GRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) syz_emit_ethernet(0xd1, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={[], 0x23}, [], {@mpls_mc={0x8848, {[{0xffffffffffff0000, 0x1, 0x59, 0x80}, {0x2327, 0x100, 0x400, 0xffffffffffff8001}, {0x401, 0x1, 0x10001, 0x7ff}, {0xfffffffffffffffd, 0x101, 0x9, 0x401}, {0x7ff, 0xa350, 0x9, 0x2}, {0xb97, 0x2, 0x80000001, 0x9}], @llc={@snap={0x0, 0xe558c964c34f70c7, '\x00', "4d8122", 0x9afd, "06d866bcd727c72b45d16ffff2fa04aeca27dea6e8a70f5478ba7744c1bd56964094572cf2ca4e6623023a7209e6c10caf64a31b63b2c999cfb90edd1aab0cb0d378f88e2829f17b8ea68ca1d355ddfb0022419fa6a8fbaefabc2c71f1dcd7ea7064c4ab2fa836e07d5240554be2b9005a5619235f8ee2f6f3bb71f23cee5f5bf4910533e4df5338e4fe902f51093db42f02e8309b0fcd39774636d3b99cde3191e92a"}}}}}}, &(0x7f00000000c0)={0x1, 0x3, [0x59a, 0xc78, 0xf58, 0x7bb]}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 03:47:49 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300), 0xffffffffffffff53, 0x0, &(0x7f0000000040)="d9fa9ad5bade421255e6e6390be1ff1b08b493bf2b05"}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1218.547634] loop4: p1 p2 p3 p4[EZD] [ 1218.572494] loop4: p1 start 1 is beyond EOD, truncated [ 1218.606125] loop4: p2 start 101 is beyond EOD, truncated [ 1218.638398] loop4: p3 start 201 is beyond EOD, truncated [ 1218.669932] loop4: p4 start 301 is beyond EOD, truncated 03:47:49 executing program 0: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0xd0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev={0xfe, 0x80, [], 0x29}, @in=@loopback, 0x4e20, 0x4, 0x4e20, 0x4, 0xa, 0x80, 0xa0, 0x33, r1, r2}, {0x3ff, 0x0, 0x100000000, 0x0, 0x3f, 0x211c21f7, 0x4}, {0x10000, 0x9, 0xfffffffffffffff8, 0x5ae}, 0x400, 0x6e6bc0, 0x1, 0x1, 0x2}, {{@in=@remote, 0x4d2, 0x33}, 0x0, @in6=@empty, 0x3500, 0x7, 0x3, 0xd8c7, 0xa43a, 0x2, 0x5}}, 0xe8) signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) [ 1218.957383] loop4: p1 p2 p3 p4[EZD] [ 1218.961566] loop4: p1 start 1 is beyond EOD, truncated [ 1219.045887] loop4: p2 start 101 is beyond EOD, truncated [ 1219.053845] loop4: p3 start 201 is beyond EOD, truncated 03:47:49 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ashmem\x00', 0x1a001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getpeername(r1, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000640)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000004}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7ff7) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000400)=""/162, 0xa2}], 0x6, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10000000012, r0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/203, 0xcb}], 0x1, 0x0) [ 1219.094317] loop4: p4 start 301 is beyond EOD, truncated 03:47:50 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x6, 0x0, 0x58c8, 0xfff, 0xb23c}, 0x14) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1fe4de123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1219.355326] binder: 4410:4417 unknown command 0 [ 1219.413147] binder: 4410:4417 ioctl c0306201 20000440 returned -22 [ 1219.416749] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1219.483062] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1219.519123] binder: 4410:4419 unknown command 0 [ 1219.558134] binder: 4409:4418 transaction failed 29201/-28, size 24-8 line 3255 [ 1219.559658] binder: 4410:4419 ioctl c0306201 20000440 returned -22 [ 1219.566767] kauditd_printk_skb: 299 callbacks suppressed [ 1219.566776] audit: type=1400 audit(2000000870.372:35836): avc: denied { map } for pid=4402 comm="getty" path="/lib/x86_64-linux-gnu/libnss_compat-2.13.so" dev="sda1" ino=2683 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1219.602333] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1219.655033] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1219.689156] binder: 4408:4422 BC_INCREFS_DONE u0000000000000000 no match 03:47:50 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r0, 0xf75, 0x800000000}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0cd90000"], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x8, 0x800) ioctl$RTC_AIE_OFF(r3, 0x7002) 03:47:50 executing program 0: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'bond_slave_1\x00', 0x2}, 0x18) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000040)) fallocate(r0, 0x10, 0x0, 0x4005eef) prctl$PR_SET_THP_DISABLE(0x29, 0x0) [ 1219.801209] binder: 4408:4420 transaction failed 29201/-28, size 24-8 line 3255 [ 1219.821025] audit: type=1400 audit(2000000870.402:35837): avc: denied { call } for pid=4408 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1219.847276] binder: 4408:4422 BC_ACQUIRE_DONE u0000000000000000 no match 03:47:50 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)="a02f428665ac4f86308862be057fd6b4fb61e1d9733a2f1468915a7f0387e19eee6f579aeb9040de4f350cad29f913ac2d71605bad65796f03d4fb8296204688aa516b735d6d30461e8077d0c7d7124aaa425f", 0x53}, {&(0x7f0000000480)="cd926e4404793d9cf9d051e94498cf5061a6502a5dbae05b5fb3c43d88f76a91adf4806ec429d4e61818e8361f11cc2338be927cab638e83a0aeade50caee307c93655314dd5dafdfc93200b691147166f43ee6d2d832d33fc4a5df87ec6745f343b7ad810e8e1c05f36ed91e874e56f969d79398935e00a497b72d5f85e6046874fdd6e8ddc779292b03216e4757a0326755ceb6de89573691e82b919955a6c20062858cb38f7", 0xa7}, {&(0x7f0000000580)="20fa61864d0d90ea1d945892895feacd59257cc3a852801f0136673938a985ae1bb73809a09e80008367835484b252097d9457ffa93f09fb5693f6ca04bf39a70459642ba914897baa76dee144a3d0ab2bc6b41d3cf63ce954fb9a22dd78aa8b42386b89182a35731e10185a56389d1c11f18fec937d4b1ed2c11b3991cbcbc377706c302e4b0fff35d6b9a6e3d4406e320b96adf4c217f33085b89ac3ea7732b4e0caec021cebc7c7858356138f2cff7c", 0xb1}, {&(0x7f0000000280)="de818db57ac126ca625ec4e6749e939ca6f8383333ebf9a2e70f190c40561a552b921ffef3e2b4e580fa05041dcbc5ac719676f4c834e2feafa891280e1c998753485fd2a8974663bcd5dd41e486607f1bf1721ce3e9498a376205ea5bcc9096ff9e7aadd449988d788b24f678f133e0b28fcb89c87b0ebffb", 0x79}, {&(0x7f0000000640)="653029102f3939b8631fdda44d98c2c0ba3685c289430a17040e93d2822aca3c43b801fec3ae37b94ee8c8fbcbd1f671da6e4c1aca8b7c6c71b6baa0a2b42ca6ec2412dec4473f9e0478901be138d78b8b698b7b7dd35c9a53df6e4533a477f935d8cb1a96a7bb12d3305950c7295debc09d7ff31a24083673a7568072d634217414077993cfae5a0ccbfec0f30c5f7de8c0e976ca4027dddfd77b0725c1128823fc95fe2e53edb9a1f714cd88ff2802435f68e6796450b17b9f45436820a9b3e92a79a9b33bcccb261509bdfbac3cb234782ee19ec28c4d3fd51a7397b91f3a3a634dd5de502dedf4f3d12a4a9798f27c43407606953bf4", 0xf8}], 0x5) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r4 = creat(&(0x7f0000000740)='./file0\x00', 0x2) write$P9_RREAD(r4, &(0x7f0000000780)={0xde, 0x75, 0x1, {0xd3, "ccdf2fa9493270cf478b8575dcea36a43f4f0b5398554ea67a515ab59e4f965732f46c4baa7ea2d9f0f34a2762475e242db27c4448c20588cd14cd33415420e36935bb86ceb32e49aa73056c4c7b529903752e20236689b2129ef497d589b175bbbbe9560e5d310eca33f81d61775ae09d20a3c943cd6a242554f99128716e78ad7df4165efa9efb110dd2f18589f8902dc44a3d52238f5b9ef8a2c96d5a0ed90d5ca9915781363339092de0525d93b3167cc69f029351aa6c1c4c27acb803dbf10d622b77060f669f7dd25c9f93d8ce00f3cd"}}, 0xde) r5 = open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) prctl$PR_GET_NO_NEW_PRIVS(0x27) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$P9_RSYMLINK(r5, &(0x7f00000000c0)={0x14, 0x11, 0x1, {0x80, 0x4, 0x5}}, 0x14) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000001800"/52, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 03:47:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000880)='vfat\x00', &(0x7f00000008c0)='./file0\x00', 0x589, 0x1, &(0x7f00000009c0)=[{&(0x7f0000000900)="33b8ba825cbd55ba7ffb429583a6da274166cc3654436c2aa46d1db6bc4ae5f494e7f505e5d693fdc10b565508d543b17abf9c5ed0cec23a698728b36e5b708cc33e50ecefd54b80915130ef46ca842faf84aea237fa6aeae4d5dfa27041a4b6625c525c8b66a2e17c002c0470fffb148d2956f3fa6e45a0c85cfc20067608a6b9d325ac888b49", 0x87, 0x5}], 0x208000, &(0x7f0000000ac0)={[{@nonumtail='nnonumtail=1'}, {@numtail='nonumtail=0'}, {@fat=@dos1xfloppy='dos1xfloppy'}, {@utf8no='utf8=0'}, {@uni_xlateno='uni_xlate=0'}, {@numtail='nonumtail=0'}, {@shortname_win95='shortname=win95'}, {@shortname_lower='shortname=lower'}, {@iocharset={'iocharset', 0x3d, 'cp949'}}], [{@euid_lt={'euid<', r1}}]}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa, &(0x7f00000006c0)=[{&(0x7f00000000c0)="0a89e99871ff62667b42d0569308274645a1d4dacef2fa62ae7452ce3f45ee1138b910a618f473dbcd6c0c02535f53cfeed567677e9b20426e2ba3dc64b1a979137337bf624a8d1927fa90b40e562ef5423e2f4e5a54b85834fe6c61058b4e18d06c7f00dd99baeb9803f3078e0e093a52ab597cfe0ed7dd5d34f768aa230ebe3e5561cd7c5895dcbc2278344c735e1b28f5b65ede4b8118657cc152f01587a1eb294bbad88fda7a26c954fa25758a47fec1900103180d05006c53be120062da7288a437039b2a614736fdab498891e67e0c52962668e7b59c", 0xd9, 0x8}, {&(0x7f00000001c0)="b1a751a7293547b8665a67b51b473a546b53f605501241015c42f616e8e437ab944897c998f1477edf5cd2", 0x2b, 0x101}, {&(0x7f0000000240)="fec9997eeb6859b68339148da5a4d2917d306d18cad2b49f095a8e255cb64161efcd5eac6a787268e75fecc0adde977166d0f9329b8badf0a28dfd4ccceda6b84bab3ed6ce048218d337561093e4ea0c21fa81148bd05ed898b7bd2c49dc933eb89ee10b06a8db833256a68e82a9202d57c8d9d5cfe9a68633566ad0f8a05d4969305fc3d78802dcead8c1bbf7ca030a28c8", 0x92, 0xe95}, {&(0x7f0000000300)="a8db2005cf639bb07a763e3854351d06c1c0c26e66417956a57d8d609dc5d0ae8405dc9f0db108e5eb15e0591ce9c1dc474ca2577402cd017256eb9512", 0x3d, 0x7}, {&(0x7f0000000340)="571f8b0554939bc9f3304727aefd09b3c775e5b4bb8c8c15efa18dd6c3dac8ec3d572dff8d3787681da35792ed6942be4b11be258e621d06bae591e7d6606fbcd39141cdbf87c0d957f591ff734195028ba40d37950a57e0efb5e4c6d40d579788da0646e9df189c89a86708d5b58518b7ad11ba189f5a1521fb7d9cb167beb9fe1b5c2f89de9e9d1e86c9f5e55982ab322c79ae7813ab2ee285269564ea109fc8770b480073c50a37dccf7e442f5fbf94f64986bd683c103219cd03fa26195e5fe021092c828598efecfa6faa27dbfe9f894e33b36e7ecd465e6f70b21a3cc07c3e1ed7", 0xe4, 0x8000}, {&(0x7f0000000440)="e5d258f7", 0x4, 0x9}, {&(0x7f0000000480)="cd7b04e9d2feab80a3f51b337e34a9dbab998b0736152649733199b1cea88ec13f7d7845e93fff0dccd57ae621", 0x2d, 0x3}, {&(0x7f00000004c0)="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", 0xff, 0x5}, {&(0x7f00000005c0)="2b1f63ae70e864e600ff043b061f7d914da48b16e3ffbab28cd2224197736bf4353ab294e129b249b6d9af010c5fb87e209d3bc3f0310c68b9f8fa5c1d0f5bf98060f605a010", 0x46, 0x2}, {&(0x7f0000000640)="1547b6cee51d2a23de9e8053bb6edb7a9495a077ba5e3f780fc3e11d5f83b040ccce2b39f3afc217d49e89ac20674129451686c76dee7fcc6b4772951ae1cb93e45277099386eb4bed10ff3dfe52f1039f597c8ce5b7e555a2", 0x59, 0x86}], 0x8000, &(0x7f00000007c0)={[{@nonumtail='nnonumtail=1'}, {@rodir='rodir'}, {@numtail='nonumtail=0'}, {@rodir='rodir'}, {@uni_xlate='uni_xlate=1'}, {@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}], [{@smackfshat={'smackfshat', 0x3d, '.