0x16}, @mcast1, @mcast1, @remote, @mcast1, @ipv4={[], [], @broadcast}, @local], 0x5}}, @common=@inet=@tcp={0x30, 'tcp\x00', 0x0, {0x4e21, 0x4e23, 0x4e22, 0x4e23, 0x0, 0x10, 0x3, 0x7}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1b, @ipv6=@dev={0xfe, 0x80, [], 0x2a}, @ipv6=@loopback, @port=0x4e22, @gre_key=0x3}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x9, 0x8001, 0x3, 0x28, 0x3}}, @common=@eui64={0x28, 'eui64\x00'}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr="b9139f9a77ea0d37bac3d2991f3298d6", @port=0x4e20, @port=0x4e22}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x780) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000880)={'syz_tun\x00', 0x40}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x6, 0x20002) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed640adfa90100b70006000000cc08000f00fed70000", 0x24) 20:14:39 executing program 2: io_setup(0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x7, 0x4) r0 = gettid() r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f00000000c0)=""/4096, &(0x7f0000000040)=0x1000) ptrace(0x421f, r0) clone(0x40002000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) mremap(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000bdb000/0x2000)=nil) 20:14:40 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:14:40 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:14:40 executing program 1: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffff9c, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x22002) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000440)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000540)=0xe8) r5 = getegid() stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000800)=0xc) getgroups(0x1, &(0x7f0000000000)=[r5]) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/null\x00', 0x40, 0x0) sendmsg$nl_netfilter(r10, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x88000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x8c, 0x7, 0x4, 0x2, 0x70bd2d, 0x25dfdbfe, {0xf, 0x0, 0x9}, [@generic="a10d87065440371416de94d4cb0c04479489d67092aaeb8acb28ddef2fdd64be5d45af3cbc8bc043f6dabcad26ab307a261ad5d5c0c0dad369a1785a799d88f42b8ace1aaa694daca4336c8c1f5ccd5727bd31a6486f971818e93a8ddff7a2e87c4e3d070563e2a3e26750eec0810ee94d0a72c64ade54"]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) fstat(0xffffffffffffff9c, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = dup2(r1, r1) ioctl$IOC_PR_RESERVE(r12, 0x401070c9, &(0x7f0000000ac0)={0x4, 0x1000, 0x1}) getresgid(&(0x7f00000008c0)=0x0, &(0x7f0000000900), &(0x7f0000000940)) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000a40)={{}, {}, [{0x2, 0x4, r2}, {0x2, 0x2, r3}, {0x2, 0x1, r4}], {0x4, 0x5}, [{0x8, 0x0, r5}, {0x8, 0x7, r6}, {0x8, 0x6, r7}, {0x8, 0x3, r8}, {0x8, 0x5, r9}, {0x8, 0x4, r11}, {0x8, 0x4, r13}, {0x8, 0x7, r14}], {0x10, 0x4}}, 0x7c, 0x1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r0, 0x5, 0x18}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60d8652b00140600fe8000000000000000000d00000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000000000dc28000000"], 0x0) r15 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r15, 0x0, 0x81, &(0x7f0000000dc0)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000f9c61efccb93a6fcf9df6275d35687411bdc314f3c995690c0a889c0c5ee2c3c", @ANYPTR=&(0x7f0000000cc0)=ANY=[@ANYBLOB="00000000000000000000000000000000d6710087af16fc9641b240045b4f958f2e4b14b44040e8de849d9f060ef304cd4170c27f1e83ac76ea4e17e0893d6dbda125b02e3de2af7107efb605da95d9abe746561ac5b40b0ddc261f3bd30c23b69d8e2c9a97bb1332880945f6e0f6da49601a49818a1c25fbbf1f48abca3b0c40af72e79054342e8ccbfa427410e693d4ad4212a87be785e709f65af631d78e7846ff6290e744977e3d8831723a00b6f147686b1c2ead820e0dc4a74b17f8202ed083"], @ANYBLOB='\x00'/136], 0xf8) [ 684.497073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=25759 comm=syz-executor.4 20:15:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") unshare(0x400) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) 20:15:39 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x6) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x300) readlinkat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=""/16, 0x10) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000240)) write$P9_RREAD(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xba) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f00000002c0)) write$selinux_context(r1, &(0x7f00000001c0)='system_u:object_r:inetd_child_exec_t:s0\x00', 0x28) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x1, 0x100) 20:15:39 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:15:39 executing program 2: syslog(0x4, 0xfffffffffffffffe, 0x248) 20:15:39 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:15:39 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bdfd928ef702", 0xb3}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:15:39 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:15:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) 20:15:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(r0, &(0x7f0000000480)={{}, "", [[], []]}, 0x220) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") write$binfmt_elf64(r0, &(0x7f0000002200)=ANY=[@ANYBLOB="7f454c4600250000050000000000000003003e00060000002c010000000000004000000000000000e1000000000000000500000087001461f33800ff0002000700ea000200007001000000eb0a000000000000f7ffffffffffffff00000000ff"], 0x60) [ 743.736803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=25800 comm=syz-executor.4 20:15:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:15:39 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:15:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 743.866213] binder: undelivered TRANSACTION_COMPLETE [ 743.874839] binder: undelivered transaction 21, process died. [ 743.883086] binder: undelivered TRANSACTION_COMPLETE [ 743.896869] binder: undelivered transaction 23, process died. [ 743.938199] binder: undelivered TRANSACTION_COMPLETE [ 743.954522] binder: undelivered transaction 25, process died. 20:15:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x20000000000002, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xfefff034}, {0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002f, 0x0) 20:15:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:15:43 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:15:43 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, 0x0}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:15:43 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:15:43 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f00000001c0)={0x1c, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendto$unix(r0, &(0x7f0000000340)='=', 0x1, 0x0, 0x0, 0x0) [ 747.568791] binder: undelivered TRANSACTION_COMPLETE 20:15:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 747.612322] binder: undelivered transaction 27, process died. 20:15:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008915, &(0x7f0000000080)="c0dca5055e0bcfec7be070") mount(0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) 20:15:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 747.667434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=25994 comm=syz-executor.4 [ 747.674300] binder: undelivered TRANSACTION_COMPLETE [ 747.706503] binder: undelivered transaction 29, process died. 20:15:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:15:43 executing program 2: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x1a, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x80) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="212e9ae95a3156ef636e7d88b0e1c84515ab653a35b0a4a7f84bc2c8e0cb1f11891e"], 0x22) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f00000001c0)=""/18, &(0x7f0000000200)=0x12) fallocate(r2, 0x0, 0x40000000, 0x10000101) [ 747.732277] binder: 25999:26001 transaction failed 29189/-22, size 0-0 line 3118 [ 747.741303] binder: undelivered TRANSACTION_ERROR: 29189 20:15:43 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:15:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x20000000000002, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xfefff034}, {0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002f, 0x0) 20:15:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 747.799571] binder: 26007:26010 transaction failed 29189/-22, size 0-0 line 3118 [ 747.811401] binder: undelivered TRANSACTION_ERROR: 29189 20:15:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 747.875401] binder: 26018:26021 transaction failed 29189/-22, size 0-0 line 3118 [ 747.908305] binder: undelivered TRANSACTION_ERROR: 29189 [ 747.950090] binder_alloc: 26025: binder_alloc_buf, no vma [ 747.963383] binder: 26025:26027 transaction failed 29189/-3, size 0-0 line 3264 [ 747.980992] binder: undelivered TRANSACTION_ERROR: 29189 20:15:43 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, 0x0}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) [ 748.249065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26033 comm=syz-executor.4 20:15:46 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:15:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:15:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x20000000000002, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xfefff034}, {0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002f, 0x0) 20:15:46 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:15:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x20000000000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) fcntl$setstatus(r1, 0x4, 0x42803) 20:15:46 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, 0x0}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:15:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 750.579070] binder_alloc: 26035: binder_alloc_buf, no vma [ 750.595256] binder: 26035:26038 transaction failed 29189/-3, size 0-0 line 3264 [ 750.611705] binder: undelivered TRANSACTION_ERROR: 29189 [ 750.662683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26052 comm=syz-executor.4 [ 750.679571] binder_alloc: 26053: binder_alloc_buf, no vma [ 750.698209] binder: 26053:26054 transaction failed 29189/-3, size 0-0 line 3264 20:15:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 750.711554] binder: undelivered TRANSACTION_ERROR: 29189 20:15:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x0, 0x100132, 0xffffffffffffffff, 0x0) getpgid(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000100)='\x8fom_scor|_adj\x00') 20:15:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:15:46 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x3000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a80000006550e23a8c36efac737d5cdca2f736836b5a08cfb917625e25d5c14833a5d2e60e9c27982e28210c5bbc97f939099fceceabd16e86828b9921f378c84f1fc151780c231271a2f56d27ac329ae9bf5ca8", @ANYRES16=r1, @ANYBLOB="240228bd7000fedbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40800) fsetxattr$security_smack_transmute(r0, &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x1) write$cgroup_int(r0, &(0x7f0000000140), 0xffffff35) [ 750.767110] binder: 26057:26058 transaction failed 29189/-22, size 0-0 line 3118 [ 750.778631] binder: undelivered TRANSACTION_ERROR: 29189 20:15:46 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 750.823742] binder: 26063:26064 transaction failed 29189/-22, size 0-0 line 3118 [ 750.841859] binder: undelivered TRANSACTION_ERROR: 29189 20:15:49 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:15:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:15:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x1c0c) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="001f9c76571a110a0900000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000002b000000000000000000000000000000000800000000000000000000000000000000000200b60000000000000000000000000000000000000095010000"], 0x1) ptrace(0x10, r3) fcntl$setstatus(r2, 0x4, 0x26fc) 20:15:49 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:15:49 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:15:49 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x3000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a80000006550e23a8c36efac737d5cdca2f736836b5a08cfb917625e25d5c14833a5d2e60e9c27982e28210c5bbc97f939099fceceabd16e86828b9921f378c84f1fc151780c231271a2f56d27ac329ae9bf5ca8", @ANYRES16=r1, @ANYBLOB="240228bd7000fedbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40800) fsetxattr$security_smack_transmute(r0, &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x1) write$cgroup_int(r0, &(0x7f0000000140), 0xffffff35) 20:15:49 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 753.596668] binder: 26080:26084 transaction failed 29189/-22, size 0-0 line 3118 [ 753.616562] binder: undelivered TRANSACTION_ERROR: 29189 20:15:49 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 753.684771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26099 comm=syz-executor.4 20:15:49 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:15:49 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:15:49 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:15:49 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:15:52 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0xffff, 0x0) 20:15:52 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:15:52 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:15:52 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:15:52 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:15:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x10008, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6f63f4f4c57891a02f1e2c00"]) 20:15:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 756.624950] FAT-fs (loop2): Unrecognized mount option "nocôôÅx‘ /" or missing value [ 756.685573] binder_alloc: 26145: binder_alloc_buf, no vma [ 756.691502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26148 comm=syz-executor.4 [ 756.704514] FAT-fs (loop2): Unrecognized mount option "nocôôÅx‘ /" or missing value [ 756.720836] binder: 26145:26146 transaction failed 29189/-3, size 0-0 line 3264 20:15:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:15:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) r2 = dup(r0) write$eventfd(r2, &(0x7f0000000000)=0xe44c, 0x8) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8}]}]}, 0x33fe0}}, 0x0) [ 756.735184] binder: undelivered TRANSACTION_ERROR: 29189 20:15:52 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:15:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:15:52 executing program 2: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="ed", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xa0000000}) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7}, 0x7) [ 756.776365] binder_alloc: 26152: binder_alloc_buf, no vma [ 756.787454] binder: 26152:26154 transaction failed 29189/-3, size 0-0 line 3264 [ 756.804665] binder: undelivered TRANSACTION_ERROR: 29189 [ 756.861396] binder_alloc: 26161: binder_alloc_buf, no vma [ 756.867498] binder: 26161:26166 transaction failed 29189/-3, size 0-0 line 3264 [ 756.877134] binder: undelivered TRANSACTION_ERROR: 29189 20:15:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x1ff, 0x5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x2ba) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000280)={0x2}, 0x4) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x5, &(0x7f0000000400)=[{&(0x7f0000000080)="37ad44d2a703aa907e7a55677384a71003a8d91e1c9e74ede1137b803042", 0x1e, 0x9}, {&(0x7f0000000100)="fe4281e191ac3afa46e2eb0401364d9fae1a82a3cdafa7c89963bcbc5112b28e50eea74a9798de308094c5bac051859c3d0421e77867d9cb23a463cb6c639d1768ab3a9c6cd0ed4b9d9d423d67d2f7dd0e4647d26aa62b9429fe5300bd907cc525b7b12d152df53c3d44936357bd00649045fcd18099edbc5a8c80855a6505fb35c5fe9ef36935bd0f270a1b5ae907d1b4c8d01d507e460c012106173072793a8d4983af53c241db193e3fc8f50b90504b1f6b4c5790d2f5e09bb142d0ff9b30d8a2d404c1f373277246fa2dcd97a08df5274e59e171e1094c513f77a625", 0xde, 0x8}, {&(0x7f00000002c0)="94f3ed69e6e86c8c92941aca4bd64870355918752bf5b6baba3861caad97fc6e1e271b68956988818ce331216a81fbaa7b891573fd41a96f2622fbf30d106377c222eb36bdc2bfe9f7fc11b9531bc8323d8a8e919df46ff4183cdb7e02e7979afcf282e0bf8948c2249f90cb1563863822c86d57bf51aae97c630ec3c6340a70fd43a410ec484b9b038337360329558ed55fea8853cced44595042de8db5d68657a8c673fec4e749e104e5934ff04c03434c6f4a4517b68fd745e374abff5388", 0xc0, 0x100}, {&(0x7f0000000200)="34c26e321c6a", 0x6, 0x9}, {&(0x7f0000000380)="4c24b2a2898a54bf391b0262407b62274a63c4786480f763267cce168698143b67547aca3b77b484f7348117a33a6da9f62c9f3127304f049621201e0ea27aa38d51437df79e69c15bb6db8cdc1a7a1efa281b83e3868d20d97c75ffc3a108", 0x5f, 0x7}], 0x40010, &(0x7f0000000480)={[{@journal_checksum='journal_checksum'}, {@norecovery='norecovery'}, {@noblock_validity='noblock_validity'}, {@nolazytime='nolazytime'}, {@noacl='noacl'}], [{@obj_role={'obj_role', 0x3d, '%!trusted'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x451a}}, {@permit_directio='permit_directio'}]}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000600)={0x6, {{0x2, 0x4e23, @local}}}, 0x88) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 20:15:55 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:15:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:15:55 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:15:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x20000000000002, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0xb1}, {0x80000006}]}, 0x10) 20:15:55 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:15:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 759.648045] binder_alloc: 26175: binder_alloc_buf, no vma [ 759.654980] binder: 26175:26182 transaction failed 29189/-3, size 0-0 line 3264 [ 759.666853] binder: undelivered TRANSACTION_ERROR: 29189 [ 759.705793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26188 comm=syz-executor.4 [ 759.738850] binder_alloc: 26189: binder_alloc_buf, no vma 20:15:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x20000000000002, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0xb1}, {0x80000006}]}, 0x10) 20:15:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 759.747625] binder: 26189:26191 transaction failed 29189/-3, size 0-0 line 3264 [ 759.769005] binder: undelivered TRANSACTION_ERROR: 29189 20:15:55 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:15:55 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) recvmmsg(0xffffffffffffff9c, &(0x7f0000003600)=[{{&(0x7f0000000a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl(r0, 0x0, 0x0) 20:15:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 759.809959] binder_alloc: 26197: binder_alloc_buf, no vma [ 759.822967] binder: 26197:26199 transaction failed 29189/-3, size 0-0 line 3264 [ 759.838159] binder: undelivered TRANSACTION_ERROR: 29189 [ 759.902846] binder: 26206:26209 transaction failed 29189/-22, size 0-0 line 3118 [ 759.926054] binder: undelivered TRANSACTION_ERROR: 29189 20:15:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") quotactl(0x0, 0x0, 0x0, 0x0) 20:15:58 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:15:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:15:58 executing program 5: gettid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() pipe2(0x0, 0x0) sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffffff) 20:15:58 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:15:58 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{0x0}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:15:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000000)={0x0, 0x2, [0x0, 0x1000000]}) 20:15:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:15:58 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) [ 762.644874] binder: 26221:26223 transaction failed 29189/-22, size 0-0 line 3118 [ 762.656751] binder: undelivered TRANSACTION_ERROR: 29189 20:15:58 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:15:58 executing program 2: r0 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0xf, 0x0, &(0x7f0000000040)) ioctl$TIOCGSID(r0, 0x5429, 0x0) 20:15:58 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 762.738162] binder: 26239:26242 transaction failed 29189/-22, size 0-0 line 3118 [ 762.750837] binder: undelivered TRANSACTION_ERROR: 29189 [ 762.765676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26245 comm=syz-executor.4 20:15:58 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:15:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000740)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000009b4b627}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) 20:15:58 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:15:59 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000080)={0x1}, 0x8) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000580)=0x3, 0x4) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000340)="deaa1c1c", 0x4}], 0x1}}], 0x1, 0x24000004) 20:15:59 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:15:59 executing program 2: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000002440)='./file0\x00', 0x0) write(r1, &(0x7f0000000280)="f5622e187a3ebbbac4f84fd4aae2c271a3a2464e70fd02b5bd46e61c680914286fac52340ad0c961bf207f5fffc288651d8ed39518fc73ee3a6cce1efece1646b0c04aaee9aa188bde0982391419b5277a62f51352bc34849d380b8cc7ee8865d3c6338797429fe2f33c3fcf3f1d67ddd87d5a4fb02cebbaa4f3893efaf395c31ed7a7109999a46b51ed2e512e205c0af63cf2fa75b814b074042432fc402b78969dbf3630f294826064024612147520face38f631db10b2b22f10f5391c0612ac4fa905e729d3531edc473c73faf25a4f77701461ea77a0f30ac7fd1da7292688f3764cae2946270576d94998e849313ff1ea5b01fe7fe8dbc0dc3620d687074e4e0b91ea46e867b52a78a646bbd2ac3607ba1445f18f19f1f1267f573a5573968e15750a482961b4a7867cd5bbffaba7205554b7e7928050c0414ff4b292a698189567e0c3363c72afaee188b72b7e8c97f9da62dba57ec7e2e3140ee31fe014d18b867d50dedf71e7dfd5eb128e1d4aff5a90c0b198c0a871e8a851383a4574b7784d23c03d12350e895d91faef193c3a344baf4efcd71cd761b278b4a6a7028faa1838cc664e7bf3dfe6550dcda138fec09a82145864dbaadc51d6ac14bed3bf631ad70a3a1d163b1966859f93fb2e8d170034eae7563ba6e28a2630f31a11c55c6d703dee35b9c8307280b66706cdecb9ad0ca5e537d61ca32b145a62a6f8825035153cfad2fa5967202920b95566f6c6297735deb343d7d1ec795eaf9903172798997a6921edcc0124afd63cb6b8294fac663fac9a3944cd528cac82e4df6648e16e9a3456a2f76a5015ad06d10e1e22fc591eada4b55d0a1608fc6721e0baaf73191d956a7617b68df7d055c2825b1ffb837f059c25580448dfff3bfec99d3464608a1258e027d0e76ad99e58d3484c904996af777f042d882ba841a0da87e91ef5c8d9dbe19e1176cc2edb2009f7a2fcd46d5003868680a7d5dd73a1676b8658dc22f64ca11b791c6f3d8aed3b2d0e1446c2c5de11a07a14591a63b1d2d59db19ad856384369f810ab833be95604bfd12685ee6339defa2cb2ac2efea48c23e99fa028469bd862b640897b5d743178821025efac010a4ea03c2f3265a40ffcae524b88fc8f8a1444e76cb9ff11732b8982101b5c2bb5ca1fccd8fcc5a92e76fdd5ac66b210128d663bd6dec2d5c9c24adfee8310167f2d8b269cb4541f19af0c43428563cf2d0351d2daa99d289acff564a837875b9d970ec84c44eb5198d12a44ade1ba43acd4d904deabe21f1ff2eb4cf20a63182177c49afc7f367169af2c5480d321272de6b53f5726cd37d3614bfa9b46a1bdc4b31f59eb0ef0f2957e204cb24cc2eb665c6bb964fbbea1c2fc460975e29fbd8ac3ca55a983fea4b47b32d484d5fbed9afd0c0f4933a0ec07214dff96af7310a51b71c5512a3d78001cf89d8dd3695719c5503a804d66fc6426a5fef80503f0782a386255474e1cd84b4f8d4b4205e81b70d43fd02a61f2bc10309939a2c3a371143a75da86cac56de19cc67146d4255c284ad533dfc9b262db82a2bbe43cceb33ea1c09d7dd64426ffd786dac07d6a7d9f57abdff21a4be642274121f5c93ba11a7daf8173acb45033686fceca25545dc247e40502fc15a044376af0471afe11ff618686c38a49670160868148ad5a82728c71a1ce8d549365084b0125887e3244eeb2a6780788e7", 0x4c2) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xfb3f) fallocate(r1, 0x3, 0x0, 0x8000) fsync(r1) 20:15:59 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:15:59 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{0x0}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:15:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") setresgid(0x0, 0xee00, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) setregid(r1, 0x0) [ 763.557689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26287 comm=syz-executor.4 20:16:01 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:16:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 20:16:01 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) 20:16:01 executing program 2: socket$nl_route(0x10, 0x3, 0x0) chroot(0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@remote, 0x6f}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) 20:16:01 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:16:01 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{0x0}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:16:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 765.742452] binder: 26292:26295 ioctl c0306201 0 returned -14 [ 765.816806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26309 comm=syz-executor.4 [ 765.834571] binder: 26307:26308 ioctl c0306201 0 returned -14 20:16:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 20:16:01 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:16:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:16:01 executing program 5: r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x6, 0x0, &(0x7f0000001280)) [ 765.929231] binder: 26311:26312 ioctl c0306201 0 returned -14 20:16:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5441, 0x0) 20:16:04 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:16:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:16:04 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000019490085000000170000009500000000000000"], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="c5338269c02af61294065669140d", 0x0}, 0x28) 20:16:04 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:16:04 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:16:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100)={0x77359400}, 0x10) 20:16:04 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$netlink(r0, 0x0, 0x0) 20:16:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x42000) 20:16:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 768.832221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26350 comm=syz-executor.4 20:16:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) 20:16:04 executing program 5: r0 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000080)=""/4096, &(0x7f0000000040)=0x11ba) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x2000003, 0x32, 0xffffffffffffffff, 0x0) 20:16:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) 20:16:07 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:16:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) 20:16:07 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:16:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x81a4, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) recvmmsg(r1, &(0x7f0000000300), 0x121, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000001b9, 0x0) listen(0xffffffffffffffff, 0x0) 20:16:07 executing program 2: ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0x4004556a, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) sendfile(r1, r1, &(0x7f0000d83ff8), 0x2008000fffffffe) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'osx.', 'vmnet0\xa1em1\x00'}, &(0x7f00000002c0)=""/147, 0x93) 20:16:07 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:16:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:16:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 771.839387] binder: release 26388:26390 transaction 70 out, still active [ 771.849896] binder: undelivered TRANSACTION_COMPLETE [ 771.865139] binder: send failed reply for transaction 70, target dead [ 771.865870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26391 comm=syz-executor.4 20:16:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 771.886191] binder: release 26392:26393 transaction 72 out, still active [ 771.896419] binder: undelivered TRANSACTION_COMPLETE [ 771.917901] binder: send failed reply for transaction 72, target dead 20:16:07 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:16:07 executing program 1: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) recvmmsg(r1, &(0x7f0000000300), 0x121, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003d40)={0x0, 0x1c9c380}) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000001b9, 0x0) [ 771.944259] binder: release 26396:26397 transaction 74 out, still active [ 771.959990] binder: undelivered TRANSACTION_COMPLETE [ 771.974532] binder: send failed reply for transaction 74, target dead 20:16:07 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x0, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:16:10 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x0, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:16:10 executing program 5: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:16:10 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 20:16:10 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:16:10 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:16:10 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:16:10 executing program 2: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) [ 774.898667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26434 comm=syz-executor.4 [ 774.931384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26435 comm=syz-executor.2 20:16:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1163084000000000000000000000000000000000000000000100"/76], 0x0, 0x0, 0x0}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x3) [ 774.946344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26436 comm=syz-executor.5 20:16:10 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x0, {{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:16:10 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cgroup.controllers\x00', 0x0, 0x0) getsockopt(r1, 0x80000001, 0x1ff, &(0x7f0000001440)=""/125, &(0x7f00000014c0)=0x7d) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xffffffffe, 0x20211, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484108000000000000000000b249a145e3086bee258fc70000000000000000000001000000000000de001700000000000000000000000000000000000000000000000000000000000000000000000000000000e3ff4d50e73d425058e3d4ef7c1cfabf1f3ac2b0ed1d8a294cf4b2f312be85a1bb9fdcca54162841cee1979715837703eaec2cae284790abe5d16a7ebe344a5418dba6b0cf022a50ecafffde866670202ab806"], 