 0x7fff, 0xa9, 0x8000, 0x2, 0x6, 0x8, 0x7fffffff, 0x1000, 0x0, 0x2, 0x4, 0x4, 0x9, 0x4ca, 0x8, 0x200000000000000, 0x80000000, 0xff, 0x3ff, 0xec, 0x0, 0x1, 0x5, 0x2, 0x1, 0x3dfb, 0x3, 0x9126, 0x1, 0x0, 0x4, 0x0, 0x6, 0x3, 0xfff, 0x100, 0xfffffffffffffffb, 0x4, 0x5a, 0x6, 0x8, 0x8, 0x5, 0x2, 0xfff, 0x56c5, 0x3, 0x1, 0x0, 0x9, 0x8, 0x8001, 0xc2, 0x8, 0x1ff, 0x8]}, 0x45c)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xf8ff, 0x7, 0x7, 0x6, 0x4daf})
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat, @flat, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

01:03:03 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:03:03 executing program 3:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
r3 = fcntl$getown(r0, 0x9)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r4, &(0x7f0000000100), 0x18d, 0x6c00)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r3, r4, 0x0, 0x7, &(0x7f00000000c0)='vmnet0\x00', 0xffffffffffffffff}, 0x30)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7fff, 0x1523, 0x20, 0x2}, {0xfffffffffffff000, 0x5, 0x1, 0x6}]})

01:03:03 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x13)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c)
sendmmsg(r4, &(0x7f0000006d00)=[{{0x0, 0x2cd, 0x0}}], 0x4000000000001cd, 0x0)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000200)={@mcast2, <r7=>0x0}, &(0x7f0000000240)=0x14)
accept4(r4, &(0x7f0000000280)=@ll={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x80, 0x800)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000cc0)={<r9=>0x0, @rand_addr, @broadcast}, &(0x7f0000000d00)=0xc)
getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000d40)={@dev, <r10=>0x0}, &(0x7f0000000d80)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001140)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000001240)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000001280)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000012c0)=0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001300)={@loopback, @loopback, <r13=>0x0}, &(0x7f0000000400)=0xffffffffffffff1a)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004dc0)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000004f00)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004f40)=0x14)
accept$packet(0xffffffffffffffff, &(0x7f00000062c0)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006300)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006340)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000006440)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000006480)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000006580)=0xe8)
getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000065c0)={@ipv4={[], [], @local}, <r19=>0x0}, &(0x7f0000006600)=0x14)
accept4$packet(0xffffffffffffffff, &(0x7f0000006800)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000006840)=0x14, 0x80800)
getpeername$packet(0xffffffffffffffff, &(0x7f0000006880)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000068c0)=0x14)
accept$packet(r4, &(0x7f0000006900)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006940)=0x14)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000006980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r23=>0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000006a80)=0xe8)
getsockname$packet(0xffffffffffffffff, &(0x7f0000006ac0)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006b00)=0x14)
getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000006b40)={@multicast2, @empty, <r25=>0x0}, &(0x7f0000006b80)=0xc)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000006c00)={<r26=>0x0, @multicast2, @local}, &(0x7f0000006c40)=0xc)
getpeername(r4, &(0x7f0000006c80)=@xdp={0x2c, 0x0, <r27=>0x0}, &(0x7f0000006d40)=0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000007300)={0x11, 0x0, <r28=>0x0}, &(0x7f0000007340)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000007440)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000007540)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000007580)={0x11, 0x0, <r30=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000075c0)=0x14)
accept$packet(0xffffffffffffffff, &(0x7f00000076c0)={0x11, 0x0, <r31=>0x0}, &(0x7f0000007700)=0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000007fc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000007f80)={&(0x7f0000007740)={0x800, r6, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x1f4, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xa71f6e}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x1f8, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffe00}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x48}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r18}, {0x170, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x51}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r23}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r24}, {0xec, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x100, 0x3f6, 0x6, 0xc}, {0xd06, 0x7, 0x2, 0x800}, {0x0, 0x10000, 0x8, 0xffffffff}, {0x8, 0xffffffff, 0x7bf, 0x6}, {0x7, 0x1fb, 0xffffffffffffff96, 0x5}, {0x34, 0xfffffffffffffc01, 0x0, 0x7}, {0x7, 0x7fffffff, 0x3ff, 0x8}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r26}}}]}}, {{0x8, 0x1, r27}, {0x138, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r28}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r29}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffff80}}, {0x8, 0x6, r31}}}]}}]}, 0x800}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in=@remote, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r32=>0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, <r33=>0x0}, &(0x7f00000002c0)=0x14)
r34 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r34, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r35 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r34, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r34, 0x0, 0x2)
sendfile(r34, r35, 0x0, 0x40d09)
r36 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r34, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r37=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r36, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r37}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000380)={@remote, @rand_addr, <r38=>0x0}, &(0x7f00000003c0)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x66, &(0x7f00000004c0)={@broadcast, @multicast1, <r39=>0x0}, &(0x7f0000000500)=0xc)
r40 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r40, &(0x7f0000000100), 0x18d, 0x6c00)
getsockopt$inet6_IPV6_XFRM_POLICY(r40, 0x29, 0x23, &(0x7f0000000600)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r41=>0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000700)=0xe8)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, <r42=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x14)
r43 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r43, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r44 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r43, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r43, 0x0, 0x2)
sendfile(r43, r44, 0x0, 0x40d09)
r45 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r43, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r46=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r45, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r46}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
r47 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r47, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r48 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r47, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r47, 0x0, 0x2)
sendfile(r47, r48, 0x0, 0x40d09)
r49 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r47, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r50=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r49, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r50}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f0000000a80)={&(0x7f00000007c0)={0x290, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r32}, {0x1b4, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r33}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r37}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x8, 0x3, 0x80000001, 0x3}, {0x8, 0x8, 0x1ff, 0x100}, {0x7ff, 0x0, 0x1, 0x400}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r38}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r39}}}]}}, {{0x8, 0x1, r41}, {0xb8, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r42}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r46}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r50}}}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x40}, 0x8000001)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})