\','}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trustedwlan0vboxnet1'}}]}) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000b80)="0090006b7f040000006c4c00000000000000000000000000e0e5153200000000020088012600222026503f4e255840622899f90100000064000000008127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d0193", 0x66, 0x1a0}]) 03:47:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5e00007399cf9e56d38bc50ae7da65bf26e4d3ea632502", @ANYRES16=r1, @ANYBLOB="04032cbd7000fcdbdf2501000000080006004e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="3900f7001100090469001b00810800000700fd3f0300000045000107000000141900080015001600070d9183a8a500bdbb0a9b84e443380200", 0x39}], 0x1) r2 = dup2(r0, r0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000080)) 03:47:50 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1220.060069] audit: type=1400 audit(2000000870.472:35838): avc: denied { map } for pid=4402 comm="getty" path="/lib/x86_64-linux-gnu/libnsl-2.13.so" dev="sda1" ino=2693 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1220.183711] audit: type=1400 audit(2000000870.472:35839): avc: denied { map } for pid=4402 comm="getty" path="/lib/x86_64-linux-gnu/libnsl-2.13.so" dev="sda1" ino=2693 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1220.308391] audit: type=1400 audit(2000000870.472:35840): avc: denied { map } for pid=4402 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1220.407020] audit: type=1400 audit(2000000870.512:35841): avc: denied { map_create } for pid=4409 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 1220.506201] binder: 4434:4440 unknown command 55564 [ 1220.530336] binder: 4434:4440 ioctl c0306201 20000140 returned -22 [ 1220.553113] audit: type=1400 audit(2000000870.542:35842): avc: denied { create } for pid=4408 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:47:51 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x5) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000014c0)='/selinux/enforce\x00', 0x40000, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000001500)={0xc03f, 0x1}) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000140)=""/194, 0xc2}, {&(0x7f0000000040)=""/129, 0x81}, {&(0x7f0000000240)=""/113, 0x71}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000380)=""/153, 0x99}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6) [ 1220.566235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53145 sclass=netlink_route_socket pig=4447 comm=syz-executor.3 03:47:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008915, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw6\x00') ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/98) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r1, 0x0, 0x1, &(0x7f00000001c0)='\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0x9, &(0x7f0000000180)='net/raw6\x00', r3}, 0x30) [ 1220.719226] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1220.744921] audit: type=1400 audit(2000000870.562:35843): avc: denied { write } for pid=4408 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1220.763743] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1220.782637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53145 sclass=netlink_route_socket pig=4447 comm=syz-executor.3 03:47:51 executing program 3: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000140)=0xfffffffffffffffa) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @rand_addr=0x658c}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x4e22, @empty}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='nlmon0\x00', 0x1, 0x200, 0x40}) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x6) socket$inet_udp(0x2, 0x2, 0x0) fcntl$addseals(r0, 0x409, 0x8) [ 1220.873468] binder: 4434:4441 transaction failed 29201/-28, size 24-8 line 3255 [ 1220.873500] binder_alloc: 17238: binder_alloc_buf size 24 failed, no address space [ 1220.938421] binder: 4434:4440 unknown command 55564 [ 1220.943636] binder: 4434:4440 ioctl c0306201 20000140 returned -22 [ 1220.948678] audit: type=1400 audit(2000000870.582:35844): avc: denied { map } for pid=4402 comm="getty" path="/lib/x86_64-linux-gnu/libnss_nis-2.13.so" dev="sda1" ino=2672 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1220.985186] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1221.033722] binder: 4436:4450 transaction failed 29201/-28, size 24-0 line 3255 [ 1221.033866] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1221.089326] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1221.143707] audit: type=1400 audit(2000000870.602:35845): avc: denied { map } for pid=4402 comm="getty" path="/lib/x86_64-linux-gnu/libnss_nis-2.13.so" dev="sda1" ino=2672 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1221.179244] binder: 4434:4441 transaction failed 29201/-28, size 24-8 line 3255 [ 1221.191977] binder: BINDER_SET_CONTEXT_MGR already set 03:47:52 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400001, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000eb7228572cea34c447f4f89bcbd952e8d1a1c62c1cba597fee8a5f37b6c63b3eed85016d9fe634f2dd7fac1641c938e48437d572f9b199eb2f9920c87887345cecb6fdace2e32c1aac90f4fc8aa6a6f278c59ed3c2c11c2d9dcf028f345497c72366d9804e5292c76fea08b0f7fd8f864766c37f14ecaf6ce725c34d9b6cbe6168e3674846fa40078dd01db4dbfaf42a5050b1b2da0d4044b200000000c3aac46c05502654e9ac6521ffb52ef88dcc2781b2c7cb288cb3acdf6202c7719b2caa4b75f90f5f4f6a5f29aca59579ed51bc4d"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1221.275992] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1221.293569] binder: 4445:4452 BC_INCREFS_DONE u0000000000000000 no match [ 1221.302457] binder: 4445:4453 ioctl 40046207 0 returned -16 03:47:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xffffffffffffc44}, 0x276) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646566636f6e746578743d73745903b19b"]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f00000000c0)=0xe8) 03:47:52 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) fcntl$getown(r0, 0x9) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) r3 = socket$inet6(0xa, 0xb, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000380)={@mcast2, 0x51, r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="000000001e000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1221.347430] binder: 4445:4469 Release 1 refcount change on invalid ref 1 ret -22 [ 1221.372930] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1221.417875] loop4: p1 p2 p3 p4[EZD] [ 1221.422425] loop4: p1 start 1 is beyond EOD, truncated [ 1221.451299] binder: 4445:4459 transaction failed 29201/-28, size 24-8 line 3255 [ 1221.453314] loop4: p2 start 101 is beyond EOD, truncated [ 1221.486689] binder: 4445:4453 BC_ACQUIRE_DONE u0000000000000000 no match [ 1221.490413] loop4: p3 start 201 is beyond EOD, truncated [ 1221.543093] loop4: p4 start 301 is beyond EOD, truncated 03:47:52 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:47:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008915, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@rand_addr="7fc407a32ed79b7232430acaf88f7366", @rand_addr="7a8c34beb44ee560b93110f54350e029", @dev={0xfe, 0x80, [], 0x29}, 0x1e9, 0x3, 0x3, 0x400, 0x1, 0xb40e88d436c505c8, r2}) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) rt_sigtimedwait(&(0x7f00000001c0)={0x10000}, &(0x7f00000002c0), &(0x7f0000000340), 0x8) [ 1222.088631] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1222.119748] SELinux: security_context_str_to_sid(stY±›) failed for (dev bpf, type bpf) errno=-22 [ 1222.156389] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1222.191181] SELinux: security_context_str_to_sid(stY±›) failed for (dev bpf, type bpf) errno=-22 03:47:53 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40400, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000040)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000900)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x2, 0x1, [{{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x300}}}]}, 0x110) [ 1222.208648] binder: 4480:4487 transaction failed 29201/-28, size 24-8 line 3255 03:47:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001140)="0adc03263c343f319bd070") openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r2, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) lseek(r1, 0x0, 0x1) sendfile(r2, r2, &(0x7f0000000440), 0x20) sendfile(r2, r2, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') pivot_root(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)='./file0\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1) fcntl$setown(r3, 0x8, 0x0) sendfile(r4, r5, 0x0, 0x8000) prctl$PR_SVE_SET_VL(0x32, 0x30a6c) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x8000000000000, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x5004, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000780)='TIPC\x00') ioctl$sock_SIOCDELDLCI(r4, 0x8981, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x1910824, 0x0) 03:47:53 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000580)=""/219) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000f9ffffffffffffff000000000000000000000000000000000000000018000900"/52, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 03:47:53 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1222.613366] binder: BINDER_SET_CONTEXT_MGR already set [ 1222.645006] binder: 4488:4498 ioctl 40046207 0 returned -16 [ 1222.681895] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1222.733140] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1222.748774] binder: 4488:4498 BC_INCREFS_DONE u0000000000000000 no match [ 1222.775861] binder: 4488:4508 Release 1 refcount change on invalid ref 1 ret -22 [ 1222.794803] binder: 4488:4506 transaction failed 29201/-28, size 24-8 line 3255 03:47:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) close(r1) syz_genetlink_get_family_id$tipc2(0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x18}, 0x7}, 0x1c) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r3, @ANYBLOB="020f25bd7000fedbdf25010000001400070008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0c000400090000000000000008000100000000000c00020001010000000000000c000300c9000000000000000c0003003b000000000000002400070008000100", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08c844cfd4d1b87b010000006d368a954448684bad72fd09fcf557117133472ce40cda0eac3eb1fc006ae10f4bb95446f1890db8bce598aa0e16dcab3bea1c773a79ccbe", @ANYRES32=r2, @ANYBLOB="0c00060001000000000000000c0008000100000001000000"], 0x9c}}, 0x0) fstat(r1, &(0x7f0000000040)) [ 1222.903865] binder: 4488:4506 BC_ACQUIRE_DONE u0000000000000000 no match 03:47:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000280)=0xe8ef) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c030000"], 0x7d, 0x0, &(0x7f0000000040)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abbc9154a6d70203f611ca1ee9c2231708e18a400000000000000000000000064fadd218c89dc2cc021ca59cf6cefea0f31f7d3afffae6ab6d11c4f0e1ced19d51fb9a16c179d85b649416d2ff6164b063ad35b32"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) 03:47:53 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x44, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b489"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1223.206844] binder_alloc: 17238: binder_alloc_buf size 589848 failed, no address space [ 1223.266037] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1223.330487] binder: 4512:4521 transaction failed 29201/-28, size 589848-0 line 3255 [ 1223.427760] loop4: p1 p2 p3 p4[EZD] [ 1223.433165] loop4: p1 start 1 is beyond EOD, truncated [ 1223.487779] loop4: p2 start 101 is beyond EOD, truncated [ 1223.518926] loop4: p3 start 201 is beyond EOD, truncated 03:47:54 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1223.563776] loop4: p4 start 301 is beyond EOD, truncated [ 1223.784618] binder: 4534:4540 unknown command 780 03:47:54 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000040)=0xffff, 0x4) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1223.834951] binder: 4534:4540 ioctl c0306201 20000140 returned -22 03:47:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000140)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x23, 0x0, 0xf7) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x23) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42806) [ 1224.023684] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1224.112074] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:47:55 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0) write$selinux_attr(r2, &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x5571) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 1224.197512] binder: 4534:4537 transaction failed 29201/-28, size 24-8 line 3255 03:47:55 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000480)=""/239, 0xef) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1224.356171] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1224.396959] binder: 4538:4555 BC_INCREFS_DONE u0000000000000000 no match [ 1224.440586] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1224.530856] binder: 4538:4554 transaction failed 29201/-28, size 24-8 line 3255 [ 1224.543092] binder: 4538:4558 BC_ACQUIRE_DONE u0000000000000000 no match [ 1224.576109] kauditd_printk_skb: 273 callbacks suppressed [ 1224.576118] audit: type=1400 audit(2000000875.382:36119): avc: denied { map } for pid=4550 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:47:55 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x44, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b489"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1224.760093] audit: type=1400 audit(2000000875.412:36120): avc: denied { map } for pid=4560 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:47:55 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r4 = open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) ioctl$RTC_AIE_ON(r4, 