0x0, 0x0, 0x0}) [ 774.997994] binder: 26440:26441 unknown command 1074291473 [ 775.005017] binder: 26440:26441 ioctl c0306201 20000280 returned -22 [ 775.015442] binder: 26440:26442 unknown command 1074291473 [ 775.025139] binder: 26440:26442 ioctl c0306201 20000280 returned -22 20:16:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x40c00) accept(0xffffffffffffff9c, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x800, 0x0) write$P9_RRENAME(r2, &(0x7f0000000180)={0x7, 0x15, 0x2}, 0x7) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) lseek(r2, 0x0, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0xb9de4c6a0997470b) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 775.073021] binder: 26447:26448 unknown command 1095262993 [ 775.079044] binder: 26447:26448 ioctl c0306201 20000280 returned -22 20:16:10 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x0, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:16:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r2 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80000) shutdown(r2, 0x0) [ 775.128686] binder: undelivered TRANSACTION_COMPLETE [ 775.134945] binder: undelivered transaction 79, process died. [ 775.164795] binder: undelivered transaction 81, process died. [ 775.180259] binder: undelivered TRANSACTION_COMPLETE [ 775.196443] binder: undelivered TRANSACTION_COMPLETE [ 775.204914] binder: undelivered transaction 83, process died. [ 775.221827] binder: undelivered TRANSACTION_COMPLETE [ 775.234410] binder: undelivered transaction 85, process died. 20:16:13 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:16:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8200, 0x10) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000002c0)="063c8dc7665a36c04a12294d1d3971f5123ad9ce8fc04638b677e7d3a0bb9c04e8e2d2f9a8b37131f9cb9372bd07945b8318c15f917105cea3f6a1c8beeba21c8653aa525e7dbd3bc8340bf788d4959af046de1be3aba27ea816e97357f4a5e2fd4bfa01bac32647e913bb68d9cb822b98bbce3953275285ee682c8172f47860b8b44517e27dc284c7f10040bf7d0f317af339a865c61aceac050445a5254654e4a1164bb6686eeb11bf6c2c96a32f4744ea5f27bfdf4b1b7afc37f9a2a1a9f4c53a66219a0e06399566", 0xca) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa200, 0x10) openat$cgroup_ro(r3, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:16:13 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x0, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:16:13 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a8", 0x5a}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:16:13 executing program 2: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:16:13 executing program 5: setresuid(0x0, 0xfffe, 0x0) r0 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000140)="596c50b6094c9314eb68e6e78cac4ab73a748823240892ef355785e1dfe2b8050468fec5e7361c0446303df01b40581705df60ee13ac59953adac8160c2f01b77691645d55d1cd9316418d21268a6b1bb3bcacda315e", 0x56, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r1, 0x8e, 0xe9}, &(0x7f00000001c0)={'enc=', 'oaep', ' hash=', {'sha3-224\x00'}}, &(0x7f0000000240)="92c7bfdf4082d2418fdb27e418d3b63a9f7ab0fc28e39b41607321c18e81eca49f0b12583aeeec41742d72e0d9a013417fa51895e0d472b51a3e8107ce5d5bcc3011c3fd3d977e919ceeae5a66a858f4d67614edb05c98fef5fad176feef9c9f850aac93d8dc78ee1b33e9c1c20817db3fef06e9d2e56fc00a5c2d8725fa218cce2c157dd99e91459d52d4869b69", &(0x7f0000000300)=""/233) r2 = geteuid() setresuid(0x0, r2, r2) clone(0x8000000000041fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000540)='./file0\x00', 0x2000, 0x1) r3 = getpid() r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x0, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r4, &(0x7f0000000440)='./file0\x00', r2, r5, 0xd00) rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) setreuid(r2, 0x0) prlimit64(r3, 0x0, 0x0, 0x0) 20:16:13 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x10) ioctl$TIOCSCTTY(r0, 0x540e, 0x3) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 777.867327] binder: undelivered TRANSACTION_COMPLETE [ 777.876248] binder: undelivered transaction 87, process died. [ 777.883997] binder: 26467:26480 transaction failed 29189/-22, size 0-0 line 3118 [ 777.892815] binder: undelivered TRANSACTION_ERROR: 29189 [ 777.919845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26481 comm=syz-executor.4 [ 777.941897] binder: undelivered TRANSACTION_COMPLETE [ 777.947938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26483 comm=syz-executor.2 [ 777.957496] binder: undelivered transaction 91, process died. 20:16:13 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) execveat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000180)='/selinux/commit_pending_bools\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/selinux/commit_pending_bools\x00', &(0x7f0000000240)='&%\x00', &(0x7f00000002c0)='/dev/binder#\x00', &(0x7f0000000300)='/dev/binder#\x00', &(0x7f0000000340)='/selinux/commit_pending_bools\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/binder#\x00'], 0x400) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022abd7000fbdbdf250c00000054007ed32ecbe68d4d12c329dc557bc7a96802000800050001000000080009007c4b0000080005000700000008000d000000000008000500050000000800060005000000080002004e2200000800040000040000"], 0x68}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCNXCL(r0, 0x540d) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xfffffffffffffefe, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0cc4bda9bdeee9db7f7df9043b747b4a94caedd66a425c2c43a53bd104827a91882f033e0eaab46875c9e29022e14a133fddff585e", @ANYRESHEX=r4, @ANYRES64=0x0, @ANYPTR], 0xfffffffffffffff2, 0x0, 0x0}) 20:16:13 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x0, 0x8001, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 777.969362] binder: undelivered TRANSACTION_COMPLETE [ 777.990223] binder: undelivered transaction 93, process died. 20:16:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) [ 778.020836] binder: 26489:26490 ioctl c0306201 20000280 returned -14 [ 778.038047] binder: 26489:26493 ioctl c0306201 20000280 returned -14 [ 778.038133] binder: BINDER_SET_CONTEXT_MGR already set [ 778.050915] binder: 26489:26490 ioctl 40046207 0 returned -16 20:16:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000080)=0x305, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 778.084129] binder: undelivered TRANSACTION_COMPLETE [ 778.090167] binder: undelivered transaction 96, process died. [ 778.097080] binder: undelivered TRANSACTION_COMPLETE [ 778.112008] binder: undelivered transaction 98, process died. 20:16:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840000000000000000000000000230d0c64eb5a00000000000000000100"/76], 0x0, 0x0, 0x0}) [ 778.138960] binder: undelivered TRANSACTION_COMPLETE [ 778.153284] binder: undelivered transaction 100, process died. [ 778.162413] binder: undelivered TRANSACTION_COMPLETE [ 778.177063] binder: undelivered transaction 102, process died. [ 778.198859] binder: release 26506:26508 transaction 104 out, still active [ 778.206681] binder: undelivered TRANSACTION_COMPLETE [ 778.213375] binder: send failed reply for transaction 104, target dead [ 778.221539] binder: release 26506:26509 transaction 106 out, still active [ 778.233289] binder: undelivered TRANSACTION_COMPLETE [ 778.240638] binder: send failed reply for transaction 106, target dead 20:16:16 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:16:16 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:16:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:16:16 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a8", 0x5a}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:16:16 executing program 2: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:16:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000100)={{0x6, @broadcast, 0x4e24, 0x4, 'rr\x00', 0x10, 0xfffffffffffffff7, 0x2d}, {@remote, 0x4e22, 0x3, 0xfffffffffffff6e6, 0x101, 0xfffffffffffffffc}}, 0x44) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000940)='attr/exec\x00') ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000980)) r3 = geteuid() ioprio_set$uid(0x80000000003, r3, 0x80) getresgid(&(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x364, [0x0, 0x20000540, 0x2000068e, 0x200006be], 0x0, &(0x7f0000000500), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x50, 0x8b2f, 'dummy0\x00', 'veth1_to_bond\x00', 'rose0\x00', 'ip6tnl0\x00', @remote, [0xff, 0xff, 0xff], @random="a87ce6f75c6b", [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0xa6, 0x11e, [], [@common=@dnat={'dnat\x00', 0x10, {{@empty, 0xffffffffffffffff}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x5, 0x4c67, 0x0, 0x0, 0x0, "98a3156c07ed48aa9dbeb9fee4c8c332685553073d5f37acfd7eb017595648f20979ef3e77ddf942cf3972f7138f9fac5deb445ff937f6ee0bfeaa99f50bc017"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x2, 0x888e, 'ip6gre0\x00', 'gretap0\x00', 'vxcan1\x00', 'veth0_to_hsr\x00', @random="3bbb26d6a55b", [0x0, 0xff, 0xff], @random="c73ecc96e474", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xde, 0x10e, 0x186, [@cpu={'cpu\x00', 0x8, {{0x7fffffff, 0x1}}}, @connbytes={'connbytes\x00', 0x18, {{0x3, 0x9, 0x1}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x3}}}], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x101, 0xfffffffffffff9a3, 0x0, 0x0, "fb4ff611b04788dbd29aabdc6e9c42ac6084cc6271fc3064c35e424f9271327233665673a88ee2bf86f5ca076fe6cd749fc3eb4863c44f2252a65baa29ccda5b"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x3dc) r4 = socket(0x4, 0x806, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000a0}, 0xc, &(0x7f0000000480)={&(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00002bbd7000fedbdf2510000000040104003400070008000200000000000800020003000000080002000180000008000400da7f0000080003002000000008000400000000000c00010073797a31000000001c0007000800010003000000080001000c00000008000400b00200001c0007000800010001000000080003001f00000008000400040000003c0007000800020007000000080001001800000008000200000000800800010016000000080004000900000008000200ff000000080001000b0000000c00010073797a30000000000c00010073797a31000000000c00010073797a31000000001c000700080001001900000008000200ff0f000008000100030000000c00010073797a31000000001400090008000200090000000800020000800000"], 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x100, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000240)={@ipv4={[], [], @multicast1}, 0x800000000000000, 0x3, 0xff, 0x4, 0xfff, 0x8}, &(0x7f0000000280)=0x20) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x54) [ 780.877719] binder_alloc: 26522: binder_alloc_buf, no vma [ 780.892677] binder: 26522:26527 transaction failed 29189/-3, size 0-0 line 3264 [ 780.915310] binder: undelivered TRANSACTION_ERROR: 29189 20:16:16 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x4, 0x70, 0x9, 0xfff, 0x400, 0x9, 0x0, 0x523f, 0xe8064bf5106abfc8, 0x2, 0x0, 0x7, 0x5, 0x1, 0x0, 0x8, 0x100000001, 0x7, 0x0, 0x1f, 0xfffffffffffffffb, 0x2, 0x80000000, 0x2, 0x1000, 0x5, 0x10001, 0x2, 0xfffffffffffffffe, 0x1000, 0x0, 0x101, 0x29, 0xe5, 0x1000000000000, 0x69db, 0xc724, 0x7fffffff, 0x0, 0x1000, 0x2, @perf_config_ext={0x7, 0x6}, 0x402a, 0x10001, 0x3, 0xd, 0x6, 0x7, 0x6}) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x101640, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000200)={0x7, 0x1b, 0x2}, 0x7) r3 = memfd_create(&(0x7f0000000440)='\xe3usercpuset\x00', 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x39) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="8c", 0x1}], 0x1, 0x81003) r4 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x100000000, 0x80000) ioctl$RTC_WIE_OFF(r4, 0x7010) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="0001cf3cd170120073c7599621754f0000", @ANYRES16=r5, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x70, 0x4, 0x5, 0x1, 0x2, 0x0, 0xbe79, 0x4, 0x6, 0xb855, 0x6e, 0xf1, 0x6, 0xfffffffffffffc83, 0x3, 0x4, 0xfffffffffffffffd, 0x1ff, 0x5, 0x9, 0x69, 0x6, 0x7f, 0x1, 0x2, 0x6, 0x7365, 0x4, 0x9, 0x7d4, 0x0, 0x81, 0x1, 0x9, 0xffffffff, 0x9, 0x9, 0x0, 0x7000000, 0x0, @perf_config_ext={0x5, 0x101}, 0x100, 0x8000, 0x466a, 0xb, 0x7, 0x100000000, 0x9}, r6, 0x10, r0, 0xb) sendfile(r1, r3, 0x0, 0x102002700) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) setrlimit(0x408000000000007, 0x0) r7 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) getrandom(&(0x7f00000000c0)=""/36, 0x24, 0x3) setsockopt$inet_tcp_int(r7, 0x6, 0x0, &(0x7f0000000480)=0x4, 0x4) [ 780.925777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26534 comm=syz-executor.4 [ 780.937628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26536 comm=syz-executor.2 [ 780.951558] binder_alloc: 26522: binder_alloc_buf, no vma [ 780.957242] binder: 26522:26535 transaction failed 29189/-3, size 0-0 line 3264 20:16:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 780.990586] binder: undelivered TRANSACTION_ERROR: 29189 20:16:16 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 781.039847] binder_alloc: binder_alloc_mmap_handler: 26544 20006000-20008000 already mapped failed -16 [ 781.062338] binder_alloc: 26544: binder_alloc_buf, no vma [ 781.080891] binder: 26544:26545 transaction failed 29189/-3, size 0-0 line 3264 [ 781.089702] binder: undelivered TRANSACTION_ERROR: 29189 [ 781.097424] binder_alloc: binder_alloc_mmap_handler: 26544 20006000-20008000 already mapped failed -16 [ 781.103875] binder_alloc: 26544: binder_alloc_buf, no vma [ 781.127787] binder: 26544:26550 transaction failed 29189/-3, size 0-0 line 3264 20:16:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x58, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000000000000053c6660fc724cf0ce305200800000000000100"/88], 0x0, 0x0, 0x0}) [ 781.136374] binder: undelivered TRANSACTION_ERROR: 29189 20:16:16 executing program 5: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2800, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x0, 0x3, 0x2}}, 0x14) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) write$selinux_user(r0, &(0x7f0000000140)={'system_u:object_r:load_policy_exec_t:s0', 0x20, 'system_u\x00'}, 0x31) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000001c0)={0x1}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000200)=""/220) ioperm(0x81, 0xfffffffffffff801, 0x1) ioctl$TIOCCBRK(r0, 0x5428) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000300)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000340)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000380)="9607e2513509abe0723ce78c82a72251", 0x10) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/enforce\x00', 0x0, 0x0) read(r1, &(0x7f0000000400), 0x0) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0', [{}], 0xa, "a76b5e2b262d73b2aaa88493c39de31699556e56e68bd21f2fa700"}, 0x27) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000480)=0x5, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x28, &(0x7f0000000540)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={r4, 0x101, 0x18}, 0xc) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xf2, 0x401, 0x0, 0x5, 0x14, 0x8, "931e01f2dcf6384b7e43df92840067256adad23d127211292188d395d6159ff3b232d7ca88f1b0004ec69457fb453421030b39b0976a684421767ce3093dfe9c", "bde894ad20f8e762f1eaa0df6b72be69f4be1a6692f4ac8f1dc9f4a250722fc402d2edea1c202d62433b66ff26d3ed18c59ebdef12305eacc2d8b9dbaa894fdb", "bf0d8d869c7277603d83abbb26181c5e35a6fdf8df14825fbc6b2a2195305d5f", [0x6e, 0x3]}) fstat(r3, &(0x7f0000000700)) symlinkat(&(0x7f0000000780)='./file0\x00', r0, &(0x7f00000007c0)='./file0\x00') ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000800)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={0x0, r2, 0x0, 0x3, &(0x7f0000000840)='#! ', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000940)={0xffffffffffffffff, r0, 0x0, 0x2, &(0x7f0000000900)='-\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={r5, r2, 0x0, 0x2, &(0x7f00000008c0)='#\x00', r6}, 0x30) mkdirat(r2, &(0x7f00000009c0)='./file0\x00', 0x24) [ 781.177463] binder: 26554:26556 got transaction with invalid data ptr [ 781.184376] binder: 26554:26556 transaction failed 29201/-14, size 1-0 line 3296 [ 781.193129] binder: undelivered TRANSACTION_ERROR: 29201 [ 781.199631] binder: 26554:26557 got transaction with invalid data ptr [ 781.206372] binder: 26554:26557 transaction failed 29201/-14, size 1-0 line 3296 20:16:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x810, r1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x5, 0x5, 0x3, 0x0, 0x0, [{r0, 0x0, 0x1}, {r1, 0x0, 0x3}, {r1, 0x0, 0x9}]}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8002, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "105abed179d27dd8", "435e265858155ca28b5a6b5701b16ef28f57cb2c44ed8dcad8f0f3d84e2ca47c", "6e181030", "53f153e1614cd30f"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2005, 0x0) [ 781.231681] binder: undelivered TRANSACTION_ERROR: 29201 [ 781.274139] binder_alloc: 26562: binder_alloc_buf, no vma [ 781.287908] binder: 26562:26564 transaction failed 29189/-3, size 0-0 line 3264 [ 781.298967] binder: undelivered TRANSACTION_ERROR: 29189 [ 781.305867] binder_alloc: 26562: binder_alloc_buf, no vma [ 781.312258] binder: 26562:26564 transaction failed 29189/-3, size 0-0 line 3264 [ 781.320250] binder: undelivered TRANSACTION_ERROR: 29189 20:16:19 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 20:16:19 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:16:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) signalfd4(r1, &(0x7f0000000000)={0x2}, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:16:19 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a8", 0x5a}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 20:16:19 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x7fff}, 0x2c) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x7, 0x400000077fffb, 0x6, 0x0, r0}, 0xffffff94) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) write$selinux_user(r2, &(0x7f00000001c0)={'system_u:object_r:init_exec_t:s0', 0x20, 'user_u\x00'}, 0x28) ppoll(&(0x7f0000000000)=[{r1}, {r1, 0x10}, {r1, 0xc41e}], 0x3, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={0x6}, 0x8) r3 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_nanosleep(0x4, 0x1, &(0x7f0000000240)={r4, r5+30000000}, &(0x7f0000000280)) timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000000140)={0x77359400}) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 20:16:19 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000080)={0x1, 0x8000000000000000, 0x100000000}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x4240a580) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r3, 0x0, 0x1002000000080002, 0x0) 03:33:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x200, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000380)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x68, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x5, 0x2, 0x18}, @flat=@binder={0x73622a85, 0x10a, 0x2}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @dead_binder_done, @exit_looper, @register_looper, @release, @release={0x40046306, 0x2}], 0x95, 0x0, &(0x7f00000002c0)="7694b0189311999bf482029e116748b63fa31f7c41e7086401a0fcde126638c4fbf94a75466cda97ef443f2e5a542bf596b0341040d83dbe51f157c339116767cdd9095a214964cad12754fad2bd977f05d886af44d7736544680fb4980f1f1df6f8bee10a9fa7e533bea3f0475267498a58b11e9d31ee0af486fca6d949355e95cd2777174136aab42a901f7858671760f93f5d2c"}) 03:33:20 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 783.880144] binder: undelivered TRANSACTION_COMPLETE [ 783.889305] binder: undelivered transaction 124, process died. [ 783.965970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26594 comm=syz-executor.2 [ 783.970589] binder: 26584:26589 got transaction to context manager from process owning it [ 783.995288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26595 comm=syz-executor.4 03:33:20 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2e) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) renameat(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00') tkill(r0, 0x29) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x3a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20000001f, r0, 0xf95, 0x0) [ 784.015588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26594 comm=syz-executor.2 [ 784.018490] binder: 26584:26596 got reply transaction with no transaction stack [ 784.044984] binder: 26584:26589 transaction failed 29201/-22, size 0-0 line 3109 [ 784.049900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26594 comm=syz-executor.2 [ 784.065606] binder: 26584:26596 transaction failed 29201/-71, size 80-24 line 3026 [ 784.079327] binder: undelivered TRANSACTION_ERROR: 29201 [ 784.085845] binder: 26584:26596 got transaction to context manager from process owning it [ 784.096124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26594 comm=syz-executor.2 [ 784.105714] binder: 26584:26596 transaction failed 29201/-22, size 0-0 line 3109 03:33:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) readv(r0, &(0x7f0000001640)=[{&(0x7f0000003300)=""/4096, 0x1000}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_pts(0xffffffffffffff9c, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dc86055e0bceec7be070") bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc) 03:33:20 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x402, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x7ff, 0x2, 0x8, 0x8, 0x5, 0x8}) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 784.118176] binder: undelivered TRANSACTION_ERROR: 29201 [ 784.147010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26594 comm=syz-executor.2 [ 784.156895] binder: undelivered TRANSACTION_COMPLETE [ 784.171048] binder: undelivered transaction 132, process died. [ 784.179823] binder: undelivered TRANSACTION_COMPLETE 03:33:20 executing program 1: prctl$PR_SET_FPEXC(0xc, 0x10003) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_GET_SECCOMP(0x15) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0x40a) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000010000010000000000000000000000000000001d000000000000000000000000000000000000000000000000c3c2cd29d6000000"], 0x0, 0x0, 0x0}) [ 784.200662] binder: undelivered transaction 134, process died. [ 784.216433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26594 comm=syz-executor.2 [ 784.232227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26594 comm=syz-executor.2 03:33:20 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 784.245999] binder: 26613:26614 transaction failed 29201/-28, size 2089670227099910144-0 line 3264 [ 784.269772] binder: undelivered TRANSACTION_ERROR: 29201 03:33:20 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 784.305872] binder: BINDER_SET_CONTEXT_MGR already set [ 784.329932] binder: 26613:26620 ioctl 40046207 0 returned -16 03:33:20 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e4", 0x87}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:33:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000bb4e603f747df607000000000000000000000000000000000000000000000000000000000000000000008dce000000000000000000000000a4009b1b0c07d3007ee03cbf20afe04437545d4a172edd92f72f1e1f8f4f3e456edf66e22fa353980bf0a3a8bcbd5b4e683c4df30c5622f9838afca5f5b68ef42a2d9231518f25825eb6ca820aa01448bb278a7e2c918972deee2d810bcea0c817fb0b32bdc6899cd5561c2104edef5b66b5aad1785a415755721e542ccc46bfdb15d32a3b96914f62294dacf1f05a6a8265b685c2f7ef4819f3f33455e657bbca08906cdef2c4bd668228a96f608c8cfcc11e94fed38a6d0c703b2944d6c87944d79c524de7818aa500"/289], 0x0, 0x0, 0x0}) [ 784.754958] binder: release 26634:26637 transaction 138 out, still active [ 784.766644] binder: undelivered TRANSACTION_COMPLETE [ 784.766788] binder: BINDER_SET_CONTEXT_MGR already set [ 784.777694] binder: 26634:26637 ioctl 40046207 0 returned -16 [ 784.783915] binder_alloc: 26634: binder_alloc_buf, no vma [ 784.786373] binder: send failed reply for transaction 138, target dead [ 784.797725] binder: 26634:26638 transaction failed 29189/-3, size 0-0 line 3264 03:33:20 executing program 2: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a8", 0x5a}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:33:20 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x3, 0x2000000088) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x10) recvmmsg(r1, &(0x7f0000000180), 0x400000000000757, 0x6, &(0x7f0000000100)={0x77359400}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0)=@req={0x1, 0x7, 0xd0, 0xfffffffffffffff7}, 0x10) r3 = socket$inet(0x10, 0x2, 0x0) fcntl$notify(r1, 0x402, 0x22) ioctl(r3, 0x6, &(0x7f0000000200)="11dca5055e0bcfec7be070") eventfd(0x7f) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 784.822264] binder: undelivered TRANSACTION_ERROR: 29189 [ 784.869223] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 784.912466] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:33:22 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:33:22 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x80) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000204}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x80, 0x4) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchmod(r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="056348400000000000000000000000000000000002000000010000004000"/76], 0x0, 0x0, 0x0}) 03:33:22 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev, 0x10001}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x0, 0x70bd26}, 0x1c}}, 0x0) r5 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r3) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r2, r2) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r8, 0x80003) sendfile(r2, r8, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:22 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e4", 0x87}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:33:22 executing program 2: lsetxattr$security_smack_entry(0x0, &(0x7f0000000140)='security.SMACK64IPIN\x00', &(0x7f0000000180)='/dev/uinput\x00', 0xc, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000003d80)="c0dca5055e0bcfec7be070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000100)=0x4, 0x4) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x1d, 0x8}, 'syz0\x00'}) geteuid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7, 0x0, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 787.002421] binder: 26650:26658 unknown command 1078485765 [ 787.010222] binder: 26650:26658 ioctl c0306201 20000280 returned -22 [ 787.061168] selinux_nlmsg_perm: 3850 callbacks suppressed [ 787.061179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26667 comm=syz-executor.4 03:33:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x4001, 0x60) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000340)={0x3ff, 0x5, 0x80, 0x3, 0xfffffffeffffffff}) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000180)=0x1ff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r4, 0x7f) splice(r3, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x81, 0x1) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000040)) 03:33:23 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='ns\x00') getdents(r1, &(0x7f0000000040)=""/147, 0x93) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x9, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 787.174608] binder: 26675:26676 ioctl 401c5820 20000340 returned -22 [ 787.191155] binder: undelivered TRANSACTION_COMPLETE [ 787.200979] binder: undelivered transaction 142, process died. [ 787.209651] binder: 26675:26677 ioctl 401c5820 20000340 returned -22 03:33:23 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000040)={0xffffffff, 0xba}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x8, 0x80012, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="116348400000000000001f4d000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000020ced1bab7ce5156000000000000000080"], 0x0, 0x0, 0x0}) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x8) [ 787.229406] binder: undelivered TRANSACTION_COMPLETE [ 787.245728] binder: undelivered transaction 144, process died. [ 787.277209] binder_alloc: 26681: binder_alloc_buf, no vma [ 787.302135] binder: 26681:26684 transaction failed 29189/-3, size 0-0 line 3264 [ 787.317367] binder: undelivered TRANSACTION_ERROR: 29189 03:33:23 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x0, 0x70bd26}, 0x1c}}, 0x0) r4 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r4, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, r2) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r7, 0x80003) sendfile(r1, r7, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:23 executing program 2: sched_setscheduler(0x0, 0x5, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/224, 0xe0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x1000000000000110) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x7, @ipv4={[], [], @multicast1}, 0xd04}}, 0x0, 0x69040d68, 0x0, "855b91e1ccf09c71099b354e0f6e7079414cfa30143c42429cece15f27ab95983030c2a3b5613d70fdbcc0810299d6694c929242cb78b1263a2a575b578174fe88e86852193a3695ca99f3192ea27524"}, 0xd8) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000140)={'enc=', 'pkcs1', ' hash=', {'vmac(des)\x00'}}, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000400)={0x2, {{0x2, 0x4e24, @local}}}, 0x88) 03:33:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x5a6, 0x6}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="116308400200528c01dc29866db038cc0d7e08000000000008000000000000000000000001f3571836f20717e841d1cc00000000000000010000000000000000000000000000000000000021000000009f8d002120000000"], 0x0, 0x0, 0x0}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0xea6) [ 787.324205] binder_alloc: 26681: binder_alloc_buf, no vma [ 787.330993] binder: 26681:26688 transaction failed 29189/-3, size 0-0 line 3264 [ 787.362205] binder: undelivered TRANSACTION_ERROR: 29189 [ 787.418084] binder: 26696:26698 ioctl 40305828 20000000 returned -22 [ 787.432078] binder: 26696:26698 unknown command 1074291473 [ 787.445915] binder: 26696:26698 ioctl c0306201 20000280 returned -22 [ 787.458954] binder: 26696:26698 ioctl 40086602 20000040 returned -22 [ 787.467018] binder: 26696:26698 ioctl 40305828 20000000 returned -22 [ 787.473800] binder: 26696:26699 unknown command 1074291473 [ 787.479639] binder: 26696:26699 ioctl c0306201 20000280 returned -22 03:33:26 