01:03:03 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
ptrace$setopts(0x4206, r2, 0x1, 0x4)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929ecd8000"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000240)="80a0e03f39d326014f")
ptrace$cont(0x7, r1, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x100, 0x1f, 0x2, 0xf81b, 0x5, 0x3, 0x6, 0xd96f, 0x36, 0x40, 0x228, 0x80, 0x3, 0x38, 0x2, 0x1ff, 0x81, 0x9}, [{0xc8e9caa1, 0x5, 0x0, 0x6, 0x8000, 0x0, 0x6, 0xaed}, {0x6, 0x94d, 0x800, 0xffffffffffffffc1, 0x0, 0x5, 0xff, 0x2bb7}], "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", [[], [], [], []]}, 0x14b0)
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')

01:03:03 executing program 5:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x109000, 0x0)
write$P9_RAUTH(r0, &(0x7f0000000140)={0x14, 0x67, 0x1, {0x20, 0x1}}, 0x14)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="000000bf4056d0561e409700000000003000000000000000fb52763a9a1cda264a4a27c33759d907c54d866038fd"]], 0x0, 0x0, 0x0})

01:03:03 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[ 2648.546312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
01:03:03 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in=@remote}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

01:03:03 executing program 5:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x109000, 0x0)
write$P9_RAUTH(r0, &(0x7f0000000140)={0x14, 0x67, 0x1, {0x20, 0x1}}, 0x14)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="000000bf4056d0561e409700000000003000000000000000fb52763a9a1cda264a4a27c33759d907c54d866038fd"]], 0x0, 0x0, 0x0})

01:03:03 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)