0x7001) bind(r0, &(0x7f0000000380)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm(camellia)\x00'}, 0x80) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000580)) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1224.901025] audit: type=1400 audit(2000000875.442:36121): avc: denied { map } for pid=4560 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1224.929057] loop4: p1 p2 p3 p4[EZD] [ 1224.956927] loop4: p1 start 1 is beyond EOD, truncated [ 1224.982570] loop4: p2 start 101 is beyond EOD, truncated [ 1225.011577] loop4: p3 start 201 is beyond EOD, truncated [ 1225.036755] loop4: p4 start 301 is beyond EOD, truncated [ 1225.049311] audit: type=1400 audit(2000000875.462:36123): avc: denied { map } for pid=4560 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1225.212190] audit: type=1400 audit(2000000875.442:36122): avc: denied { map_create } for pid=4552 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 03:47:56 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) setns(r0, 0xa000000) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) 03:47:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00634040000000000000000000000000000000feff0000000000000000000000000000000000000000004000000000000000000080000000000000000000000000eb7cc6ded81bd67cc6"], 0x0, 0x0, 0x0}) [ 1225.329699] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1225.415088] audit: type=1400 audit(2000000875.482:36124): avc: denied { map } for pid=4551 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1225.420551] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1225.572745] audit: type=1400 audit(2000000875.482:36125): avc: denied { map } for pid=4551 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1225.584921] binder: 4569:4574 transaction failed 29201/-28, size 24-8 line 3255 [ 1225.727435] audit: type=1400 audit(2000000875.502:36126): avc: denied { map } for pid=4560 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:47:56 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10d, 0x6, 0x13f, 0x3, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1225.880877] audit: type=1400 audit(2000000875.572:36127): avc: denied { map } for pid=4560 comm="modprobe" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1225.935640] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1225.964878] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1225.986709] binder: 4582:4595 BC_INCREFS_DONE u0000000000000000 no match [ 1226.002806] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:47:56 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) accept$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) lseek(r1, 0x0, 0x1) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) exit_group(0x1) [ 1226.066366] binder: 4582:4594 transaction failed 29201/-28, size 24-8 line 3255 03:47:56 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) setpriority(0x2, r0, 0x0) [ 1226.130598] binder: 4582:4594 BC_ACQUIRE_DONE u0000000000000000 no match [ 1226.259782] loop4: p1 p2 p3 p4[EZD] [ 1226.278800] loop4: p1 start 1 is beyond EOD, truncated 03:47:57 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x44, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b489"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1226.310356] loop4: p2 start 101 is beyond EOD, truncated [ 1226.334363] loop4: p3 start 201 is beyond EOD, truncated 03:47:57 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000000c0)=0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1226.359749] loop4: p4 start 301 is beyond EOD, truncated 03:47:57 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz1\x00') ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'ipddp0\x00', &(0x7f0000000080)=@ethtool_regs={0x4, 0x1, 0xb9, "a4e04a8e49987f35117cace38b1fccbe63233a5ad04ed110b48ad845f03149413079bb591dd3e3de1f6840577734df6b5b6d8fd6e7911dcfef98c449f4d208e9fed64feee1596a12f7bb1005274ec6b28e35d4bdf09267422e2b8f472cc91fac8d5f0579756378cb47f7cc4b38bdb1050a247564f83f5b9ca9f9167c53e1f8fdd8a93ace2e4fc21879c793a25717358d28eb5083fd35ec57a81ec14b030088007ad187b3ae4af594e2f7d5f7678288474ef776d65aaba27bf9"}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 03:47:57 executing program 3: r0 = socket(0x400000000000010, 0x3, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x3f, 0xffffffffffffffff, 0x1, 0x2, 0xfffffffffffffff8, 0xffffffffffffe4b9, "b7c3b4cdeb092798c3d20f156c7fcfbf97d0e85edf1550cc5bf502989a337a70d36e205a26eaefc53a17cac84251fa6231851a8174fafeecca421ac4bc229c"}, 0x157) write(r0, &(0x7f0000e33000)="220000001e0007fffc030000000007f30a000cebeeffa7001a00ffff05000980be45", 0x22) 03:47:57 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1050000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r3, 0x314, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x10}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffff}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x800) 03:47:57 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040)="57d370de74c0f1e7720f74e175eb14d8ec", 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) 03:47:58 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) 03:47:58 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x80) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0xfffffffffffffe56) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) close(r0) syz_emit_ethernet(0x1, &(0x7f0000000400)=ANY=[@ANYRES16], 0x0) add_key(&(0x7f00000003c0)='.request_key_auth\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x17\xf6\xc4p', 0x0) add_key(&(0x7f0000000700)='cifs.spnego\x00', 0x0, &(0x7f0000000780)='T:', 0x2, 0xfffffffffffffff8) r2 = add_key$keyring(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0xfffffffffffffe4f, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000840)={@in={{0x2, 0x4e21, @dev}}, 0x0, 0x0, 0x0, "adfa4589f0aec597b8c996de7e4b14f5ee87ceaac4b270bd0773200a65db02f2c6fe7839a342f1dcf2ec2d5fa34bdfa7fe22b551cba800abdc33262da9d3be9c8c61d91100"}, 0xa6) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000500)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbcL7\x8b\x00', 0x3f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000240)=0x8) setsockopt$sock_int(r0, 0x1, 0x2d, 0x0, 0xfffffffffffffdec) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) clone(0x70024100, &(0x7f00000001c0), 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000006c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0x5, 0x2, {0x0, 0x1, 0x0, {0x7, 0x3f}, {0x5, 0x5}, @cond=[{0x0, 0x81, 0x0, 0x8001, 0xfffffffffffffff9, 0x1819}, {0x800, 0xc6, 0x0, 0x4, 0x5}]}, {0x0, 0x0, 0x6, {0x4, 0x5}, {0x8000, 0xd3}, @period={0x5e, 0x8f, 0x8aea, 0x40, 0x811b, {0x74, 0x57d, 0x400, 0x10001}, 0x0, 0x0}}}) write$P9_RWALK(r1, &(0x7f0000000380)={0x23, 0x6f, 0x1, {0x2, [{0x20}, {0xb, 0x1, 0x1}]}}, 0x23) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x10, 0x0, {0x0, 0x9, 0x9, {0x1}, {0x0, 0x2d}, @cond=[{0x0, 0x0, 0x0, 0x800, 0x3, 0xffff}, {0x0, 0x0, 0x2, 0x2, 0xdfd}]}, {0x0, 0xfffffffffffff54d, 0x1, {0x81, 0x9}, {0x1, 0x7}, @period={0x5b, 0x8, 0x4, 0x8, 0x1, {0x0, 0x100000000, 0x0, 0x80}, 0x0, 0x0}}}) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1227.304147] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1227.368450] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1227.419776] binder: 4612:4632 transaction failed 29201/-28, size 24-8 line 3255 [ 1227.481429] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space 03:47:58 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r4 = open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0xe, 0x4, 0x688, 0x458, 0x458, 0x0, 0x458, 0x458, 0x5b8, 0x5b8, 0x5b8, 0x5b8, 0x5b8, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff], [0x0, 0xffffffff, 0xffffffff, 0xff], 'vcan0\x00', 'caif0\x00', {0xff}, {}, 0xff, 0x7ff, 0x6, 0x13}, 0x0, 0x2f8, 0x368, 0x0, {}, [@common=@unspec=@bpf1={0x230, 'bpf\x00', 0x1, @bytecode={0x0, 0x32, 0x0, [{0x7fff, 0x7, 0x4, 0x6}, {0xfffffffffffffa71, 0xff, 0x7, 0x7}, {0x71f6, 0x7fff, 0x9, 0xffffffffffffffff}, {0x4, 0x2, 0x1, 0x1}, {0x3, 0x2, 0x936, 0x20}, {0x400, 0xe4, 0x10001, 0x81}, {0x4, 0x6, 0x1, 0x5}, {0x2, 0xfffffffffffffffa, 0x9, 0x68}, {0x20, 0xfffffffffffffffa, 0x7f, 0x3f}, {0x80, 0x1000000, 0x0, 0xff7}, {0x401, 0x8, 0xfffffffffffff59e, 0x9260}, {0x5, 0xfffffffffffffff9, 0x7fffffff, 0x13280000000000}, {0x7fffffff, 0x80000001, 0x2, 0x200}, {0x3, 0x8, 0x2, 0x7}, {0xfffffffffffffffc, 0x8, 0x80000001, 0x7}, {0x200, 0x10001, 0x10001, 0xe}, {0x2, 0x200, 0x100000001, 0x2}, {0x3ff, 0x4, 0x0, 0x5}, {0x4, 0x7d46, 0x1}, {0x4, 0x5036, 0x3, 0x53}, {0x0, 0x0, 0x7, 0x7f}, {0x1ff, 0xffffffff, 0x9, 0x2}, {0x9, 0xffffffffffffffff, 0x3, 0xfe}, {0x1, 0x1ff, 0x5, 0xf3e}, {0x200, 0x7, 0x48, 0x4cb5}, {0x9, 0x4, 0x6, 0x8001}, {0x80, 0xbb, 0xfffffffffffffff9, 0xa55}, {0x9, 0x10000000, 0xffffffff, 0x9}, {0xfffffffffffffffc, 0x30d772d9, 0x2, 0xae1e}, {0x80, 0x0, 0x8bd, 0x82}, {0x6, 0x1, 0x2, 0x5}, {0x8, 0x80000001, 0x0, 0xd129}, {0x3, 0x5, 0x7, 0x1}, {0x4, 0xfffffffeffffffff, 0xa, 0x1}, {0x80000001, 0x400, 0x48, 0xc595}, {0x4000000000000, 0x7f}, {0x40, 0x0, 0xffffffff, 0xe4}, {0x400, 0x4, 0x2, 0x3}, {0x5, 0xe6, 0x4db, 0xfffffffffffffffd}, {0x4, 0x9, 0x2ec, 0x506}, {0xff, 0x1, 0x8001, 0x9}, {0x1, 0x7f, 0x9, 0x7}, {0x1, 0x5, 0x2, 0x3}, {0x6, 0x0, 0x9, 0xffffffff}, {0x9, 0x36f92f0d, 0x640373b9, 0x5}, {0xffff, 0x7, 0x1, 0x4}, {0x2, 0x8, 0x7, 0x9}, {0x7ff, 0x2, 0x6d6, 0x5078}, {0x2, 0x81, 0x7, 0x8}, {0x4, 0x1644, 0x3, 0xf3f}, {0x2, 0x1, 0x15bf, 0xfffffffffffffff9}, {0xffffffffffffff02, 0xb7, 0xfffffffffffffff7, 0x985}, {0xfff, 0x1, 0x754d}, {0x7f, 0x7fff, 0x3, 0x86}, {0x0, 0x1, 0x1, 0x9}, {0x5, 0x800, 0x100, 0xfff}, {0x3ff, 0x2, 0x23, 0x6}, {0x0, 0xffffffffffff8000, 0x0, 0x7fffffff}, {0x816, 0x3, 0x3, 0xfffffffffffeffff}, {0x7f, 0x1, 0x2, 0x9}, {0x0, 0x5, 0x7, 0x6}, {0x800, 0x7, 0x3, 0x2}, {0x345b, 0x1, 0x0, 0x2}, {0x1, 0xa15b, 0x7, 0x9}], 0x9fc4}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x400, 0x6, 0xf7f, 0x0, 0x0, "0f8a6b63e1e974c842cb74b5e38018bbba96b88cb74c5a55b7da79d20b686774244d7e8f19e6df2cd2d5b096022b8ca3dbae26b915ef09203f15b26981e244ef"}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, [0xff, 0xff, 0xffffff00, 0xffffff00], [0xff, 0x0, 0xff000000, 0xff], 'teql0\x00', 'nr0\x00', {}, {}, 0x0, 0xd5f, 0x2, 0x40}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x91, 0x8, 0x1}}, @common=@eui64={0x28, 'eui64\x00'}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'veth1_to_bridge\x00', 0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e8) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000280)=0x54) [ 1227.536652] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1227.553135] binder: 4617:4639 BC_INCREFS_DONE u0000000000000000 no match [ 1227.613382] binder: 4617:4635 transaction failed 29201/-28, size 24-8 line 3255 [ 1227.631803] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1227.662927] binder: 4617:4639 BC_ACQUIRE_DONE u0000000000000000 no match [ 1227.700894] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:47:58 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x46, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1227.755438] binder: 4631:4640 transaction failed 29201/-28, size 24-8 line 3255 [ 1227.892883] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space 03:47:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x3ff, 0xfd67}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[], 0xd3) setsockopt$inet6_int(r1, 0x29, 0xfb, &(0x7f0000000040)=0x10001, 0x4) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) open(0x0, 0x141042, 0x0) [ 1227.949336] loop4: p1 p2 p3 p4[EZD] [ 1227.962759] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1227.990703] loop4: p1 start 1 is beyond EOD, truncated [ 1228.026068] loop4: p2 start 101 is beyond EOD, truncated [ 1228.029955] binder: 4631:4640 transaction failed 29201/-28, size 24-8 line 3255 03:47:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = dup(r1) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() fchownat(r2, &(0x7f0000000280)='./file0\x00', r3, r4, 0x800) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000040)={'rose0\x00', {0x2, 