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:33:26 executing program 5: pipe(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xaf31, 0x10000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x8000fffffffe) 03:33:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='/eth0.vboxnet0\xc6\x00') r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') getdents64(r1, 0x0, 0x0) 03:33:26 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x0, 0x70bd26}, 0x1c}}, 0x0) r4 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r4, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, r2) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r7, 0x80003) sendfile(r1, r7, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getdents64(r2, &(0x7f0000000040)=""/10, 0xa) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:33:26 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e4", 0x87}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:33:26 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x480000, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0xa, 0x10000) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 789.987758] binder: undelivered TRANSACTION_COMPLETE [ 789.999875] binder: undelivered transaction 152, process died. [ 790.010105] binder: undelivered TRANSACTION_COMPLETE 03:33:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) getpgid(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100"/76], 0x0, 0x0, 0x0}) 03:33:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x13) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000080)=""/121) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000240)=@nfc={0x27, 0x1}, 0x80, 0x0}}, {{&(0x7f00000001c0)=@vsock, 0x80, 0x0}}], 0x2, 0x0) [ 790.035692] binder: undelivered transaction 154, process died. [ 790.054865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26728 comm=syz-executor.4 03:33:26 executing program 2: openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="00ff043fbf2a039c5a80fc90543248a6c2e100ff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) openat$zero(0xffffffffffffff9c, 0x0, 0x200000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) [ 790.097835] binder: 26730:26731 got transaction to context manager from process owning it [ 790.111523] binder: 26730:26731 transaction failed 29201/-22, size 0-0 line 3109 [ 790.134766] binder: undelivered TRANSACTION_ERROR: 29201 03:33:26 executing program 2: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000400)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003000300000000000000000038000000000000000000000000002000010000000000000100000000030000000000000000000000000000000300"/88], 0x58) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='self]\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000340)=[&(0x7f00000002c0)='security.evm\x00', &(0x7f0000000300)=':vmnet1security\x00']) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000140)=@md5={0x1, "d644d11b4ec84dcf9f1621b37228cc53"}, 0x11, 0x2) ftruncate(r0, 0x3) execveat(r0, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) 03:33:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup(r0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) [ 790.140160] binder: 26730:26738 got transaction to context manager from process owning it [ 790.156001] binder: 26730:26738 transaction failed 29201/-22, size 0-0 line 3109 [ 790.174916] binder: undelivered TRANSACTION_ERROR: 29201 [ 790.226344] binder: undelivered TRANSACTION_COMPLETE [ 790.232615] binder: undelivered transaction 160, process died. [ 790.236895] binder: 26746:26752 transaction failed 29189/-22, size 0-0 line 3118 [ 790.252504] binder: undelivered TRANSACTION_ERROR: 29189 03:33:29 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:33:29 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x0, 0x70bd26}, 0x1c}}, 0x0) r4 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r4, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, r2) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r7, 0x80003) sendfile(r1, r7, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0001f30900001830cafcdbdf2503000000080003000500000008000202da06000000000000000000000001080003000800000000000000200000000000715613d91b3ef576138649544c49adefb3d87b570ba85f81a83bd091ad8e6f7b6c1669aeb07ceb51f74e6d0e7516bd1b95fad7c61aaf"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x8000}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'caif0\x00', 0x400}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'lapb0\x00', 0x588671b45778de6b}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) getuid() ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) vmsplice(r2, &(0x7f0000000400)=[{&(0x7f00000016c0)="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", 0xce6}], 0x1, 0xe) r4 = memfd_create(&(0x7f00000001c0)='/delo\xff\a\x00\x00\x00\x00', 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000026c0)="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") pwritev(r4, &(0x7f0000000480)=[{&(0x7f00000004c0)='+', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0xffffffff, 0x7}) sendfile(r2, r3, 0x0, 0x2000006) close(0xffffffffffffffff) 03:33:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x2) bind$inet(r1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b80)={0x0, r2, 0x0, 0x10, &(0x7f0000000b40)='systemwlan1em0$\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0}, &(0x7f0000000c00)=0xc) r5 = getegid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c40)={r3, r4, r5}, 0xc) connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x1800000) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, &(0x7f000001c000)) munmap(&(0x7f0000551000/0x2000)=nil, 0x2000) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) chdir(&(0x7f0000000140)='./file0\x00') r6 = getpgrp(0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000002c0), &(0x7f0000000300)=0x10) sched_setscheduler(r6, 0x0, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = creat(&(0x7f0000000240)='./file1\x00', 0x10) r8 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r9 = socket$inet6(0xa, 0x100000000000002, 0x0) ftruncate(r9, 0x2) write$eventfd(r8, &(0x7f0000000080), 0xfffffe5e) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000b00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20a00000}, 0xc, &(0x7f0000000580)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0c020001", @ANYRES16=r10, @ANYBLOB="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"], 0x20c}, 0x1, 0x0, 0x0, 0x804}, 0x8800) mount$bpf(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x10000, &(0x7f0000000700)={[{@mode={'mode', 0x3d, 0xfffffffffffffff9}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x498a}}, {@mode={'mode', 0x3d, 0x100000000}}, {@mode={'mode', 0x3d, 0x7f}}, {@mode={'mode', 0x3d, 0x1}}], [{@audit='audit'}, {@subj_type={'subj_type', 0x3d, 'nbd\x00'}}, {@permit_directio='permit_directio'}, {@obj_role={'obj_role', 0x3d, '\\mime_type'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x76, 0x63, 0x71, 0x36, 0x61, 0x37, 0x77], 0x2d, [0x65, 0x0, 0x7d, 0x39], 0x2d, [0x67, 0x77, 0x7b, 0x77], 0x2d, [0x37, 0x65, 0x36, 0x39], 0x2d, [0x65, 0x31, 0x62, 0x38, 0x35, 0x63, 0x37, 0x66]}}}, {@subj_type={'subj_type', 0x3d, 'trusted.overlay.upper\x00'}}]}) syz_genetlink_get_family_id$nbd(&(0x7f0000000540)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000600)={&(0x7f00000003c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="06022dbd7000fbdb0225030000000c000300ff030000000000000c0005000800000000000000e9810fe0d9d067f88d3c10e6e1bb5dc8e8f007509c70d152e7387579470410d5b29bcd954b69c23ba221c372dbc5352a7dc82b4f40e425e68990af64aaa53a585dfba4983516acc588cdcbd9876ebd4372c92dd8534e33988b238e9e01"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4801) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="00fb8c066b6fea860c6909dd9a2f947e6265759b1992f2f80e3b12f53114ad0eff8d75e97186c620183953728f989d65eddc8dce7eb86fca4233932108c9d84db2251a40bd48b1262df754a302abe5c7ce549b6550133f40dbdcc4c26c73ac88b30cf711904c4d7c172b86224c57335f4ccf8ea53c1fcc52675905a60c"], 0x1, 0x3) 03:33:29 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cad", 0x9d}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:33:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x2011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) readahead(r1, 0x5, 0x2) [ 793.021818] binder: undelivered TRANSACTION_COMPLETE [ 793.042709] binder: undelivered transaction 164, process died. [ 793.060158] binder: undelivered TRANSACTION_COMPLETE [ 793.082870] binder: undelivered transaction 166, process died. 03:33:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1163484000000000000000000000000000060000001e000001000000000000000000000000000001000000000000000000000000000000d600"/76], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:33:29 executing program 2: socket(0x10, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) syz_open_pts(r0, 0x4000) pipe(&(0x7f0000000100)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000300)={0x1b7, 0x20000000000000}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca505") [ 793.086885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26778 comm=syz-executor.4 03:33:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/144) pread64(r0, &(0x7f00000001c0)=""/156, 0x9c, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@rand_addr="e885293d6c50fe0bde0d9fbefba9958c", 0x800, 0x0, 0xff}, 0x20) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x128, r3, 0x820, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6532}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffbff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffff8000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x85b6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48154286}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000010}, 0x4844) write$P9_RXATTRWALK(r2, &(0x7f0000000180)={0xf, 0x1f, 0x2}, 0xf) 03:33:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x802) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1, 0x50, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)="82fa1b82b3034fbc550a953f8f5b946b18ce8e5c1251f466f920ed1a10e8947fbdc11b4c1fcf6608904bbf0e6a177befd83c1bfd97a9ae098f46af90e50b83a544e09651b7beff7fc04f9b7dac58983e3200ef4b8df62a51e9d5c43349c20ce0fa9934c1754a8dccc7ef5d4871ac7460ea748f52f58036921982868211f84eff34a30a691fdd53d1fbfa8c7aca0fa7ed420b10e31ca7ee1a2d49d87c0f0d9661897ebad1a3de2d4de8f5ab86c04ced8364aff3b0f356320e2d2458c63687b0ffd4010f6b6da45256e0d49ab33e225e1649dc9c44325cb3f101e308f2b7a123a3b99eb4321282dd11a58850b379845547b832d4c039994329ff", 0xf9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 793.147348] binder: 26780:26783 transaction failed 29201/-28, size 16777216-0 line 3264 [ 793.157651] binder: undelivered TRANSACTION_ERROR: 29201 [ 793.171723] binder: 26780:26788 transaction failed 29201/-28, size 16777216-0 line 3264 [ 793.191297] binder: undelivered TRANSACTION_ERROR: 29201 03:33:29 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x100, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 03:33:29 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x0, 0x70bd26}, 0x1c}}, 0x0) r4 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r4, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, r2) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r7, 0x80003) sendfile(r1, r7, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 793.243345] binder_alloc: 26792: binder_alloc_buf, no vma [ 793.257489] binder: 26792:26793 transaction failed 29189/-3, size 0-0 line 3264 [ 793.280461] binder: undelivered TRANSACTION_ERROR: 29189 [ 793.289251] binder_alloc: 26792: binder_alloc_buf, no vma [ 793.297638] binder: 26792:26801 transaction failed 29189/-3, size 0-0 line 3264 [ 793.311724] binder: undelivered TRANSACTION_ERROR: 29189 03:33:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x1, 0x4, 0xace, 0x0, 0x9, 0x39000, 0xa, 0x8000, 0x6, 0xe11d, 0x8000, 0x9, 0x401, 0xffff, 0x1, 0x1, 0x4, 0x5, 0x1, 0x4, 0x9, 0x1, 0xffff, 0x0, 0x61e930c, 0x9, 0xe4, 0x5, 0x40, 0x5, 0xffff, 0x8001, 0x14553ac1, 0x2, 0x9, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x4080, 0x0, 0xfffffffffffffff9, 0x1, 0x101, 0x401, 0x8001}, 0xffffffffffffff9c, 0x2, 0xffffffffffffffff, 0xa) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 03:33:32 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:33:32 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x0, 0x70bd26}, 0x1c}}, 0x0) r4 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r4, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, r2) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r7, 0x80003) sendfile(r1, r7, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:32 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cad", 0x9d}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:33:32 executing program 2: seccomp(0x1, 0x1, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x8000000000006, 0x0, 0x0, 0xffffff7f7ffffffc}]}) seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffd}]}) 03:33:32 executing program 5: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pselect6(0x5e, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x30) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) ptrace$getregs(0xe, r0, 0x7, &(0x7f0000000040)) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xc) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfe}) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0xd100, 0x8) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 796.039996] binder: undelivered TRANSACTION_COMPLETE 03:33:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x202180, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x6) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f00000000c0), 0x4) 03:33:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x210000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000045c0)='net/softnet_stat\x00') sendmsg$sock(r2, &(0x7f0000009340)={0x0, 0x0, &(0x7f0000009280)=[{&(0x7f0000008fc0)="13c40aff77354c3f03d31366172b742e19ac68ea024f86988702cbfb49073da6cc95caa7afba0bd1304318a737c89b83c8ccdaa1ea69df1ed3d3378337073f0c8d1dac3c88f82f194b72acbb8ebf031e6c32898277900f946d23fdf407aa49cfc959df97f2427d5467dc924c2fae5f8f19d3dbfe2dbdff1a3cdc778d264753c38f8e91fd2b893ea82ccdb4ea85e1b936edc2dd4383a3d2a6428f0f0be06b8f4ca5de185315a4a759", 0xa8}, {&(0x7f0000009080)="04a388eeecfaee42a8555b58f43cba24300d26705d2df2d5cee688f3f03b4463b99b1f1728c0574e9230403553e207f8c0e10e1aa2a38745900c6c71f94c71ab5e9e0ca485967e87307d63a86b3247bb9ab1f3399d2d086f2b0c574e962f24189ec8f0882039190d25f00d0dc99adee1b2a7854b8f37638cce3507a5f8e5a8eae4af375a1a82be9e6ca4e4fd01d931f3e1fb8acb11cf52ce27f523336d1d4a1dc39a7efda2dade514cc2495bb4a3628b", 0xb0}, {&(0x7f0000009140)="5c2a5ebd767756711087ec34c2a7c1080ecbbde8277f994c53db8a30d473eac526e3c44b20736c84f75ddfbf24fc2e326e3928b04ed1350ff54378a87fd0495e182b85a090aa30cae0968ac42bc0eb90", 0x50}, {&(0x7f00000091c0)="8a6cb06c5431a51ade04679dbd8bc14f5b2bcddbf4d4fa513f513476a8af3d449de7fc9706e89f6ed275b44563f05ef0d4923461439ca75e66d0699addbdb6b0d488af2279e14d3d7a061174c0db17b256c236ae03f914f1c92db8289b418940b3042a8d0182e4bb554765a3cca70da9d98bc4e534f8c51a906c2f744709b487dcf19e9134fefd4d3bba889f85c7669713e3b9917e2be58032e51c2fa425", 0x9e}], 0x4, &(0x7f00000092c0)}, 0x800) recvmmsg(0xffffffffffffff9c, &(0x7f0000008d40)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, &(0x7f00000002c0)=""/201, 0xc9}, 0xfffffffffffffff8}, {{&(0x7f0000000140)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/134, 0x86}], 0x1, &(0x7f0000000480)=""/138, 0x8a}, 0x5}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/211, 0xd3}, {&(0x7f00000006c0)=""/119, 0x77}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)}, {&(0x7f0000001780)=""/238, 0xee}, {&(0x7f0000001880)=""/160, 0xa0}, {&(0x7f0000001940)=""/17, 0x11}], 0x7, &(0x7f0000001a00)=""/248, 0xf8}, 0x2}, {{&(0x7f0000001b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001b80), 0x0, &(0x7f0000001bc0)=""/197, 0xc5}, 0x1000}, {{&(0x7f0000001cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000001d40)=""/5, 0x5}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/79, 0x4f}, {&(0x7f0000003e00)=""/204, 0xcc}, {&(0x7f0000003f00)=""/61, 0x3d}, {&(0x7f0000003f40)=""/129, 0x81}, {&(0x7f0000004000)=""/224, 0xe0}, {&(0x7f0000004100)=""/232, 0xe8}, {&(0x7f0000004200)=""/141, 0x8d}], 0xa}, 0xffffffffffffff81}, {{&(0x7f0000004380)=@hci, 0x80, &(0x7f0000004680)=[{&(0x7f0000004400)=""/61, 0x3d}, {&(0x7f0000004440)=""/159, 0x9f}, {&(0x7f0000004500)=""/93, 0x5d}, {&(0x7f0000004580)=""/15, 0xf}, {&(0x7f00000045c0)}, {&(0x7f0000004600)=""/112, 0x70}], 0x6, &(0x7f0000004700)=""/31, 0x1f}, 0x5}, {{&(0x7f0000004740)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000006980)=[{&(0x7f00000047c0)=""/4096, 0x1000}, {&(0x7f00000057c0)=""/4096, 0x1000}, {&(0x7f00000067c0)=""/132, 0x84}, {&(0x7f0000006880)=""/218, 0xda}], 0x4, &(0x7f00000069c0)=""/4096, 0x1000}}, {{&(0x7f00000079c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000008c00)=[{&(0x7f0000007a40)=""/34, 0x22}, {&(0x7f0000007a80)=""/4096, 0x1000}, {&(0x7f0000008a80)=""/175, 0xaf}, {&(0x7f0000008b40)=""/150, 0x96}], 0x4, &(0x7f0000008c40)=""/230, 0xe6}, 0x9}], 0x8, 0x1, &(0x7f0000008f40)={0x0, 0x989680}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000008f80)={0x1f, 0x101, 0x5, 0xfff, 0x20}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000009380)=ANY=[@ANYBLOB="11634840000000000000000000000000008000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000888fd73aa51e841ea2d70b3b8549efa29eec0bdd4ba2cb3117435c036d3efb57d5ecd6c9642940b525640e904c7c845d0f23083a405e4eb987b8336b345f6dd17d225ef2eaa89881ac2b3416fd4da51285d5af14"], 0x0, 0x0, 0x0}) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001740)='/selinux/policy\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_int(r4, &(0x7f0000001b80)='cpu.weight\x00', 0x2, 0x0) [ 796.065718] binder: undelivered transaction 176, process died. [ 796.072495] binder: 26811:26822 transaction failed 29189/-22, size 0-0 line 3118 [ 796.102371] binder: undelivered TRANSACTION_ERROR: 29189 03:33:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000180)=0x0) setreuid(r1, r2) r3 = inotify_init1(0x0) close(r3) 03:33:32 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x0, 0x70bd26}, 0x1c}}, 0x0) r4 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r4, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, r2) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r7, 0x80003) sendfile(r1, r7, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:32 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x0, 0x70bd26}, 0x1c}}, 0x0) r4 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r4, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, r2) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r7, 0x80003) sendfile(r1, r7, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 796.143930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26836 comm=syz-executor.4 03:33:32 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffbc}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f00f710000000000000009f8c00000800180000ffffff7f79b000f4ffffff705c0057009081c560ca8ce4d21f00f0ffffff000807593bcf21a4fd5100000000082574f9000000000000ada800800400000020000000b29b035dbc000000000002000080ac14ffbbf000000000000000030087c0000000000200423b1d632b"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x244, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x406}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1fe00000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x120, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200000000000}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe67}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @ipv4={[], [], @broadcast}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x101, @mcast1, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xe00000000000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x8001}, 0x4000080) [ 796.203127] binder: undelivered TRANSACTION_COMPLETE [ 796.221437] binder: undelivered transaction 180, process died. [ 796.231578] binder: undelivered TRANSACTION_COMPLETE 03:33:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000"], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) [ 796.250615] binder: undelivered transaction 182, process died. 03:33:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x220211, r0, 0xfffffffffffffffc) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = dup2(r0, r1) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000000)=0xacfc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x60, 0x0, 0x0}) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x8080a22}, 0xc) [ 796.291333] binder: undelivered TRANSACTION_COMPLETE [ 796.304840] binder: undelivered transaction 184, process died. [ 796.312953] binder: undelivered TRANSACTION_COMPLETE [ 796.328756] binder: undelivered transaction 186, process died. [ 796.394061] binder: 26863:26865 ioctl 40047440 20000000 returned -22 [ 796.413244] binder: 26863:26865 transaction failed 29189/-22, size 0-0 line 3118 [ 796.427369] binder: 26863:26865 ioctl c0306201 20000280 returned -14 [ 796.435118] binder: undelivered TRANSACTION_ERROR: 29189 [ 796.442597] binder: 26863:26865 ioctl 40047440 20000000 returned -22 [ 796.449303] binder: 26863:26866 transaction failed 29189/-22, size 0-0 line 3118 [ 796.457186] binder: 26863:26866 ioctl c0306201 20000280 returned -14 [ 796.464855] binder: undelivered TRANSACTION_ERROR: 29189 03:33:35 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:33:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40000, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/53) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ff2, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_buf(r3, 0x29, 0x33, 0x0, 0x1c1) write$P9_RCREATE(r3, 0x0, 0x0) 03:33:35 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x0, 0x70bd26}, 0x1c}}, 0x0) r4 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r4, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, r2) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r7, 0x80003) sendfile(r1, r7, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000de561f15db000f19daa821384f2418cda34110f85eec77da42d387797a4bc84a827c2e7a3b7a001d55f9"], 0x0, 0x0, 0x0}) sendfile(r0, r0, &(0x7f0000000080), 0x8) 03:33:35 executing program 2: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) getsockopt$netlink(r1, 0x10e, 0xb, 0x0, &(0x7f0000000040)) 03:33:35 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cad", 0x9d}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) [ 799.055114] binder: 26875:26876 got transaction to context manager from process owning it [ 799.067023] binder: 26875:26876 transaction failed 29201/-22, size 0-0 line 3109 [ 799.092659] binder: undelivered TRANSACTION_ERROR: 29201 [ 799.108516] binder: 26875:26889 got transaction to context manager from process owning it [ 799.140252] binder: 26875:26889 transaction failed 29201/-22, size 0-0 line 3109 03:33:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 799.168814] binder: undelivered TRANSACTION_ERROR: 29201 [ 799.174876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26894 comm=syz-executor.4 03:33:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x900, 0x8c) futimesat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x7530}, {0x77359400}}) flock(r0, 0x6) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000400000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000f3e141de0968ed805600000000000000784bcbc0000000000000000000"], 0x0, 0x0, 0x0}) [ 799.251043] binder: undelivered TRANSACTION_COMPLETE [ 799.262942] binder: undelivered transaction 196, process died. 03:33:35 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x0, 0x70bd26}, 0x1c}}, 0x0) r4 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r4, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, r2) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r7, 0x80003) sendfile(r1, r7, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 799.328645] binder: 26902:26903 got transaction to invalid handle [ 799.339405] binder: 26902:26903 transaction failed 29201/-22, size 0-0 line 3118 [ 799.356490] binder: undelivered TRANSACTION_ERROR: 29201 03:33:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000000000007e6a222bfbfd3b0000000000000100"/83], 0x0, 0x0, 0x0}) 03:33:35 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000580)='/dev/uinput\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x55) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") dup3(r1, r0, 0x0) 03:33:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl(r1, 0x5, &(0x7f0000000000)="8c5207df87d46fb30c28fdd7a57611021176feb871a3bfa883a0846ce32701dd624ea1ea4b4e5683e45202b288dd79ea5561a5e4d03761c9cae5d5a1615b9b432c91b0ddc07c107f4e69051358c868eae55a69dcf171354bbbce4d21fb8451d534872ea3bab2893e0785fc5b959a92a1e673460f5f6b7f9a1df09a315d6b19b4cab9278b8a4db41b77d8124199c6394fcea213a87597f0a1af8d844b996a53e0543ab3550d0602ea81f955b34e5115565dd962a961cf594b14755b") [ 799.456893] binder: undelivered TRANSACTION_COMPLETE [ 799.465176] binder: undelivered transaction 202, process died. [ 799.481603] binder: undelivered TRANSACTION_COMPLETE [ 799.496122] binder: undelivered transaction 204, process died. [ 799.530475] binder: 26919:26921 ioctl 5 20000000 returned -22 [ 799.545074] binder: undelivered TRANSACTION_COMPLETE [ 799.555531] binder: undelivered transaction 206, process died. [ 799.564935] binder: 26919:26921 ioctl 5 20000000 returned -22 [ 799.577907] binder: undelivered TRANSACTION_COMPLETE [ 799.596291] binder: undelivered transaction 208, process died. 03:33:38 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:33:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x4b, 0x0, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0xac6c7ad9e0f46ed8) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000240)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@rand_addr="7749a60f796e3bf09412103e2b249ba7", 0x4, 0x0, 0x3, 0x9, 0x80000000, 0x338}, &(0x7f00000002c0)=0x20) ioctl$TIOCCBRK(r1, 0x5428) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r1, &(0x7f0000000300)="245c0a2bb62cabd7891c61227557882c61dd55a3558fc18a1c4359797bde8b43ddcbf1c0d32d2811171a911fa4d4760ef5cee9106d8e995d40cfdb9b03c84198d4d5670f49ffd400ce156db05685de41c6ac0d29e5482b0a7394f6572dbe04f1ae94aa0ec6", &(0x7f0000000380)=""/233}, 0x18) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'broute\x00', 0x0, 0x3, 0x65, [], 0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}], &(0x7f0000000100)=""/101}, &(0x7f0000000200)=0x78) 03:33:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x36, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:33:38 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x0, 0x70bd26}, 0x1c}}, 0x0) r4 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r4, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, r2) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r7, 0x80003) sendfile(r1, r7, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) sendmmsg(r3, &(0x7f0000001300), 0x249, 0x0) r4 = inotify_init() signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SET_TSC(0x1a, 0x0) sched_getscheduler(r2) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4, @broadcast}, 0x16b) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x6}, 0x10) capset(&(0x7f00000003c0)={0x20071026, r2}, &(0x7f0000000480)={0x5, 0x3ff, 0xfffffffffffffffe, 0x1, 0x3, 0xffff}) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e2f66696c6530202070726f630a542d8021557c81ac3f0e5845d0d160d68a6ab4cc334eeff5dfd3a7389dd5aa7ea38d3ff498cc0a0305b907a6c8810d0e2581a9455c6e7c4275254c21a384bfe20b419e53fe9a863bdba7db89465bfe9fe3fb81d88d5103ae"], 0x69) r5 = syz_open_procfs(r2, &(0x7f0000000000)='net/ip_vs_stats\x00') r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x308, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000240)={'lo\x00', @ifru_flags=0x2000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) 03:33:38 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df", 0xa8}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) [ 802.096626] binder: undelivered TRANSACTION_COMPLETE [ 802.110503] binder: undelivered transaction 210, process died. [ 802.118488] binder: undelivered TRANSACTION_COMPLETE 03:33:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) fcntl$setown(r1, 0x8, r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000040)={0x2, 0x200, 0x5, 0xffffffff, 0x6, 0xfffffffffffffff7}) 03:33:38 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x103) symlink(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/99, 0x63}, {&(0x7f0000000340)=""/135, 0x87}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f0000000180)=""/96, 0x60}, {&(0x7f00000004c0)=""/127, 0x7f}, {&(0x7f0000000540)=""/67, 0x43}], 0x6, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_matches\x00') fchdir(r2) quotactl(0x2080000201, 0x0, 0x0, &(0x7f00000002c0)) [ 802.159803] binder: undelivered transaction 212, process died. [ 802.186555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=26946 comm=syz-executor.4 [ 802.197048] binder: 26948:26951 ioctl 8903 20000080 returned -22 [ 802.242726] binder: undelivered TRANSACTION_COMPLETE [ 802.254423] binder: undelivered transaction 214, process died. [ 802.261501] binder: 26948:26956 ioctl 8903 20000080 returned -22 [ 802.277891] binder: undelivered TRANSACTION_COMPLETE 03:33:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:33:38 executing program 2: r0 = socket$unix(0x1, 0xfffffffffffffffd, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000006c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(0xffffffffffffffff, 0x0, 0xa7934c776eb33b70) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r2 = socket$unix(0x1, 0x1, 0x0) gettid() r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0) getpeername$netlink(r3, &(0x7f0000000200), &(0x7f0000000240)=0xc) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000006d80)=0x4e) r5 = fcntl$dupfd(r0, 0x0, r4) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000140)) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, 0x0) write$selinux_load(r1, &(0x7f0000000300)={0xf97cff8c, 0x8, 'SE