[ 2648.633422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
01:03:03 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000001c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x13, 0x4, 0xd770, 0xd53e, 0xffffffff80000000, 0x6, "da0a7b6c99f94ab5409cb1bcf9a95baae46341"}, 0x12b)

01:03:03 executing program 5:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x109000, 0x0)
write$P9_RAUTH(r0, &(0x7f0000000140)={0x14, 0x67, 0x1, {0x20, 0x1}}, 0x14)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="000000bf4056d0561e409700000000003000000000000000fb52763a9a1cda264a4a27c33759d907c54d866038fd"]], 0x0, 0x0, 0x0})

[ 2648.683144] binder: 18092:18109 sending u0000000000000000 node 362, cookie mismatch 0000000000000000 != 4400000000000000
[ 2648.695154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18123 comm=syz-executor.2
01:03:03 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c000200000280ffff0002"], 0x38}}, 0x0)

01:03:03 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

01:03:03 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, 0xfffffffffffffffe, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
fsetxattr$security_capability(r3, &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0x0, 0x5}, {0x7, 0x8}]}, 0x14, 0x1)
r4 = openat$cgroup_ro(r2, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$SEG6(0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='@', @ANYRES16=r5, @ANYBLOB="010627bd7000fbdbdf250100000008000300000000001400010000000000000000000000ffffe000000108000600010000000800020006000000"], 0x3}}, 0x4)
sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x6c, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1f}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xacc}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24010085}, 0x40080c0)

[ 2648.738328] binder: 18092:18109 transaction failed 29201/-22, size 80-24 line 3395
[ 2648.802521] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
01:03:03 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(r2, &(0x7f0000000380)=""/39, 0x23, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r5=>0x0)
perf_event_open(&(0x7f0000000200)={0xac582018e4148a66, 0x70, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x10904, 0x338dbc3df685bfdd, 0x0, 0x7, 0x4, 0x5, 0x8, 0x8, 0x0, 0x81, 0x0, 0x0, 0x3ff, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x8, 0x10001, 0xffffffffffffff7f, 0x2, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x10, 0x1, 0x6, 0x5, 0x9, 0x3f, 0x800}, r5, 0x10, r4, 0xb)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
dup2(r4, r2)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0)
ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000000040)={0x9, 0x80000000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000004a1acb00"]], 0x0, 0x0, 0x0})

01:03:03 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40000, 0x0)
ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000040)={0xe77, 0x8, 0x3, 0x8, 0xfff, 0x1, 0xcab7740})

01:03:03 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000100), 0x18d, 0x6c00)
write$selinux_load(r0, &(0x7f0000000540)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x1010)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00003247cd09eb0000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)

[ 2648.931745] binder: undelivered TRANSACTION_ERROR: 29201
[ 2648.956886] binder: BINDER_SET_CONTEXT_MGR already set
[ 2648.962766] binder: 18092:18146 ioctl 40046207 0 returned -16
[ 2649.036313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2649.071215] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
01:03:06 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(r2, &(0x7f0000000380)=""/39, 0x23, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r5=>0x0)
perf_event_open(&(0x7f0000000200)={0xac582018e4148a66, 0x70, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x10904, 0x338dbc3df685bfdd, 0x0, 0x7, 0x4, 0x5, 0x8, 0x8, 0x0, 0x81, 0x0, 0x0, 0x3ff, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x8, 0x10001, 0xffffffffffffff7f, 0x2, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x10, 0x1, 0x6, 0x5, 0x9, 0x3f, 0x800}, r5, 0x10, r4, 0xb)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
dup2(r4, r2)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0)
ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000000040)={0x9, 0x80000000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000004a1acb00"]], 0x0, 0x0, 0x0})