0x4e24, @loopback}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r5, &(0x7f0000000480)="24e201000000aff5f33a375609000000579f9838c173c89fca2c98f8161f4f15be6612c4c25ef00384258f01448a1d3b330e18ccdb1536de2bceda06fcc66d834a3651e018c2f949012000000000000084c93217157f7725935a6c6d249a82d5a92715e6728ede62609c175733b0771272b0dd8a0af3eeb952611a00f3d6846fbd504e081353b548a37cadda187e355364f457a53096ad1bdfca304127847031cca58cd10ca6d4e263218c2290ef3bf2e77abb7885bf005a02b3a3c39a7cb6f2e73bdd96674254348e60a90aa0bae03a3ebcd7d91b114d21715a5b7b9e81941d6776000000000000", 0x0, 0x1}, 0x20) r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1228.067802] loop4: p3 start 201 is beyond EOD, truncated [ 1228.101601] loop4: p4 start 301 is beyond EOD, truncated 03:47:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7ba4, 0x6, 0x7, 0xf29d, 0x7, 0x0, 0x3f, 0x941a, 0x3c3, 0x38, 0x213, 0x5, 0x7200, 0x20, 0x2, 0x93e, 0x3, 0xcf0}, [{0x60000000, 0xff, 0x6, 0x2, 0xfffffffffffffffd, 0x3ff, 0x7, 0x2}, {0x0, 0x6e9, 0xffffffff, 0x7, 0x0, 0x7, 0x1, 0xc7a}], "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", [[], [], [], [], [], []]}, 0x774) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = eventfd(0x0) ioctl$FICLONE(r1, 0x40049409, r1) close(r1) accept(r0, &(0x7f0000000080)=@xdp, &(0x7f0000000140)=0x80) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@remote, @empty}, &(0x7f0000000100)=0xfffffe4f) dup(r1) 03:47:59 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x240000, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1228.576787] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1228.629832] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1228.679829] binder: 4652:4655 transaction failed 29201/-28, size 24-8 line 3255 03:47:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x16, 0x35, 0x7, 0x12, 0xa, 0x2, 0x4, 0xcb}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 03:47:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') fchdir(r0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000080)={0x7, 0xd4, "678b0ff41153d4ac564776c70b96bb382bea980f1206523be03ccdf32749c65205aed0cc48a7685ae3c9c14367736a04b30997bf0663301a8d5264757c96b4ff8c8f799aced2861480b279c460906ecd70ebaa52f2abfe5434f90558d6316a3ccd967293152679cbbdaec4a7ae523f196488b77c2a1ca56441c55b627f08aba4db91635ce82c8d9f6fdf1c64cff21e75a2ebe66098f0b3bef5a31cc78a3908c8aec13565279c8c3e35d1fc8a891f23e053ca66720c662e66d73939187cf09d61f4cb507fbd6af9c6b87f954f796dc6ae87493376"}) preadv(r0, &(0x7f0000000100), 0x2df, 0x0) [ 1228.820124] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1228.856842] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1228.918861] binder: 4652:4658 transaction failed 29201/-28, size 24-8 line 3255 03:47:59 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x73e67894, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r4 = open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000700)={@initdev, @broadcast, 0x0}, &(0x7f0000000740)=0xc) sendmsg$nl_route(r2, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@ipmr_delroute={0x30, 0x19, 0x300, 0x70bd2b, 0x25dfdbfc, {0x80, 0x0, 0x80, 0x21, 0xfd, 0x5, 0xfd, 0x6, 0x1400}, [@RTA_IIF={0x8, 0x1, r5}, @RTA_MULTIPATH={0xc, 0x9, {0x401, 0x101, 0x6, r6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x44010) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f00000000c0)) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1228.988713] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space 03:47:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0:*\x03\x00', @ifru_flags}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000140)) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="6f98490adc1fed7a25d4120180000026a76c28dda8df7c30e172a8d344b9f9ea376d1dd4e0805dc805ed15fd9c006824e2785cff5cd4836316aa845d3988909bd0853c9b181faa02e954837f1d39f3c5e66c410672ea55cef1248480") syz_read_part_table(0x3, 0x8, &(0x7f00000017c0)=[{&(0x7f0000000080)="be2aef0a6890cd6eb45f7f99c791908451f8c979c9267ca46f176d45dc99ab91cbddb7d0524ef93428f587028f90bb7a5567c323e498de91408a005e45f02c5e56d5641d393f74aecfb191bd832cad91f2a9b7ce5438cf574048e46d9e6e7ff598a8452b30b4ada4ea037fd9f03c750dad534dff6b729fa774f1a6efb939f4248624c602ec0311fdda80c4b24c5b856d52f4ede55a8d83e92e3f3415a8", 0x9d, 0xc6}, {&(0x7f0000000240)="2a26c4a96af4fe313d2fefb26545077f5111e462838081945ca4981cac6389ae30a21238c4432fc2789a19353a71d6eb5bfd8882d05530315e0b2eca7665764d560b14481c8ed95bc10dce98e4c12e80a0504bb8edfc69ab3db989b7ce835df8b5c08f6df674b3ea97e2ec1fe829a26953ad8ca9b95ce288ef9e384fcd969514ef2cd88421902b80e763847106d9234f71acbc8837de2b3365c003f27a9a6e7e6d88ec52926a81fe950ca9e41ffc9c6f51f15bb23cb08a4290d1cc4c79069f64ed5a2f", 0xc3, 0x101}, {&(0x7f0000000340)="c6180f0ed415e4417ab3b95c98e39c843ade1d3a62376cbde578f7a338cb7375051f6dfffbcc0ddfa81378ffe9bb4210e4804d9cbbae79756bfd3554450259f2fdb246750b21f210e128a6033b61a553aaa5a1a4294a2761b565787e6d06de664bfb25a128f835b590db78bceb64ea9c32705e2e937abed386d0dd31ab2f93e278c05b0a304ee00baf9f1721aab983a4f29064a97a0023c28373350225afc4cc60fd57584d6c4d4080d1a6b4e32c39ce299209c023d3aa5e4870e47b9134209c2ba73a6dfa2dc1ff1da4636831f8c14fac1962d40d77e8e272564710e05ce6b2e0ccbfe070839570fe942c9e9b533798ef", 0xf1, 0x5}, {&(0x7f0000000440)="4b03421ac7e2c995c5422d1c095c719dcc15ae62716ad668c219670842fd0a6c430a4375d7ed4b5fa71e77fbcca3c26c1b2a6824028fa1d8923e5fe2adcb7e9e9c2c402691db64fade39b81df4fbf75de3096cb449deab9f1e2d67f31af52472e9d2651c10e9b4f2531617414b9d3bcd506f9f6da3f32aa56938ff369f0279fa67dd37fe2a3d58d7828cfde117c2b9f3e82e88808624b7e1b022848530f4f74b00aed05550996be8eafa10b5bb5f62a742040892a7bdcc7130e9ab87fb60a41183af931f4efd627440007e64bdab557bb479a14287c0fe9601a1", 0xda, 0x4000000000000}, {&(0x7f0000000540)="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", 0xff, 0xffffffffffffffc0}, {&(0x7f0000001880)="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", 0x1000, 0x8}, {&(0x7f0000001640)="6033f3def6df925973408026c99f11809e9672d7d676ea36e637f9f3a0469f43ab0dd968d4dd590b11d54eb0e6b01390fb22a3f61a4961db72f1d7588781731b658f61f0b6998824591d5facb86f74397b31af6b6b14bb2bb78381ef576100b2e024c2c55e8671b88b4dc5a61e366d9a1d09c3b155626d8847be10929738c3d3f278954171711d7db382d6323e89dc7afd362cef0d0cfed23b5b62b8b09a929bab015c30dd02d82924dd999f0b909e1cf3197f", 0xb3, 0x9c3}, {&(0x7f0000001700)="ec583e4e176bdbe7781367e10c4d7e1f714271f7a06cc6dcde737ca7b490ac56b0fe8be34862918584e864dc227b39d7dc90111eba8a0f52f4f06746b9377e1321e8d3d0f2e724e7d915b8b2b9d14c6d9515f92847ac99fdd8c5ec563a8287f192a9fa31766c5fba2f434ac2c7e1258aa96b67a7d2bdd80f8c43285ab61a3f5f7fc2e8fc8c7d473b09b995a7fa71d2b7b5def60efe7d4a664ae738a8f5067e36e860ebe474649fac77a4ed5455bfc74cc35d46c26f84c3ab78e027", 0xbb, 0x83b1}]) [ 1229.045292] binder: 4656:4673 BC_INCREFS_DONE u0000000000000000 no match [ 1229.074484] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:47:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) rt_sigaction(0x22, &(0x7f0000000280)={&(0x7f0000000040)="8f6958012fc48245977000c4c3fd085e650fc4e101e5c9c421791329f04530ad000000800fabc5660f3a60de010f52b4ab1ff40000660f71f67e", {0xa2c}, 0x40000000, &(0x7f0000000080)="410f1b42002ef20f1ada410f01d7c40281967d0b660ff20d050000006566d03bc46171e840b6400f82c14f00000f49aeea0000000f2b84d464b5b4dc"}, &(0x7f0000000480)={&(0x7f00000002c0)="6740cf9df36547ff1a420f0d79edf0440fb3b600000000440fbaf62ec4428939e2d9f2c42155eb7eb166410f15f4", {}, 0x0, &(0x7f0000000380)="0f73d4a4c4a20940904b9ac220c483f908240ee2262eff42d5c462c9906c9fc740f7f0f30f5cdec4623128b136713192c4a1dc54d32e66420f177505"}, 0x8, &(0x7f00000004c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="838c214c7fe2c787"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1229.134628] binder: 4656:4672 transaction failed 29201/-28, size 24-8 line 3255 [ 1229.206664] binder: 4656:4672 BC_ACQUIRE_DONE u0000000000000000 no match 03:48:00 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x46, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:00 executing program 0: mount(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$notify(r0, 0x402, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r4, 0xf, 0x3}, 0x14) sendfile(r1, r4, 0x0, 0x800000000024) syz_genetlink_get_family_id$fou(0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000140)=0x10) r6 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) fchmodat(r6, 0x0, 0x0) 03:48:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f000029b000/0x3000)=nil, 0x3000, &(0x7f00000004c0)=""/177) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x300, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) setsockopt$packet_buf(r0, 0x107, 0x17, &(0x7f0000000040)="102eee5cc6151cd004fb7d366052b3994ad6b07f5b88fc94e144b23890d33201570f5f85fbc3417a5225e58af4b04706c1991b1a243cf2a12919f51e33167438", 0x40) [ 1229.673512] kauditd_printk_skb: 271 callbacks suppressed [ 1229.673521] audit: type=1400 audit(2000000880.472:36386): avc: denied { map } for pid=4687 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1229.833325] audit: type=1400 audit(2000000880.472:36387): avc: denied { map } for pid=4687 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:48:00 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000280)={0x0, 0x7, 0xfffffffffffffff8, 0x3, 0x9, 0xd044, 0x9, 0x6, 0x0, 0x6, 0x7fff, 0x3, 0x4, 0x8, &(0x7f0000000100)=""/128, 0xa2, 0x8fa, 0x243}) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 03:48:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008914, &(0x7f0000000040)="d3000000d070715cbef81ee0a16adee97ed6fe1126d22b20929310279f32ab037786a8843d7f2084a0810849cc5c14d85a3d36693f2901dc7329f9a35b78291bcf1e4868ff81574b3b1596ae8a244d495f0eeb0709539cd858a10484f2fdd371b22ce39f2c52395bab45262cd9adfb26be0603146b409d17fd8b6c70485cf89e97951cf17efd5ef90f000000000000300a74ec7fd42ab040") accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000140)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, r1}, 0xc) syz_read_part_table(0x6a, 0x0, &(0x7f0000000200)) [ 1230.003882] audit: type=1400 audit(2000000880.472:36388): avc: denied { map } for pid=4687 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1230.166046] audit: type=1400 audit(2000000880.482:36389): avc: denied { map } for pid=4687 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:48:01 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000540)={0x9, {{0x2, 0x4e20, @empty}}}, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0c630000125e19182c77508421fbbf462f58f554c297e367ee7b2382d896c9b5f6220bbe45e5f7b66f17e37484fafcc3f97c50a16ca16dca3fc942633440a874af553dac37ad61a59aa974bc15e69d723c118ef109888979a0fd2de6c905da4d7cb78dab3b37f42a0cea32c4d166316661fd055ce8a1353480ad2906c549143e4842c63a3bba0376c47183319afe463ae7af6fec113e57237dff13c4c8f3a04458e8c6d80224af143baf2e1df35dadd968e6"], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200000, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) 03:48:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r1, 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000002400)=""/4096, 0xc8b7) [ 1230.406570] audit: type=1400 audit(2000000880.452:36385): avc: denied { map_create } for pid=4680 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 1230.521516] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1230.595448] binder: 4697:4716 BC_INCREFS_DONE u0000000000000000 no match [ 1230.603240] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1230.618591] audit: type=1400 audit(2000000880.552:36390): avc: denied { map } for pid=4687 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1230.704342] binder: 4697:4714 transaction failed 29201/-28, size 24-8 line 3255 [ 1230.707007] binder: 4697:4716 BC_ACQUIRE_DONE u0000000000000000 no match 03:48:01 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x46, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101480, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) [ 1230.896522] audit: type=1400 audit(2000000880.592:36391): avc: denied { map } for pid=4687 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:48:01 executing program 0: getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x6, 0xfffffffffffffffb}, {0x6, 0x1}], r0}, 0x18, 0x3) setrlimit(0x8, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000280)="0adc1f123c123f319bd070") openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) [ 1230.970262] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1230.994144] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1230.998480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1231.068460] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1231.149476] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1231.224065] binder: 