Linux', "994f59f009356d3630042ff6c307e16fa2db2f1dbcfda691c49938d940b10159cd985a8728c19f03f1c82d8ff69702a663849202e8429cd384292c6ec0f4be797ea64b6271a0ff6adde3174be75d03df9eb9ea06e4000d05b21373662e15bb6cd28f4f2d1d6368da63de04c3760172b0e2ff8c5b924d1449cee167a8cd2c25e98a9a1fa995dc341f332e874b8c750971b1c0db7414e9ec767b7074c627cb4477538585585ebb9a797e62598c0b509dff2a3d8683b35f732bf1a81154ccc0192e066419f7de74414abe5f30d5659f54b479d9da80112f03f5e7e8ae6014de53a5a03a76026fa2d91366ed7700ee8fb296f9ce94f9c7"}, 0x105) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000002c0)=0xda8, 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvfrom(r4, &(0x7f0000000640)=""/69, 0xfffffffffffffecb, 0x0, &(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @local, 'bridge0\x00'}}, 0xfdd3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) [ 802.288936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pig=26957 comm=syz-executor.2 [ 802.304228] binder: undelivered transaction 216, process died. [ 802.353103] binder: undelivered TRANSACTION_COMPLETE [ 802.368181] binder: undelivered transaction 218, process died. [ 802.376205] binder: 26959:26965 transaction failed 29189/-22, size 0-0 line 3118 03:33:38 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x0, 0x70bd26}, 0x1c}}, 0x0) r4 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r4, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, r2) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r7, 0x80003) sendfile(r1, r7, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)=0x1000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) sendmsg$unix(r2, &(0x7f0000000480)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000140)="6f09c180f75973f761325c6e1076c0ee8cc93e65b8e0f133c97803c0028a8c11954e185f0f5e1a5970c8b0765bb61d35fe52898a012bd5d11492be3b6c43cb0ab145cde747ba4757a8fac5bb6fc65067d0ec0a48d4d73c44b13ce3bdbdbb7a981209c96c797850f3197dffd4ec2b9eedbfcd5e245c85108fcab71e4adada3d5354c8391b9eb06086c996c379", 0x8c}, {&(0x7f00000002c0)="cd4efaa3c23d3c9179636468cdd2aba370a248ff2f08d16d92e85430958f247371e0ce73eac083f024d3b33a5e16668e42fa7aad8f4e24d46e03d92d1efe267a42ee0e756ba459eb6591103c15afd2c936ca737271969e5ab6dcce659df023fa8b16898c806aa3cd943b9fb72607b55ddb4a264e9e20c3d9f6d75644616e1a21c9748c31ec1b260debb3ed84644e", 0x8e}, {&(0x7f0000000380)="a298f13c3c5d570336daee0178742e4bba18ee9dcbf3851b37d3175261a60473b8e2a48b3c8a094ebc6af4641f3d7b", 0x2f}, {&(0x7f00000003c0)="2ba288a815e29bd48c7699304261e71e56105c2ca0a42e97964d9aae2cafe4cdd8178e75fca2c94e042e77a6de282cc6525b80f21fa230b02a655a3945bded72b9d44dfb1c793a944fea041bc142e9c6d3b604d702cac831077b764843941252d5837ba23bc0723d8fe4ea9d2a755b61c8c99d0ed5067b318d9d07", 0x7b}], 0x4, 0x0, 0x0, 0x800}, 0x800) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000004c0), &(0x7f0000000500)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 802.411318] binder: undelivered TRANSACTION_ERROR: 29189 [ 802.467454] binder: undelivered TRANSACTION_COMPLETE [ 802.484064] binder: undelivered transaction 222, process died. [ 802.506039] binder: undelivered TRANSACTION_COMPLETE [ 802.526400] binder: undelivered transaction 224, process died. 03:33:41 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:33:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100400000000000000000000200000000000000000000000000000000000000000000000000000000faba0000000000000000"], 0x0, 0x0, 0x0}) 03:33:41 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r3, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x8001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:mtrr_device_t:s0\x00', 0x23, 0x3) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000000c0)={0x0, @rand_addr=0xffff, 0x4e20, 0x3, 'fo\x00', 0x2, 0xd9, 0x30}, 0x2c) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x40) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3, 0x8000}, 0x4) 03:33:41 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df", 0xa8}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:33:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000180)) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) listen(r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000080)) ioctl(r4, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") close(r0) 03:33:41 executing program 2: setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:var_lock_t:s0\x00', 0x20, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x2000000020004, 0x0) signalfd(r0, &(0x7f0000000300)={0x6}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=0xfffffffffffffffd, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x800000000, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x1e7, 0x0}, 0x9}], 0x40000000000032a, 0x8000001) timerfd_gettime(r3, &(0x7f00000004c0)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000240)={0xac6, 0xffffffff, 0x0, 0x4, 0x19, 0xfffffffffffeffff, 0x1b2, 0x100000000, 0x100}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f0000000440)='./file0\x00') socket$key(0xf, 0x3, 0x2) unshare(0x60000000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x6000000004002002, 0xfffffffffffffffe) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x6, 0xff, 0x3, 0xffff, 0x3846, 0x5, 0x83}, 0x1c) sendto$inet(r6, 0x0, 0xfffffffffffffca5, 0x200007fc, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) add_key(&(0x7f0000000500)='cifs.spnego\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000580)="4f6bf02ab111405dfe7795fe438d6114dacef6151fa10dc36ee49608d65891c6f239d0eaacddd8c34516e06138856a9c59fa2173b42992b241c11b40b859249a4471de2dfa53b5350ff2e239ce2df2f7f0d6d087f15aa73b71b56a4bd73552b27a71d40ef64fbd830e3aba2233101e2788c3f8f1791203ec53dd7aa86be3de51219dda8753cade556231c14304adb2ac4ca14f90f83426be77d92bfaf9fd78f2a8dc98aebed7", 0xa6, 0xfffffffffffffff8) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000280)) [ 805.120833] binder: 26983:26988 got transaction with invalid data ptr [ 805.127613] audit: type=1400 audit(2000000021.160:18921): avc: denied { relabelto } for pid=26985 comm="syz-executor.5" name="TCP" dev="sockfs" ino=76827 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mtrr_device_t:s0 tclass=tcp_socket permissive=1 [ 805.144971] binder: 26983:26988 transaction failed 29201/-14, size 2-0 line 3296 03:33:41 executing program 5: r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x325ab7b1) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000840)={[{@dots='dots'}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@fat=@gid={'gid'}}], [{@hash='hash'}]}) [ 805.204033] binder: undelivered TRANSACTION_ERROR: 29201 [ 805.216571] binder: 26983:27001 transaction failed 29189/-22, size 2-0 line 3118 [ 805.216796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=27000 comm=syz-executor.4 [ 805.241025] binder: undelivered TRANSACTION_ERROR: 29189 03:33:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) r2 = fcntl$getown(r0, 0x9) sched_setparam(r2, &(0x7f0000000000)=0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000001c0)=0x80) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440)={r2, r4, r5}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:33:41 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000740)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000840)=0xe8) getresuid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)=0x0) syz_mount_image$msdos(&(0x7f0000000600)='msdos\x00', &(0x7f0000000640)='./file0\x00', 0x8, 0x1, &(0x7f0000000700)=[{&(0x7f0000000680)="72b8f7899803d0a25efcbd1af366b15bdf41c567140796c31d3e5f922cc8b703547684684df68cd3424a0afcb0ca6c8754232d8cca0e42bfaf06eb03c3753703b2112bf57c728384b7f8e30aad658370e8fe1378", 0x54, 0x4}], 0x2, &(0x7f0000000940)={[{@fat=@uid={'uid', 0x3d, r1}}], [{@fowner_gt={'fowner>', r2}}, {@fsmagic={'fsmagic', 0x3d, 0x40e}}]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@empty, @dev={0xfe, 0x80, [], 0x22}, @mcast1, 0xe1f3, 0x80000001, 0x8bd, 0x0, 0x0, 0x80800000, r3}) symlink(0x0, &(0x7f00000009c0)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) execve(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000380)='posix_acl_access\x00'], &(0x7f0000000580)=[&(0x7f0000000400)='+%\x00', &(0x7f0000000440)='#\x00', &(0x7f0000000480)='/selinux/commit_pending_bools\x00', &(0x7f00000004c0)='user\\(+\x00', &(0x7f0000000500)='security.capability\x00', &(0x7f0000000540)='\x00']) mkdir(&(0x7f0000000040)='./file0/file1\x00', 0x0) setuid(0xee01) chdir(&(0x7f00000005c0)='./file0/file1\x00') rmdir(&(0x7f0000000100)='./file0/file1\x00') chmod(&(0x7f0000000a00)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x591, 0xaa22}, {0x5, 0x200}], r4}, 0x18, 0x1) mknod$loop(&(0x7f0000000a40)='./file0/file1\x00', 0x2, 0x0) 03:33:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x21, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x41) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000040)={0x7f, 0x2, 0x4, 0x5, 0x0, 0x8}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x10) [ 805.317723] binder: undelivered TRANSACTION_COMPLETE [ 805.324578] binder: undelivered transaction 230, process died. [ 805.344598] binder: undelivered TRANSACTION_COMPLETE [ 805.361422] binder: undelivered transaction 232, process died. 03:33:41 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r3, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 805.391937] FAT-fs (loop5): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 805.418215] binder: undelivered TRANSACTION_COMPLETE [ 805.426135] binder: undelivered transaction 234, process died. [ 805.451116] binder: undelivered TRANSACTION_COMPLETE [ 805.465758] binder: undelivered transaction 236, process died. 03:33:44 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x80) getsockname(0xffffffffffffffff, &(0x7f0000001280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x80) sendto$packet(r0, &(0x7f0000000280)="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", 0x800, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffffffffffe, @remote, 0x100000000000003}, 0x1c) write$binfmt_script(r1, &(0x7f0000002ec0)=ANY=[@ANYBLOB="0521202e2f66696c6b300a"], 0xfdef) 03:33:44 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:33:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x59, 0x4, 0x2, 0x7}]}) clock_settime(0x7, &(0x7f0000000080)={0x0, 0x1c9c380}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8000, 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f00000000c0)={0x1000, 0x1, 0x4000000000003, 0x80000000000800, 0x10000, 0x800}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="116348400060b834280000000000000000000000000000000100000000f7ffffff00000000000000000000000000000000000000263d2fb3eecb3d4a000000000000000000000000000009b414be01caa34f8e37e35931945faa3a648fdff0da247befcdb3f73be1d6b8d34f0f4bf0347b5c3f715327c1d03705fd058bd2e605bde7eec9282e04c42d46253ac86f20013e776782174809e75464995c91353889c1681b62c06c47"], 0x0, 0x0, 0x0}) 03:33:44 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r3, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:44 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df", 0xa8}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:33:44 executing program 2: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df", 0xa8}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) [ 808.143828] binder: 27044:27048 got transaction to invalid handle [ 808.166720] binder: 27044:27048 transaction failed 29201/-22, size 0-0 line 3118 03:33:44 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r3, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 808.193438] binder: undelivered TRANSACTION_ERROR: 29201 [ 808.205654] binder: 27044:27056 got transaction to invalid handle [ 808.207364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=27055 comm=syz-executor.2 [ 808.220287] binder: 27044:27056 transaction failed 29201/-22, size 0-0 line 3118 03:33:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000002c0)={0x624, {{0xa, 0x4e22, 0x81, @mcast1, 0x6e42ef1b}}, {{0xa, 0x4e23, 0x400, @mcast2, 0xc7}}}, 0x108) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 808.242645] binder: undelivered TRANSACTION_ERROR: 29201 [ 808.262478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=27058 comm=syz-executor.4 03:33:44 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x0, 0xfffffffffffffffd, 0x8) sendto$inet(r3, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40000, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x8, @remote, 0xff}, 0x1c) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5e84930000000000"], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) [ 808.318472] binder: undelivered TRANSACTION_COMPLETE [ 808.325730] binder: undelivered transaction 240, process died. [ 808.328021] binder: 27064:27066 transaction failed 29189/-22, size 0-0 line 3118 [ 808.339966] binder: undelivered TRANSACTION_ERROR: 29189 03:33:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xd8, r3, 0x18, 0x70bd2a, 0x80000000, {}, [@TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3474}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6de}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa84}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 03:33:44 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x0, 0xfffffffffffffffd, 0x8) sendto$inet(r3, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 808.376541] binder: 27071:27073 transaction failed 29201/-28, size 0-0 line 3264 [ 808.385154] binder: undelivered TRANSACTION_ERROR: 29201 [ 808.393085] binder: 27071:27074 transaction failed 29201/-28, size 0-0 line 3264 [ 808.401794] binder: undelivered TRANSACTION_ERROR: 29201 03:33:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x4) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000fc00000000000000000000000000000000000000000000000000000000b950b3e6fdb249f487261fad323aa0e02c3a0619032d6484e3caa817ccfd006eeb7436e56582dd8ec0cd9d7588a640f4411bc9ed3218a5706dec266e317902a681478bfceab1defc8d685fe2445b9c56c608f78181df14b8e3c468ca3c5536919589f0b8701f62c6ab94c2ed7445dc88f031859962c59e8026416ed29cced02cfbf3f5003c0bcbdb0eb07245d922ae008b5c483963ba9aa85da58fa97025928b4caf8ee82c015c41ae124852ce4eff27"], 0x0, 0x0, 0x0}) [ 808.457272] binder: undelivered TRANSACTION_COMPLETE [ 808.463437] binder: undelivered transaction 248, process died. [ 808.485957] binder: undelivered TRANSACTION_COMPLETE [ 808.500468] binder: undelivered transaction 250, process died. [ 808.522316] binder: 27086:27087 transaction failed 29201/-28, size 0-4227858432 line 3264 [ 808.541219] binder: undelivered TRANSACTION_ERROR: 29201 [ 808.552936] binder: 27086:27089 transaction failed 29201/-28, size 0-4227858432 line 3264 [ 808.562517] binder: undelivered TRANSACTION_ERROR: 29201 03:33:47 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:33:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x783000, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x9) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:33:47 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x0, 0xfffffffffffffffd, 0x8) sendto$inet(r3, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:47 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x0, 0xfffffffffffffffd, 0x8) sendto$inet(r3, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:47 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bd", 0xae}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:33:47 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r3, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 811.149786] binder: undelivered TRANSACTION_COMPLETE [ 811.161112] binder: undelivered transaction 256, process died. [ 811.176226] binder: undelivered TRANSACTION_COMPLETE 03:33:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f00000002c0)=""/4096) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x4, 0x20213, r1, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 811.197806] binder: undelivered transaction 258, process died. [ 811.225328] binder_alloc: 27118: binder_alloc_buf, no vma [ 811.241032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=27120 comm=syz-executor.4 [ 811.260008] binder: 27118:27119 transaction failed 29189/-3, size 0-0 line 3264 03:33:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x13, r1}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:33:47 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80000, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000000c0)={0x8d, 0xa, 0x0, [{0x8, 0x6279, 0x9d, 0x3, 0x3, 0x7, 0x20}, {0x5, 0xaf, 0x80000001, 0x1bd3, 0x2, 0xffffffffffffffaf, 0x5}, {0x7fffffff, 0x3, 0x100, 0x2, 0x4c, 0x4, 0xc06f}, {0x5, 0x2, 0x5, 0x2, 0x2, 0x3, 0x2}, {0x6, 0x100000000, 0x0, 0x7, 0x8, 0x1, 0x1ff}, {0x5, 0x6f, 0x6, 0xfffffffffffffe01, 0x5, 0x1a, 0x1}, {0x0, 0x8, 0x8, 0xfffffffffffff0bb, 0xfff, 0x3, 0x8}, {0x472, 0x0, 0x4976, 0x5, 0x2, 0x1fac, 0x100}, {0x6, 0x4, 0x4, 0x4, 0x5, 0x9, 0x5}, {0x3, 0x9, 0xffffffffe2c31829, 0x5d, 0x2, 0x0, 0x2}]}) syz_emit_ethernet(0xfdf2, &(0x7f0000000000)={@local, @random="119cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x80ffffff0000000d, 0x700, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x3000], 0x2e00}, @mcast2}}}}}}}, 0x0) [ 811.282406] binder: undelivered TRANSACTION_ERROR: 29189 03:33:47 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0x0, 0x8) sendto$inet(r3, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:47 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80000, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000000c0)={0x8d, 0xa, 0x0, [{0x8, 0x6279, 0x9d, 0x3, 0x3, 0x7, 0x20}, {0x5, 0xaf, 0x80000001, 0x1bd3, 0x2, 0xffffffffffffffaf, 0x5}, {0x7fffffff, 0x3, 0x100, 0x2, 0x4c, 0x4, 0xc06f}, {0x5, 0x2, 0x5, 0x2, 0x2, 0x3, 0x2}, {0x6, 0x100000000, 0x0, 0x7, 0x8, 0x1, 0x1ff}, {0x5, 0x6f, 0x6, 0xfffffffffffffe01, 0x5, 0x1a, 0x1}, {0x0, 0x8, 0x8, 0xfffffffffffff0bb, 0xfff, 0x3, 0x8}, {0x472, 0x0, 0x4976, 0x5, 0x2, 0x1fac, 0x100}, {0x6, 0x4, 0x4, 0x4, 0x5, 0x9, 0x5}, {0x3, 0x9, 0xffffffffe2c31829, 0x5d, 0x2, 0x0, 0x2}]}) syz_emit_ethernet(0xfdf2, &(0x7f0000000000)={@local, @random="119cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x80ffffff0000000d, 0x700, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x3000], 0x2e00}, @mcast2}}}}}}}, 0x0) 03:33:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1163484000000000400000000000000000000000000000000100000000dce61000000000000000000000000000000006008100"/68], 0x0, 0x0, 0x0}) [ 811.348183] binder: 27128:27130 transaction failed 29189/-22, size 0-0 line 3118 [ 811.362207] binder: undelivered TRANSACTION_ERROR: 29189 [ 811.426683] binder: 27140:27141 transaction failed 29201/-28, size 0-141837100646400 line 3264 [ 811.445670] binder: undelivered TRANSACTION_ERROR: 29201 [ 811.453065] binder: 27140:27143 transaction failed 29201/-28, size 0-141837100646400 line 3264 [ 811.462749] binder: undelivered TRANSACTION_ERROR: 29201 03:33:50 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:33:50 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x10020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='dax\x00', 0x0, 0x0) 03:33:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) ioctl$TIOCCONS(r2, 0x541d) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:33:50 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0x0, 0x8) sendto$inet(r3, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:50 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bd", 0xae}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:33:50 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r3, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 814.182460] binder: undelivered TRANSACTION_COMPLETE [ 814.194069] binder: undelivered transaction 268, process died. [ 814.209201] binder: undelivered TRANSACTION_COMPLETE 03:33:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 814.236374] binder: undelivered transaction 270, process died. [ 814.264010] binder: 27167:27168 got transaction to context manager from process owning it [ 814.273070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=27169 comm=syz-executor.4 03:33:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) prctl$PR_GET_SECUREBITS(0x1b) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 814.287456] binder: 27167:27168 transaction failed 29201/-22, size 0-0 line 3109 [ 814.301927] binder: undelivered TRANSACTION_ERROR: 29201 [ 814.309264] binder: 27167:27171 got transaction to context manager from process owning it [ 814.318086] binder: 27167:27171 transaction failed 29201/-22, size 0-0 line 3109 [ 814.326838] binder: undelivered TRANSACTION_ERROR: 29201 03:33:50 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0x0, 0x8) sendto$inet(r3, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000053d61beafdac88b63b2c"], 0x0, 0x0, 0x0}) [ 814.398939] binder: undelivered TRANSACTION_COMPLETE [ 814.409898] binder: undelivered transaction 276, process died. 03:33:50 executing program 1: clock_nanosleep(0x2, 0x0, &(0x7f0000000000), &(0x7f0000000040)) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 814.443832] binder: 27182:27184 transaction failed 29201/-28, size 0-0 line 3264 [ 814.457190] binder: undelivered TRANSACTION_ERROR: 29201 [ 814.464739] binder: 27182:27185 transaction failed 29201/-28, size 0-0 line 3264 [ 814.474477] binder: undelivered TRANSACTION_ERROR: 29201 03:33:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x2000, 0x0) r2 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000001c0)=0x0) getpgid(r4) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000030000000000000000000000000000000000000000000000000000000000000000f1ffffff0000000000e6d2b6b62b568eb3b3caa518a045cd6af7ce771d20307ee300770d84708751878607d5e682000026e5a61023b35a88221701c288e766475936aaf4c764c618d3f0cc516e3f22769b8fbacddee3760f72210000000000000000"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x0, [], [{0x3, 0x1, 0x5, 0x7ff, 0xdc5, 0x5ab}, {0x1000, 0x5, 0x7, 0x3ff, 0x5, 0x5}], [[], [], [], []]}) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f0000000180)={0x1, 0x5, 0x1}) fcntl$getown(r1, 0x9) keyctl$join(0x1, 0x0) [ 814.501465] binder: undelivered TRANSACTION_COMPLETE [ 814.518732] binder: undelivered transaction 283, process died. [ 814.555944] binder: 27192:27193 transaction failed 29189/-22, size 0-0 line 3118 [ 814.564433] binder: 27192:27193 ioctl c0c0583b 20000480 returned -22 [ 814.573243] binder: undelivered TRANSACTION_ERROR: 29189 [ 814.581450] binder: 27192:27194 transaction failed 29189/-22, size 0-0 line 3118 [ 814.589621] binder: 27192:27193 ioctl c0c0583b 20000480 returned -22 [ 814.598010] binder: undelivered TRANSACTION_ERROR: 29189 03:33:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xfffffffeffffffff, 0x15, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:33:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000040)=""/13, &(0x7f0000000080)=0xd) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000002080)={@ipv4}) 03:33:53 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bd", 0xae}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:33:53 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x1a200, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x800, 0x8, 0x3}) [ 817.190079] binder_alloc: 27199: binder_alloc_buf, no vma [ 817.201457] binder: 27199:27202 transaction failed 29189/-3, size 0-0 line 3264 [ 817.226979] binder: undelivered TRANSACTION_ERROR: 29189 [ 817.238782] binder_alloc: 27199: binder_alloc_buf, no vma [ 817.253762] binder: 27199:27216 transaction failed 29189/-3, size 0-0 line 3264 [ 817.275019] binder: undelivered TRANSACTION_ERROR: 29189 03:33:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$binder(0x0, 0x0, 0x10000000000000) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = dup(r0) sendmsg$inet6(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x5, @ipv4={[], [], @local}, 0x7fffffff}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="6370ff1616552d3bf8c1746b26afaaeb77e819fbe09c277c296113efda782268a30efeab9d54409f5e19a152eb7c6fbb1fe74160dc35e402214cc7b0436dc231b001490bd0990f485b17859adb880a4d4a891d1b8f7f070eb380e2ac61265093d2ca5954312b1a02d669527da13c", 0x6e}, {&(0x7f00000000c0)="66242cb15bf914", 0x7}, {&(0x7f00000002c0)="8d58d366c5d7a3142bbb5b2bc7fb1a1388aee8c2e2bd95b7bebd5831f74ea70de0fbc03f0fc2b47318c630a51deee4f2f218b588726c92ec145b4a52bd89355cd9c36c4ca4f425eab0f5d1f72b4b209b7763df332738c16bc32c8dbc718592be25ef80beea2ecbe68528847daf7cd2b1a6ed068d40b5c8af668fb5312773d563ce3f319f96f185d8f8e1505ca1e10473a98aca5d8fb5bca7a90adebaf354cbb140bc94eecc611377d3c9be809d8c9b82c9f9a0566efe46323a578b843e305b8047956214d85609a2dff8356e431bb493b3c74c95cf7c2d972f9a31de765e5df9b7c4457eeee51586b951c28011b8038dfa0fded623b0e4e4", 0xf8}, {&(0x7f00000003c0)="81754355f8be6990dc913d0b532deb5270296aada2f12a3cba1b1cdc3988811fef01fc98c7acc86694b4e886bdddd3efbba5308301ba43d704cd9bcb14e54d102ebff7c0b158baf8d1a6ff478f594d4ccde063fcf1d4881df0394257e410e8cc8a01fa5a1fcec9c2b2b471c411ca4c28fc4164983b2c8ee35875b1bfdbdbfddfe670c3983cd0a8365cc140b974e6fd429a7c379832432f82ced0357855622b16b02c099266c694cb2f67444e93558cfa7637d05d76e8110c3405ff1c95e3b0336ee85663116b3508d83b1eedc764fbf7ac", 0xd1}], 0x4, &(0x7f0000000180)=[@rthdr={{0x38, 0x29, 0x39, {0x87, 0x4, 0x3, 0x800, 0x0, [@rand_addr="6cd637d3c81f666e30f6d6fe11665678", @local]}}}, @dstopts={{0x28, 0x29, 0x37, {0xaf, 0x1, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @ra={0x5, 0x2, 0x49}]}}}], 0x60}, 0x4000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:33:53 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(r3, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = inotify_init1(0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x4000000080004001) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0xa400295c) r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8400}, 0xc, &(0x7f0000001600)={&(0x7f0000000140)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20004011) r5 = dup2(r1, r3) write$tun(r5, &(0x7f0000000200)={@val={0x0, 0x20d}, @val={0x3, 0x5, 0x47d, 0x1e8, 0xffff, 0x4}, @ipv6={0x7, 0x6, "601f6b", 0x138b, 0x2d, 0xff, @mcast2, @ipv4={[], [], @rand_addr=0x9}, {[@fragment={0x3e, 0x0, 0x12a, 0x5, 0x0, 0xffffffffffff7fff, 0x68}, @routing={0x2f, 0x6, 0x3, 0x3, 0x0, [@rand_addr="6f6a5602fab4e2bf4b763bda83e7c5af", @empty, @loopback]}, @hopopts={0x2f, 0x0, [], [@pad1, @pad1]}, @dstopts={0xff, 0x5, [], [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @srh={0x0, 0x6, 0x4, 0x3, 0x1, 0x70, 0xd42, [@remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}, @dstopts={0x2f, 0x3, [], [@ra={0x5, 0x2, 0x83}, @pad1, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x7}, @jumbo, @padn={0x1, 0x2, [0x0, 0x0]}]}, @dstopts={0x7f, 0x22f, [], [@ra={0x5, 0x2, 0x5}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @local}, @generic={0x7, 0x61, "6accfc80424275418c57cd5dea2ea712863c39bc1124e597d9b018759b46887bb66c50a3f3115d05c8aa968d26abe3b12712e1ce5ca9eba28939232fe0b503b5f8a01a7d3e2789e35b8a8d68df283d85f961f23fc2f83c39a5ea1b7ff38966cb2c"}, @generic={0x8f2c, 