01:03:06 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3b)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3b)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r5, 0x0, 0x0)
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x3b)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r6, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESHEX=r3, @ANYRESDEC=r1, @ANYRESDEC=r4], @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRESDEC=r5, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=r6, @ANYPTR], @ANYBLOB="d6bf801c53a1a89e7f2359e34137258b550e4a87ec8191dc09cbd9ddcffb910a7188c4d81a13db24fafa11ecbc3444dab900ed6d871e1838d3df1396c6b2a16ff4aa839b74816c351e58038db217de994c8b6f3cb439c13931121766e70801e39f3c2735aa1e", @ANYRES16=r0], @ANYRESOCT], 0x0, 0x27}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:03:06 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3b)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3b)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r5, 0x0, 0x0)
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x3b)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r6, 0x0, 0x0)
r7 = gettid()
ptrace$setopts(0x4206, r7, 0x0, 0x0)
tkill(r7, 0x3b)
ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000040))
ptrace$cont(0x7, r7, 0x0, 0x0)
r8 = gettid()
ptrace$setopts(0x4206, r8, 0x0, 0x0)
tkill(r8, 0x3b)
ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r8, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES64, @ANYRES64=r1, @ANYRESDEC=r3, @ANYRES64=r2], @ANYPTR=&(0x7f0000000480)=ANY=[], @ANYRESDEC=r7, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r5, @ANYRESDEC=r8, @ANYBLOB="6fc5d47d45892eea5acc6f32820f840a9763bb7cafc69a78881400694946e87f444392c65e57e6ee2acae27294bc14974f342caa7120", @ANYPTR]], 0x38, 0x0, 0x0})

01:03:06 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e"], 0x0, 0x46}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:03:06 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x40eadf72ea900559)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000140)=0x100, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
write$selinux_attr(r2, &(0x7f0000000000)='system_u:object_r:modules_dep_t:s0\x00', 0x23)

01:03:06 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)

01:03:06 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(r2, &(0x7f0000000380)=""/39, 0x23, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r5=>0x0)
perf_event_open(&(0x7f0000000200)={0xac582018e4148a66, 0x70, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x10904, 0x338dbc3df685bfdd, 0x0, 0x7, 0x4, 0x5, 0x8, 0x8, 0x0, 0x81, 0x0, 0x0, 0x3ff, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x8, 0x10001, 0xffffffffffffff7f, 0x2, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x10, 0x1, 0x6, 0x5, 0x9, 0x3f, 0x800}, r5, 0x10, r4, 0xb)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
dup2(r4, r2)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0)
ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000000040)={0x9, 0x80000000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000004a1acb00"]], 0x0, 0x0, 0x0})

01:03:06 executing program 1:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100), 0x18d, 0x6c00)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000000))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d049248200837296d961244e2e0c73405754"], 0x0, 0x4c}, 0x20)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

01:03:06 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat=@weak_binder={0x77622a85, 0x2001, 0x3}, @flat, @fda={0x66646185, 0x0, 0x4}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
r2 = perf_event_open$cgroup(&(0x7f0000000000)={0x2eddbbe042ce5dd8, 0x70, 0x8001, 0x1, 0x80, 0xffffffffffffff59, 0x0, 0x8, 0x2110, 0x8, 0x8, 0x7, 0x6, 0x1, 0x7, 0x4, 0x2, 0x9, 0x8000, 0x19ef, 0x6, 0x89bb, 0x9, 0x8000, 0x0, 0x9, 0xffffffffffffffff, 0x1, 0x3, 0x100, 0xd50, 0x5, 0x8, 0x4, 0x1, 0x140, 0x3, 0x5, 0x0, 0x3, 0x4, @perf_config_ext={0x2b1, 0xf39f}, 0x0, 0x7, 0x6000000000000000, 0x4, 0x2, 0x2, 0x89e}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)