4713:4718 transaction failed 29201/-28, size 24-8 line 3255 03:48:02 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1231.378180] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1231.455017] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1231.510429] binder: 4729:4732 transaction failed 29201/-28, size 24-8 line 3255 [ 1231.537707] loop4: p1 p2 p3 p4[EZD] [ 1231.552482] loop4: p1 start 1 is beyond EOD, truncated 03:48:02 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000280)={0x0, 0x7, 0xfffffffffffffff8, 0x3, 0x9, 0xd044, 0x9, 0x6, 0x0, 0x6, 0x7fff, 0x3, 0x4, 0x8, &(0x7f0000000100)=""/128, 0xa2, 0x8fa, 0x243}) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1231.597067] loop4: p2 start 101 is beyond EOD, truncated [ 1231.627428] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space 03:48:02 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r1, 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000002400)=""/4096, 0xc8b7) [ 1231.655548] loop4: p3 start 201 is beyond EOD, truncated [ 1231.691979] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1231.694926] loop4: p4 start 301 is beyond EOD, [ 1231.718943] binder: 4729:4739 transaction failed 29201/-28, size 24-8 line 3255 [ 1231.726041] truncated 03:48:02 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) sendto(r0, &(0x7f0000000480)="f84f288f0ce2a95fc69d0c6600bc059f8bb3963b4c54cc5f209fd7b2777075f1081e25725d938df7a6d56d58781a924f084544cca54093377f6529a0a3180207140dc804670b93483a15a98c6d590be98a055f0d85a467bf2066dba134ba29d4fc4db96029e32bc8794811fd67dff2c46e1d0f95bbaf57f94a1b55d37e87dca2dff0a5bfdf7f1e358294c57fe3589533c85396cf262924a221f8d26249fad2bb77ad403f62f78dd62df05ce4f1410bcc627127080fde111dba0d9dae0e2d170c98294a", 0xc3, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1231.941348] loop4: p1 p2 p3 p4[EZD] [ 1231.948211] loop4: p1 start 1 is beyond EOD, truncated [ 1231.987769] loop4: p2 start 101 is beyond EOD, truncated [ 1232.023398] loop4: p3 start 201 is beyond EOD, truncated [ 1232.052958] loop4: p4 start 301 is beyond EOD, truncated 03:48:02 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setsig(0x4203, r0, 0xdb94, &(0x7f0000000080)={0x4, 0x0, 0x40}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1232.256112] binder: BINDER_SET_CONTEXT_MGR already set [ 1232.282359] binder: 4744:4764 ioctl 40046207 0 returned -16 03:48:03 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000280)={0x0, 0x7, 0xfffffffffffffff8, 0x3, 0x9, 0xd044, 0x9, 0x6, 0x0, 0x6, 0x7fff, 0x3, 0x4, 0x8, &(0x7f0000000100)=""/128, 0xa2, 0x8fa, 0x243}) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1232.342366] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1232.373325] binder: 4744:4750 BC_INCREFS_DONE u0000000000000000 no match [ 1232.390754] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1232.414318] binder: 4744:4764 Release 1 refcount change on invalid ref 1 ret -22 03:48:03 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x200, 0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x6, 0x8001, 0x1, 0x3, 0x0, 0x5, 0x322, 0xf, 0x3f, 0x8, 0x31fa, 0xab, 0x7, 0x0, 0x8, 0xfffffffffffffffb, 0x100000001, 0x0, 0x3, 0x7, 0x0, 0x6, 0x1, 0x2, 0x80000001, 0x4, 0x7fffffff, 0x7f, 0x7, 0x38de, 0x1f, 0x9, 0x6, 0x6, 0x3, 0xfffffffffffff001, 0x0, 0xfffffffffffffe01, 0x4, @perf_bp={&(0x7f00000000c0), 0x8}, 0x100, 0x5a2b, 0x6, 0x0, 0x1000, 0xb6, 0x100000000}, 0x0, 0x1, r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1232.448805] binder: 4744:4765 transaction failed 29201/-28, size 24-8 line 3255 [ 1232.507561] binder: 4744:4764 BC_ACQUIRE_DONE u0000000000000000 no match 03:48:03 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x47, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'ip6gre0\x00'}, 0x18) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000001ac0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 03:48:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000080)) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30401000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80, 0x0) [ 1232.725751] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1232.733505] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1232.794275] binder: 4768:4773 transaction failed 29201/-28, size 24-8 line 3255 [ 1232.910917] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1232.968364] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1233.024914] binder: 4768:4773 transaction failed 29201/-28, size 24-8 line 3255 03:48:03 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00fb93621a6b991f"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) 03:48:03 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000280)={0x0, 0x7, 0xfffffffffffffff8, 0x3, 0x9, 0xd044, 0x9, 0x6, 0x0, 0x6, 0x7fff, 0x3, 0x4, 0x8, &(0x7f0000000100)=""/128, 0xa2, 0x8fa, 0x243}) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 03:48:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000200), 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000080)={@remote, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@mcast2, @remote, @dev={0xfe, 0x80, [], 0x28}, 0x4b, 0x5, 0xa5, 0x500, 0x100, 0x4000010, r3}) close(r1) r4 = dup2(r2, r1) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000040)) 03:48:04 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1233.528068] binder: BINDER_SET_CONTEXT_MGR already set [ 1233.566415] binder: 4780:4787 ioctl 40046207 0 returned -16 [ 1233.587264] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1233.630518] binder: 4780:4802 BC_INCREFS_DONE u0000000000000000 no match [ 1233.651684] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1233.668197] binder: 4780:4787 Release 1 refcount change on invalid ref 1 ret -22 [ 1233.717973] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1233.726573] binder: 4780:4799 transaction failed 29201/-28, size 24-8 line 3255 [ 1233.768054] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1233.813137] binder: 4780:4799 BC_ACQUIRE_DONE u0000000000000000 no match 03:48:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000600000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000592c000000000000000000000700000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000003000000020000000400000000000000ff0300000000000008000000000000000600000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000faff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d275c8e9bf078ca5d0f1a12c01dcc09e477c61af20143010e9ffb628b85a6186997dd0010d6164d9e41e572d9"]) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r1, r1, 0xe, 0x2}, 0x10) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) 03:48:04 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8040, 0x33) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x20000000000, 0xffffffffffffffff) r5 = open$dir(0x0, 0x8004002, 0x0) lsetxattr$security_selinux(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:modules_dep_t:s0\x00', 0x23, 0x0) r6 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001540)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000380)=0xe8) getgroups(0x5, &(0x7f0000001640)=[0xee00, 0x0, 0xee00, 0x0, 0x0]) r9 = gettid() stat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001800)={0xffffffffffffffff, r2, 0x0, 0x2, &(0x7f00000017c0)='\x00\x00', 0xffffffffffffffff}, 0x30) fstat(r0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0xa, &(0x7f00000018c0)=[0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0xee00, 0x0, 0x0, 0xee01, 0xee01, 0xee00]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001e00)={0x0}, &(0x7f0000001e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001e80)={{{@in6=@ipv4={[], [], @empty}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000001f80)=0xe8) r17 = getgid() r18 = getpid() stat(&(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0}) r20 = getegid() r21 = openat$cgroup_int(r0, &(0x7f0000002080)='io.max\x00', 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000020c0)={0x0}, &(0x7f0000002100)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002140)={0x0, 0x0}, &(0x7f0000002180)=0xc) getresgid(&(0x7f00000021c0), &(0x7f0000002200)=0x0, &(0x7f0000002240)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000002280)=0x0) stat(&(0x7f00000022c0)='./file0\x00', &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000002640)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002680)={0x0, 0x0}, &(0x7f00000026c0)=0xc) stat(&(0x7f0000002700)='./file0\x00', &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r31 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003cc0)={0x0, 0xfff, 0x8}, 0xc) r32 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003d00)={0x0, 0x0}, &(0x7f0000003d40)=0xc) fstat(r3, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000003e00)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003e40)={0x0, 0x0}, &(0x7f0000003e80)=0xc) fstat(r4, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005500)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f00000054c0)='$\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000005540)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000005640)=0xe8) r40 = getegid() r41 = fcntl$getown(r2, 0x9) fstat(r2, &(0x7f0000005d00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000005d80)='./file0\x00', &(0x7f0000005dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r44 = getpgid(0x0) r45 = getuid() stat(&(0x7f0000005e40)='./file0\x00', &(0x7f0000005e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r47 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000005f00)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000006000)=0xe8) getresgid(&(0x7f0000006040)=0x0, &(0x7f0000006080), &(0x7f00000060c0)) sendmmsg$unix(r0, &(0x7f00000061c0)=[{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000300)="53725101ee9c53e83dbf3797b08fd98f23aca4be22346e2ee0ccf4159cd77b6507ba66e08477b93e1afb59c8d3240463c827659395334881ef3582f7fb593bcdbc9ffae906c97cd907cbaf6fcdde502d716e17f30f29afc5bbefdfe0217b5c", 0x5f}, {&(0x7f0000001480)="3a132f9b1b7e8f1983de9a9886149f8c6db487931684390a0ba9d7b87f0e3ee608d7f449630f45bc86b90ac72d0100aad1d068e0856df59983cb5377abaf32aab49da01e1ed4b99a58bcd01f0fa3f7b728cb1c2538f44f014cf2af351de040884c9bbc3f92bb7106495ded1e8712a0c6d64ed7a395f5ad839a3c30ab848bb3d151b93f92407529613c6a9c89a438bfe8f0c1303d4cf1e38ef0cca193cc8ebf6a400463fd83d1ee90491ffb73a8e2abefbd3ee308e0d1ca", 0xb7}], 0x3, &(0x7f0000001900)=[@rights={0x28, 0x1, 0x1, [r1, r0, r1, r1, r1, r5]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x28, 0x1, 0x1, [r1, r3, r3, r5, r1, r0]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x28, 0x1, 0x1, [r4, r5, r0, r4, r5, r2]}, @rights={0x18, 0x1, 0x1, [r3, r2]}, @rights={0x38, 0x1, 0x1, [r2, r2, r2, r1, r1, r4, r2, r4, r1]}], 0x128, 0x4}, {&(0x7f0000001a40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001ac0)="3f2d793e0d228fec40224ce89944b37d2f582b82674eb80689abc857800ffe7ede17f9a9def2d1a0b5a7ee01c3edab5c52440e8829589e3edc7029d14ec055ed25f52611eb85a604d167770b597ea781983034ab6f6d98c2cdbd9344632699dd818a6c7bf372690c465d7155ec340b2f4f9328eaa3aebc4f1e5aad07cabdd326de15600a06b7aadb75f457011e2858bd", 0x90}, {&(0x7f0000001b80)="1ac6a01b45394977eff0fd767eea885c7bb87734637fcd94b7662238944787143a6ca9e2da67dfbfe85219bb2950789c06aae92040db5ac0b080524e9e23038e484ce1422cd2913168657cb54726df92a3407ff224531b32fa65ab43a8f7bf9a971d12b18e3ac96ffa69c18c015a05ba0e37c30c4bb1b063c19f0b3d592dc8d2b2fdf612511d7d6e3dcc28347f1ec325b942d28fbc6a862e994611581d7952c0dc55cdb00f84bd88c0cb46e765", 0xad}, {&(0x7f0000001c40)="91d3b129a71dfa375c2661aa2455231757793e0e6e9c8ed50a014fd757a1c41c31a4da488d778dfb6fc426992203cc15ecfa913974a75ee39fc9b2d7bf644899d4e42467f80ac2c8a268a347f1d18af92c4a2a049a994233da4fd7ed64ede9b3f34df5d8a591fcbe6806d683a7af98be2feadbb6c859fbb2fd1226a3ed6c04", 0x7f}, {&(0x7f0000001cc0)="c8b813d8a9ee8cdc98d6542eeedd9c76722f797c5ee9cf855f5ac3c5292aa1f6de93f88c3d4824d33a8f8524935923d0cc097655fa3b97ac40e7038e302b99a72712afc8b525ef32c7be8cf3b17cf97adafd47ec8c771bb7825e20d8d21efbcc5dac7e499093e9a7219edef4e2c31c5fca696b5ca97bd393911cfa30ffd00db69531d6e9897ac5b29170419c86eb714c642347ca6970e15d15f1e952cf61247a092b4e90e9776f4eb5cc06b0cd46837f5ce1d13840e57c7ec3a47839fd76f4dfcc32ef1c965fa78c740f290473d0c22c8262446933941762be916ce7f79be4", 0xdf}], 