0x1000, "498cd287a1f6f5b3f0ff6b91e50c22e8a6b034b2a3a99c3bc6c35b308f8a5e25089702adc09299116954b28a16809e1ad7d4afcddf2cadfa508c46cf7de03fc69cda7ce832c1e10cb93a4fc2bb818e0adad0f8ad537c22a4079979071c5ee27a9b150919fd0b44381765565d39dc4a8e8007ba948cc3b8098ccf11aad4e508ebc41ec3fd832f385c08ea7bb8c0b4b40867e40f3e2338856b83605d2e081e50870a28e240aeb0349fe933efa5aa616107e6085a2026cb484a40d6d50994be3fb428184911e65f3dcf3a9740b76392967b23bcc18b270f9083de458801b7807bab04d8d4c198cde98e4c117addc9e571e5698f7e2874f0a4261d189cec58d3453111ddf0227c69902963b33628526a9091f58dda071eb4ca926cffb0dcefdb8e7a4b39d94ab544175f9e74154fc1294553d49aa16d4ff086006b6bf45c39372420fa7f2824577f35b0e8d68d67699677cfef0c45d2ea2d76c4cc05b08a9c3f6953ba6d884575799ea2a7a4e37afb4730b24b1e3a8cc8f4fe59ec6ce65d50b54b5131704919829d0d17c10c40bb4d4f08015359ae903931a3be123ab70323f61fb05e49b757b91f723b3de63da0da0fd5c137cf9a95e28000b738f4b08333656337876011c51ccbfbd2659a70a682d1bcfa4e41f292e155f5e370c268eb313049311ee6b746fffabce28b357075ca7d872ee64a393f8e954e2bd0c253073596425b1310a10564aeacb64b02b0769c7048e0779a59a78fcd0c843bc1b9fed3e9f8b63cd83e011a0083273b57a13915130b6f2f4feed2eacfc25586285770da4e92247c12209acf423048f9a8a4994754b718a9604a555462762c203dfe45e1257fc15bc193e6c9dfe067c337979597bf271004ee202bee12b5656603d572055a6d38494ecbfb1f610668ae9ff7fcdeefcf2326e03d284630975da307dbbd9b8d15a5dccf41e0511b3d5df861fc7285b101fa8056f60bd3dcc379d5b6ed5affbd8a70d640e898a027b8181c8f52ea607ef4e33e42f49d89d4d588a27644458c8abc8119113f76c119b2fdcdec7a28a0e638b0152d24db7f85664043e96378931a049257c98be7efc234375ec067fd69969d28646d31c8d0acf8ec8c200c4434dc2571f8c1ac3f06cd9d471b7b781c9169641c72fe646611aa84616cc45859b991be0f470410869fd35d0e67000520554c33fbb4fb3a948b74684d609594fd6d8c85c8f59a83c7bee58bd9e0566651b072b7744f36c8b29b93724c667314867126397349dd39d670057153d97b53969c4bae41d3ebbc1beba56272d3a2fb3034020fcaa24e0595a77be17f34316f4554135c04b121a22c0ec8df0a62a8ec99b2ee05bb68099b6c85727f6b1db831e9a12f6fd58e10cdb18d9f81a58402eca29facd02554875b773a96eb9694e2319294958c10dac7a179a765d8c43785f09d1fc09697f9cc85defbf1c1a426818a3e8869db3c62f25e6d67f07a6c2b0f449b62cccd258975324d94cc7f5d87fdc78e16f0d673b3eb548d94fcb00d098467aa4dda9a82022a456460ce8c1097dd3a22d641c0a55a80439f1bedff2ed0ba073ab697a8470c56009e42372ab450110b306db66cfd634e411294cb6ac79a9955393aa928f44d8d37e2b21fbbaea408ad299a7c9569c237af24a5325af77b30eb2de52e702b53f3858b5d1bed5b1a783c4285eb1ab92beda35af71ea801bd3277516bd3d4b8c544086b0cee2fa242f93e8458daff09aa89348a7f3ad7e56ff22b36430e68b9245a0bec1294072f447cffca916fcff60691b0a2a7d2f48f9e70a0cd1fa93a68df1ca8f395e5c2d02634f7754f20ba17edf0d859bbbf6a965b14db89fb12d9b17c4a8aff95200896fb7df9a41a56b00c677e13bc22695421d3cb425318d272ef85f26216a647f97ef984ad0790858bafb02706c4e9c70ed0f9fa55ce3ddbd4176ee56833624f255eef38b770d054c00cb43e1fd04b3a24b7d55d55400c922765bf0f8e48df3112854213b6e6a29fc59bf3b1f4498d36812873fd6266bb598cdd6ed3be4ef70341c1f88051417a192a24268e8711ffc6694ef0af75a9ce0bb40f53aeb4614083f88857238328c3224823ee8ef6a4ff7e3b96165680afaa924d48e6e35fa58ff08eb160c289c781f1503ba4e075f7917506dbd23fac33cda03972440b27581d885228c10eb5f4e17cadeb8a8148b6bc74ef247912cdaa6454db2220895d5dcb3a2b884f8cfd7db96ae868c249fc189f16c58d99e8209851eb7c0494c3f54e520d00e904055ed7e9a5e34cb7276b097b7f0b3003e922ccc8271c857c360601b6ab6c35518339de3718173709cd53d024dcbc506e33d4193c9e7a4982e78cb39cca98abb49ceb6b31e306da51149c2344903e1c0aaabd03c03c21c8c6391555171a471805ad2038a87bfee75eb173d93cf731127c00bb08d92261377b262dca482a7aba5ffcdfe2603b09175e94c0492caa4a9322ac5dbed2ec1795b12671a9c3bb2de09ec3801a2c40fc107f960805d8eae80ae24cf06ff6f11da42e2a6cd2137fd021530e82321fe759645fe8661e76c68a0f5a395f20c8b634732f92ed55a5eb17311eb7972684635d86ac5513dc98a31f9a7b7ac3418c21230dc2ce350faca6450a0a98b3b10720e1829644659d20469d9f59a4d37e81230ec2685f1b00ef3e4f3165fb5e71ec823f0a76548fc1c12042c7492c0c35f110ca948294cde8f02d72b7ce67d8ee70edabe2c895a3ae1df1ec6b77f7f0043ea3d28bcdb32a436a3d0f38a0b7b24e884cecd2f0ccfdff1c26ea40135b7c5d147d936dccc6e5d5296156214b33718c5d992e16759af778056de14f17b53cec7587a1c826eddca07a3f308da6d893005d98880a46a570fee044e3a0dd002a3b73b81d6ae43de500081aabe18b338e6a8920164332b63b6b997dcec1d0c8b8513dd3f7ad121449a6a26f4ee133de61234211d923022636edd3e1812e879e6741b9d2ab446a0bfaa3cd2755805c05414533dc5dc8ee37c5c784b282184ab6cc80524192268ebd9d8326736e5fad0e98b4fa2e0e9844b116d775df63c94433a6c3c5c8a56094d3b25bfbeca9915447aac6a0da788cdd7eac6cffb6bb0b9fef0029d9ecf13fa5bde4f6bc1edaf071d6ced9a921ef8ab339bda6c2756e1221c3837a75a5d16808f7ceb3aa885c3bc44c39b3752cb49c3a209709b1e5b2c4551f4dae2ad7e3b1fd024e94439d1996ec03216dd07b62f3dcc3102031b95b3a3764db543d7f614e435cfb8818275ce84efd39d2b7729f7c1c571721f73a2c28e1463b678ceb5892695f81839614372ebdb0ab188c46ea5541d35e7650ec02708e909c340f5aa78b4973d0faa901c120f108b89381b5e32bdb7211d38db53137cd4c75383750808cf25a0ad94754d4d527cce8eb67aca5f20ef4dc134ab082c9980d2e616a2fa23e2b3206bbc38d108181db592a26234f51b5a8af4bfe1b86250c188836e7c3e73b5b128d581345c0c5a453a0084abb6f87830b5b053d5abd339444554ffdb8e458e9ce3aade512a6d30e803470fdb4b047bc97b890d4ed50a668d1812bc43fc0363107098736249d802c2d0ebe9bd6b9ac47a1b06c852f09908edd075f10a3072fa707067a5e40f1fcf2eab364a02951511b415b17ae02686f43ca5a4e504adf6c43022c40834e5b785b52d29901bb01cd2c61d886f177644fe3fa9d20a02e0f11431d74d9b6807aa9492291f9cc9864ee31b972b13e8ca19e201b432c4c9f20c769c07219ed3996bc6b5bb7ff584e93b2422dc6a3561516a49ddf1d26be5e59b807589a7e839892b6a8fa3071724452a4656220da9d45bb981fe81c12fdd267b95db04b7c72549be32a4e5ebc12448cd67220da110b955d0a7c71d3f349dde2fd45208f8178acb96b412df94f7e0c50290900a6af8c48dbeb06b443fa38a214441a6ff2b47c7e7fa5ed129721053dcc9eb4dd74083df1303d6f2c57e7aa8c155f692b986d8a5f207a675db7b181002dba6864adc9f0cc5313bf7564280a71915948eaf505a00b3e2cbc7d7ed07a04e71a8cda0bde263512b097a900fd70e56cffd07bf51b230a0e505204676d9c0221ebd4533ea59211bbb20e2476ce782de7a84a2c418ad89a74f09c5aeefa9fec1b3c1e80e26a5419617703a7c243eab0e0fd12c3b15cb78e43d45448f8aa6ca9b49a8c65ceeb6a85092147442e40cb19d09b18365cc9db5e65ada0d87c9ec8e0fe422c6e84d832a38b6830a086950c93d07e317cfa2166df6a84d7655c3aa0efcff0f12134d932fb7551786f8f647f214b7c5b10bc693d9dca5cc660df6a1d88f4caeccabaf1cf03a38bbd76487ee5ed7827b14235874dfeb7d4901035a1a31914986bc530d5c74892b5bfbcacb46965581789a21292db979f6293f4e661ddbab94ef1017acaf3f1b1a6fd3ea942103b3b182295614202c4b63edea6679bd32a91b4a181e87a4b2c9b9c2d59647810a332c8f2dbce9ce6840ead9cc18916f7ca7f02e9a544f08d400ab8baf7a83f447f585e3e4bc165b8b092bdcad540c4ffeb7e0d5eea4aa2d41cdd27cef26999d97bbbf7b8003e856ce52f5243d83efad82f0802558ae79a557dfd86c9e405c83de8a867039e887112c960f6c4e79fdfe4a04613abf72050377c830864f58b1b99f9a7d6498c9fb772c5b11d4ba8e102a9d1c5b0de7ceb59aef936ea45e373dc3d8541527b38472c466be6cdd91b325bc371c3ea488b53401dab09334563047f7e851759b9fa46a88180b3d4e3b80c2bc0ba8f62172f529edab782a616d7ef1f04f2ffd4bde4b5f74872969fb89460ae7fddd9f0f5969e9f343201256b368d1128e889fbdf39ee72da6ba702f9e40be5783e5e9b2da0a4be693997ce2301ea93878824c7eddeabe5fbcb6dc63638c723442c9ae5384a29e89bcb612a66cad3b0a96cea4f8854066dace26c2f2c355f059cfb678f4bf7a6d19728973e77b9a6b627bfd8522f9614bf35ca6d99e0b7dfa4b45924c7e8e609dc8b7341639d872b8990c49d59d75c54d8df7a50d8515da0f8c54e94343c18780a3d7ce6f96279e8ac1c7a6ddde63a45c7b714a6d7c2c1813bbd3bc86dc0ff117ad0d1d4166d60b13fef94f0f56743adba20872fe098a29ea46e4e76097beed479a4f7d22b44721d8b4d0b36ea73d399903ba5144906f6420da7f9bdeb9e78d685faebfe54150113469cf7048b322b1eec9eeb069236a0d8312b3c81f5c0100eb6bb6d2166bfa699754bd155e83e3f327f55099c2bc20963c84d41d715c968a99ed7ad726a04df7bd85f7f44bc7b9a8d2bac510a3fd0cd66a7db3a208bd070cf519a487f9a8990ae70a9cec45a6b19948d55a5d533ff00d09d80a6c2c1f77387a2003f83289089f623240db86312aa4cc28c1d310b39de4b2a740fd2fc4321ff29f4bca21ecbbaf6797380464d347a9de4ef6dcf2ad1a073c1dc247cc267cdd59b44b49a70bbc889bf2365a3cc0c4970234331c898fd0c3f96df35a89bed8893e437a39094d523be389e1625bf961aa6473e55151dd42574c65d13bc15675e2c478a728f592c79d37f92e84b3824e6a51cf0e1b9d870485cd7b860e24d16866c3b97a71f4cf63b2056b643963af007b890366f41041fcbd25a2fda346c1891de0d37d8afb203b12967ba4c1594fa7f5ff1116d4c2aff658dfab539703a53193ac15dae7775755ddf8e8f653600c4bee3a9bd424b787f947627ae086af1fa0fd7fdc7ed73f834ea935826a46eafa0a259826d6d06b96158ac3b50bef2f1ad3b93e78ded4797d60d8ff5975e5e5b"}, @generic={0x5, 0xeb, "ce542ac09275db109144db4c340c86ab46e478579b80b476ab597c8d0a66b24d7b289a6d3e18482c8cb21625fb978495661f2896cf5b7c8e7ff84260735e877ce1f1751b8387324a61d70e25e3c3254e7796bcd29040caf1a350ad25e45c3149511aadb490bb5b560c38356075eec5f7263822874c6ba8554a90c3408cc3c787b7ef94df8ea52c4c1129c4805d88089a85763d571f6666c5a740b1211ab24b21b6a945bed0617738b40dd0045adc10c2612c12ab2af2bac4a3657105d8ad6440ad164d8e0bca115af610d3749f16dea80a1f1809c1f804f1a8312d8e2d066318360297b2e199fdba381849"}, @pad1, @generic={0x20, 0xb, "ba947a6d8b3b674038972d"}, @enc_lim={0x4, 0x1, 0x5}]}, @dstopts={0x2f, 0xd, [], [@ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x38}, @calipso={0x7, 0x30, {0x3f, 0xa, 0x3, 0x7, [0x800, 0x80000000, 0x8, 0x8, 0x8]}}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0xffffffffffffffa9, 0x1, [0x7, 0x2b02, 0x2]}}]}, @dstopts={0x7e, 0x1, [], [@pad1, @jumbo={0xc2, 0x4, 0x5}]}, @srh={0x7f, 0x2, 0x4, 0x1, 0x1, 0x10, 0x6, [@local]}], @dccp={{0x4e23, 0x4e21, 0x4, 0x1, 0xd2b9, 0x0, 0x0, 0xf, 0x2, "51b9ad", 0x1f, "32a989"}, "8ad507db29d1ad9d7fccb136e837a4454e614c4afdc964ab0e57e3c8d5f173399c2c71093a0f3ac505b6151be72bff6c2eae92b4b7773a539e7c0ad86f26d7e5452bcece86c6fdc5eeaf0da37544ca44cf66b8afedafc9586c3f047b09d42a4a72cb2b"}}}}, 0x13c1) [ 817.289962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=27220 comm=syz-executor.4 03:33:53 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 03:33:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400, 0x0) openat(r2, &(0x7f0000000140)='./file0\x00', 0x18102, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348290e000000000000000000000000000000000000dedf599d6f5b4a19000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000237440b4466128f65b8a49a7efe3c7dd5783a06c1394861b0de2ceb78ba470492883cf237d204be8727836edcdf21a2a24d8a20ba3fdd454b58a558631a9c8542dced03150ff24b29372f5"], 0x0, 0x0, 0x0}) [ 817.340868] binder: undelivered TRANSACTION_COMPLETE [ 817.350660] binder: undelivered transaction 291, process died. [ 817.359171] binder: undelivered TRANSACTION_COMPLETE [ 817.377645] binder: undelivered transaction 293, process died. 03:33:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x49, &(0x7f0000000040)={@remote, @multicast1, @rand_addr=0x401}, 0xc) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00935) 03:33:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000004ed200"/76], 0x0, 0x0, 0x0}) [ 817.403476] binder: 27240:27241 unknown command 692609809 [ 817.409212] binder: 27240:27241 ioctl c0306201 20000280 returned -22 [ 817.418801] binder: 27240:27242 unknown command 692609809 [ 817.430606] binder: 27240:27242 ioctl c0306201 20000280 returned -22 [ 817.501884] binder: 27249:27250 got transaction to context manager from process owning it [ 817.531270] binder: 27249:27250 transaction failed 29201/-22, size 0-0 line 3109 [ 817.550482] binder: undelivered TRANSACTION_ERROR: 29201 [ 817.563406] binder: 27249:27252 got transaction to context manager from process owning it [ 817.578871] binder: 27249:27252 transaction failed 29201/-22, size 0-0 line 3109 [ 817.590218] binder: undelivered TRANSACTION_ERROR: 29201 03:33:56 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 03:33:56 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) 03:33:56 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4010) 03:33:56 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bdfd928e", 0xb1}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:33:56 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x66, 0xa}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x2b7, &(0x7f000000cf3d)=""/195}, 0x48) 03:33:56 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="f4ffffff0000000000000000040000000000000010000000000000000000000100000000"], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x6) ftruncate(r0, 0x0) 03:33:56 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) [ 820.220741] binder: 27269:27277 got transaction to context manager from process owning it [ 820.252111] binder: 27269:27277 transaction failed 29201/-22, size 0-0 line 3109 [ 820.295175] binder: undelivered TRANSACTION_ERROR: 29201 [ 820.299007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=27285 comm=syz-executor.4 [ 820.316859] binder: 27269:27289 got transaction to context manager from process owning it 03:33:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000002d40)=""/46, 0x2e) 03:33:56 executing program 1: prctl$PR_CAPBSET_DROP(0x18, 0xd) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x803) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101000, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000040)) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 820.340412] binder: 27269:27289 transaction failed 29201/-22, size 0-0 line 3109 [ 820.358302] binder: undelivered TRANSACTION_ERROR: 29201 03:33:56 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 820.415516] binder_alloc: 27295: binder_alloc_buf, no vma [ 820.429531] binder: 27295:27298 transaction failed 29189/-3, size 0-0 line 3264 03:33:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$setsig(r0, 0xa, 0x1) r1 = dup2(r0, r0) openat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) write$eventfd(r1, &(0x7f0000000040)=0x2, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x110, r0, 0x0) 03:33:56 executing program 5: getgroups(0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='#em3#/\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) [ 820.458462] binder: undelivered TRANSACTION_ERROR: 29189 [ 820.471013] audit: type=1400 audit(2000000036.510:18922): avc: denied { map } for pid=27295 comm="syz-executor.1" path="/dev/ptmx" dev="devtmpfs" ino=1037 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ptmx_t:s0 tclass=chr_file permissive=1 [ 820.556812] binder: undelivered TRANSACTION_COMPLETE [ 820.568628] binder: undelivered TRANSACTION_COMPLETE 03:33:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCCONS(r2, 0x541d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) write$P9_RSTATu(r2, &(0x7f0000000340)={0x65, 0x7d, 0x2, {{0x0, 0x48, 0x80000000, 0x0, {0x8, 0x0, 0x4}, 0x1000000, 0x0, 0x100, 0x8, 0x7, 'keyring', 0xd, '/dev/binder#\x00', 0x1, '\xd2'}, 0x8, 'vboxnet0', r3, r4, r5}}, 0x65) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000ff07008000000000000000000000000000000000000000b232c2df0d16000a00000000000000000000000000a9000000"], 0x0, 0x0, 0x0}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000200)={0x8, 0x3ff, 0xffffffffffffce0a}) [ 820.600373] binder: undelivered transaction 308, process died. [ 820.612170] binder: undelivered transaction 307, process died. [ 820.652018] binder: 27313:27314 transaction failed 29201/-28, size 32768-0 line 3264 [ 820.683434] binder: 27313:27314 ioctl c0185879 20000200 returned -22 [ 820.709462] binder: undelivered TRANSACTION_ERROR: 29201 [ 820.727983] binder: 27313:27315 transaction failed 29201/-28, size 32768-0 line 3264 03:33:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000200)=[@acquire={0x40046305, 0x3}], 0x4d, 0x0, 0x0}) 03:33:56 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 820.756299] binder: undelivered TRANSACTION_ERROR: 29201 [ 820.818144] binder: 27316:27318 Acquire 1 refcount change on invalid ref 3 ret -22 [ 820.847235] binder: 27316:27318 ioctl c0306201 20000280 returned -14 [ 820.871061] binder: 27316:27322 Acquire 1 refcount change on invalid ref 3 ret -22 [ 820.880944] binder: 27316:27322 ioctl c0306201 20000280 returned -14 03:33:57 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bdfd928e", 0xb1}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:33:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1163484017f2c77e06789a910000000000000000000000000100"/76], 0x0, 0x0, 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000040)={0x7ff, {{0xa, 0x4e24, 0x5, @ipv4={[], [], @multicast2}}}}, 0x90) 03:33:57 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00'}) [ 821.135620] binder: 27327:27332 got transaction to invalid handle [ 821.142669] binder: 27327:27332 transaction failed 29201/-22, size 0-0 line 3118 [ 821.152334] binder: undelivered TRANSACTION_ERROR: 29201 [ 821.159362] binder: 27327:27333 got transaction to invalid handle [ 821.166810] binder: 27327:27333 transaction failed 29201/-22, size 0-0 line 3118 [ 821.177090] binder: undelivered TRANSACTION_ERROR: 29201 [ 821.189568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=27335 comm=syz-executor.4 [ 822.230185] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 03:33:59 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 03:33:59 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:33:59 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bdfd928e", 0xb1}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:33:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) recvmmsg(r1, &(0x7f0000000300), 0x121, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003d40)={0x0, 0x1c9c380}) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000001b9, 0x0) 03:33:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0)=0x4000000000214) r2 = syz_open_dev$binder(0x0, 0x0, 0x8) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x1b, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRESOCT=r2], 0x0, 0x0, 0x0}) 03:33:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c46ff000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000030000000000000000000400000000000000f8ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a13d1910000000000000000000000000000000000000000000000000000000000000000000000006e90b40b2dc48a04"], 0xc9) write$binfmt_aout(r0, &(0x7f0000000480)={{}, "", [[], []]}, 0x220) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") write$binfmt_elf64(r0, &(0x7f0000002200)=ANY=[@ANYRES32=0x0], 0xfe47) 03:33:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x5, 0x4) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r2, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x21f, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) prctl$PR_GET_NO_NEW_PRIVS(0x27) [ 823.314619] binder: 27345:27350 unknown command 4 [ 823.321450] binder: 27345:27350 ioctl c0306201 20000140 returned -22 [ 823.332043] binder: 27345:27357 unknown command 4 [ 823.337070] binder: 27345:27357 ioctl c0306201 20000140 returned -22 [ 823.382907] binder: 27359:27361 ioctl 80087601 20000000 returned -22 [ 823.398252] binder: 27359:27361 unknown command 0 [ 823.405560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=27363 comm=syz-executor.4 [ 823.418866] binder: 27359:27361 ioctl c0306201 20000280 returned -22 03:33:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x3010, r1, 0x10000000000000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000010000000000000000000000000000001300000000000000000000e441d7fd0000000000000000000000000000000000000000004a6ea240821f42538c643d1f73bffc6f3e8fc6079584af2b879dad691d99ad47793c15b56716451de5b760d34afcc00a607271f6f50ca9a1a23cf83b3b642305e46f769ebec0ce9107c87dfe5af95d71c849997ac9c1aed7200208a5b6f86a539bb7bb88a7bc3e3066e4d2fbfafe5026e112271890b65d9ab1f9135121c903e011d84400"], 0x0, 0x0, 0x0}) [ 823.428404] binder: 27359:27361 ioctl 80087601 20000000 returned -22 [ 823.435587] binder: 27359:27366 unknown command 0 [ 823.442498] binder: 27359:27366 ioctl c0306201 20000280 returned -22 03:33:59 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 823.497359] binder_alloc: 27370: binder_alloc_buf, no vma [ 823.503406] binder: 27370:27371 transaction failed 29189/-3, size 81604378624--2017612633061982208 line 3264 [ 823.527944] binder: undelivered TRANSACTION_ERROR: 29189 03:33:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000c300000000000000"], 0x0, 0x0, 0x0}) [ 823.544113] binder: 27370:27373 transaction failed 29189/-22, size 81604378624--2017612633061982208 line 3118 [ 823.566513] binder: undelivered TRANSACTION_ERROR: 29189 [ 823.618601] binder: 27378:27379 got transaction with unaligned buffers size, 195 [ 823.626380] binder: 27378:27379 transaction failed 29201/-22, size 0-0 line 3327 [ 823.635536] binder: undelivered TRANSACTION_ERROR: 29201 [ 823.642443] binder: 27378:27381 got transaction with unaligned buffers size, 195 [ 823.651284] binder: 27378:27381 transaction failed 29201/-22, size 0-0 line 3327 03:33:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = getpgid(0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000380)={0x7}, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) r4 = perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r3) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) fallocate(r4, 0x40, 0x0, 0x9) r5 = perf_event_open(&(0x7f00004e7000)={0x2, 0x229, 0x20000000cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='cpu&5\n\n\n\x00\x00\x00\x05\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) [ 823.669237] binder: undelivered TRANSACTION_ERROR: 29201 03:33:59 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 823.784386] binder: undelivered TRANSACTION_COMPLETE [ 823.825790] binder: undelivered transaction 331, process died. [ 823.853331] binder: undelivered TRANSACTION_COMPLETE [ 823.900574] binder: undelivered transaction 333, process died. 03:34:02 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 03:34:02 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=r3) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) write$P9_RLERROR(r2, &(0x7f00000000c0)={0x16, 0x7, 0x2, {0xd, '/dev/binder#\x00'}}, 0x16) 03:34:02 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000a00000000000000ff0100000000000000000000000000410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ead0540c00000000000000000000000000000100000000000000"], 0x1) 03:34:02 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:02 executing program 5: ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0x4004556a, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) sendfile(r0, r0, &(0x7f0000d83ff8), 0x2008000fffffffe) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 03:34:02 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bdfd928ef7", 0xb2}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = getpgid(0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000380)={0x7}, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) r4 = perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r3) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) fallocate(r4, 0x40, 0x0, 0x9) r5 = perf_event_open(&(0x7f00004e7000)={0x2, 0x229, 0x20000000cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='cpu&5\n\n\n\x00\x00\x00\x05\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) [ 826.334518] binder: 27395:27401 got transaction to context manager from process owning it [ 826.353496] binder: 27395:27401 transaction failed 29201/-22, size 0-0 line 3109 [ 826.377161] binder: undelivered TRANSACTION_ERROR: 29201 03:34:02 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x1, 0x9, 0x3f, 0x7, 0x6, 0x3, 0x7, 0x8001, 0x9, 0x8}) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2040, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840ff77b61e660000000000000000000000000000000000000000010000000000000000000000001900"/76], 0x0, 0x0, 0x0}) [ 826.384248] binder: 27395:27412 got transaction to context manager from process owning it [ 826.402259] binder: 27395:27412 transaction failed 29201/-22, size 0-0 line 3109 [ 826.410744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=27414 comm=syz-executor.4 [ 826.420500] binder: undelivered TRANSACTION_ERROR: 29201 03:34:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = getpgid(0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000380)={0x7}, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) r4 = perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r3) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) fallocate(r4, 0x40, 0x0, 0x9) r5 = perf_event_open(&(0x7f00004e7000)={0x2, 0x229, 0x20000000cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='cpu&5\n\n\n\x00\x00\x00\x05\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) 03:34:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000008000000000000086987090000001010000000000000000000000000000000000000000000000000000000000000000000e9da97023b6e4bc0faa11d104f18600"/91], 0x0, 0x0, 0x0}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0xfffffffffffffffd, 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="080029bd7000ffdbdf25110000007400050054000200080001000d000000080001001b000000080001000b000000080001001a0000000800010015000000080004000180000008000200140000000800040001000000080001000900000008000300810000001c000200080003000000000008000200e200000008000200750000003c000100380004001400010002004e22e00000010000000000000000200002000a004e2000000003000000000000000000000000000000010800000020000700080001008797000008000200f60000000c0003000400000000000000900001000c00010069623a67726530001800010069623a76657468305f746f5f626f6e6400000000080003000500000008000300a4080000380004001400010002004e24000000000000000000000000200002000a004e2000000003fe800000000000000000000000000028400000001000010069623a726f73653000000000100001006574683a73797a5f74756e0010000200080001000900000004000400"], 0x184}}, 0x10) [ 826.503601] binder: 27423:27424 transaction failed 29201/-28, size 0-0 line 3264 [ 826.538735] binder: undelivered TRANSACTION_ERROR: 29201 03:34:02 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = getpgid(0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000380)={0x7}, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) r4 = perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r3) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) fallocate(r4, 0x40, 0x0, 0x9) r5 = perf_event_open(&(0x7f00004e7000)={0x2, 0x229, 0x20000000cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='cpu&5\n\n\n\x00\x00\x00\x05\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) [ 826.547084] binder: 27423:27429 transaction failed 29201/-28, size 0-0 line 3264 [ 826.568516] binder: undelivered TRANSACTION_ERROR: 29201 03:34:05 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 03:34:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x15187) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000040000000000000000000001000000009fe47df4e6cd0000000100000000000000000000000000000000000000000000000000eeaf5d1c00"/80], 0x0, 0x0, 0x0}) 03:34:05 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:05 executing program 2: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bd", 0xae}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:05 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bdfd928ef7", 0xb2}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:05 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 829.367755] binder: 27448:27456 got transaction to invalid handle [ 829.392387] binder: 27448:27456 transaction failed 29201/-22, size 0-0 line 3118 [ 829.409512] binder: undelivered TRANSACTION_ERROR: 29201 03:34:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840000000000000000000000000000100"/76], 0x0, 0x0, 0x0}) [ 829.429646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=27464 comm=syz-executor.4 [ 829.441892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=27465 comm=syz-executor.2 03:34:05 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 829.472667] binder: release 27468:27469 transaction 345 out, still active [ 829.480794] binder: BINDER_SET_CONTEXT_MGR already set [ 829.486624] binder: 27468:27469 ioctl 40046207 0 returned -16 [ 829.490991] binder_alloc: 27468: binder_alloc_buf, no vma [ 829.493175] binder: undelivered TRANSACTION_COMPLETE [ 829.499563] binder: 27468:27471 transaction failed 29189/-3, size 0-0 line 3264 [ 829.503532] binder: send failed reply for transaction 345, target dead 03:34:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 829.528628] binder: undelivered TRANSACTION_ERROR: 29189 [ 829.547052] binder: undelivered TRANSACTION_COMPLETE [ 829.553305] binder: undelivered transaction 348, process died. 03:34:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES16=r0], @ANYRES16=r1, @ANYRES16=r1, @ANYRESHEX=r0, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYPTR64]]], 0xfffffffffffffe51, 0x0, 0x0}) fadvise64(r1, 0x0, 0x8000, 0x5) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)={0x2000}) write$P9_RCREATE(r2, &(0x7f00000001c0)={0x18, 0x73, 0x1, {{0x20, 0x4, 0x7}, 0x9}}, 0x18) 03:34:05 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 829.576781] binder: undelivered TRANSACTION_COMPLETE [ 829.583107] binder: undelivered transaction 350, process died. [ 829.613516] binder: 27481:27482 unknown command 536871104 [ 829.619362] binder: 27481:27482 ioctl c0306201 20000140 returned -22 03:34:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x1) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000083ae5c3dc6c75a00"/76], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000040)={'security\x00', 0x2, [{}, {}]}, 0x48) [ 829.633360] binder: 27481:27483 unknown command 536871104 [ 829.639166] binder: 27481:27483 ioctl c0306201 20000140 returned -22 [ 829.681228] binder_alloc: 27488: binder_alloc_buf, no vma [ 829.702861] binder: 27488:27489 transaction failed 29189/-3, size -4162068576028590080-23239 line 3264 [ 829.714684] binder: undelivered TRANSACTION_ERROR: 29189 [ 829.721331] binder_alloc: 27488: binder_alloc_buf, no vma [ 829.727659] binder: 27488:27489 transaction failed 29189/-3, size -4162068576028590080-23239 line 3264 [ 829.738033] binder: undelivered TRANSACTION_ERROR: 29189 03:34:08 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 03:34:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:08 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:08 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bdfd928ef7", 0xb2}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:08 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:08 executing program 2: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bd", 0xae}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) rt_tgsigqueueinfo(r2, r3, 0x35, &(0x7f0000000140)={0x26, 0xdeb, 0x3}) [ 832.393458] binder: undelivered TRANSACTION_COMPLETE [ 832.408180] binder: undelivered transaction 358, process died. [ 832.415348] binder: undelivered TRANSACTION_COMPLETE [ 832.436509] binder: undelivered transaction 360, process died. [ 832.469775] binder: undelivered TRANSACTION_COMPLETE [ 832.472545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=27515 comm=syz-executor.4 [ 832.476484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=27517 comm=syz-executor.2 [ 832.503926] binder: undelivered transaction 362, process died. 03:34:08 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/49, 0x31, 0x0, 0x31}, @fda={0x66646185, 0x6, 0x1, 0x36}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000000c0)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 03:34:08 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 832.517399] binder: undelivered TRANSACTION_COMPLETE [ 832.532133] binder: undelivered transaction 364, process died. [ 832.563544] binder: 27522:27525 got reply transaction with no transaction stack [ 832.571287] binder: 27522:27525 transaction failed 29201/-71, size 96-24 line 3026 [ 832.581682] binder: undelivered TRANSACTION_ERROR: 29201 [ 832.587813] binder: 27522:27528 got reply transaction with no transaction stack [ 832.595676] binder: 27522:27528 transaction failed 29201/-71, size 96-24 line 3026 03:34:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1163484000"/60], 0x0, 0x0, 0x0}) 03:34:08 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) [ 832.614812] binder: undelivered TRANSACTION_ERROR: 29201 [ 832.650232] binder: release 27530:27531 transaction 370 out, still active [ 832.651093] binder: BINDER_SET_CONTEXT_MGR already set 03:34:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCEXCL(r2, 0x540c) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) setuid(r3) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x8001, 0x44) r5 = fcntl$dupfd(r1, 0x406, r1) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000140)=r5) [ 832.661544] binder: undelivered TRANSACTION_COMPLETE [ 832.663713] binder_alloc: 27530: binder_alloc_buf, no vma [ 832.668402] binder: send failed reply for transaction 370, target dead [ 832.674181] binder: 27530:27531 ioctl 40046207 0 returned -16 [ 832.687072] binder: 27530:27532 transaction failed 29189/-3, size 0-0 line 3264 [ 832.714376] binder: undelivered TRANSACTION_ERROR: 29189 [ 832.740610] binder: undelivered TRANSACTION_COMPLETE [ 832.748481] binder: undelivered transaction 373, process died. [ 832.757423] binder: undelivered TRANSACTION_COMPLETE [ 832.774768] binder: undelivered transaction 375, process died. 03:34:11 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:11 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 03:34:11 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bdfd928ef702", 0xb3}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) r2 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80800) accept4$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = socket(0x4, 0x4, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40008000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x184, r4, 0x800, 0x7, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}]}, @TIPC_NLA_BEARER={0x110, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x50}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3aec7ceb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd20}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80400, 0x0) ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f0000000580)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000001001000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000009605000000000000f3aa4ac5f5139c5d1eb2827d39906f5b964ebcfaad76a895063fb6ed2aa9ae535d01c7dda1072c0b51b9c0850b16b5d2925c2346ee82b8caf7484772"], 