01:03:06 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x13)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c)
sendmmsg(r4, &(0x7f0000006d00)=[{{0x0, 0x2cd, 0x0}}], 0x4000000000001cd, 0x0)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000200)={@mcast2, <r7=>0x0}, &(0x7f0000000240)=0x14)
accept4(r4, &(0x7f0000000280)=@ll={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x80, 0x800)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000cc0)={<r9=>0x0, @rand_addr, @broadcast}, &(0x7f0000000d00)=0xc)
getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000d40)={@dev, <r10=>0x0}, &(0x7f0000000d80)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001140)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000001240)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000001280)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000012c0)=0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001300)={@loopback, @loopback, <r13=>0x0}, &(0x7f0000000400)=0xffffffffffffff1a)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004dc0)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000004f00)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004f40)=0x14)
accept$packet(0xffffffffffffffff, &(0x7f00000062c0)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006300)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006340)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000006440)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000006480)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000006580)=0xe8)
getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000065c0)={@ipv4={[], [], @local}, <r19=>0x0}, &(0x7f0000006600)=0x14)
accept4$packet(0xffffffffffffffff, &(0x7f0000006800)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000006840)=0x14, 0x80800)
getpeername$packet(0xffffffffffffffff, &(0x7f0000006880)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000068c0)=0x14)
accept$packet(r4, &(0x7f0000006900)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006940)=0x14)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000006980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r23=>0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000006a80)=0xe8)
getsockname$packet(0xffffffffffffffff, &(0x7f0000006ac0)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006b00)=0x14)
getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000006b40)={@multicast2, @empty, <r25=>0x0}, &(0x7f0000006b80)=0xc)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000006c00)={<r26=>0x0, @multicast2, @local}, &(0x7f0000006c40)=0xc)
getpeername(r4, &(0x7f0000006c80)=@xdp={0x2c, 0x0, <r27=>0x0}, &(0x7f0000006d40)=0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000007300)={0x11, 0x0, <r28=>0x0}, &(0x7f0000007340)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000007440)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000007540)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000007580)={0x11, 0x0, <r30=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000075c0)=0x14)
accept$packet(0xffffffffffffffff, &(0x7f00000076c0)={0x11, 0x0, <r31=>0x0}, &(0x7f0000007700)=0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000007fc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000007f80)={&(0x7f0000007740)={0x800, r6, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x1f4, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xa71f6e}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x1f8, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffe00}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x48}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r18}, {0x170, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x51}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r23}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r24}, {0xec, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x100, 0x3f6, 0x6, 0xc}, {0xd06, 0x7, 0x2, 0x800}, {0x0, 0x10000, 0x8, 0xffffffff}, {0x8, 0xffffffff, 0x7bf, 0x6}, {0x7, 0x1fb, 0xffffffffffffff96, 0x5}, {0x34, 0xfffffffffffffc01, 0x0, 0x7}, {0x7, 0x7fffffff, 0x3ff, 0x8}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r26}}}]}}, {{0x8, 0x1, r27}, {0x138, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r28}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r29}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffff80}}, {0x8, 0x6, r31}}}]}}]}, 0x800}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in=@remote, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r32=>0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, <r33=>0x0}, &(0x7f00000002c0)=0x14)
r34 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r34, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r35 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r34, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r34, 0x0, 0x2)
sendfile(r34, r35, 0x0, 0x40d09)
r36 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r34, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r37=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r36, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r37}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000380)={@remote, @rand_addr, <r38=>0x0}, &(0x7f00000003c0)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x66, &(0x7f00000004c0)={@broadcast, @multicast1, <r39=>0x0}, &(0x7f0000000500)=0xc)
r40 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r40, &(0x7f0000000100), 0x18d, 0x6c00)
getsockopt$inet6_IPV6_XFRM_POLICY(r40, 0x29, 0x23, &(0x7f0000000600)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r41=>0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000700)=0xe8)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, <r42=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x14)
r43 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r43, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r44 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r43, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r43, 0x0, 0x2)
sendfile(r43, r44, 0x0, 0x40d09)
r45 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r43, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r46=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r45, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r46}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
r47 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup(r47, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
r48 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$TCSETSF(r47, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x9, 0x80000000, 0x4, 0x6})
lseek(r47, 0x0, 0x2)
sendfile(r47, r48, 0x0, 0x40d09)
r49 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r47, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r50=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r49, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@remote, 0x0, 0x7ff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0xff, r50}, {0x1, 0x40, 0xfffffffffffffffa, 0x1ff, 0x8, 0x800, 0xea, 0x447}, {0x3ff, 0x4, 0x2, 0x1ff}, 0xffffffffffffffe0, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0xe8)
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f0000000a80)={&(0x7f00000007c0)={0x290, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r32}, {0x1b4, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r33}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r37}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x8, 0x3, 0x80000001, 0x3}, {0x8, 0x8, 0x1ff, 0x100}, {0x7ff, 0x0, 0x1, 0x400}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r38}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r39}}}]}}, {{0x8, 0x1, r41}, {0xb8, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r42}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r46}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r50}}}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x40}, 0x8000001)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0})