0x4, &(0x7f0000002440)=ANY=[@ANYBLOB="20000000000000000100000101000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r18, @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r21, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r22, @ANYRES32=r23, @ANYRES32=r24, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r25, @ANYRES32=r26, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x890}, {&(0x7f0000002540)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002600)=[{&(0x7f00000025c0)="8d5a48cbff2743978334ebc9d68688560f184c5867d92b8ed7e11e", 0x1b}], 0x1, &(0x7f00000027c0)=[@cred={0x20, 0x1, 0x2, r28, r29, r30}], 0x20, 0x20008091}, {&(0x7f0000002800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000002880)="0f43dcc88f5c096b", 0x8}, {&(0x7f00000028c0)="ddb93a1a69d2816a94", 0x9}, {&(0x7f0000002900)="281a5d91a1903f63ba430f59bae7e7a2adafdfe5410ae6856691e61ab8b6c8006c330ea4f26712cbb1f9ed51cd8a83f7e8c4c75ed242", 0x36}, {&(0x7f0000002940)="4b60fb9dda237d147b10df421ffde22c2d99131497378b7cc257c7c9e6ab4e081249700717bc58a0cc33f5e18d5718ab56d0a4c944b7c2264f2165dbc844e5653e153218ec21c548b6ab45cc867bc3510efe33a09c626e4ae1924cbb47f1cf204fbcc70ca4d95fe9ce64356229cd8df2e653bf7a74f5d33a6dbcaad2121e9b078f60f365c53f276a09bd5eb576987df65108979df5e9ae82edd069f635b6f123c91e4e0ff0b4dc466905aa36fec89035d394df7bab6f18db13c8eda0fbb3473ce7db75cbe525bcb1f88e6033e12c0bdc9554e4aefd562e4d8bd8eefe8987da486d353e2fbbf7353006a5396ad62c7aa8c7769ec01bdb", 0xf6}, {&(0x7f0000002a40)="d2c1a92483267d534dd54ff355d4961ae21d5153d720a2f9e778d20b60d5375e2bcf94acaef6c7814de7b8826a9793759f74c49b58ef3f4a246e3c491be990c117eb6fef0e662a465b012d0d2f6963e034f793666baf7da8c817aca673c03d51a39c54d01632e934a9190c424a9f66b7e7b3cedfae0c3bfd5e46461c20d2584e2bcdfa21b153918d38427c000298b4b845f6be8cddb58827f7845f051ec30bf1485129fbcd2da12baab86c952314be6f883f88a759394f3e567997daf0db20dded3a9500d44f198be2ac2bd41249446aeba90c6cf58c12fe77b62c788a7de89f6c6973c56632ae50ec7e64ec9ee7e9c597bbd58e87d6ef6c2d9409", 0xfb}, {&(0x7f0000002b40)="850d36f335b4877fb3a671e9cdf37a700d6a2394777b6c8c35c12f1565abfcc0efe824bfd78c6d40f324637b9b6d4188ef94f0cd60d310693ad7da07ce9f251847725ae17eaa21be802664dc240549881c9e66095382babf5f1897288bb004172e2b3e063ac6aa61fadea365f1d024873b4e30e5bb52b342608248bdb044cdc661be7fb199792eb61e856d665d0275c09f8c430d5a52395da96132028734c228e7d61e20be027243f39d590f7080ca6679b63615d7a4be1e3c9f5e4b55cf046df551bc4486797779880b06621d703ad9a985134f64638dc6356d4a5c2120a84db70014bdbb2a07fc1c73f1dd7c6ba0f486a5fe21df0b425c83b7e78a734e9b20d4b92f8ef08c7faba00dbb3c85bd71d97c8ab76df1fe45bd534786ed953c0c5683d658c4902bc2a8741137fbfb8b67adb87e4858a1049749d648081179f29b8f14c782ef56e8ad59d66f150ac3c6d4551fecacc5b8ab24ca86f7c424f8ff0d6b83ef60102ed7a83813aceee71ce0859b3210488f5a11e74d5ae256767152a55be6671ec5926a497bc3ad6a00401adc603c0132434cf2686e0043f3aaaf79eb0682b778b3fc69b864a304635f0fb79e26091cceb28729b1f0ebbcb505b6e44008b81c528be6eed7a853e5b86b8d9f6e6b25dd048a243586b376e7524d7f3e439327d5520e7016b61e546eafc75d24b85d06fcf7d24a99df8f2314f751e39a2fabe6cff6271cad39e3872e6f541f97625a905df9b73549c6cfeaf6865217759992b669c44d6dc54d5e4835f4b1c1a88650c06f80643186b8d5a6ebc863738508504d24e7bc1d0736459ac2c66dfd18d98555ac82587ddebe9cc504041e9f56d9596355dfe1793f2bd870f7e19217726f1bd6a784d88b9a63defa43c2539219a1758356cf1f1bc751da71be5ef2e3b2da94efd7357e98a3d384529eb538a0663323d396e2b1ed6eb0e994642018aff90108a5e8c1cb35b729177d3b2dee1014cecc5148220878318bacce8f21a6d5db6b7c57e9020ede9930372b9ca368af5b66cf29a48e9e0352eba538e44daf4ff5fee3206be2ad60aa735f80877037fc1f4ca033241db5d5bddcd32d7d2468d1ad01a8621de4ceccdbcc7582e679c423240558ab4ca28031adc34edbf159a4c3524e4317cab928b0fa8c83cb939216d269f53d50d52c3b8e3882d44898c944cf147a8ef64b45c7c85f63b9fd814c3abb9938ae3f843a73e4fd895faa804189dc102f55e31ac3d0dfbffd7e1ff6e576cf23c9f3f22e6c14034e42d7f0313ebedefac75af3ccaf7123b31127227acfd7e57f42ef5c72c68b6745fca9f468a879ff74bb520f7f5b9b5c123837e159881818bd6584f705f9efa2def03cc46c2249cf96af00dc9ad87c195f7fe68e250593f87a3752e476ae95782715f4e5959ce3838bbca2d05be7db916cc1ece82b8efd293bfb809b981ede17180f1763e3e680ef9a4656bc02d7a4df86aec88fe282da4c12b6b9c5b5a9cabca384205b3b51076391902a35b0d6c6b5b7603a352d3ed9e207e675186ad82a3f6619e1f17b5bef3a8bc6fb3948a777d56ec7a6e840e9acdefebf615eec7362750143ebe86cd56cd21df3c90c383b70bcaacd735530d258fe76a2e6bfa86830962c1d45b414a8a61e5573896272939d9abb24e9c3b895b143e64a147edb88cc795af9abeae9e7cdf0be04979bdfca446925e2c2adf88747cfd8ce1fa8ee61d5db87eaa92ec2eca08b88d83c2c7bdd858906bcea7f87bfb562700b3357acbaf3446b3af1a4ed18e945d30f262919f546384cac68939ace3c49b6ae9038b30dd5494256555008443df72a43a0695c64549540308d5291d1f794bd66979edf0a50d66a337d57b18958b6b88f0ea3c7c38764eddbb0bcfea40162c961b9cec44fda19a05d981e82dd8ecee0ea06e1fa1838d5b2c5996862b3570f872cfa2057fd7c35b241f5230ca8bb5adfa7217e43bb3f3e4177c6d16131f991d7769e15aeb86d1d80f9a864afd496ab4db9bab079d1182b22afe9d8462a7b101492c45f8fad22d51d906c828cfc65c6be754060c4a2502cdd14f62d3723a366286d431bd552af41f3848c42ee826358fe2eb13a6bbf4094d8050aa01339bbc4547bca6b9890e0d3ccddac1cbe459eaf2acafeff071ddda755935c6b74c4fd6888c26c99f0a45c8c35f5a0d03b13ceb10509be0f944e69e7817937afd9215cfa5cae3ba6634b0732857df5f975dba08d44be4331765c24af5651c2a35d4482d3ed0a7384515d3caf79e2c04658e1278c1f6b3215b6a0e046da8c45c4ad8006c9ca61869e00d92f51e4c9297d4fe2a2f155dde8fcf7fcdd03e37ad0d8a6e7f4ce11996cd6270d78e3c361d2012368948a2102ac4fec756d257eba2fd6a388b79d91c3d12488a3107e4403a16534366406d70fcc0d060783909dc378ad6c38da64851fd42dd42717516fc8fc6203a4f6c159f2797c57450f5a0f67dabd154781d9fbe5ee5aa29b556db21dba1f48ba581038dede3cfe352a9cf7b5a065b2708885fa3e49da87d39738a0017d455341b4bc6d1f5d4b63340e826ff7a3995783e3a67f24b1ac706929f1d22ba8fa9b79ade4d399dbb783e8d50def70fd7cb92a3e11987716efec6aa08fea47f5afbb468a56e314348c799896885be1755b14952bde3bafa4e5228be9229c30dd4e08ea77310d6acbe202546f7081721cbb4f46776058ed7bc80747d2473761d28162fe9dac5d1f3c349aae7265be731ed0a624cb5eecdbd1709ec68e0e8217d8b1b43156988897a4cc3dc079c344de6c03188b46ec32d230230b833c35d193e785552793ba0ca79d17e9136659c8359a5d93fc35ce37f8082734c4638f53b7cb8a92acf3ce93b595672bbac6781d9cf60149c4cb6ca3fd3d6eea200b472c64382d61183647fb3b9f0e7cd8ff744c962eb469f6a8dd29b03b339e12760207fc3a911cbbdce1d5315e1c6cb1fe01f7dccbbb33573e02609e04734764bca1ea9c8cbbc157da68dc97761d0dca11f62246b26974b9af12184fad2431d625cb7efcb2b16fe24631e7f9be38348c736b9bd4e0b67065e5d3e049112f2e0987f5ed776b9296f0d4bb1e9b1ff2242bf72998fa042fc6e4d18bb7d1a48e91d75dec487fb977b2ceb0eaca1ef087107e0d699bc7dc8632bafb20fa0e35a5a56c125e8d6e5cbce6bb7c9cc91bce271fe88720b0a26c8d6c4af6a454787ec52561f729bb9b37bdc6288757d0e347f49da2e9e24a828d6e124949849164da1d0b3c390b7cbe012a38aecaa27c6f0a44756eb1a90ba512a4663c7cbb66cf69733594296e3c48f9315860b701cfa32c9278ad6c8569e1b950d99d94d7c7c38b00b8c11eb01fb1fb13768b6876e03edb03a97101b3578b013f2b4addd5a62571fef0a402b1f7a08c05ab29751c32769b1159405894c3219509355289c65599a62fa15e7d459643ce7c301d49b96dbb00951703177665ebf324bcd4016d33358b0b5cc4bbe2708eaac076503bb49feb5d1e272860b9cebedace0cdeacec996e041313faa1aa9a7916e570a9ec088bc6f138f914dc94d0a929ab025d1bd58a45e3d66ff230bf828224ce8b0af753c491ac197397c7b69cd96bdde191877332a154e6bb2bb16bf9233442a069e2d21c363017de84ff7de9e8c21ab57e9afd74ac9315c8b2a3823cf22a68ccf9f6886304e753879beef2a4d7a58d2e8e2eeefad7cb6157db3dc03d356c4cfccc6c278d5c2bb7bb7f393b4c15b245d741f80b741eacc523b5b92e188fb962576191d8114533eed6f0184e472554f6fb53079fcd6da93924cf425f91feb3b2c411345ff7b4b512e09f60752262ff01d36f1faa57712f47fad3a40212f2a7b57c973cdd04aa5298d56ebbdd2822f81e7a256254044d108ff44cf4deb5806f49b1530f94e558a6389f86663c7e7a30864a567dcc529df51f42800aca0b3b3cbf9bd7193a70aa370802671cc9ba87b2eab35d96ae2568203ef0d183103556511eab927b519122296465c9954d33d6a966fc9b8adce051dbd684f1e28ceb45a4a8d5321b641943d4b3fd50d35424a88097b2c29e4b01e2c90cb47ec5a98ddc946cb5b5e5fed142cc680440bd8743cba37e954551fe8c687a36f3f48ab5f94e40eaf4a2e4747b7e632234d45ec5d32a341f9ed41df7a87ab96983005f55964157ad56b355d642fa0022e79155ac414b4e8d4f59e8fb2282b56dd3ff507f261d75768d3be5ffe93274d8b9fb87fc8d1331d2ff596ce30376a9433cd71fb27db528a348ef4195ca9f5e69d04ce1b7004b89a49b3b19652d8c8848961dcbfd804cf660a39410ea8752320c2259f76fb6fe5ff8949d444d6ffcb594cdbd498c576447293aee11369a83864767518b51ce0f255dfc587f15bf95353c5f06732fc649bc1a0fe9a416a2d18ad5eb6185b23515f1a705f007a5a9fd1944a62e1055d748760ba2aa1662ddaefb3ca47c346183f9b976fd3c2817a025288793b5acb7aa770d43e877176d34bd8059bbf272749ebc68f6698fa058200e942bd4d7579ab8fe920019955d81fc8fcd400572f3032c3cce853c84a14fae0d5b57fd255192e1ad974a59bc8175574e3970ec0d3a9d95d9634db78647591e95f8988e7329a08b4676893490317e2936658033542667d8d2ab24f64f8f0e0274d9833812ac72b5b3fd4eb5cf9a101ae39e69e8f692ed5f7f4ecacfc23e675cb6992ce0c75b09625db3db90d17b49f7c2948b03889a72af4f83c14e9d421583aa127b935b2f40d23d59d6b10ced656e66ced5c3c642f1aaf6cf07708db5f6b397f1cc56f52c90ee71d58d7e1f2b784fe1051babc2f7cadc8a332a6939583bcafdedec0e288c69b8d4176509798eba3aca8a8d512902df8e53de0adf7254f8bf1094044a9d7e5dba42643d2984f3ba9cf4c2927ca72c7c43389645c3b7e15e63c59c82beca1b81e0c0a8843b218373927b755f98bbac945e842c2d90abba0dded1842c6577c334ebd5c458f09bfac2d881b82c6dec38fdcbbf66145d5288daf8e2a0e98193aabca9308002d74b26d1080296c1148ebfedbd04414da79ecabd93cf5172683976b90bd5f5dc06b5c2279ad08f532868c3e91d9430b335fdb47ebfa105d063223a1828d7f3cbb190320db5e213e3c87513308b5be2f412cb711bf1f6af65f28fc4c23da157739b80773c48e6a413254d65e28f4e6a692ac26c9a740576d2d9f54e4e2e24b36d187a6ff3be5144543d99795b79dd3214be888e4d4f7007ea94c459c8294a6deef38388f6ca49e57f66cf50b473abea6a2e312a9db7b53868c08cfd03c5ba4439efda19be0d5e0240fff32b9f7a9937a6c163392499ba0309154473570c6bc814a5a718efcb5e2b401fd7eb61f053cc2de791f41bd16cad8c04c487f0fb5ec07faabad3846ac623a55b7497d6f977b6bc87799bd5df645a94e66621a09b544e9a092814220bcc403e80a3d60b926f23ad624d0fe1bd93691dc652084f2f931d6443677bddb525213925898a13ebd3fce91b409f35818f654cf674e7c9e489a998c4acdb8bff9060975c857d24428c6b2735dae8d3f2e21385db8057c73f422afb3aa60c645d0991795a7368fd9eb1e6020b5b90f29dd1ccd7b06dda4c99d2b4e420acedfdb41e45cab1d6b503bff951de7ba8793c8ebb153c75925f3e264838698959a97a7ebcd1e42bb756d98df8e4ad724816e4bbfa4b10688b5de47492ff401f4f1e73ee24485432172402abea75a887f9a0d7ff5f6375dd9d35a6a45591f5b2db4b900f93fe29343141ca2992a384368b1937490649", 0x1000}, {&(0x7f0000003b40)}, {&(0x7f0000003b80)="a2fcf1de0aec2d5054c4f25092fb7f25c781de45c436f2f490f9a5b543d8c2e156c714495c10e86276c0d609fe4fd40e96a87ab6cc4174c0550ea2ccd04634436bd6d3354112a83818507adab562a5cd25d651378e6a6f5b5003c8d0d23e88fa376871ddf80283a482353bed9e69745b6ff55ff8ee25cb0563daf49c958c90d5917d97923d6846d5b1b4944dc39d66a77bc7c7af92c7df", 0x97}], 0x8, &(0x7f0000003f40)=[@rights={0x28, 0x1, 0x1, [r4, r3, r0, r4, r4, r5]}, @rights={0x18, 0x1, 0x1, [r4, r31]}, @cred={0x20, 0x1, 0x2, r32, r33, r34}, @rights={0x20, 0x1, 0x1, [r3, r2, r5]}, @rights={0x18, 0x1, 0x1, [r4]}, @cred={0x20, 0x1, 0x2, r35, r36, r37}, @rights={0x28, 0x1, 0x1, [r2, r5, r5, r2, r5]}], 0xe0, 0x10}, {&(0x7f0000004040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005440)=[{&(0x7f00000040c0)="77e1551003c59b91ef4b32cf1552358a51ab3ae3fb691763a63fabf9275d4dd016f10c92ad36e0fc55fdfa1cc0e07a4bb1763c9b8f836ca7ded1f81de5", 0x3d}, {&(0x7f0000004100)="d9c0160e9ffb8df6ed990778d439c674ccdbf1279d007d26a87764d17b98d83273ead53bfdaa08348c81ef51148b738b1ec76f53fadfbed69adc7f113da1c848c6d7a335b7a9bce0a2b431b68cec0a38595228116ee91e4277a437e4427158b9d4d9a602d7fff5842e80a9768bc86ab6ab518b2ac0c0b3cd8f9f469ef75411a44c7d253621545ca46c78f08af84819d058f8bf182d27760c0bc2fe691b3ddc74340521e15cafd4337f8b04100f670d738b1dab31a791f05bc695f2609663202635b361b494aeb6b148491ea7a3378bf1ce8775533a37f6dd5c18ddd6534bde4ec19bb283c56ae10ddb3de1a8", 0xec}, {&(0x7f0000004200)="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", 0x1000}, {&(0x7f0000005200)="acd748a818660c07974c5a795be05aeb7bbee8af996612ff63080ba9176952e1918578de08e2490bf2f19e20ed89cdf2d3001849410165845e734bfa2b7fc7ce4b54a0d215bf8d306935295ec54a87f8819b47b91d3aa0e62723472490f62ae1e946ea360f2cb96e6383dbb4de943cc6a8d4", 0x72}, {&(0x7f0000005280)="fbbabf5d7d594aa43d2d19", 0xb}, {&(0x7f00000052c0)="c0ec925214257c77ac4cfc2f1e4adae130a30a09f3ea357b021a16c1c5341bcc2ff18e71f4deed1355846ecb087807539cc0f13f1718296a95c968886238d0cf3142bc696d1c97a2654ff82aacdabcb097f6823d47e7ffe7c3f182e35b6426840fd3ccb1782fc7467e85735c3c6772fc68e6ab10056c5d32d3ff5ac47c582867bed06e4d4866434cf96a1ca969fdae12c1d34420d64c1a7bf18e6d7289c3d108b467bd940af2", 