0x0, 0x0, 0x0}) 03:34:11 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:11 executing program 2: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f79bbf29ee5ac50234be014176fae00d2c1b058470667e213f88acb529d67bd6e3ec79d8a7bf234f98024e0783fac886254cb593d6d23a38defa8232eacd8f", 0x3f}], 0x1}}, {{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bd", 0xae}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:11 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@dev, @in6=@loopback}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r2, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000000040)='/dev/binder#\x00', 0xd, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1100000002000000000000000000000000000100000000000000000000000000000000000000000000000000000800"/76], 0x0, 0x0, 0x0}) [ 835.465981] binder: 27546:27552 transaction failed 29201/-28, size 0-0 line 3264 [ 835.477978] binder: undelivered TRANSACTION_ERROR: 29201 [ 835.485430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23278 sclass=netlink_route_socket pig=27564 comm=syz-executor.2 03:34:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) eventfd2(0x7, 0x80801) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 835.547387] binder: 27574:27576 unknown command 17 [ 835.555608] binder: 27574:27576 ioctl c0306201 20000280 returned -22 03:34:11 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") tkill(r1, 0x11) wait4(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x400, 0x0) write$P9_RXATTRWALK(r4, &(0x7f0000000180)={0xf, 0x1f, 0x2, 0x2}, 0xf) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) splice(r3, &(0x7f0000000000), r3, &(0x7f0000000040), 0x1, 0xb) [ 835.604467] binder: undelivered TRANSACTION_COMPLETE [ 835.611603] binder: undelivered transaction 382, process died. [ 835.624687] binder: undelivered TRANSACTION_COMPLETE [ 835.638183] binder: undelivered transaction 384, process died. 03:34:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x20211, r0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 835.676983] binder: undelivered TRANSACTION_COMPLETE [ 835.706848] binder: BINDER_SET_CONTEXT_MGR already set [ 835.712610] binder: 27595:27596 ioctl 40046207 0 returned -16 [ 835.719728] binder: undelivered TRANSACTION_COMPLETE [ 835.742455] binder: BINDER_SET_CONTEXT_MGR already set [ 835.748176] binder: 27595:27596 ioctl 40046207 0 returned -16 03:34:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x1}) [ 835.761069] binder: undelivered TRANSACTION_COMPLETE [ 835.834229] binder: BINDER_SET_CONTEXT_MGR already set [ 835.839872] binder: 27600:27601 ioctl 40046207 0 returned -16 [ 835.847023] binder: 27600:27601 transaction failed 29201/-28, size 13697024-0 line 3264 [ 835.856698] binder: undelivered TRANSACTION_ERROR: 29201 [ 835.870830] binder: BINDER_SET_CONTEXT_MGR already set [ 835.876534] binder: 27600:27602 transaction failed 29201/-28, size 13697024-0 line 3264 [ 835.885337] binder: 27600:27601 ioctl 40046207 0 returned -16 [ 835.892181] binder: undelivered TRANSACTION_ERROR: 29201 03:34:14 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 03:34:14 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, 0x0, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000000)={0x0, 0x9, 0x7fffffff, 0x12f, 0x0, 0x5, 0xffff}) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11634844000000000000000000000000000000000000000001000000000000000000000100000000000000000000000000000000000000000000000000000000000000ccd5cfb56f5adf26a38dca"], 0x0, 0x0, 0x0}) 03:34:14 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bdfd928ef702", 0xb3}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:14 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x20211, r0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x20211, r0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:14 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 838.430756] binder: 27609:27616 ioctl 40207012 20000000 returned -22 [ 838.454052] binder: BINDER_SET_CONTEXT_MGR already set [ 838.469963] binder: 27609:27616 ioctl 40046207 0 returned -16 03:34:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x20211, r0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") tkill(r1, 0x11) wait4(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x400, 0x0) write$P9_RXATTRWALK(r4, &(0x7f0000000180)={0xf, 0x1f, 0x2, 0x2}, 0xf) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) splice(r3, &(0x7f0000000000), r3, &(0x7f0000000040), 0x1, 0xb) [ 838.478441] binder: 27609:27616 unknown command 1145594641 [ 838.491308] binder: 27609:27616 ioctl c0306201 20000280 returned -22 [ 838.501044] binder: 27609:27631 ioctl 40207012 20000000 returned -22 [ 838.514310] binder: BINDER_SET_CONTEXT_MGR already set 03:34:14 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, 0x0, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:14 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x8) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 838.527027] binder: 27609:27631 ioctl 40046207 0 returned -16 03:34:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) [ 838.562021] binder: BINDER_SET_CONTEXT_MGR already set [ 838.575851] binder: 27640:27642 ioctl 40046207 0 returned -16 [ 838.583677] binder: undelivered TRANSACTION_COMPLETE 03:34:14 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, 0x0, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:14 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0xa, 0x84e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0xdc, 0x0, &(0x7f0000001300)=[@register_looper, @acquire_done={0x40106309, 0x3}, @acquire, @request_death, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x4, 0x2, 0xf}, @flat=@handle={0x73682a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/122, 0x7a, 0x1, 0x3e}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x40}, @acquire_done={0x40106309, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/4096, 0x1000, 0x2, 0x1c}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000012c0)={0x0, 0x28, 0x40}}, 0x40}], 0xd8, 0x0, &(0x7f0000001400)="e42009fc4753d81bdf071e1c69ef8be092bb16bf795d17a46df239cef49744e0e8ef970fadf1bf63191eb206d4f064b92fde2a349bac27a373e0c00a931e0cf4c9320aa49bda8db15d49b98ca15d8244b4d9bd22c138889cfd6bad79e2cb61803062dbe6098c2716b32526882b0dade6bc7e03bf4344c5496a75f5facaccd4ab7e5c93faf4c40598764d9814d2b62155b71a96a692f8c6a0ce572afaa0688336d4742e963c27f04d9e99c7dbd201c4fdc357e08f5dbe8016728c1bad63d2b92d4b296c95a592c75365553758c1b9e85ca5122b1b30921cc0"}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = getpid() setpriority(0x3, r4, 0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x399, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) [ 838.613063] binder: BINDER_SET_CONTEXT_MGR already set [ 838.618562] binder: 27645:27646 ioctl 40046207 0 returned -16 [ 838.626511] binder: undelivered TRANSACTION_COMPLETE [ 838.636348] binder: undelivered TRANSACTION_COMPLETE [ 838.672320] binder: BINDER_SET_CONTEXT_MGR already set [ 838.679029] binder: 27652:27653 ioctl 40046207 0 returned -16 [ 838.690006] binder: 27652:27653 unknown command 0 [ 838.697461] binder: 27652:27653 ioctl c0306201 20000040 returned -22 [ 838.732302] binder: BINDER_SET_CONTEXT_MGR already set [ 838.738036] binder: 27652:27653 ioctl 40046207 0 returned -16 [ 838.744460] binder: 27652:27656 unknown command 0 [ 838.750713] binder: 27652:27656 ioctl c0306201 20000040 returned -22 03:34:14 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x3}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:15 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:15 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bdfd928ef702", 0xb3}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', 0xffffffffffffffff}, 0x30) capset(&(0x7f0000000080)={0x39980732, r2}, &(0x7f00000000c0)={0xb0, 0x101, 0x3, 0x100000001, 0x57d6595f, 0x9}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 839.247055] binder: BINDER_SET_CONTEXT_MGR already set [ 839.252755] binder: 27669:27672 ioctl 40046207 0 returned -16 [ 839.259490] binder: undelivered TRANSACTION_COMPLETE [ 839.261061] binder: BINDER_SET_CONTEXT_MGR already set [ 839.269916] binder: 27669:27672 ioctl 40046207 0 returned -16 [ 839.276758] binder: undelivered TRANSACTION_COMPLETE 03:34:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)="7f96aad1c256f99d", 0x8}, {&(0x7f0000000040)="595ddece", 0x4}, {&(0x7f0000000080)="97fbbc39ef7cd987836d0e25fb03ea7177398839cc8ec1409e6ccc", 0x1b}, {&(0x7f00000002c0)="ebf55b4caa277f0efcf52d6b67009338a34af411c948e8a93f34e3f9789888e30051c2bdb2b406ce2aedd64c6e6068eb845dd3ca36d9ae658213c855e1b76c50970ab726037390dd8c899d99756d7ffd49b78974446478e5c9be621d40b8b35fb02c7bd200ac33b1674b4be34588348023d645972f22c8332ab9abbac59b46df9749c3208e8f063df39d23cc26af9b90ecdee5aa863fdace6f8e8bdee3df36f8328c456e5fe7e46795317461755dc94bc13d110ca329f24a10d060c7b25afb19448b5076d9226008e7865a217bff74955f63baa77eef313b9c725db7f22a01327b", 0xe1}, {&(0x7f00000000c0)="ae598892d3da61dc3d7de7cb8d8bf3b2dbc4570be6c9126300c93cbb7c4788", 0x1f}, {&(0x7f0000000140)="729a8358847e54bb35e48edcb4be66c9da86e3ec59e79b462ac7d450719884a908f33d5d40d8c2aba32c7fdbdf741bfc6e936f886f1b01481e8badbde570c8a18628474d7448864392525a2432ced9299919089a368355f4713f408d7dd3deba5972af95930d9b9c4bae54743114494e4548841d6ca19b601fdb", 0x7a}], 0x6, 0x0) 03:34:17 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x3}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:17 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80100, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000540)={0x0, @initdev, @multicast2}, &(0x7f0000000580)=0xc) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x892, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000180)={0x6, 0x5, 0x2, 0x3}) r3 = socket(0x10, 0x3, 0x0) r4 = dup(r3) write(r4, &(0x7f00000000c0)="1b0000004a001f0fff07f4f9002304000a04f51108000100020100", 0x1b) 03:34:17 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bdfd928ef702", 0xb3}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:17 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x35) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x9, &(0x7f0000000200)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:34:17 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x1, 0xc, 0x5, 0x5}, 0x2c) unshare(0x400) creat(&(0x7f0000000000)='./file0\x00', 0x40) fchown(r0, 0x0, 0x0) 03:34:17 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000ccc9e4158191b71666e749e200100006faffffff620010790000008100cd41f76200202583d9b2270101000002a8d07a2acd5ee5236d"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setregs(0xd, r0, 0x100000000, &(0x7f0000000180)="0a147a51746f56531adda9e4f9edc67202e766f55495848414193d09265ad98aa540f12acc2697ead50bd13051849e7fdf0ae14bdce1eb8fa04aa7a02e629c7daa7253835a1c8e6df802de31a098326a785d00509455c6ff43093a5d143d417f572071b1806eeffea00f4eaa5d7f2134ef7d47346441b69eb691f1db4716d79bad0a78471bf2f67e41fd4b09fc24f66ea994304768e6ba41e65b257d47b570dcf55938960e36059e84e92c1589359f471bc76398a6928f0ca624804cff1632e4c84f1c6f355b6ada01044ba339e6e7d3bf14") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x48) renameat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x1428, 0x1150, 0x0, 0x0, 0x1150, 0x1240, 0x1358, 0x1358, 0x1358, 0x1358, 0x1358, 0x4, &(0x7f00000002c0), {[{{@ipv6={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xffffff00, 0xff0000ff, 0xffffffff], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'ip6erspan0\x00', 'bcsh0\x00', {0xff}, {}, 0xbf, 0x9, 0x7}, 0x0, 0x1128, 0x1150, 0x0, {}, [@common=@unspec=@cgroup1={0x1030, 'cgroup\x00', 0x1, {0x1, 0x8, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x400, 0x1}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d3, 0x4d2, 0x13f400000, 0x5, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@remote, @mcast2, [0xffffffff, 0xffffffff, 0xff000000, 0xffffff00], [0xffffffff, 0xff000000, 0xffffffff, 0xff], 'nr0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@socket3={0x28, 'socket\x00', 0x3, 0x4}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1488) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 841.482625] binder: BINDER_SET_CONTEXT_MGR already set [ 841.488184] binder: 27684:27686 ioctl 40046207 0 returned -16 [ 841.495287] binder: undelivered TRANSACTION_COMPLETE [ 841.501254] binder: BINDER_SET_CONTEXT_MGR already set [ 841.506976] binder: 27684:27686 ioctl 40046207 0 returned -16 [ 841.513719] binder: undelivered TRANSACTION_COMPLETE 03:34:17 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) getpgid(r0) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r2, 0x80000) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 03:34:17 executing program 5: socket$unix(0x1, 0xfffffffffffffffd, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0xa7934c776eb33b70) sendmmsg(0xffffffffffffffff, &(0x7f0000006c80), 0x1, 0x2020084840) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x2402, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@local, @in=@initdev}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) socket$unix(0x1, 0x5, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) mkdir(0x0, 0x3) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000480)='ramfs\x00', 0x0, 0x0) setxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000580)=0x9, 0xfffffffffffffed9) mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = dup3(r1, r1, 0x0) write$P9_RRENAMEAT(r2, 0x0, 0x4) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000340)={0xe7}) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f00000001c0)={0x2, &(0x7f00000000c0)=[{0x0, 0xfffffffffffffff7, 0x100000000, 0x6cb}, {0x68ff4e13, 0x5}]}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000003c0)="2f2787f78c11147a6c6398859d8faac6", 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:34:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x800001000008913, &(0x7f0000000280)="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") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x4, 0x112}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x21599e2b, 0x0) 03:34:17 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x3}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:17 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz@\x00(\xf0\x9a\r\x97WiP\"\xf2\xbcF\xe2\x8e\xc4\xc1c_M\x98Fk\x15]~\x9fD\x1b>\xd9\x8a\xda\x18\x88E\t\xe1C\xfc\x1c\x8f\xda\x1e\xb4\a\xb6.\xb5t\x9b;&\xf8\xb5\x0e\x94\xc4\xfdQr\xb1\r\xacL\x93\x88\xbf\xd4~\xdb', 0x200002, 0x0) [ 841.648637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43359 sclass=netlink_route_socket pig=27720 comm=syz-executor.4 03:34:17 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x3a04a497, 0xfe5c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 03:34:17 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:34:17 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) ptrace$getenv(0x4201, r0, 0x100000000, &(0x7f0000000000)) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) dup(r1) 03:34:18 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bdfd928ef702", 0xb3}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:18 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280), 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:18 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}}) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) gettid() [ 842.131172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43359 sclass=netlink_route_socket pig=27764 comm=syz-executor.4 03:34:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) open$dir(&(0x7f0000000040)='./file0\x00', 0x800, 0xe0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="c0dc00025e0b01047be070") preadv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/112, 0x70}, {&(0x7f0000000180)=""/88, 0x58}], 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 03:34:20 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x3}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:20 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280), 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:20 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x288c2, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000040)) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00bb1b9ee41fceadb578000000c02de5a5932a791183c4e2a4af447da0281e086baef870d49d20eed935807ded32db9791c1e067ac6f46159b7c20e57b86beed2bdb3040e5caace17ad5eca0398be35cc7c1d4d1cd05b87b3ec7a507061545b284a4db503f846540abf26dd1194915c32e95f94c052770641f2a59bb47862a7ccbf83bef6298658254f26b07d35f3fa8f84974386f33ef2709af3f4e2e49a39cab2f2e885ef7", @ANYRES16=r3, @ANYBLOB="070725bd7000fbdbdf2504000000080006004b00000008000600400000000800020007000000080002000900000014000100ff0100000000000000000000000000010800050003000000100004008a9b000000080000070000000400040014000100fe800000000000000000000000000027"], 0x78}, 0x1, 0x0, 0x0, 0xc014}, 0x4000011) ptrace$cont(0x9, r0, 0x0, 0x0) 03:34:20 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280), 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:20 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bdfd928ef702", 0xb3}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:20 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4001, @multicast1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) r1 = socket$inet6(0xa, 0x80007, 0x5) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000240)=0xe8) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000280)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xe54, 0x20, 0x8f03, 0x100, 0x10000, 0x1080000, r2}) 03:34:20 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$setregs(0xd, r0, 0x8, &(0x7f0000000040)="fe31a870e3ab33") r1 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 03:34:20 executing program 3: prctl$PR_SVE_SET_VL(0x32, 0x6506) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 844.676966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43359 sclass=netlink_route_socket pig=27793 comm=syz-executor.4 03:34:20 executing program 1: timer_create(0x1, &(0x7f0000000100)={0x0, 0x1f, 0x2, @thr={&(0x7f0000000000)="ccca86a8969bf5f797189fb378458340b5cdf814d8f205a767c6c151af3a49e8491fa60a8bd6a40ff730bef983470fcf16d30b1c5001b02a6867fc116cba206699b4e11a26ade4a5521d843d54e3dbcb2501a49cbe10f3e967b76a4a50d6038a830cf311d1bd616373cc1b0d890df8f67c87f22308d4a9c1094c9dc8fa50fdc6fd5fdbb105d21eda651919", &(0x7f00000000c0)="de06a73b0465a9d0f9f9240910c26d8038369206f1008f2941c5d3414be6403e405b4228d42d1dcc50436111e116dd2c60df"}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0)) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), 0x53d}, 0x0) 03:34:20 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280), 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020208000d0002000000000002cb6ccb70141e577a7fd4872b6ab90ca5f2004afd415e297d927bba9c9a2e0000200000d2e2730049efd478edf0f4c445ddd05a7265f337a34b59bdd28f1fc131cc4f010f431228dc71c5bea2413a11fd30368b0ad102ec62894edce744e985b91eab97b5ed71c8d177b412f7da9e739a3689570ca47aa800b9e1e803f2d3311af819df9b729a5b26d8e60fb9c7e542"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r1, r6, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bind(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, 0x2, 0x2, 0x1, 0x4}}, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, 0x0, 0x20048000) sync() perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10434, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000180), 0x80000) 03:34:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, &(0x7f0000000080)=""/88, 0x58, 0x1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dcc20500000000000000") munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x0, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0xff, 0x6, 0x5, 0x7, 0xff, 0x69a1, 0xa3d5, 0x4, 0x200}) recvfrom$inet(r2, &(0x7f00000001c0)=""/190, 0xbe, 0x40, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) 03:34:21 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:21 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x200, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) socketpair$unix(0x1, 0x1ffeffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000b55000)={0x2, 0x0, @broadcast}, 0x10) geteuid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, 0x0, &(0x7f0000000680)) add_key$user(&(0x7f0000000500)='user\x00', 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000740)={0x7fff, 0x8, 0x0, 0xfffffffffffffeff, 0x8001, 0x0, 0x30, 0x0, 0xd565, 0xb5, 0x0, 0x1, 0x0, 0x1, 0x0, 0xff, 0x2, 0x8}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RATTACH(r2, 0x0, 0xffffffffffffff72) r3 = geteuid() ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x5) pipe(&(0x7f00000007c0)) fsetxattr$security_smack_entry(r1, &(0x7f0000000340)='security.SMACK64\x00', &(0x7f0000000380)='syz', 0x3, 0x1) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) quotactl(0x5, 0x0, r3, &(0x7f0000000180)="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") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00') ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000000)={0x17, 0x54, &(0x7f0000000280)="0cb2abd3d34bc8de6dec9888b918d4a37f393e00735ef4ffdc1219ee1370e73229c1be54b3c154aeaa8a1c302bdbd8e8805b717f2233a973cff9d6b6d7b6a548ee475fa8efd8828e230432eadd6cb850d1a7141c"}) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x800) socket$inet6(0xa, 0x2, 0xc) 03:34:21 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000003900)=@can, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bdfd928ef702", 0xb3}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:21 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000008, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0x8001, 0x4) 03:34:21 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") write$cgroup_int(r0, &(0x7f0000000080)=0x10001, 0x191) mmap(&(0x7f0000031000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020700070300e1ff26bd7000fbdbdf250100140004000000"], 0x18}}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) sendto$inet6(r1, &(0x7f0000000240)="5c90cc8b5a621bf9fa3254f2ef0453599622d514077718763131498fcc6d005c763c55afd4a3777b9f60ef7524684f50620079badaf7ee1ca259caff67a2087bee77c64984d75091f961881c92d5bd5357b49171953b725c91e036b7ecdd5dc2f67d050b3e401e5273a09ba4b050e5e0d6bee8cb08ea32c94f11aa1f14f859bce45db03277e66e9d4d306cd0c7e3da0b7c390208f5cb0d0f12bb0fff1e1838c6ad996cb4a3724a114f2a684c37fb3e1086858e30aa6bfb3e3c64d62c3876d9b976dbc98f97e94e3c", 0xc8, 0x0, 0x0, 0x0) 03:34:21 executing program 1: statx(0xffffffffffffffff, 0x0, 0x80006100, 0x200, 0x0) 03:34:23 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000040)=0xffffffffffffffce) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:34:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000001c0)=0x400100000001, 0x1) connect$inet6(r0, &(0x7f0000000080), 0x1c) gettid() r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000000)) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'keyring-user%\x00'}, &(0x7f0000000240)=""/252, 0xfc) getsockopt$inet_mreqsrc(r1, 0x0, 0x2d, &(0x7f0000000040)={@multicast2, @multicast1, @dev}, &(0x7f00000000c0)=0xc) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x26) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) 03:34:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d00000d0000000000000000000000080000000000000600000000000000000000000000000000000000000000000000000000000001ac1414bb040000000000000400000000030006000000000002000000e00000010000000000000000"], 0x68}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/111, &(0x7f0000000080)=0x6f) 03:34:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, r2, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf90}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}]}, 0x78}}, 0x80) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0105ec7be070") syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@utf8='utf8=1'}]}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20400, 0x0) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000140)=""/86) 03:34:23 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:23 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000003900)=@can, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bdfd928ef702", 0xb3}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:23 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x9) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:34:23 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) timer_create(0x4, &(0x7f0000000040)={0x0, 0x33}, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000240)={{r2, r3+10000000}, {r4, r5+10000000}}, &(0x7f0000000280)) r6 = fcntl$dupfd(r0, 0x0, r0) r7 = socket(0x400000000000010, 0x802, 0x0) write(r7, &(0x7f0000000000)="24000000200099f0003be90000ed190e020008160000000000ba0080080002007f196be0", 0x24) recvmsg(r7, &(0x7f0000000300)={&(0x7f0000000080)=@hci, 0x80, 0x0}, 0x0) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000080)=""/246) 03:34:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) [ 847.796211] FAT-fs (loop2): bogus number of reserved sectors [ 847.807596] FAT-fs (loop2): Can't find a valid FAT filesystem 03:34:23 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) 03:34:23 executing program 5: mknod$loop(&(0x7f0000000000)='./file1\x00', 0x6001, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0)) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x40000000800) 03:34:24 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x14800, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001140), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x204002, 0x0) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x4000000) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/exec\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x9, &(0x7f0000000100)=[{0x2c7, 0xfffffffffffffff7, 0x8001, 0x6}, {0x5, 0x0, 0x7, 0x4}, {0x100000000, 0xf000000000000000, 0x9, 0x1fc}, {0x12, 0xe9f6, 0x2, 0x8000}, {0x8, 0x9, 0x3, 0x80000000}, {0x6, 0x4b37, 0x200000004000000, 0x1}, {0x101, 0x6, 0x0, 0x9}, {0x200, 0x9, 0x0, 0x5}, {0x8b, 0x8, 0x7, 0x1}]}, 0x10) r2 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) getsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) inotify_init() 03:34:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x800, 0x20) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x20000104) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)=@buf={0x74, &(0x7f0000000180)="d80191cf1f10b6c3736bf07204a175f58bc592da8c948ffd63c857aa5c5368e557eb69f4f2bd46c59c6aaa953430d64d7244ac87f18641b8f5947f17137eb88e0963d64b32c297ad1b548831cb44f9ddb31128cb4b575458fb4e58fccd5fee31f14f6ee3fbdb8c9b595563666fd7d73d4a88783a"}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000002c0)=0x2) r2 = timerfd_create(0x8, 0x800) timerfd_settime(r2, 0x3, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f0000000080)=""/11, 0x672) 03:34:24 executing program 1: r0 = getpgid(0x0) prlimit64(r0, 0x7, &(0x7f0000000000)={0xffffffffffff8001, 0x9}, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x4c) write$uinput_user_dev(r2, &(0x7f0000000140)={'syz1\x00', {}, 0x19}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) 03:34:24 executing program 5: mknod$loop(&(0x7f0000000000)='./file1\x00', 0x6001, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0)) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x40000000800) 03:34:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x100000000000006) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000100)={0x2c, @loopback, 0x4e20, 0x0, 'sh\x00', 0x28, 0x6, 0x6f}, 0x2c) sendto$inet(r1, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r1, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) 03:34:24 executing program 2: clone(0x1000000000011, &(0x7f0000000040), 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) [ 848.114457] input: syz1 as /devices/virtual/input/input11 03:34:24 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000003900)=@can, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)="531339015fa9d26e4d87dd1a4e6ad439721b53e158b2c600e2d4dc484b538550e7089919baa79f669a8584a59de181b0acd96dc263611cd26c84d8dbef7231834d30c1711a4a090db9090d1a0b4fff489912ca773602ded560a87e134b5370d563041b7c5cca4f6191cfa0c41e670bb2a3948a47908513cb23c7b83a3f3a0dc3af7f4c7cbf19e464094c8d1657f1a78ca4bd8b3b68eea79d6395b86cada704646a0e557cc33a40df0ffe0496b2bdfd928ef702", 0xb3}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:26 executing program 1: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3104012}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x820, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x407, 0x80008) splice(r2, 0x0, r3, 0x0, 0x55aa40ba, 0x5) 03:34:26 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0}, 0x4000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:26 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x7, 0x7) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) gettid() ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:34:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x8dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80000, 0xfffffffffffffffe) 03:34:26 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/114) 03:34:26 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) lseek(r0, 0x0, 0x7) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x44800, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) prctl$PR_MCE_KILL_GET(0x22) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x0, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'cpu'}, {0x2f, 'rdma'}, {0x2b, 'cpu'}, {0x0, 'cpu'}, {0x2f, 'memory'}, {0x2d, 'rdma'}, {0x2d, 'cpu'}, {0x0, 'rdma'}]}, 0x38) nanosleep(&(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f00000000c0)) 03:34:26 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x200001, 0x1f4) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() fchdir(r0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xa7}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:34:26 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) prctl$PR_SVE_SET_VL(0x32, 0x3d786) ptrace$cont(0x18, r0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=0xfd6, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x400000000000000, &(0x7f0000000140)="04f09c87b1e595399a1bfb61b4218a759ccb24d91eaed32aabed7ee69afd37c0aeaeab61cb7e35ff640e1954e4ab23c2d9d2c21772a005f404f4633e3b792c86f24b64a9b9b5d0b597dee409f22dd9bca61a906a360627c36c17b9cab253") ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x8000000000, 0x6]) ptrace$cont(0x9, r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000880)={&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/196, 0xc4}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/2, 0x2}, {&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f0000000680)=""/64, 0x40}, {&(0x7f00000006c0)=""/233, 0xe9}, {&(0x7f00000007c0)=""/35, 0x23}], 0x8}, 0x40000100) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000008c0)=0x1, 0x4) 03:34:26 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x200001, 0x1f4) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() fchdir(r0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xa7}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:34:26 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:27 executing program 1: syslog(0x3, 0x0, 0xb42d996) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) sync() bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r0}, 0x1fa) 03:34:27 executing program 1: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100)='y\x00', 0x2, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) recvmmsg(r0, &(0x7f0000001040)=[{{&(0x7f0000000600)=@can, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/165, 0xa5}, {&(0x7f0000000740)=""/119, 0x77}], 0x2, &(0x7f0000000800)=""/72, 0x48}}, {{&(0x7f0000000880)=@rc, 0x80, 0x0}}], 0x2, 0x40002002, &(0x7f0000001140)={0x77359400}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x105802, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) ioprio_get$uid(0x3, r3) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200)=@v2={0x2000000, [{0x5, 0x6}, {0x7ff, 0x8000}]}, 0x14, 0x2) 03:34:27 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x200001, 0x1f4) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() fchdir(r0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xa7}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:34:27 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:27 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) dup2(r2, r0) dup2(r1, r1) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 03:34:27 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:27 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) getresuid(&(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000002c0)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) setresuid(r0, r1, r2) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) utimensat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x7530}, {0x77359400}}, 0x0) lseek(r3, 0x2, 0x0) 03:34:27 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:29 executing program 3: clone(0xb4e642ba0cf2fcc9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:34:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22000000008, &(0x7f0000000100)=0x4, 0x1c3) syz_emit_ethernet(0xba, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800450000700000000055ad9078ac2314bbac1406000000907800000000450000000000000000010000ac2314aaac14140008400000000000000000e6ca8f8365540c0000e000000200000000e0000001000000acf41bc502f6666aa900000000007f00000100000000ffffffff00000000e000000100000000ac"], 0x0) ioctl$TIOCNOTTY(r2, 0x5422) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r3 = creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0xfffffffffffffbff, 0x80, 0x9, 0xd03c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x9, 0x10000, 0x4, 0x6, 0x3, 0x1, 0x4, 0x80000000, 0x5be9, 0xffff, 0x8, 0x1, 0x6, 0x100, 0x2000000000000000, 0x5, 0x7, 0x2, 0x1, 0x6, 0xc5e2e22, 0x3, 0x5, 0x10001, 0x0, 0x9, 0x7, @perf_bp={&(0x7f00000001c0), 0x2}, 0x8001, 0x80, 0x0, 0x5, 0x7f, 0x100000001, 0x6}, 0xffffffffffffffff, 0x10, r3, 0xb) fchdir(r4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r5, &(0x7f0000000180)={0xfffffffffffffc4b}, 0xfffffefe) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x9, 0x8000, 0x8, 0x1, 0x0, 0xffff, 0xb0, 0x0, 0x7fff, 0x9, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 03:34:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000001c0)=0x1ff, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x1b5, 0x20008800, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4, 0x0, 0x31) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0xfffffffffffffd0b, 0x0, 0x0, 0x0, 0x406}}], 0x789, 0x2, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x13) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000080)=0x38ea, 0x4) 03:34:29 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:29 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) [ 853.936890] binder: BINDER_SET_CONTEXT_MGR already set [ 853.950347] binder: 28037:28041 ioctl 40046207 0 returned -16 03:34:30 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x200001, 0x1f4) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() fchdir(r0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xa7}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:34:30 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x7, r0, 0x1000, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:34:30 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:30 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() get_thread_area(&(0x7f0000000000)={0x7, 0x20000000, 0x2000, 0x81, 0x400, 0x2, 0x1, 0x7, 0x76, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:34:30 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:30 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x7, 0x2, 0x5}, 0x8}}, 0x18) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x1) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:34:30 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, 0x0, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:30 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioprio_get$pid(0x2, r0) sysinfo(&(0x7f0000000000)=""/104) ptrace$cont(0x9, r0, 0x0, 0x0) 03:34:30 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x4, 0x0) wait4(r0, &(0x7f0000000040), 0x2, &(0x7f0000000140)) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = dup3(r1, r1, 0x80000) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x6b8) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0x321b, 0x5, 0x3814000000000000, 0x8}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r3 = dup2(r1, r1) write$cgroup_pid(r3, &(0x7f0000000080)=r0, 0xfffffffffffffedc) lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L+', 0x2}, 0x28, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) [ 854.458791] binder: BINDER_SET_CONTEXT_MGR already set [ 854.465642] binder: 28037:28041 ioctl 40046207 0 returned -16 03:34:30 executing program 5: r0 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) recvmsg(r0, &(0x7f0000001580)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f0000000300)=""/31, 0x1f}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000340)=""/50, 0x32}], 0x5, &(0x7f0000001540)=""/6, 0x6}, 0x3) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000001c0)={0x9af7, 0x0, 0x0, 0x0, 0x100}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x8, 0x50e, 0x87, 0x0, 0x14, 0x7f, 0x0, 0x0, 0x7, 0x1f}) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0), 0x2fb, 0x0, 0x2b6}, 0x0) bind$inet(r1, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f00000015c0)={0x2, 0x4e24, @multicast1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000180)={0x2c, 0x35, 0xb, 0x13, 0x5, 0x5, 0x2, 0xe3, 0x1}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="7514a0f67dbacfb510d0cead5cd32919b283fe98858b24647997869d2ae73580eb8aaf344ecc98d5e7f0bc8d6bc23108ed70f2114fcedab7b6f8b381ea9d1ad3eac70efee5", 0x45}], 0x1) listen(r2, 0x9) 03:34:30 executing program 1: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:30 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:33 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x4) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/84) r1 = gettid() ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 03:34:33 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/mcfilter6\x00') ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000040)=""/231) r2 = open(&(0x7f0000000180)='./file0\x00', 0x800, 0x4) openat$cgroup_ro(r2, &(0x7f00000001c0)='memory.stat\x00', 0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0xe) 03:34:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="ccbd0000000000007be070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x4) tkill(r1, 0x35) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x3e}) ptrace$setregs(0xf, r1, 0xfffffffffffffff7, &(0x7f0000000000)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000140)=""/206) 03:34:33 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, 0x0, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:33 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd9, 0xd9, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @func={0xc, 0x0, 0x0, 0xc, 0x5}, @enum={0x2, 0x3, 0x0, 0x6, 0x4, [{0x4}, {0x10, 0x7be}, {0x2, 0x1e3000000000000}]}, @const={0x9, 0x0, 0x0, 0xa, 0x4}, @ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @const={0x1, 0x0, 0x0, 0xa, 0x1}, @fwd={0x6}, @fwd={0x3}, @datasec={0x5, 0x6, 0x0, 0xf, 0x1, [{0x2, 0x6, 0x1}, {0x4, 0x80000000, 0x200}, {0x2, 0x6, 0x7}, {0x5, 0x1, 0x3}, {0x1, 0x8000, 0x200}, {0x4, 0xdc2, 0x6}], "16"}, @volatile={0x9, 0x0, 0x0, 0x9, 0x2}]}}, &(0x7f0000000140)=""/177, 0xf6, 0xb1}, 0x20) flistxattr(r0, &(0x7f00000003c0)=""/53, 0x35) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @multicast2}, {0x0, @random="74eccf0fbe9a"}, 0x0, {0x2, 0x0, @local}, 'nr0\x00'}) 03:34:33 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:33 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x8038) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x60000, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:34:33 executing program 5: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="b8669c", 0x3, 0xfffffffffffffff9) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) r2 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x0, 0x5, 0x0, "4be88e2c3b8dfe66a3e3eee9ead8d1c7c80c50aa345b4cd2ae1daadd850b9dc035c616c8f64c40604b5b894d1649f6c269d5d30b4ddb75e3723c25140e7add06f6e6c06f191138df78acfaf23133b5bf"}, 0xd8) r3 = add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="c0b999466bac3bc73dd4e8f85a3a5d771bac43eb797d83df5ea26efdc061b04e1a7527b705eea1ae2ce6a90cc7e3b1462b0c787aada77cf03140cff7f605973d464a18eb33eb9114f86f37b1", 0x4c, 0xfffffffffffffffe) keyctl$reject(0x13, r0, 0x3ff, 0x59b0, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") getsockopt$inet_int(r4, 0x0, 0x997d78ae6051085d, &(0x7f0000000300), &(0x7f0000000340)=0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) dup3(r4, r5, 0x0) 03:34:33 executing program 1: r0 = dup(0xffffffffffffff9c) r1 = socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000003c0)={{0x2c, @local, 0x4e20, 0x3, 'rr\x00', 0x1, 0x8, 0x6b}, {@multicast1, 0x4e24, 0x3, 0x7fffffff, 0x8, 0x2}}, 0x44) geteuid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x20}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r3 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={r3, 0x6}, 0x0, &(0x7f0000000180)="c3a5f0a3ae99", 0x0) 03:34:33 executing program 2: r0 = memfd_create(&(0x7f0000000080)='vboxnet1securitytrusted\x00[\x9e\xf3\xea\xc8Og\xa7\xdf\x91\\rB\xb6\xdc\\\xd4d\xe1E\xfa\x84\x14\xad\x9d\xffI\xc6\x15\xccm-\xfcJ\x99\x9c\xff\xeb\xfd++\x98\xfa\xf4 \xcf\xfd\x93\x1e\x97~7:Z\xfd\x8b\xc2\xb7j\xce\x97\xc0L\xbac52\xfd^N)\x13\xab\xdf\xa4\x1c\xc4\x1cpV&(bF\x1d^T\x92\x1a\xaf\x13\xea\x17\xcaT\x90g\x85\xd7P\x17(/\x1c`\xbf\xb2', 0x0) r1 = fcntl$dupfd(r0, 0x2000000000040a, r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x140, r2, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6b}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffc}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbe}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2b0}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) 03:34:33 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2420642}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r2, 0x410, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x83}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x800) accept(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) iopl(0x8) 03:34:33 executing program 5: clone(0x45fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getpriority(0x0, r0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x402000, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x1b, 0x2, @tid=r0}, &(0x7f0000000080)) ftruncate(r1, 0x2) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000001c0)) restart_syscall() ptrace(0x11, r0) ptrace$getregset(0x2, r2, 0x0, 0x0) 03:34:33 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x400, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={[], 0x7fffff, 0x2, 0x0, 0x6, 0x26}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r2, r3+30000000}, &(0x7f0000000140)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:34:33 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000840)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000740)='\x91{\xcfA\xe6\xa8M\x81ex\fRs\r\x1f\xca\xc1\xb3=)Ch\x00\x00\x00\x00\x00\x00\x00\x00\xdb\xd7\x18IV@G>:\x1dG\xc9\xb3\xaa\xb0\xdaj\x90\x9b\x16j\x90_\xd9n\x9c$\x9b<\x8e|\x1c\xb9{\xf9j\xa7(a\xd1\xb68>\xe0\x8b\xd0\xd1u*0u\x8a\xc4@nt\xf1fq\xd0\xc7\xe8\\\xde\xf9|7\x97\xdd\x1e\xb4u\xc4\xcd9\xbb\nDG\x01p\xd8P\xa4N\xf8\xa8je\x9c\\)\xf1d\x9fO`zk\xef_}ma\xa7\x9c\xea[\xc7\x1cpID\xbb0\xaej\x97\xdc\xf9\xe2\x99\xda_\xf8[\x93K\x01\xc7\xb7\xafN\xa2(\xe1\x13\xc1e\xf5\xddRr\xc5\xde\x99%KfU 4c\xe8\x94\xbaDa\xea\xce\xcbx\xed\x81N\x06\x1f\x88') ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x3, @broadcast}, 0x26, {0x2, 0x4e28, @remote}, 'rose0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) exit(0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x2080, 0x0) sched_setaffinity(0x0, 0x51, &(0x7f0000000140)=0x5) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000580)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000700)='./file0\x00') mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x192) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, &(0x7f00000006c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xfffffffffffffda9) recvfrom$inet(r4, &(0x7f0000001040)=""/4096, 0x1000, 0x10002, &(0x7f0000000500)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@dev={0xfe, 0x80, [], 0x25}, @in=@multicast2, 0x4e24, 0x3, 0x4e23, 0x4, 0x2, 0x80, 0xa0, 0x0, 0x0, r5}, {0x0, 0xe18, 0xffc, 0x9, 0x8, 0x200, 0x4, 0x6f5}, {0xfffffffffffffdbd, 0x3, 0xd8, 0x3588}, 0x7, 0x6e6bb3, 0x0, 0x1, 0x3, 0x3}, {{@in6=@local, 0x4d3, 0x3f}, 0x0, @in=@broadcast, 0x3504, 0x2, 0x0, 0x5, 0x7e, 0x7ff, 0x401}}, 0xe8) r6 = socket$inet6(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000540)) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) setsockopt$inet6_int(r6, 0x29, 0x4, &(0x7f0000000040)=0x3ff, 0x4) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') 03:34:33 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, 0x0, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11dca5055e") r1 = socket(0x0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003bc0)="eae3f1493453e861818226b76d5acf479b7a77a37a5b7f", 0x17}, {0x0}], 0x2}}], 0x1, 0x4000) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffff9c, 0x6, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x72, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x100000004e20, @multicast1}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) sendto$inet(r2, 0x0, 0x5b, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) write$P9_RUNLINKAT(r2, &(0x7f0000003e80)={0x7, 0x4d, 0x2}, 0x7) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000003ec0)={@mcast1, 0x2, 0x0, 0x0, 0x8, 0x1000, 0x3f}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0) 03:34:33 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = getuid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getuid() lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000a00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000bc0)={{{@in6=@ipv4={[], [], @loopback}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000cc0)=0xe8) r8 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001380)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000001480)=0xe8) getresuid(&(0x7f0000001940)=0x0, &(0x7f0000001980), &(0x7f00000019c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001c00)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000001d00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000053c0)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f00000054c0)=0xe8) r13 = getgid() r14 = geteuid() r15 = getgid() getresuid(&(0x7f0000005500), &(0x7f0000005540), &(0x7f0000005580)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000055c0)={0x0, 0x0, 0x0}, &(0x7f0000005600)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000005640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000005740)=0xe8) getresgid(&(0x7f0000005780)=0x0, &(0x7f00000057c0), &(0x7f0000005800)) sendmsg$netlink(r1, &(0x7f0000005940)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc, &(0x7f0000005340)=[{&(0x7f00000001c0)={0x2cc, 0x1e, 0xa00, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x248, 0x4e, [@generic="17b0d91ac60698cfc7f506644d440f6988e4f506d6ae8a1baec32e4628f48bacf30dea2e6883f8af926482d086b63e67527119c603640cf17a7c77d1207909b81167ef67afcb2ec6b10a9827a95564c6f37508874e5619c11646051c5748eed5b22f8dced745ed5af2e8894c70047f6776ef26a3ee9558aebedbec3e3d6fb130fb85dc515d4c1a86cc860273d7fe1e8638d533e54b9d48d5d9819da80fe9d713aa5246207d989ec4c902dcb7115ef86eaa9ffec9912143255442b877482b6807b5496e1f3e2a25644cda6a663b796626eb58c428ae7fe09fae042f4915f2bb8bf67184aca019f84ff816fa1b36e74d", @generic="e54f0742991ed4f38731ffd6d28db5e8ac60382cf596d487e5dd1d5a7e2c9b59406cc4240467836f601a56bcec9216e0dc84b713342c6209f72676a0", @generic="3ff41e2ca7f2eb0cf4b60fc996632645865804455f95f4a43753abfe3074041c30a423dcb968a0542021f4", @typed={0x8, 0x27, @uid=r2}, @typed={0x8, 0x82, @fd=r1}, @typed={0x8, 0x24, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="27f4adf14623f453cd7bac47d8750b669a5629539b453f95b2c69190154bb4021fa9d6c50e2201be2006dbe2c5b07a8a860e1aac49b8e9af808b3fc098f4b598dbf3437e2877e78384d9f38232c078eac10ae8ff1ef25c9d5d54f7c1a3dddeba1aa1f94ab550755cd55a09367ef08ae921fc47b5962b1cb1a5521ca4b489bcc39f2df91f02a3a274fe87646fd46f7bd7686fd2069dabd6ee3e176959535288b6db2202a9dbeeeeb02c1bd6e752983ad1716d5a0f5d2726473c3a047b89d185c4f5188a01e0", @typed={0x8, 0x3e, @fd=r1}, @typed={0x8, 0x55, @uid=r3}, @generic]}, @generic="c10b1d4223cc04a438e6b0e71bd1cd6ca10e1412d0daadd924683a6b746afdb3855c61e5a0fe6502ae135b0398a973f9e30d3210f0baf047114ec7e308e053a65b51d1596898ac773eafd09666f336d4ae3ac6fa8a8d812238de8c9e15e3ee7f74e0f3d64ba5747aae5338e0d0f3794eb8"]}, 0x2cc}, {&(0x7f0000000540)={0x3bc, 0x11, 0x700, 0x91f8, 0x25dfdbfe, "", [@generic="9642f9f642340bca9600d44c12c2b328adc8bcafd9e112e2d5f9f2f66ffe9dbef809085882d2cbcede8da04d729b51461326e06893550859baf0429a0d754e7fd322507c59b7c4ccea17b6c8596b0244cd99bffb8fefb0004889bbe5f5610f8f2ddc0c9ff675db2b2405959c7472852e148bad7ab83194e2b49930e42c05dd8e0dbdd961571edea83401f2607c6c80cb0a5fa1ead8075f1615028133523637bc0149c71904019526226ee80e567f9c14cbde2f7d758111b119c3a8fabd46a8b44031c118395462", @nested={0xf8, 0x89, [@generic="d30f3908e8833ceb976e0221b48d18ccee591f5c42eb14c4b37789d7087a8bb2194f269a31a0c9872ff7c5b79cb44fbd7f7a0b5350142d3e6e49e4aa7182872e36ae8e1d274f49bf77bbcf969ba6abdf88359a9bebfbe1f4eb4e93cd53947f9be7e7129d74c51993dd15aa47f65a7c92176a52b5524f0e511c5e4cb2c76a2387ac0d3ff8e5bdebedba593d58f367b4a2083ad2f85e8307e63592d3347979e8802f9455d198ddd400f3844da18d5c166623e84b299eeef212c1562b693fe10a968e5f254d3668aa15affe2a944583b57e09b37e7ed2bd36a1b7767ebd5fac4531df229e743908a5de06d6dc71", @typed={0x8, 0x48, @fd=r1}]}, @typed={0x8, 0x41, @u32=0x7fff}, @nested={0x1cc, 0x6a, [@typed={0x8, 0x1b, @uid=r4}, @generic="4dfddb5bd6023e6ce0e9cd310e6a208002c94c40c5dec75b1e90eb246bb94006dddd964f774dd683c0557007a217a2", @generic="c3c36dcbf4b0678f1ffa974b225d5b146918e710907cc8f16119c0616edca1ecd20e9b74ac83b5ef297c13e3ac4d3548056f8646448f795eac1c7eee414bc37bbdc03acd1bf080a02f7051e21ce5da337cf9dca49070f27182f1d9b16721a0766a754e66209ee7a182f6cfb73e538259de34accecb79e813045a13e816e91a217f60dd096a2dd8121c747999a22e7f1b46f286add88d4c8d8951d1d597799f5e0d3a7a7b4962a073860eb7586c2f9a5977e5a3289488326f375a0e2bee0bf4593fe14be1a550d66db449ed49", @typed={0x8, 0x0, @u32=0x1}, @typed={0x8, 0x54, @pid=r0}, @typed={0x8, 0x76, @uid=r5}, @generic="3da50da347ef1d67e6163cc22d0f414316dc1f8ae7a5b85a316feca83e805b0e53b6a8654970d91d8f71e899f753a47a69e7fc9f7d6a730106602c493804aca8f61e36fc62628773b96bf1b611018ce3cb0c0b689a0d3b357b0964b7962c7fb8a6ec7d07e0bb2767487072e305710d69d8eb4edbe6b90a488af8ae16f964339960226c91a391aafb93f98193e40c9bb06753e1fca7050f3aba1b615d948cb525af4c9100b186017c845ae152"]}, @nested={0x10, 0x56, [@typed={0xc, 0x5a, @u64=0xa10}]}, @typed={0x8, 0x40, @ipv4=@loopback}]}, 0x3bc}, {&(0x7f0000000a40)={0x144, 0x1f, 0x2, 0x70bd27, 0x25dfdbfc, "", [@typed={0x8, 0x85, @u32=0x1}, @nested={0x12c, 0x23, [@typed={0x8, 0x27, @ipv4=@broadcast}, @generic="32e136db82a0b6219f17d411b27286fcc971d0e55205fb75a6063e910b0adfe6f56225cbaf1fcedec983c585b2e58a68ff68caaa39e0cebc4ad923291861362514daf8b2fec090eeb20b81082ffb6d7174355ed1a90070b9cb46b6261703c849d91c4ad40f78d9ed3ad4678bcecb46c8efc8b8c8a5bc377c630522e0467d0d6fa1daa8013041d888fbf19128199ea99ea47864c54907d60be2fec3fd0708cb326b342e80de2114cbd3c48925e6694d4748a6c0e9ad68df65047841acaa6135560565fcc2180708487ae86e9819aed11d9345f3ff4cf84aa34efdf00065579f9a4724d35ee54eba7ef5ce3658bd5d8142c896", @typed={0x8, 0x13, @uid=r6}, @generic="644606f80dcc1efffcaa5632875b3b583ee7fd3662ae06bdbf08013c65cee936dba1a95f754b"]}]}, 0x144}, {&(0x7f0000000d00)={0x65c, 0x25, 0x300, 0x70bd25, 0x25dfdbfd, "", [@nested={0x20, 0x58, [@generic="eeb80319ed18f84ca2c47aceab2d924af66864806172e58e78"]}, @nested={0x148, 0x19, [@generic="e880b568b2ca", @generic="0ad104611bba9c338e99fd7e74f326aa1239b2b39a41526b8ea20e7e7ba3f386d312275c96c94f93f8d144d1f2fed2b7282e01b10974a616f65e68acdb0dcccdc6fa960ff85511899b2c86831e006c8fcdc498542dba6859a737dab216b0b2e9a04ccd2650e2402f0c8429dcee3ee405b1983cf539f58f0bbc68f42e06e6a343b1976356c0094d41eed997fbe8a64d3a8fea86fb0ff89cda30d984fa8b1b6ac4b3e39ee6fc1c49e728aa3d4f36f086e83f2b37b3", @generic="7a8180415fb3fc7e7262cc81f77c44cce38b295db3314dd2b0a0bba4e07b004f379c69f0d3ff38a609e46a2afe40befe8e941f37deaecf5ab4a190b715a588325f2af5aa132bc87e1ec74e1004759a9cc23259d891cb2b0d8bc9e4c9b75fdc4a8ae5991b06ae7061971e4797835c9ab10c37d55834967f6c3c5fef5dfc", @typed={0xc, 0x24, @u64=0x8}]}, @nested={0x138, 0x5b, [@generic="591a3b6fa0a29840392e9a858dbdaf9cbda90b3445295e9e3591733ca6fad8b91e7be455d57a4e0471f70b02d00e4fc3588c2c4d585925a3a1d5f40f34aaa1d8681bfa481794266fc71295bbd6482f1497776acdd5de864707423f282eca8560e3ba050bd8b7fdcc4bd6c7dcf6e1950d9372c9b0d6636d7c2e6a27b8d5dc31ff74a2f7484c534f752c5e3b3c814b49ccf3b848972cdbbd07e047552faa360ed2fbe2fd3b6bc565577ea5fbc4f7cd3d9b6ed75bf1065ea14c8129dcbea0416d4861993bb8e343d0ea319fdb8edbf6a9f88a9ae7f8cedd2a5074d99ca5a7e6e125bb8b59f1383650867588ca0483771daf642a", @typed={0xc, 0x19, @u64=0x9}, @generic="e0002da0985dae2bd8e3ae4a1f580d240c7302be52dc6dbc33830c32a2c268bb45e6f8c3a0f0a01f154a", @typed={0x8, 0x2b, @fd=r1}, @typed={0x4, 0x8d}]}, @nested={0x1a0, 0x27, [@generic="f4df268c7c8051adc14159662f8126442f66290b40af61ea7703e0e03512cc5b51d9fe08e00c7ae34c06d3d0d4f1982362edcb9d630b392690ad03e317a3b7548faca21359c36e4c15d37c34ef192d47331e27ebb5a3ba782fb3a4c2293dc096e0da52c282a065cea60246032e2256178728ba9f27cafbab5c00fff56ac6d3fb0739dac014b7142a04ec8e28f6ca3b3ba29dae582b9fab7506957ae519ccc470c31c37760f84031de93b6125ec0919cc2a87bf8b4d924c9b0bcc7071e343744e78f105a23a3520e185b1757a762de3d709d62b619a9d6652554f89bba2045a8703dc", @typed={0xc, 0x96, @u64=0x200}, @generic="9d20ba91d3bd151743bf9231b7a641186129456d33c7d3c1d3dec9dfa483967767c6aa1ad63b7ff1f624d88c5a8a59c4c740d2239d9171db9affb0f62130cc270379d7187db45a569629601ee67cbb126e3f3800495b3a4fdc4b339d006b23d211db6b5829225d0291cb6684fa1c11a46ff3f8e3e2a6f93804", @typed={0xc, 0x54, @u64=0x81f}, @typed={0x8, 0x68, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x18, 0x2e, @binary="d3687e5ab53872f5db203da44de1fcc900db89"}, @typed={0x8, 0x6b, @uid=r7}]}, @nested={0x20c, 0x1f, [@generic, @generic="d6733a0cf93b30af762e5d4cbf392defcae71b025b6c8c2e202082b9ae2419d98a91cfb3300330dc9945bc12b7d3e2b1bed7714516761ee12ceceeec188555ca4433664e5948b293b98c93d241831d65b8e1f139e8b6e75847a4ffed9e61dd3f587ec7f5c4575ba42c39157935861fadb8f70453c23bbffe80811692", @typed={0xc, 0x5a, @u64=0x40}, @generic="1f54e25ae687da6e17713f94a46da0b82b883cb44897596c452fc44df4b988f94208b88261841d49a222614dc8ea6ee2135bbf08252884247448f647f190691059f3ea248fc4ffce8ba192aadb2e4c042f5b8327ca5bbaa81feadcec338d2750d60922cc0b3b42a47fa77785660c7dd6a6e804169b4ba351383f4cb67a533f2c1b82e941a27421497b3a9e2168f7af3c74ce04053ebd92783839ecac416eb0676cd62cda80a075131f0d933503bd751ce7dfb9f6f68bf0950e10c3f8c244e7ef67ab86bc9de3035598141397afaad87bb6b6b9e6a86872dd4031a83e4217fffefae95284", @generic="1a365df0bbba4de748f2262bcc27840f9ec760269a2956fa76f8ad03559a5c72e80a9f4c350d250e5eb743f274ccc121da1f0d936f61cc701a8f4405f00f9e2e82cd631640090728c731425113bcb060697c3f22cd719bfc4a4d6c85e16627ba508bf943125895ff5d083dd5901ec8c9a4b2ce6c0142b34d595d979d47af62ae51490af2cad7cac4f6e2c8bda3053c3bacb13dc3bfe0ef5c6a49"]}]}, 0x65c}, {&(0x7f00000014c0)={0x474, 0x1d, 0x111, 0x70bd27, 0x25dfdbff, "", [@nested={0xf4, 0x12, [@typed={0x2c, 0x35, @binary="bb59488f9d3ac5f1c5ac4af6f88e767151f9f5a623ec68dec3c0be63a2b780f8ce927983f560d3"}, @generic="a263d2b81453349793fdc3eb56625cf1898fc99d82883bb83360f270a88f9cffa620636b424245653b8ab64c3e1f7e203faa5ffc5d9d4cf02b759e718eb82b8ac63fa87cda2ab41a697e1efb31d13f0cc899573aca476b425bbbe3dd4bc728b4e0be3696144f7caee1ea93d2016021e98f776786f15d2a5acd4237ada358767a1fb1eb97bc18f936e016f162116ee36b79e1994be6df09cff381", @typed={0x14, 0x3b, @ipv6=@ipv4={[], [], @multicast2}}, @typed={0x14, 0x95, @ipv6=@dev={0xfe, 0x80, [], 0x12}}]}, @generic="449fe462", @nested={0xfc, 0x19, [@generic="b500751c61747660da111a89784c5dbb50c800a7eda46960d8ef0722a0d16e9b5332fb0e29c115a23234f2da67bc1eefdc414de35af519180eb42217c8ca80190e7168d7f7d1e5adcfcde9702cc413c35d5fbca41e23fd4ed741f328736504b9e685d95a62ce33db744b4dae0f83076d88ea301b9a40a0a1883f8835203891a7417df88f24439d915a9a265c3e49d03d06b2ebdc44a6e28579b9ac9f9899ae70a707ea02bd985f1a7642102dfb575a98e23c7abc214ed013646d8f6dbbc967d43163a45f647e39d355eea961c4dedffefbbde68a5b840e8b9d57974e60eeab26f54950ae07d0898c031df1e0fc27", @typed={0x8, 0x3, @uid=r8}]}, @typed={0x14, 0x67, @ipv6=@remote}, @typed={0x4, 0x8c}, @typed={0x4, 0x59}, @nested={0x254, 0x79, [@typed={0x8, 0x2f, @ipv4=@empty}, @generic="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", @typed={0x4}, @typed={0x8, 0x35, @fd=r1}, @generic="20280216238c26dfb504c136420644b9a10625801f68f60a0f671d05f68af50352909aa2e12eca363a5535e5971c8a88d46681abed3e11e156fa5d73729f72abc220061f0dfca52d80e2ce479569268617e1a572eb2cdec805aafd788eb142d35d98b989746e9161ce3657da949dba33ee7fdb6965d4fa79de73e6f1da9ed254e70084735dd318f90ec83b1038ff56b78d94ab0c6904c228aaf33d78d028250241f05b822f3c57b44c4022f41fcc", @typed={0x8, 0x7c, @ipv4=@dev={0xac, 0x14, 0x14, 0x21}}, @typed={0x8, 0x77, @pid=r0}, @typed={0x8, 0x55, @uid=r9}, @typed={0x7c, 0x51, @binary="555db3dad7079d6816ed827cebd99954199c709825a1ffe52fab0dc7432f7741be027d1fd21073d03a09ed53c33dec2c19d3b94c21ea56cd0757efa920468e58aa4c4d6be9ac9badb862b953ef57633879b5f87aa51a82db38424f0da5766f9d5d4ade35bde3581c77ab22e5acf480dc6bd4f0170f"}]}]}, 0x474}, {&(0x7f0000001a00)={0x1d8, 0x27, 0x400, 0x70bd27, 0x25dfdbff, "", [@nested={0x34, 0x1, [@typed={0x14, 0x1f, @ipv6=@remote}, @typed={0x8, 0x14, @u32=0x6}, @typed={0x14, 0x46, @ipv6=@rand_addr="4c494d01141a895506fc74a1fbf84222"}]}, @nested={0xdc, 0x4c, [@typed={0x8, 0x7209, @u32=0x75d7}, @typed={0x14, 0x7f, @ipv6=@local}, @generic="d014a8b1a2c31b267da1cc274206e6eff5c0d44acac948bb794bfe09e02921cc357b1a295a130362f99359e5ff4161c52d363c369ef5598906a93cd2ec47dac1c0301d70880c5317d31fa9280dc6135f096732730c291cee0f5801a8e4bbddc328fd90918cf10531fb60446631329c4e53610c1577c42811bd7ed1a30515eb8bebd2f2f60d9a17379a1140a1b32979768364dd9142f01d36aa33034a4c2eca11debeffd37dbe1a13323620d73824ca9fbdcee27adc4593c4140a"]}, @nested={0xb8, 0x18, [@generic="75376420f81599351a81f58aec220c40e90380f093f5f3bbdbf7ed806ede33fdd9aa654bc2ba6b937e7c96019350df81ad8003f19fa25889ab93ea5e074cea867ae34f88dc2d2db46021f60711379cd06f3fe01fc8359c55e003438dea6d5d0eb514e3716ebd8a4c65b53a137b49274fd8cbcc993f5aab1d9bbccde66f9e1f51e1f6829c37d55542e0508622f19dfe7626e667fdce824b10793c69bdbc42097a", @typed={0x8, 0x91, @uid=r10}, @typed={0x8, 0x5f, @pid=r0}, @typed={0x4, 0x52}]}]}, 0x1d8}, {&(0x7f0000001d40)={0x23e8, 0x14, 0x800, 0x70bd27, 0x25dfdbfc, "", [@nested={0x2114, 0x82, [@generic="a7c227ea9c049f5e34610a6f37f03dff14ea64e8545f66d3d4bdb90a20ca0f477663909d3697f5a0eebed1028ff2e5aceb63ba8fe079fddb654ac08004ede28f04bb69aa34da2c4bbfaaa9ee8948", @typed={0x8, 0x37, @str='\x00'}, @typed={0x8, 0x90, @ipv4=@remote}, @typed={0x4, 0x8d}, @typed={0x18, 0x49, @str='keyring,cgroup.