01:03:06 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x800, 0x0)
ioctl$TIOCSCTTY(r1, 0x540e, 0x4)

01:03:06 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, &(0x7f00000000c0)=0x80)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40841)

[ 2651.743051] ------------[ cut here ]------------
[ 2651.747956] kernel BUG at drivers/android/binder_alloc.c:1108!
[ 2651.753927] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 2651.759301] Modules linked in:
[ 2651.762627] CPU: 1 PID: 18196 Comm: syz-executor.0 Not tainted 4.9.190+ #0
[ 2651.769762] task: 00000000cac3900b task.stack: 00000000c910a8a6
[ 2651.775906] RIP: 0010:[<ffffffff82239fbb>]  [<00000000c93436ac>] binder_alloc_do_buffer_copy+0xcb/0x500
[ 2651.785944] RSP: 0018:ffff8801c7bff4a8  EFLAGS: 00010212
[ 2651.791389] RAX: 0000000000040000 RBX: 0000000020001000 RCX: ffffc9000e57d000
[ 2651.798819] RDX: 000000000000060c RSI: ffffffff82239fbb RDI: ffff8801cb8a8a58
[ 2651.806097] RBP: ffff8801c7bff528 R08: ffff8801c7bff5a8 R09: 0000000000000008
[ 2651.813352] R10: ffffed0038f7ff11 R11: ffff8801c7bff88f R12: 0000000000000060
[ 2651.820611] R13: 0000000000000070 R14: 0000000000000008 R15: ffff8801c7bff5a8
[ 2651.827861] FS:  00007f46a9c3c700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
[ 2651.836067] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2651.841928] CR2: 00000000022e6978 CR3: 00000001cbdc9000 CR4: 00000000001606b0
[ 2651.849628] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2651.856877] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2651.864133] Stack:
[ 2651.866264]  ffff8801c7bff560 0000000000000246 ffff8801a3f40000 ffff8801c7bff4d0
[ 2651.874291]  ffff8801abb60030 ffff8801cb8a8e58 00ff8801c7bff870 ffff8801cb8a8e00
[ 2651.882310]  ffffffff814fd926 ffff8801c9375400 0000000000000070 ffff8801c7bff5a8
[ 2651.890518] Call Trace:
[ 2651.893094]  [<000000000ea53bb8>] ? memcpy+0x46/0x50
[ 2651.898178]  [<00000000e076265e>] binder_alloc_copy_from_buffer+0x37/0x42
[ 2651.905115]  [<0000000096e0e47d>] binder_validate_ptr+0xc5/0x1b0
[ 2651.911242]  [<0000000036f013a4>] ? binder_get_object+0x1b0/0x1b0
[ 2651.917453]  [<00000000e076265e>] ? binder_alloc_copy_from_buffer+0x37/0x42
[ 2651.924529]  [<0000000093c5b487>] ? binder_get_object+0x12f/0x1b0
[ 2651.930752]  [<000000006d07c341>] binder_transaction+0x20a4/0x5890
[ 2651.937048]  [<0000000059bc7686>] ? binder_inc_ref_for_node+0xba0/0xba0
[ 2651.943794]  [<0000000075cb2d15>] ? __save_stack_trace+0x7a/0xf0
[ 2651.949926]  [<000000007fcb2c82>] ? depot_save_stack+0x13c/0x4a0