$\x00'}, @generic="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", @generic="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", @typed={0x94, 0x91, @binary="9baca4b02c07d6e91838d60f9a60d7b68f80802f88c864b9c6bf09153dbb8cac5a5d27b9301345ea59b610d8ff2e9c14b3723ab7aa0af5f85075559c8aacb0681fb87de65c90dafdfc0633faf6b1ca59daebee7b406c0945a5b3455a472e58862183bd5b4144f1485781752400e264d2c344fad95ea664fa8b177c384e1b650dc142f0dbf55ca99ea7eebeb0035d"}]}, @typed={0x4c, 0x6c, @binary="adf8f5dcc5dfda1b57de17829b1c5749382f48c1a1f0ad359dce7983ccceda6b394eedc64c0a7577ee69ab94f842f5c4e90abf8dc1d242e3ca263f0907e2c360a2fa8906b3"}, @generic="a5ba97934949df4eed2654b6b27320f279174309", @nested={0x254, 0x15, [@typed={0x8, 0x8e, @pid=r0}, @generic="49c21449f98f1a1d8ec52879ddfe190fc22291f4814ee76ad6df6be190b76801f4e349d444d0d7b1434acaaf158dd04ab0b8ae2197df0cb3e0f34212f9580d2d46e9be8dffb1ba71869a6defe11089b62e5535c5f3e2496f35abf479df4b02bb0235fd2984a381f0a32f210906927f694a51ceb119bb75926a5ed67879dd3c37a63d6dd7f9cee77a1dd5af51b3197652f0c151b7683dbffa46a91736c8c46469128575a6330ea0eadfe5c8bbefe5c6c647cf2e1fd8ac9f481853e41b2910c4c124829ca344fabf6c38fd2d9db3286eabab5c01135e9784", @typed={0x8, 0x91, @ipv4=@loopback}, @generic="79f91dcbb1efb5ad6cbff420ad12c19146f088e090f82d78daf9f9fb17a24d2472aeee8370240e687dca41e795", @generic="9fb82f6047adb465997a5a5371ad32f8c2c7793b5597180ce1738ffc3806639ec5f944b0ce894782f59fadc55a89c72da7186612991f0a3d35420d2f4c29ab556a9d8e70570719e799508f2cec55746278f7fe10ae409f5517f9bdc2a983e2cb3b20b7740c63bda2576978eee2648c", @typed={0xc, 0x43, @u64=0x2}, @typed={0x8, 0x55, @ipv4=@remote}, @generic="4c7049a18cab92532b3b3ab3b25ddb7c09bfb140defbc8b6cbfb2b23d61113715aebc62a3401e31ca679a6beb8dfa7408cfc1040e8aa6486ea9a6195a6cc44a1e71eae08bb7271de5f60894f292bf7623d8a20da42bfc593b4af15157414ea1efd6e0eafa2554be13b1413bf634bca461a3e26036f72060bf8b96bf0e3475a2ecef63e9c83ca5f41c778a69bf3c1e9a83d6b4dc3e0681668ca8b0b10588a42bd6dc393e6afeeb11ea6a7697d62499d874f7939530a922fc193"]}, @typed={0x8, 0x72, @uid=r11}, @typed={0x8, 0x1, @fd=r1}]}, 0x23e8}, {&(0x7f0000004140)={0x11f4, 0x41, 0x200, 0x70bd29, 0x25dfdbff, "", [@generic="26d61b78c37fe1ed87b122d168449c91bdd8707bc67e67808ddbc261e62f2c92a8dd380cf5af69639f4aa66f2b4d2ddda392dba53c95db4ebc58af11d77c3632bce477333a7d18e1784c01077010e65ae5baf3d7e000c023af30d8a509a185f2ef5ccc500f958175ce667e9395ded063fab1e5453e3ccf7a01eb295367f8da8c5c8e083ec1c3a6b36cc57831b7998d966fc8da79533fb0e262e4c185318ce55e09960239d4f132950543e2c3a9d6c2483fef2a2cb8b494c2b042659630490e5a7616614972346baddf5433414cb291a4c30430acc8dfec71af4ce28113900db502bcbaa304105331e033fea5b293b877b9728a14d8f77b996a18208c5336b9efd11b2aa700d572234dee18583c3319a657640b5e86f2cc0a99dd1cc05fd89ca4aba472c10af26abcf4f053ba5ff7de6c31fdf531c9b858ed466a85c727a059909a46e9441e2a773fdab285eb862b4bff20efbe398728540f93c31ad8b520bd3514322b3c796cab5377db6c1259bcfe616ff91c7e91ee914a2c9a62a9b76cefe3d5549cac6f733db296a864d01120d781cce98b187fa96d0b3a5760dac65e65d13757e788820eb221c0c2444ad55ab7ddc14620221316b0f729baf3f7d91deaac663d5e39db5a09e0a3ec5778559395d8a19054884ce2a671b9d80e9f3130f9ecd391fa6e494baa4cb377c5891c0651f65d40270867e5786a99abbe09b60b1efa3526361dfa87e62db710c0890ab57f5776219463fa0b67a2e4e04d477abde8b45938eb03b5dd1aa94d62c14c866627f3c5d44e2ea38da0a5f9d329ab1d3f984415d246f0745cbfd248d9790ab18d2af3c5a199f95cb8b039b11a88a66a0d7872d53c6781b96815dbc1b694821d51b17a0d84adf1bbe1ed392e393c5341854ea63ea705122dfb513094d3098df7e4499275b0fad9414ac1fa0a46ba3c4d48529365441cc596978ae5573c5fd1ebadb84b8c2b2fc7894232625298684eeb5b4da6398e9730b8958b7e5da74e89d5a981e45d4c829d76abd40bcbcd3fbf70301ff166aacf164bf3951337310ac538bfc769b5ad0b4eaef92e0c3074fcf61501645b8d5f79fbf9997a7eae7b6f67e078535dea6053eed18f4996701ca7f0d31810f66dd86a079765b847f618229af90c62acb98ae4b3e3a14fcaf630e3d4dc931c29af8078523ef7bf81d8f778dc3fd5b751b79fe61fe7f0f52aea6866cc416b7dfc0fef489acecedbfd27c973c4da84b3cfd7e19aee738672aeb9de76f45bbaf65c1e7f46b7e4269ee22a82f39c4a20f280a434d9ceca86e8979a199a302d5175e3d85ff41804b88a9bac8f31406899477382237da3eeeaa71ea8721514f1a8e2cc7db868a9343595a93dbfaac10aeabcbc9f560c281f49dfb818bf5105f5c48d5639faf8f110b35d6bb42f9d51df47b1ecdaf2c24ebfb9ffcf6b980bd0249d90ffc09c368d5c611beece74bfd251ccde25a2ae828d12a990a438a1724885cb24ba9b49992f48db6fed83c795fc8468f0b286c260b7e93ed7712005b754cbf2f8353eb4f92dff8ded0241bbba00da2e8a7969d788df37b761582d97012fe75dd0ec78edbde0a6cd1dac3baaf27082c1c2f31da35343a53670bfde7510ed81c2380d08c2e54fcc8e2fbf107a2afd5a82adbb306daee94585cc97b5532e11dce2640852eb244d2b8958317113244cbe58443a85725950d0b4f23bb635369c4de10b1dafeaa5370c03c669d43df43265a222ef512aaa248a216fc4e37912ec465990fb64a5683a23707a738b224d48ea3f57030634d3393bd1ae67b16e6ceb9a32db1731f7b859e6499f570cca69f67ddde81d2af063c0d08ec36d8736c3ab2d9e7318b339df3b229e28ee4b872b48f206b082061de60fda1de73abac286062ca459575c56d8acab7f520fa32acbef13925cade34a02a7272d991d773eb2cf013f8918d9e3d28178b23510d49cffe1a73bbabb4ccbdc8f70f0648dc9e29bc58992b72fcc88abeaa95e7e67d7000f09f9e36ff297ec76c8f01b5926f0f44e079177ac5d3ba8bfece10407a58f2e306de693341ca8380a0b3e20b44299d8e065b73b545329ce0c271fabb11a042afa102001b0e2ff49d819bd7eb27f474a3150ed5cfe416f97e18e4a28039946d7165d0c39d9352f3d7432c00c08158d25537a9a5f233063fb4cd7f2c66d5bf7e3aed484e2a55d3baf9ba6438d6748c921de5a9e5faa65d5939997f56538002c32f7cd95e95b136fc061fe85025640ae9c8d200c7f5cea7cfe0ef7c337899b6a5814664dde9034491fa59766aa4fbda7aefbef8ca4911d491ad75f09421c67923710049ce0642bc75c70e52b09576eb246e584adccf55504e6fa256be0dee7555ede1f2e79453ef22c40952981cf9e6c8e54dafcf219aea6911a7555de1e9be2aaf429361cf01634c488f7a4435c343c905d18cab680ac096519b1d95bcdefed8c4862267a2f72f77d11b15e906a8f8f15177bd3590fb9a5e499a5a7ed3ec3fa72488cd29b172fae1d81261417bfb8ec74e8f24071412b20538b9fbc193d7a29b17211d3de99a8a2bc4c1d8be40124902e7ffcb590ff5447e0e6a7a90af73c85be5344fdc14ffb907fb724b8642a1b7a3f1e3e2726e4bfb8d7fb856fff76e163fbe577606483631e4f384ac9719f3a0ad644ae9829f6c22b01798be105025b8710a578cc75c1bc0daddaa8eeccb0a39e55e23ea210f91865a797938353f7a2f6dd8fd78a5d4efc73ebf5d442521b98aadb640bc387d0a294cad9ec147c9072c8377d686d599ffdf8a93941a3effb96d9947af668c034c9f9064600aada5330d13b7204538572cc78e6f589a23ee996d18851d1f5deaafbfba367bb0fdcf742909f1f115f434ca7a61bad8ac000132eb7487ad9037ff853d86e0a632a1bbc4fe61de2ce86748de9642b5fc9bf715bd75209172a4d2732c376aee36bc83dfe064e8a3ea0fe6673ff9e20f9a4255b8a3f87b70e41a0fc03bf93710e024cbcfd70f2909c2b77015c14fc2c0abc9278140307b6767fd68394e65f6b272a1037cc971eb8aac8913d863171c6a7bc19494dcb7c666b44d876db974fa744cf0e26cdddd595237828fd2368d9c7a61d96d994a63f83fe9b57e747cafb82e2b80ccced86f1bf42b2ea54bb1ac239613f97633a3721c3270a0cfe76e917d0084283c0578ecdea9816d7cdecfc256aec710901480577b6c01fd049da76b3720b606a80263ef4b0a77f4b3a1c9c283b38913cdf7a64d0e5791b0379f1f338c0910268df9bf6d9ac71b0f5f3952c186065aea68750f8df4435ac850621974f7ddc38258c6049639b6b3da47d992940886042fb33cc8e1b660612fa0d1f18e338c5a191641e84b1cf43e1dcb82bb2dc159822190c74eae5da83dc9db92d7c6788cbc7d5d0f23db579c8495e702b36a2ab88b30f125b5dc59eb560599192ce12586d51c71085d389d0aa680628726b1706cbfd333841471cf4d44b9f0dbddb40d44d151c0cbbf7a125fa5e00db4a651a33cdac2aab06f75c356edadbe016e71c3bc5424599bfc148c73cf480ceba8496f178f60e3464f5e4b0293b27d0e651a4bdfd6fc501a43ee2068e4a7c1f464e61a8474db38519d01a59bc6b071cddb06602284d0ecc52439b4e4de675a276e99c710235f26475758a53a2da712abd8f335e611088f9b7213452488931f7d3997d44067e770e2231d1b56d601b4f7994cda843701ef3755c2d3a77665546b5c53391c286a2a592d6cd2ca84760d40b0420e679c33ed55b5b07c7a909512aa291a8c6518a3831a74547cca315709034a2e5861650f00e18aae7043eb3c6cc9031ee0bfc93ad51500c8a98114a6509e706dd260818b931a833d8b9204b4cfb21ba084a90df8e3110c2ad18a5d0e294c1aad0415edee3f74225b007fdff18621188adc3f8df8b92643b28b40b156a5c66092bdbc0861cdb113a8b072951394a39bf184ada934959a8e4c1e1a2e632c4e941d044615319a10c0a905d0ba6bfc3379feac842bfb148047407c3595ae5eb8c8db9a5b486f549f24360236a7aa75d26e3f91fd06b12d1fe2fd8f47119d20c6e860c88a571ff9d4d17e27935b89b38eba2d0053a7f4f98574542a7567adf4639ed86c5942b653e9b6c823fdd9d3bf600246586951f4a8ece3b9f3d742e0f72c2f20e84ff7617987a0be0b20a48930aba752b45c81283bd9c3410ee1638c1e6e47469b4ad8df7ccd501dbce79ed0390bbc41c754921242e1b8e0e5b96bd057a788942d41265af806fc53c766103410ecb645559f56df03f5408c366675790aa3024e01b15bff01166ee0bd21d113dddc77d10f6d8f4be5e232d2f5f52c85ef6267993655ff7a004514909bc3fa2c17d2a04749df18cff2099683ffe37e786d6aa53dab00a8758700a4c3b44b7da28a070237f329bc2ba5a3ed6f3895f914a8dafcaa1f78e966db60fe135673fee38185ad02e53d658f7186e68709ee53dd578e852a4f853494ca2dcf3948f8ecb1d5630d55f89fa868fdbb326bf25194ec7f8853382c6961d1802b0028de8c6a526e20c3f37150377853aca4cc14d1325970c9f871e6eb5e605f91aca6f87546b7e76ac18052b3a4f328aa2a22e8315dac20e95dbaa953887f780892356b764e7e8a70b2050935f4a9757c6b692e08bd29475b0b0eb6ba9e57c09e93c0c01192e2320db1e30dcafc210401df1861d1d821b25e4a5a4180f91266792fbe74fab9fc480b12fc42445ed28b0c7fe62ae8c21378327fb46d27bd484414649703dfd5049985e5817d28f961abcac3201475922368ea99bfe40b8b89ecb94c9de1cda99dc844dc8157b8bd8ef159ad1c2d84e71b222592b1490a6f0fa0322fec57c44a4000c17d31ae6b704915016e3b6ede973b7a9e3ea7b130ff0cf821e14492aa0c1abeedc7f525332a9ee173189f7ff0199b2946818c8dc860214d351acc6f606ae5e83ae6f8d58ee057f5c3f5c71c50234b2b76432dd9956a08dcef625e10b2051d1c233fb623fb48316c5bc2960cae67459aa9919a54f0a76e31163a6689c281fdc4feadbf5b37d2da2183dfa2b223adb14089445d2dd6aa68ee642f8bf000a2013d7e9011aed3a33c041f5a0577d0db0193c09f303d68af56e97760375c3b2ce2f02e77c543b3f6b14d94a09b0d8948efb79bd3e742c9280a780aab7051e599700fd0cba92d7347717c1f9c42931e5399002fde02e75732bdc415fa48d027a10efdc26cec8061ca511936c61fdfd63cb7bab5ff284256e0f759c9d52276dc7111328cd631c17d6ca4a0d59129da9bbeb4f5ab97d76e1e99f5ffef967f137ed3ab20d64976b9e357e1b823cc24aab34db2647d55368e1a13aa75b4fd3ebff911f8ae28dc3bcd81fe67c41f4b64bfb59e84a56f6b5c1f95dcd85c7c8491126700d5765e9d02fa9c690b0ad5e24f47bc2c02b7cd7094aab9a8226bde2ac827f8eb851c0219a700d2c9d313189707cd5dbcd2fa8b29496537531b449654b58bc64f558245d59866220214c344d08e400964643e0b2d3e8fd20bc75fe15560aca06b8afd798ed1b23efa3c0c57131d522a074bce4a3b0d2a1695bdea9bde013d4d0a9b94131c10473639bdca440c1531a24b19316d76ca044daa1e757dddc9ffa4dac64d90476c414bb88cc21ce9e9a818ffea0bdc3cba3d4cf7496dfd7382f7842976f9c22cef901b9d9b5fad0bc3f3fa9a05c0c387928128f2f813d81013e8f5034e73e1aef3a20e6338abe3f05c1d57249c96ecc08d7ccc8ee689b553ee0ebbc05d626d54909f4a24ce5b751c04913c022a1bf7eb1", @typed={0x14, 0x63, @str='{:mime_type\x84[\x00'}, @generic="ba6b27576b7b9d26ac8f62a315d44bd78cf77173c5163f30be9ff13e03a891d80432afdbb6a50d2073952ebca886662bc3d4b2f8417945a51ac0431c6bca86ca7e8902bd3132df42b34ca5e6be9d0cd5299dd449145d2185eae6c23434978f68d13353a8b58505e953b47b932ba8e0b0ef7a31608db433894925211878a35794630977d9d3bdf3188ffcac7756a2d84be6368fa3016914b1d29a6c7c51436c2d961a149f5ebeba4f987c83da007f", @generic="c2ee9f7effa15acbe047309f14a82f5bcf2811667389e7867197d1e81fad9613fcc2adf3e79cd60c6090a34c2bf294014bde1f42f7364d722f0657e950e334c75ea0c4a4d04fd65167192d5446037258752e39055303a43f23fe7aafd752ad2afc5fdda267d58570038618650e31195c53bfbb84ec864c872489c26eac6f2289b291d4cf3267cd4bef6d37065421e95180b75f7bc107fdf7dae1dd8c78f723fb", @generic="3a060dad715cff397d11123e8a720220a2d0c216dd0e441bbb97b8b0b506815c8cb61c4c2d34674e7b29c99c25ed90886b57bbec3820bd0e349c92fa54287aa9aef55d68d4749f5c4af80c332a90f36fb7d639be6b14cc2e81c4a6080a3a5ad6f279e26ce2ae54f07b445ae6a0f89fca3e794d", @typed={0xc, 0x4a, @u64=0x6}]}, 0x11f4}], 0x8, &(0x7f0000005840)=[@cred={{0x1c, 0x1, 0x2, {r0, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r0, r14, r15}}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, r16, r17}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x34, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, r18, r19}}}], 0xf0, 0x4}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) sync_file_range(r1, 0x1ff, 0x9, 0x1) [ 857.401112] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=21300 sclass=netlink_xfrm_socket pig=28176 comm=syz-executor.1 03:34:33 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:33 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x100, 0x0) write$P9_RFLUSH(r2, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000240)=0xe8) recvfrom$packet(r2, &(0x7f0000000080)=""/1, 0x1, 0x40000020, &(0x7f0000000280)={0x11, 0xd, r3, 0x1, 0x79eb76eb, 0x6, @dev={[], 0xc}}, 0x14) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000003c0)={0x100000001, {{0x2, 0x4e21, @broadcast}}, 0x1, 0x4, [{{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}}, {{0x2, 0x4e21, @rand_addr=0xfff}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e20, @loopback}}]}, 0x290) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000340)={0xd, 0xef, {0x53, 0xffff, 0x0, {0x5, 0xfffffffffffffffb}, {0x9, 0xfffffffffffff083}, @period={0x5a, 0x8, 0x8, 0x2, 0x5, {0x10000, 0xfffffffffffffffd, 0x7, 0x5}, 0x6, &(0x7f00000002c0)=[0x9, 0x7f, 0x80, 0x5, 0xff, 0x6]}}, {0x52, 0x8, 0x400, {0x8, 0x6}, {0x2, 0x1000}, @period={0x5f, 0x8001, 0x3, 0x8, 0x8, {0x7, 0xcd6, 0x3, 0x1}, 0x7, &(0x7f0000000300)=[0x4, 0xffff, 0x400, 0x0, 0x0, 0x5, 0x8]}}}) ptrace$cont(0x9, r0, 0x0, 0x0) 03:34:33 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:33 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000180)="ec12f27a44f22587df1618c354eb60144900732df02bfd31b2c5087b270ab8b3369ae267de0d14a162a9ad104f412a32b95fe90d19bb0d243bed08cb378a4cefd8b3b5d45d42efcc71", 0x49, 0xfffffffffffffff8) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x40000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001780)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000019c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000001980)={&(0x7f00000018c0)={0x90, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x192b}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r3 = request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)='syz', 0xffffffffffffffff) r4 = dup(0xffffffffffffffff) sendmmsg(r4, &(0x7f00000016c0)=[{{&(0x7f0000000240)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="8a150fb0cf530ed3c2edebb549c5c466bf8f7127954ed3cc102c00b1b3b43c8aa5a28001598be6fe2e5c694c8b94facdab1c4a59893433c40090befc311a96e0e93bf8a6ed2de0b46099997ee5b5cb7358c8cd497b173a0341dd475a9cc05eb6efb758e3ccb5908bea40eb708b1091fc7b8f9045374e2c28040176bf5604d8ebc0c6076f96ceacf41ef1fb0ec20a84", 0x8f}, {&(0x7f0000000380)="afd65d0ef95c6a680598860097e8d7860801be1a15091b43830999dfaf13609749f9010743d09578a0a850c94b4050f3153c3184499921123153b920ff7b3f8721c6b4a3b4b1fcbf46ddb045ca2b53b1dd1a78692bceae3bf1db6c22bb65bc21d8add5c55f3aa49e6445becf76882c1427fcf011a9fc93d389c7c64215c4f91350a43d5c4b5f72f6aa6f627002dc798f3c9d02acfc94c1f116f3182b753fbbb2821cb8a21c01ad4ac495041d1b352f4eee56244816941e1b47efa41cc8263036db355b", 0xc3}, {&(0x7f0000000480)="91d33d5aa0cc94a59601c7755ede947fbf241a62b05dd67ed29c045237945b3f4742b0ba676255439ce682d1f6357137b76833ab4e8248ca3e570679a4cea44cba48adaca8ec3a2626a58edffacceb9102fbc1c92856726ad239d19e1bb2609beba6d1c57551b7883fc2d613a8add185b4425e8d6e561624a1cb303d861d963c13660457db9937183f937382dafda427deecea440e620bd3a67abc95cdae040e358d48057ccecc69760b6302e08e244848be5a7269fabc7f54649e74ebc9c55f", 0xc0}, {&(0x7f0000000540)="79933799883e7dbf99a123a447edfdfb8efd4649a2", 0x15}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/4344], 0x10f8}}], 0x1, 0x14) keyctl$reject(0x13, r0, 0x4, 0xffffffffffff8653, r3) r5 = add_key$keyring(&(0x7f00000017c0)='keyring\x00', &(0x7f0000001740)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000001800)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000008000005722572e00"/64], @ANYBLOB='\x00'/56], 0xa8) keyctl$get_security(0x11, r5, &(0x7f0000000180), 0x0) 03:34:33 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:34:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="c0dca5055e0bcfec7be070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000800)='./file1\x00', 0x20c, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001440)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socket(0x5, 0x2, 0xd8d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x9, &(0x7f0000000440)=""/4096, 0x1000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 03:34:34 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000200)=0xc) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={[], 0x4, 0x7, 0x8001, 0x100000001, 0xfffffffffffffffb, r1}) close(r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000100)="0675c5a11ca605884f0291e4f0bc07e590ce3b85ed8f86dd9a957ea91ea098d130b8aa483158cd172c3f70d52c", 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb0, 0x409, 0x20000000000003, 0x8080000000000000, 0x0}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000180)="683a4fc31dafb56d2518f2d89abefa52d592973a78240100000000000000d1ae437d639ae0c2497d9b6175c446e0cdb1b974", 0x0}, 0x18) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x0, 0x100000001, 0x40, 0x7}, 0x10) 03:34:34 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) getsockopt$sock_int(r1, 0x1, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4) ptrace$cont(0x9, r0, 0x0, 0x0) 03:34:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) io_setup(0x40, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) io_getevents(r2, 0xca9e, 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f00000002c0)={r3, r4+10000000}) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x10040, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) truncate(&(0x7f0000000340)='./file0\x00', 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(r8, &(0x7f0000000140), 0xffffff35) 03:34:34 executing program 1: capset(&(0x7f00002d0ff8)={0x20080522}, &(0x7f0000cc0000)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0xc000) capset(&(0x7f0000000040)={0x119980330}, &(0x7f0000000080)) 03:34:34 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:34 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x0, 0xd) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x40004, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:34:34 executing program 4: socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000003900)=@can={0x1d, r6}, 0x80, &(0x7f0000003c00)=[{0x0}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2171, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000004) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4) 03:34:34 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/atlr/keycreAte\x00\xe4P4s\xb109!z%\x1e\x17\xf8\v8\xc2{\xe8\xd9\x9eS\xa2U\xc5\x1d\xb8\f\xa9 \x92\xb3\xb7X\xe5\x8a\x18\xf8\xeb;J\xa7t\xb7d*{(\xb9f1\x067\xef\xd8\x99\xb3\x1c\x1d\x14\x99A\x1b\xabf8\xcb\x86\"s\x93L\x11\xb6\x00gy\x12\x83\xe0\xacJ\xb9r\xcf\x7f\x82C\x13\x13f\xf3\xbdPWl\x0f\xc22\x81Gm\x1cg\x9a\x8e\n\'\xb16w\xc8\x15\xeee\xb88\x8a\x90\x81mG\xd8]G\xa9\xbb\xaa\x04\x19\x04n\x18\xe7$U\xbdU\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000140)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/265], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r2 = dup(r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) r4 = request_key(&(0x7f00000004c0)='trusted\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)='-{\x00', 0xfffffffffffffff9) r5 = add_key(&(0x7f0000000580)='trusted\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000600)="f864c7d9f936cadb808a4461f55b1404683b142991494603465091f3b5a5501d550d1c5ec81ab0dae73b9391571d1959b50732", 0x33, 0xffffffffffffffff) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000180)=""/53) keyctl$unlink(0x9, r4, r5) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x310) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000640)={@loopback, 0x3a, r3}) 03:34:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0)) getgid() recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x0) 03:34:34 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:34 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000380)="add0cc6d5c9c9a22d2046971c6d35f0a595ffcfff4c5ee1e3d19773ade7f24e67dcabe2769a4185bd4da19535bd5a4569c1fea703eda7021c4031530501dc5ffb306928f00ace088533a0c42254f1acaafde9b7f42ae8eb2a497694725a094c2951ec7dd4d21ab5b7222490aee5ca90dc4e5fc078c7415a6cedab98f63296e0621805068791ee9a359cd1e9785a669d34b83f9e9b401fa60c592a211159980", 0x9f, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000440)={r1, 0x56, 0x17}, &(0x7f0000000480)={'enc=', 'raw', ' hash=', {'rmd128\x00'}}, &(0x7f0000000500)="16f6fa258278457991489ba7498114f35f3dc8cacd72990d4774a9abaa84b45aa59fd8c39c6f131704cf793c22a0fb9f0e414878bdc32083b5eeeba71f99f4acdfe8c4b75a37734cf3652d03f9d4b78b4868dc2b0b5b", &(0x7f0000000580)=""/23) capget(0x0, &(0x7f00000001c0)={0xb, 0x4, 0x4, 0x101, 0xbb6}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000200)=[@exit_looper], 0xc4, 0x0, &(0x7f0000000240)="eb9ea9640b5476e05b6e9685ab78ab24f8663637b837e9596575f1dbea7feedf76d8f2d0a94723b9c8fd1d93cb35d373052c129aac13c7c018230950d484e39d8be976b758faa5c75fb88b6ba1c0390833bd5453b0551693edca40b1604f5650875da169bbc94d9aa296f69aad255040603b08d3ee45dbb856aa21457e495555619ab33be2767edbd90abd9c8243bbfd5c7f72af026642646bfd3f857088cc1bf850344eec93a1163ac7c1b554ec21604352707fa9c6a0913fa6b83fa288f0600ea6d136"}) 03:34:34 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x26) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xb, 0xc, "1ce71f571449ea0bc11cb83dd6621ad0dbe76da63b20d86370d495ae9e118f6bb2104a6d8922e528ed1add1f9ddde7e2f317cd67a7c5f0a9ebc1590ebccbd32b", "7b7a31ba7107dfec8cc62580cc9121ddf971f988461013c0a5751ce0330d1a5a", [0x40, 0xd70]}) lsetxattr$security_smack_transmute(&(0x7f0000000980)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x8001, @dev}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x9, 0xfffffffffffffffd, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = dup2(0xffffffffffffffff, r2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x48080130}, 0xc, 0x0}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(0x0, 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) dup2(r1, r1) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000680)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000009c0)={'bridGe0\x00', 0x4}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3}}, 0xe8) 03:34:34 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x18) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x9) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@random="7525820aedb8", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 03:34:34 executing program 1: setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x59, 0x3, 0x4, "5af33418bf5c9bed21852d9fa6750f6b", "7e021334de8794f3ff858b222a3bdf1973907c6ead5eb43fb9736ae84b5ef39d4f4ba147f76c0fefb6a4ec43f92ef3a0d842cd179692c12eedc452fc7275cec535bd8b02"}, 0x59, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000180)) unshare(0x10000200) [ 859.025178] ================================================================== [ 859.033192] BUG: KASAN: use-after-free in perf_output_read+0xe58/0xfc0 [ 859.039870] Read of size 8 at addr ffff8881c659b008 by task syz-executor.2/28248 [ 859.047404] [ 859.049033] CPU: 0 PID: 28248 Comm: syz-executor.2 Not tainted 4.14.125+ #6 [ 859.056127] Call Trace: [ 859.058751] dump_stack+0xb9/0x10e [ 859.062304] ? perf_output_read+0xe58/0xfc0 [ 859.066635] print_address_description+0x60/0x226 [ 859.071479] ? perf_output_read+0xe58/0xfc0 [ 859.075804] kasan_report.cold+0xae/0x2d5 [ 859.079959] ? perf_output_read+0xe58/0xfc0 [ 859.084310] ? perf_event_exit_cpu_context+0x170/0x170 [ 859.089599] ? deref_stack_reg+0xaa/0xe0 [ 859.093676] ? perf_output_copy+0x149/0x1d0 [ 859.098063] ? perf_output_sample+0xcea/0x1700 [ 859.102646] ? __perf_event_header__init_id.isra.0+0x276/0x430 [ 859.108624] ? perf_prepare_sample+0x656/0x1330 [ 859.113295] ? perf_event__output_id_sample+0x70/0x70 [ 859.118481] ? perf_output_sample+0x1700/0x1700 [ 859.123161] ? lock_acquire+0x10f/0x380 [ 859.127137] ? perf_prepare_sample+0x1330/0x1330 [ 859.131992] ? perf_event_output_forward+0x10b/0x220 [ 859.137099] ? perf_prepare_sample+0x1330/0x1330 [ 859.141901] ? check_preemption_disabled+0x35/0x1f0 [ 859.146927] ? __perf_event_overflow+0x116/0x320 [ 859.151690] ? perf_swevent_overflow+0x17b/0x210 [ 859.156451] ? ___perf_sw_event+0x11b/0x4a0 [ 859.160791] ? perf_swevent_event+0x19c/0x270 [ 859.165286] ? ___perf_sw_event+0x2a4/0x4a0 [ 859.169609] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 859.174627] ? check_preemption_disabled+0x35/0x1f0 [ 859.179641] ? perf_pending_event+0xd0/0xd0 [ 859.183977] ? __handle_mm_fault+0xd96/0x2640 [ 859.188467] ? lock_downgrade+0x5d0/0x5d0 [ 859.192614] ? __handle_mm_fault+0xcc0/0x2640 [ 859.197201] ? check_preemption_disabled+0x35/0x1f0 [ 859.202218] ? perf_trace_lock+0x11e/0x4e0 [ 859.206450] ? __handle_mm_fault+0x6c5/0x2640 [ 859.211122] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 859.216049] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 859.220835] ? __brelse+0x43/0x60 [ 859.224301] ? __do_page_fault+0x48e/0xb80 [ 859.228541] ? __perf_sw_event+0x42/0x80 [ 859.232604] ? __perf_sw_event+0x42/0x80 [ 859.236669] ? __do_page_fault+0x785/0xb80 [ 859.240918] ? bad_area_access_error+0x340/0x340 [ 859.245673] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 859.250541] ? page_fault+0x22/0x50 [ 859.254199] ? iov_iter_fault_in_readable+0x29c/0x350 [ 859.259391] ? iov_iter_init+0x1c0/0x1c0 [ 859.263462] ? generic_perform_write+0x158/0x450 [ 859.268238] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 859.272904] ? current_time+0xb0/0xb0 [ 859.276703] ? lock_acquire+0x15c/0x380 [ 859.280680] ? __generic_file_write_iter+0x32e/0x550 [ 859.285784] ? generic_write_checks+0x252/0x410 [ 859.290471] ? ext4_file_write_iter+0x551/0xd60 [ 859.295148] ? ext4_llseek+0x7f0/0x7f0 [ 859.299045] ? trace_hardirqs_on+0x10/0x10 [ 859.303288] ? __vfs_write+0x401/0x5a0 [ 859.307175] ? kernel_read+0x110/0x110 [ 859.311082] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 859.316534] ? rcu_read_lock_sched_held+0x10a/0x130 [ 859.321903] ? vfs_write+0x17f/0x4d0 [ 859.325622] ? SyS_write+0x102/0x250 [ 859.329333] ? SyS_read+0x250/0x250 [ 859.332959] ? do_clock_gettime+0xd0/0xd0 [ 859.337200] ? do_syscall_64+0x43/0x510 [ 859.341264] ? SyS_read+0x250/0x250 [ 859.344895] ? do_syscall_64+0x19b/0x510 [ 859.348966] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 859.354342] [ 859.355959] Allocated by task 19916: [ 859.359696] kasan_kmalloc.part.0+0x4f/0xd0 [ 859.364016] kmem_cache_alloc_trace+0x126/0x310 [ 859.368685] SyS_epoll_create1+0xbb/0x370 [ 859.372839] do_syscall_64+0x19b/0x510 [ 859.376717] [ 859.378339] Freed by task 19916: [ 859.381794] kasan_slab_free+0xb0/0x190 [ 859.385762] kfree+0xf5/0x310 [ 859.388871] ep_eventpoll_release+0x41/0x60 [ 859.393189] __fput+0x25e/0x700 [ 859.396465] task_work_run+0x118/0x190 [ 859.400349] exit_to_usermode_loop+0x13b/0x160 [ 859.405030] do_syscall_64+0x392/0x510 [ 859.408906] [ 859.410528] The buggy address belongs to the object at ffff8881c659af00 [ 859.410528] which belongs to the cache kmalloc-512 of size 512 [ 859.423192] The buggy address is located 264 bytes inside of [ 859.423192] 512-byte region [ffff8881c659af00, ffff8881c659b100) [ 859.435068] The buggy address belongs to the page: [ 859.440010] page:ffffea0007196680 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 859.449989] flags: 0x4000000000010200(slab|head) [ 859.454746] raw: 4000000000010200 0000000000000000 0000000000000000 00000001000c000c [ 859.462650] raw: ffffea000721a480 0000000c0000000c ffff8881da802c00 0000000000000000 [ 859.470525] page dumped because: kasan: bad access detected [ 859.476234] [ 859.477859] Memory state around the buggy address: [ 859.482821] ffff8881c659af00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 859.490180] ffff8881c659af80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 859.497558] >ffff8881c659b000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 859.505696] ^ [ 859.509322] ffff8881c659b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 859.516709] ffff8881c659b100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 859.524061] ================================================================== [ 859.531416] Disabling lock debugging due to kernel taint [ 859.537381] Kernel panic - not syncing: panic_on_warn set ... [ 859.537381] [ 859.544762] CPU: 0 PID: 28248 Comm: syz-executor.2 Tainted: G B 4.14.125+ #6 [ 859.562721] Call Trace: [ 859.565325] dump_stack+0xb9/0x10e [ 859.568873] panic+0x1d9/0x3c2 [ 859.572167] ? add_taint.cold+0x16/0x16 [ 859.576136] ? retint_kernel+0x2d/0x2d [ 859.580120] ? perf_output_read+0xe58/0xfc0 [ 859.584454] kasan_end_report+0x43/0x49 [ 859.588431] kasan_report.cold+0xca/0x2d5 [ 859.592588] ? perf_output_read+0xe58/0xfc0 [ 859.596916] ? perf_event_exit_cpu_context+0x170/0x170 [ 859.604667] ? deref_stack_reg+0xaa/0xe0 [ 859.608735] ? perf_output_copy+0x149/0x1d0 [ 859.613081] ? perf_output_sample+0xcea/0x1700 [ 859.617662] ? __perf_event_header__init_id.isra.0+0x276/0x430 [ 859.623630] ? perf_prepare_sample+0x656/0x1330 [ 859.628304] ? perf_event__output_id_sample+0x70/0x70 [ 859.633497] ? perf_output_sample+0x1700/0x1700 [ 859.638165] ? lock_acquire+0x10f/0x380 [ 859.642221] ? perf_prepare_sample+0x1330/0x1330 [ 859.646982] ? perf_event_output_forward+0x10b/0x220 [ 859.652169] ? perf_prepare_sample+0x1330/0x1330 [ 859.656930] ? check_preemption_disabled+0x35/0x1f0 [ 859.661952] ? __perf_event_overflow+0x116/0x320 [ 859.666708] ? perf_swevent_overflow+0x17b/0x210 [ 859.671460] ? ___perf_sw_event+0x11b/0x4a0 [ 859.676161] ? perf_swevent_event+0x19c/0x270 [ 859.680660] ? ___perf_sw_event+0x2a4/0x4a0 [ 859.685245] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 859.690172] ? check_preemption_disabled+0x35/0x1f0 [ 859.695193] ? perf_pending_event+0xd0/0xd0 [ 859.699533] ? __handle_mm_fault+0xd96/0x2640 [ 859.704034] ? lock_downgrade+0x5d0/0x5d0 [ 859.708186] ? __handle_mm_fault+0xcc0/0x2640 [ 859.712685] ? check_preemption_disabled+0x35/0x1f0 [ 859.717811] ? perf_trace_lock+0x11e/0x4e0 [ 859.722044] ? __handle_mm_fault+0x6c5/0x2640 [ 859.726557] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 859.731484] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 859.736237] ? __brelse+0x43/0x60 [ 859.739693] ? __do_page_fault+0x48e/0xb80 [ 859.743927] ? __perf_sw_event+0x42/0x80 [ 859.747976] ? __perf_sw_event+0x42/0x80 [ 859.752039] ? __do_page_fault+0x785/0xb80 [ 859.756272] ? bad_area_access_error+0x340/0x340 [ 859.761036] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 859.765888] ? page_fault+0x22/0x50 [ 859.769527] ? iov_iter_fault_in_readable+0x29c/0x350 [ 859.774717] ? iov_iter_init+0x1c0/0x1c0 [ 859.778791] ? generic_perform_write+0x158/0x450 [ 859.783547] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 859.788223] ? current_time+0xb0/0xb0 [ 859.792366] ? lock_acquire+0x15c/0x380 [ 859.796338] ? __generic_file_write_iter+0x32e/0x550 [ 859.801434] ? generic_write_checks+0x252/0x410 [ 859.806103] ? ext4_file_write_iter+0x551/0xd60 [ 859.810771] ? ext4_llseek+0x7f0/0x7f0 [ 859.814662] ? trace_hardirqs_on+0x10/0x10 [ 859.819002] ? __vfs_write+0x401/0x5a0 [ 859.822895] ? kernel_read+0x110/0x110 [ 859.826797] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 859.832256] ? rcu_read_lock_sched_held+0x10a/0x130 [ 859.837616] ? vfs_write+0x17f/0x4d0 [ 859.841333] ? SyS_write+0x102/0x250 [ 859.845051] ? SyS_read+0x250/0x250 [ 859.848674] ? do_clock_gettime+0xd0/0xd0 [ 859.852823] ? do_syscall_64+0x43/0x510 [ 859.856796] ? SyS_read+0x250/0x250 [ 859.860424] ? do_syscall_64+0x19b/0x510 [ 859.864508] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 859.870324] Kernel Offset: 0x30e00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 859.881347] Rebooting in 86400 seconds..