[ 2651.956063]  [<00000000bbdaf94d>] ? debug_lockdep_rcu_enabled+0x71/0xa0
[ 2651.962978]  [<00000000be6e996a>] ? __might_fault+0x114/0x1d0
[ 2651.968842]  [<00000000eb24b858>] binder_thread_write+0x583/0x20e0
[ 2651.975143]  [<00000000717a3420>] ? trace_hardirqs_on+0x10/0x10
[ 2651.981182]  [<0000000078d48d8f>] ? mark_wake_futex+0x120/0x120
[ 2651.987234]  [<000000006f44a9e4>] ? _raw_spin_unlock_irqrestore+0x45/0x70
[ 2651.994140]  [<00000000cfb800d6>] ? binder_transaction+0x5890/0x5890
[ 2652.000614]  [<00000000be6e996a>] ? __might_fault+0x114/0x1d0
[ 2652.006478]  [<0000000007981b94>] binder_ioctl+0xecd/0x1720
[ 2652.012166]  [<000000009e846f9e>] ? validate_mm+0x2fe/0x5a0
[ 2652.017859]  [<000000005c5c7097>] ? binder_poll+0x240/0x240
[ 2652.023549]  [<00000000be68ad5a>] ? __lock_acquire+0x5e0/0x4390
[ 2652.030456]  [<00000000c60c8a98>] ? __might_sleep+0x95/0x1a0
[ 2652.036242]  [<000000005c5c7097>] ? binder_poll+0x240/0x240
[ 2652.041936]  [<000000001ba01520>] do_vfs_ioctl+0xb87/0x11d0
[ 2652.047630]  [<00000000e38dece4>] ? selinux_file_ioctl+0x103/0x550
[ 2652.053942]  [<000000001a27c14b>] ? ioctl_preallocate+0x210/0x210
[ 2652.060158]  [<0000000025a15b88>] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0
[ 2652.067598]  [<000000003def15b3>] ? __fget+0x208/0x370
[ 2652.072854]  [<0000000035ced726>] ? __fget+0x22f/0x370
[ 2652.078111]  [<00000000f56faec1>] ? __fget+0x47/0x370
[ 2652.083280]  [<000000009894ec1a>] ? security_file_ioctl+0x8f/0xc0
[ 2652.089662]  [<00000000886a12b5>] SyS_ioctl+0x8f/0xc0
[ 2652.094831]  [<0000000031081cc1>] ? do_vfs_ioctl+0x11d0/0x11d0
[ 2652.100779]  [<000000001b5bc919>] do_syscall_64+0x1ad/0x5c0
[ 2652.106470]  [<000000008e68643a>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[ 2652.113381] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0a 04 00 00 4d 8b 64 24 58 49 29 dc e8 bf 83 0e ff 4d 39 e6 76 07 e8 b5 83 0e ff <0f> 0b e8 ae 83 0e ff 4c 8b 6d d0 4d 29 f4 4d 39 e5 77 e8 e8 9d 
01:03:06 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469360c00020008000280ffff0002"], 0x38}}, 0x0)
io_setup(0x4, &(0x7f00000000c0)=<r1=>0x0)
io_destroy(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x1)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040))

[ 2652.142121] RIP  [<00000000c93436ac>] binder_alloc_do_buffer_copy+0xcb/0x500
[ 2652.149424]  RSP <ffff8801c7bff4a8>
[ 2652.174923] ---[ end trace 803238a2c5a13aa1 ]---
[ 2652.180010] Kernel panic - not syncing: Fatal exception
[ 2652.186161] Kernel Offset: disabled
[ 2652.189781] Rebooting in 86400 seconds..