0xa6}, {&(0x7f0000005380)="b3b4f4112025b36e59c7386746a9266ae7a3e9f63bac60614baa072f6cdc02eb0567539732993d22f8f9cbcca053edb2311738f1f03ee34d5fe7470d69913a084d7792c7290f4184a02cd5c03a092465029fa08f537038a68255e5b41f52a423141fa28f310e2ff6817aa1aaf5780d1daf536b9ae6090163957011b9289d72f4ac9261974758bf39a0b8ce3b6d9aecd62e3feb146c445e0727e7ce845b2bbceffc34567f771c1712f46e3dff3901a0be1557d0812b", 0xb5}], 0x7, &(0x7f0000005680)=[@cred={0x20, 0x1, 0x2, r38, r39, r40}], 0x20, 0x4000000}, {&(0x7f00000056c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005c80)=[{&(0x7f0000005740)="fa61c47f3733adb22ab608af0d79788bf90cf9cf40e82f9a56497233f12259d9006f7b42568905006218facd49928c03b3b0d9ee7db472e7aa16743b5172a058244da2ed4a67ea37c7b2d82a12efcf9173906bb97aa8e8da44276b4dcfa3dcedede4d2e144b60faa0ae01ed7d368374cec352d", 0x73}, {&(0x7f00000057c0)="365738dc70c102ebd6734bdd318ecf65592632be484ecb6b6b0594e89f996902e1a62c02b576602c2a4d71d01edc04a44683637bb1aeecbb44751b5b0cfa53e45f9feee7743d9fd35e09c24c3c4e7b15d91751d2f7a0ababd8753c5fd7ee40af036be9a3561935ea67228aae970bdd59db45c4f2542404b1d6f0e666fa8194d67c8f8492346259467cf7c389facf311bff6067ff751cc726f73dda6c5d", 0x9d}, {&(0x7f0000005880)="44b21f88e9dcaf673df4e32173b7a0ae3677009a966c9d0ecbc2d6ae813d159aa9db4d7c93ec5bb60415c685b88e563a487cd9424229ef0667b17849001047119f527d71d94311b5d8c5cd1ff0cd0524af1746212a575237f773208722f5da3e81db4a5eced008eaa0293d2b187b2206e443c0ca17790f797e9e9d5a1fb52ffb3b1a603be3ae506a0bfa590421461cbee896c67ea6d98a7fcfba7e7f00145d7e46f078dc89ce5e4026de5c245d6f90c3f518c78c5969ea3134f6501a0c76ee34e41484ebbfcdceea96ece280bede15277e87c7146046166a40e79aa6c6aaff4c96da", 0xe2}, {&(0x7f0000005980)="133a5c82571bb016d4d73fda2e87c017f1ff9dd4ad66e2138136548ee443b227b12933eb50c12cec1bf0bab3bf9ea4f36bba70b91bbcbdbd102977569129bf4f4f17e21a760cc04cd57c5d373c28ece45885f615678a86e307dc3e7380ab7785f5c4f07a61123dc93844f4c4ca098620e6bc8a40d2d2c6ef30b534bf0561b8541b79ab10f7e29cc9787edf3fe3f4452b176295", 0x93}, {&(0x7f0000005a40)="171a952f95ee8f5a350568ebafd2a2ec3f486a1c193202cc3866f59d20fb7e8ac5be9bee04992dbd32cb767c666dbd9e506045ca6c2951d196b35c37958c13148ae77c0dc61b2df5384e5c54c1a57fd482a9dbdb485a17d2cd3a8a3839f02ad5811a27e1f7ceaa897d8ac07241b7b1b7b982ca4e45cffa562f747fce7fd29db228ab69b836dfc915fcfdb6c55ea697f9a3318f970f6cdfb63a53d25c01a828b0981a2dcbf3259c63f5bd2956219343c953c89b6905bd1a847ee45400edd200dd0742e0abf9ecbccf5d4e3d9f02edd9f085551422db9fda8020", 0xd9}, {&(0x7f0000005b40)="bc2d54ce6f6a2f1b88a7e352f262d04df97e24f4467d8fdfecabbfa0", 0x1c}, {&(0x7f0000005b80)="2a456de6a664d9de1328bb8c5f883286cd67aab4da91a570d07712c8d29c5ef46e52614aebec4f907bbc6cb073a57c77ab76e6c99e7b93c3c09d1cdf4ee7891ead74da8d44c0463b834c4874af9f66bc46d7bec93f2c050983f20adcf80cb15dd5d26042daf337d9d61662ba53b57b8af444344a2ff6c837e6ca8d95293056154041fb3631b8cde049953647d6dffed2c0f55e2ec110983c2dae4ea7556f65e7e8f954f7b1051a1fc37c24f0cb750822bdf3ee8aa86e762f544a7bedb1c33bd49397082dea90fdc8e7ffe03ce117911eb08344eeb1f4dc19208627747ce64e4dda74af54bc04068c69b0bfe28da7d2bc8007", 0xf2}], 0x7, &(0x7f0000006100)=ANY=[@ANYBLOB="20000000000000002100000002000000", @ANYRES32=r41, @ANYRES32=r42, @ANYRES32=r43, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r44, @ANYRES32=r45, @ANYRES32=r46, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r47, @ANYRES32=r48, @ANYRES32=r49, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x800}], 0x6, 0x0) truncate(0x0, 0x90002) getsockname$unix(r2, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e) getdents64(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x7fffffff) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) [ 1233.862445] binder: 4795:4803 transaction failed 29201/-28, size 24-8 line 3255 03:48:04 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x47, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1234.038471] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1234.081982] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1234.137347] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1234.145893] binder: 4805:4815 transaction failed 29201/-28, size 24-8 line 3255 [ 1234.165617] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1234.244909] binder: 4795:4803 transaction failed 29201/-28, size 24-8 line 3255 [ 1234.288683] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space 03:48:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0xc223, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) fcntl$setlease(r0, 0x400, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1234.376287] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1234.427455] binder: 4805:4811 transaction failed 29201/-28, size 24-8 line 3255 03:48:05 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r4 = open(&(0x7f0000000300)='./file0\x00', 0x3e, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000000100), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0x75, 0x4, 0x277, "d248942bd09f5ebf0e14ca1027f93b40", "ae5ac21bd7766e3677a2a6c9e1a703bdb428c059f4ee4542cb42c46cb1ec0a5cf58c6173c686a65c5d4c7e19684d595c8730428bfd9e6ea9edde704c8cc449dce5f926462b9b3bedcd627c0d4de414dc83b359d5c55680a7c1efe5d8bba2c744"}, 0x75, 0x2) syslog(0x4, 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f00000000c0)={0x1d, 0x3ff, 0x1000, &(0x7f0000000b80)="a27b40a38fd8ce0583752e8c08260b7a06e6b0f19681f2c10a1245e18d6cae2ff040d5b488f0affd03d6f21b8573deb87935cdc33e725165e01494aea519e963bd5d1a10bb6fd34fe93021e5d15abd98db817e59a5d9da1e3389bd3f7ce984cdf44a2555fe206b92f787f3e746a18359cfd6a19f740a9c255a6f832544d6226075a0a44c09b10572d3cb1470cfa8be650ce2b55b38764b0affe853b84820f4e54c4478dee1e6018d8466798cfbc39cb2f7ef5afb1c2ee9a7dd1831e501baa5c00c5123a666ea9bd43c2f93c9fedbd487a23afdfc8d0b41fdad2563047b116c44c61ad558ee529e52058a4aabd5fae8d649b253ff964a0d3e97c8f708ccb599c4b028daf9516b474943d110cfa7d96e2a67860b141836e0b2c3ccabb2769920b1cd03ba73e77cdcb03674d365c56307a6f9bf7edc2f5c2bb6094acb070c0d2f7a4f2a3aea24a2ac5a3cc39693771ddece37aa94b30cedd9a257a437df1fd690b715be4304b4747e9204047a1745951ae8a267c325c42bcf40b7f36a6d54e01c060c0962b1e83dde766c38cf6c163d8f7a63c1e34561782f22a792baa0cc242ee44dfab3782638a22bc1c3c8700a5116d5e045b59b9bcdee497db3bab543224b48b616cff8f0ae5074e0e21a3386141a3450a035fbbc74e02bdf79a9f7791e2e34bba91bccac55593a8323d52f060f18b3bca02f853e4c26a5a2d8b861c115bf27fc45cdaf7a804a0030173ad977ad9cee503c95c7512ea37ba8e991ba483964cdbcf4e2b2f1a6048a9abba89af7d33303305bed5a347508645b7a929ba45005d6b881674a61fbf2a1dddf13afbc70e8017bbfcd302fcdaf1872d61243e8c2db8149784e248bdaf25c1885313f062a50969dc6afda85a73689a44ae60784f4c50a29781c4b167329d217a90eefe03298963cdacca1243aa3bf8b01e77486ffa14dd77dd19eb434c71852c9788cfb89bc0966cc5359520056d5b47e0344598f1f0b20069bb4bc075fe6d0709b0056c77b1b1e57b643038cd3abe363075f09a9758fd4f4ec3fadc2e7b3f7f3e979a038843b1671055442f85f5923d7dc1e4ffaf465f7357e106c3fd9ab0c1c65b4255dc8b7175640e9de6327281862fd3c931d6ea94073e3fcb1ed02e0aa3cb28f951cc00707b9f070bd32a4b2affdbf24ac6418f91e05b3dbadd3c80eefa62667968c274e890c80fe946e3a8a6ad4e8df645634992956b91e9b7716f2e982a5ba1d57ec4307548c665a6c8db529c438a7d926dc1d9a5839975762576cfd77afab6b8b9abecaa7554ca8412a331de2b11bfc10ade8c076c4f043d194df8221955e9264ced8f86c30de8c8ed71ebd8aa897628b40d2c7aad008cdd0935bd92f9648da7377c273e32b60e08b4817d93bddefe172cd882481099f81e10340e3b3d01d9d9923d850b7394eb7dce48f46b294b69dce1cd135caea2b8ce523211deb47e67065d0d4abadd019dd5a89565fc6d1a9d670a57ecde64f30982ed8080a32958350ad51bf4a766fa0709219e25954332caec4507cb023869dc5176d27d5852cc633c417d5994e8bf228d4786ae7a808e77d56b3239357bcfb7edf6e6aa2a4ad5f8d014485d6bf1d0b4c3ff2bfdc7a3dedf48225a837e9067d0d5ef62771d15e307b0d290c7987b36e0d60c6b3e78f1354fb7062524031f2b6489ae3071231926d8be51229a88da7f4bef2e906b595657d216de517504690bcb97eebf0a4eec9afc2b221de99778556af045a37a5bf371a3d9f7ea03b8f2f41d40a5e5fc0e72abe227a090962f0222dd924a08e41ca27561d3ee7fb562256ee837ff53758bf3e8f3f5ad7839e89233c2ce3bbd7a02030a0759071f0db46618d213d405ac7fbc62870528bc4d5842a52bc6cd9bb6b11929f2cc63c25b436b51d62584510d543ced36432ff67eeb577c995257191feb1a47cc0282a0f0a175ef732028084864d5c2d44450dcb79d4419a5ea60787cc9fe0407cfcab85f9b9bbcff84e1f9dfb8e0ad20ab5892d622859c4b0b111a62531f60b94930648122c636041d56eb55a0df7aae022bfec5fc12f862582254ddcfa11f6c3bf7e3c7f62ab436cd5e5d2895b4f82d50db0ed6cddadea28463414b4dd96a2d59fd0bc37d30edcb8077057af556ba2a6d75e484890dcd783fe3d7c42720227cecf62c98027e166fe6d0423b0d629b9bbeb17df688600e27c5b9db2c10157a11a802d9f2e6e91f10dbf3e950636690a14ed53e4d406a6421969541995a5eba79b3edab046df23ab34bfacbd6e3b2e2f39509f8ddded856cf946e88cc269f96ca181043531d8e103aeb9468e7c459814e290fdd5bcdb313c52bb59df4b58f6339deac4dbb1c804d9c936ae11b9622331eecdbcf5fb68592c61113078f12fbab8965a323a50e8c51fdb1ed9e62c52f72ad0ab68a0969d1e8b35b93f565d62f47500944652431bbcae6694ecc7f1895a9ff8084554fb9d6df8825f94c14dc6484404fab6e8d7735aba491f6ea5e5130d12afffab4943ea411b3c7ebb57e7c3a96613092a9f7a3a472472660650aed4e08d0de0f90b57271c9f59e774bab815544a27a1036825f843b961674b42a18bb01a543c5fc616b3c441f567f6e4553e51a7aa938e8f7403487b4c77c91501c0630d21a4473da0690cfdd0d54eee8796924c6e204cf5af33db09ebee7e404c01f938c67904a2be54150de66a90e6afade60ea55381d81c1e68527a931520db1280668529af9a5fdb1bc146a2f219224c0250f82af2702bb085bb85a72206bbbf021eeb95c220f0c7b15b444dafd798d0ceb752fabb73b8f595508db53ec6a3ba9039bb0d5fbf2784b61b556d1bb967d2cad69ca38e3e0eb76c6547a1fc9050579953f98e27191031380b6c5ac694d6dc1ea1a5b648be76a74b82f0ab341564de6d8a89d2f58960aac16ca697b3e34bbfcba34d8c1c786d036a88743fbafe1508982958d88e7046d2e36c00957b001f382e86b924f89699258f7c4866bfa53ac0e0f87e08dbd61f50dacc798af40b8703e832dd846ec86481d00a6ad4f8fec5b1504d3786ffb47caf16586489a13f41a3a314b9f3193310504523cc25ff971d19b7fafbf83855dfc36081bcceadabc5c6ba1ca460d9f57983875080f2606155517b3ba097b7d05db11d7f026d33e470b42ba4a0efcbf3f9d1ca60148adb2c1d31e4b0484fd0774eea32e70ce7958a1e99ed2e237fe911882b5e7f52037ed51c8a04b8a4589989a667e4cd777819eebf0a0f2fae2bc87702d65014294541f2e6cd06ee4d0e57de5c9433803c3001927859536d1fcf2539a51c582701935fa56ca55ec4ac92e11815dafbece8090107c55e4c9c240fc165e4a18d2d8b6e3b61132c4ade86656e3c80da40ccfb03bda669e426f301a9a8561167744d3280daa2df6791f613d690c5ef812129f2df8eb11419fb78ef3aef25adbf6878bfb0cb43cbf2bdf75018b930e6d5913b8bc30a54d56ec0618e8987ad59273eacf985e4ae6c29d4dcc0ec9d7a5f85805725cfe1e8f8e89dea5ced8d670339ba096e80ae7fe669edf21ea59189470edfb1caa5718ad9033f8a04ca27ec95b73dac7a2107719c9f007357d21948eca4eca422451da1211edafce397c8c53a2c236a74997ed5adc229fbc5704cb93fb3319461d91ddac2b58558e9088210d3f1e5c1367af6a44c08920f7b7e8f4cbe5b38ae941c4cc678377cfb673bd0efd08140428ee499515e5eb1452b4b28d1961cacfa885202113d32cef094ce23e4e3cb5c307730192285d66fb0c5f7330800d3d41be4e6642661aa0bdf82304ffdc95a099669acdda4b9ac4354517dab35f8912b690d3ab1eb7bf979771c49ae53557652d9a14a694514b5673f6a6960a7fe34f4b836ee906cb2545bb1602eb402fc2f90eb2c1ecda6994936d5715ba209161a911f920fc0f023897da6e537d8a2d98d32abd7ca3c8ea491fe3b823c1f06aff539f97b27cdcd3756bba4d331c892cc74f56d9782a773f29d5a7b949b67267658ac25d8a87eef8ad967c9ea9063458b0914461f3c063b0ba765cea7b980d1fa05d9f1a8cc04153e3a37b68e658f18771cda8ab113f268517cf0205301c47757b54fb8bba8d3595c6e8d5f71f4c32ba7e630d640ca44e9df43201bfeecad8079164c986078c2917cd9448e80ea31d82559fad5ae448bd1ccc06eb872634964d8c447f29f6ab3a3020549676312e28fd686beb7d7489cc417c5d7ffdc8a862f2d95424edc5ff0d2293ba969e812c0720f72812639119070d4434b6f88f1f4a4831d5882cabbcfe1c095c1250f608150c87f9251d05e538be2e081cebe9f67be786ac9bd6ee11e12fd64f38cc50ae9792eeda2337f5fd639f60b327c9170ab27184ccb1a3c786a9f5b9088b66921026b6031611aa68628655877cb856e7c1aab546abbdeec91c7e03e4b316998cfa6158838b25413af3da1b53ead8e89a8ad7cbd64c0fdcfcfb414872c79d3b71cc6ffa47a1fc451397d801b856953cfbdad02dfd97b91b05ea4079e659c0a2480fd81715fd88213571d0f9a0ee8c00c0f37ef345d078ff2fa0b040848bbd6f3425319e61807d5d739bc1101b44b74b38ce379ab83804709da5ad9f6e6b66cce006f69fa8ac6ba7ef68275a898eb6f601b1bc045e38e660c9d38f21be023cd9fd8eebdff8db4c22ea85f898e03e913a2bb9679e1f4e8a08c8149ce845c579d176df2bd35cb446a08d72633c865a35ef625b2e7ad22a5d92110cc888e52bd93ab4672a757a837f8390a1f04e99165f9120b2a1985f251f42a66764ceed61db1bd461ff439861692a9291f6c713d86b4a6b8d6550bc2322d7ce17d74f771e281c0513b7af1b2d2577f7742a7b1e1a80e6f1e423d5751a0f86dd028075a834f54e43303390cf3209bceb699b0ae043344c3a452f8874b51804e186d5b49d1c576259c28ae0b0fe8b8a3e4635c81f8690fd7b8baaacf36d0c27daa9318808f14bd6877b78b60dc5ac1114ec4391d1701b5587b80e980462226324087fe4eed276b5992f440193fb93caa986e04b389989531e83cc682467f542ce24b628fd76b4d25854a6cffa0abc0e9284661945b5b34289d9c2052771921caf8a9506f71ce8b71b697c15a2e49dfeab180a0ccd9c246849febf6c5b02b01b309ecdf99abb67559935bf398184321537df2592d6fa4dc502505985f02448474c73b1dd065ca4bbe8f310443adf6b18d521a748029ed74f16b7953c6bccd0ed0ea179e373997112f7189a26eb96b467e9635817f2508bdd1fede57a3c7d20c2c9696d8fbdf6dcc1369b9da30399f642f8cb92299f7604e1ed319e613cc0cb88858f8ea89fbcc202b9eb85f25effb22fcfb2aae9de9e2e37b15799664db6e0a1fb555639eb921253656fcf24858c9367e504f210d36ae347b9181289e20cfab37b59d774c6f608cd8850223df891c568ee8f44d16db4b1fd909fff6f080e7b59b43013d474ac82a34970796aa183197174c6e52e95be02fa78c77dca5e894567c22a49b81efa7611e725cea837a725aaa12927ae383be5930ef0c3de881b8cfa29d4c77b5840dbc4943e23a63a36c4c5c9bfb038273c3c1707177df27e98617c25adaa9c63dbd98ba6413d0fcfdb40619efee002f9d32a91d5a8b0f95bfad96adf5e223579cd7c604f1f217deb95a7b354c02081581941385eabfc59d62661b45ad00b0947c7820a0594d0a98e5248c2fcbffaacb31093c3f6edb0fb0c5e768f225028532ed3ec7177e4e868a84763cc1b8660467d2fde5c9884e833d99d9184eebab99f3d2add3d1a43f8d"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000c4374506eb6a7550ff34780832d20d70c871c942faa78289834138a55bd98028ff680f05ce88abe6128c3d794e2327d8e100149f4f0f93fc7928eb0a89511a223ece437169d36de0cc52a3b6ee02729314f46e602180da", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a6273000000049900210174dc2b98b49691945fd24a41f8045f7d1e5449ff20a5b48088ddcdbcddfe083f64d89e4bbd4010c63ac19bcd901c5e253fefea2757251a84d84a5b39de3102ce8e3cf77422c765f4f476466937e4634339aec9114ac91c0c66fe27a682ab3aaa10c5f6d5f24d5c91a3d3579061", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1234.689281] loop4: p1 p2 p3 p4[EZD] [ 1234.698661] loop4: p1 start 1 is beyond EOD, truncated [ 1234.725875] loop4: p2 start 101 is beyond EOD, truncated 03:48:05 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') write$P9_RLERROR(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0900000007010000009d9cd590761de07a2ebe292fbc879be8574e106bab3a456fb43fd34bde8faa4cbfadc451025363444829a7449982ead3e54f28073541c7817fba6bbdbfba90d2bb5d4d1e78ded2a4aedf123d82e3f3e4401d2c23d8689a65d83281103dfe0d1d8b35a33f4376bd962e4837a4112103ed4cedd64f8fc5ec618431fce8062a86c992adb13955016ff2e3ef6df26039d2b2d9115fba8dd36f31568e91ba6139a2b1"], 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1, &(0x7f0000000080)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002f00572723f5000067000004015eede41dd36c00"], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffffffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) [ 1234.749968] loop4: p3 start 201 is beyond EOD, truncated [ 1234.774000] kauditd_printk_skb: 303 callbacks suppressed [ 1234.774007] audit: type=1400 audit(2000000885.572:36638): avc: denied { map } for pid=4829 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1234.818201] loop4: p4 start 301 is beyond EOD, truncated [ 1234.888908] binder: BINDER_SET_CONTEXT_MGR already set [ 1234.936010] binder: 4822:4825 ioctl 40046207 0 returned -16 [ 1234.937798] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1234.959663] audit: type=1400 audit(2000000885.582:36639): avc: denied { map } for pid=4829 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1234.998773] binder: 4822:4834 BC_INCREFS_DONE u0000000000000000 no match [ 1235.020186] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1235.044235] binder: 4822:4825 Release 1 refcount change on invalid ref 1 ret -22 03:48:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x40000000004e23, 0x20001000010001, @local, 0x100000002}, 0x1c) lseek(r0, 0x0, 0x2) io_setup(0x9, &(0x7f00000000c0)=0x0) io_getevents(r2, 0x6, 0x1, &(0x7f0000000180)=[{}], 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x4b7) [ 1235.097487] binder: 4822:4826 transaction failed 29201/-28, size 24-8 line 3255 [ 1235.109924] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1235.136636] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1235.174427] audit: type=1400 audit(2000000885.592:36640): avc: denied { map } for pid=4829 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1235.188988] binder: 4830:4833 transaction failed 29201/-28, size 24-8 line 3255 [ 1235.209640] binder: 4822:4826 BC_ACQUIRE_DONE u0000000000000000 no match 03:48:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0xffffffffffffff71) setsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000580)="6dbcc5eb89dcd6b00a991c2acd6e5deb7738f39b6160e3603fb0c255bbc1cc75af787ad8587f738fd201f902bed48724626867dd9680230b90c73f7b6195d90f70d3efea46d0b0a46dd192a9ad2a933accac20ef24a38ca6af19c80a9f84add1d3eb82f7a03dfdda76f75eecc96334bdc8aee8d5e78e02432d18227045039c0b3233d4c6cf6f0baeead89fc602c991c36a79d1795b773e32b04a41c6c305ac86e3c94772331d06399c75bf5db777ee8c5f6caf5b6bd62ae403f2b716e9996d97966fd96555496b2305408f3814859968c3394704a0cf5032398ce776b4456e1e8f24091c31c6f84358621f6a394fbf", 0xef) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) clone(0x2040001, &(0x7f0000000240)="a4e244ffd0176a285854fcb2e107af998b439fa7a5acd661860d0078bdae120d5719c0c65bec25033821acb4d82bfdca3ca1c9fd1c6f751a024c4801356f8d7334bf8d00321ae482f5cb6e96f5", &(0x7f0000000040), &(0x7f0000000500), &(0x7f00000006c0)="779c841b90155bf36ac079c4c11d3c6c1c30ab1fb08e24b6ec01be3d6f4ecf0e6572ab1ec6b7a6e047bcf2ee54b425c2b379be33bdf96b7204b14c045b59299852bac8d3a5a4de68003123c4c30878d6a56f79ac9393d7cca3e17b155e66371997d4f1225ea83343d74949ef2c01ecd81df8ea8a848412c9e42f7640aff68a955802b3874c58d621abd8746a5337eb48d44fd5ea2424325db96cdaeeb8406ac35a96dc17c2ff3544ed74463bde5c4963045fb3905c8cb557ce81f4c4e5bcf857ff15878ec069d5fc225c2f688c17dbc306dc0c8ae5e815452dd7dc27c4dd07752389fb5ba828f982d81c7e3aa74349bce23fb06d1c478a92f1e711d1fd8f3dfa38a1d26c") lsetxattr$security_evm(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.evm\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="03000700ffffff80001c7c3c628f25275317867ab4cb3bd0afe0cda0a988abec9ee08e5d5f3432be0f2dc8353d"], 0x26, 0x2) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x3) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getpriority(0x0, 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x4) setxattr$security_smack_entry(&(0x7f0000000100)='\x00', &(0x7f0000000140)='security.SMACK64MMAP\x00', &(0x7f0000000180)='-\x00', 0x2, 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) syz_mount_image$f2fs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1400}], 0x0, 0x0) 03:48:06 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x47, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1235.395381] audit: type=1400 audit(2000000885.602:36641): avc: denied { map } for pid=4829 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1235.468419] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1235.565254] audit: type=1400 audit(2000000885.632:36642): avc: denied { map } for pid=4829 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1235.567229] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:48:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x25, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000180)={'filter\x00', 0xfffffffffffffffc, "8d1522d8e7cbc0207e025de56318f367955e60826a77e344086b1dd5ff3ff3cf5df5bb84b6965304ecfa1d60d8aefbdc6f0195ff977fad2fb02f"}, &(0x7f00000000c0)=0xffffffffffffff84) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1235.678040] audit: type=1400 audit(2000000885.632:36643): avc: denied { map } for pid=4822 comm="syz-executor.1" path="/dev/binder0" dev="devtmpfs" ino=5076 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 1235.687201] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1235.714080] binder: 4830:4832 transaction failed 29201/-28, size 24-8 line 3255 [ 1235.837971] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1235.854677] audit: type=1400 audit(2000000885.672:36644): avc: denied { map } for pid=4829 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1235.923697] binder: 4835:4842 transaction failed 29201/-28, size 24-8 line 3255 [ 1236.003949] audit: type=1400 audit(2000000885.672:36645): avc: denied { map } for pid=4829 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1236.071130] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1236.116512] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1236.162063] binder: 4835:4858 transaction failed 29201/-28, size 24-8 line 3255 [ 1236.172805] audit: type=1400 audit(2000000885.702:36646): avc: denied { map } for pid=4829 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1236.307233] loop4: p1 p2 p3 p4[EZD] [ 1236.311640] loop4: p1 start 1 is beyond EOD, truncated [ 1236.327516] binder: BINDER_SET_CONTEXT_MGR already set [ 1236.332999] binder: 4851:4854 ioctl 40046207 0 returned -16 [ 1236.340287] audit: type=1400 audit(2000000885.712:36647): avc: denied { map } for pid=4829 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1236.342311] loop4: p2 start 101 is beyond EOD, [ 1236.371416] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1236.404055] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1236.425131] binder: 4851:4854 BC_INCREFS_DONE u0000000000000000 no match [ 1236.438882] binder: 4851:4862 transaction failed 29201/-28, size 24-8 line 3255 [ 1236.459994] binder: 4851:4854 Release 1 refcount change on invalid ref 1 ret -22 [ 1236.470370] truncated [ 1236.483989] loop4: p3 start 201 is beyond EOD, truncated [ 1236.518840] loop4: p4 start 301 is beyond EOD, truncated [ 1236.634998] binder: 4851:4854 BC_ACQUIRE_DONE u0000000000000000 no match 03:48:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x142}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f00000000c0)) r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0x402, 0xfffffffffff7fffd) write$9p(r3, &(0x7f0000000800)="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", 0x400) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100)) sendfile(r3, r4, 0x0, 0x10000) keyctl$unlink(0x9, r1, r1) write$binfmt_elf64(r2, &(0x7f0000000c00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xfe, 0x7, 0x0, 0x2, 0x3, 0x3e, 0x0, 0x24a, 0x40, 0x2c62, 0x6, 0x6, 0x38, 0x2, 0x0, 0x65a, 0x3}, [{0x0, 0x81, 0x0, 0x941, 0x5, 0x7, 0x7, 0x9}], "b91d3d9babea360c3d9c717883d3f11fd30296643a7eb2a095a29739413873160dc74a0d488887c6a4b2feccd0b1b5ffe9679e54d44f05414a149cef1528633a4f51b0a45824e59286d74a12843983d946ef4a5bdc4482a678e8f29093e4fb"}, 0xd7) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)=""/169, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)) setxattr$security_capability(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x8000, 0x7f0000000}, {0x0, 0x2}]}, 0x18, 0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f00000003c0)={0x138, 0x24b, 0xba36, 0x5182d11c, 0x19, 0x0, 0x4, 0x0, 0x6, 0x6, 0x800, 0x5}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="000120000000000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ec69264b235d939900"/144], 0x1) 03:48:08 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x3, &(0x7f0000000280)=[{&(0x7f0000000580)="abd64e4909e8be981aabcf9feaaa117c6c0de3654799d5160d619439d9a60976b3b95ce04bfe1e8200af01b70eb4aca8d7c6efd560a6e278e923fb0e4800e123f944b5a4b9a2c20873c125f4f522387dcf6f2dcb3450ce23791618b20da31ba9bec56e97b0028c9d8625921996b17db27d1518145e2aedd55b38bec525e462babf52a960c1b32ba2c216e70bcffbf38a5f9bf708abd12944bfecef8d1fd9c9b4e7597d88a51fb59652043a823d4397cdbc4e3c62187a902bbce1a24eeb5ada8c48ec7bcf7199e68c9141438e7f0137e0e2b62fbbc504961b0234fdee73c1e12191bf9fefc4d200db4f1fbdd85694cbe7829f6d9c41e9174dd6", 0xf9, 0x7}, {&(0x7f0000000480)="bdb3a155a9eb3d46651a45f6eda487b46a751949f08c7142d952502a786bd210e47b12b2edf380e7a34adbe35c017eeb77c759abf0dffb98aaecb98b0928d6ea771a3859a8ce86afcb8ddaea11bb94f61867a4d7259424b373ffdad308bd882c7146b5970318b4125d27df29fcd6c02710bced14195b3d36ad4b1c680be40e0f55506da97642ff8ce6aabb2144e2c160c3635ab7a551064c6d6901715e293f33ec2b257ca4c50e00ef96eae2e2e02e9cfd7b854e2703dfc4aa1c", 0xba, 0x7fffffff}, {&(0x7f0000000680)="ff7ef0f1ff6133834918cc01de4afd143c2866872bcf5d8307fb31ee413dd743902f8b8a3c7860817c07db0e3a7e19f0e27ac1706e853dfd2e25e35815c3689993e36c84533ba47624dc4fdb7d964167fa2a6e41bdee26092bcfa8464ef9ffe2f7c587b55be48ee7e008cb5e54ba5f1e9364f95dc02b1f94921a02e2266f142770b1847fb45a15b9fe78feaf4485e159ad46efff28ed8fa87000fdb43fcd66b0aebfe42c3e5e429f", 0xa8, 0x1c6}], 0x4000, &(0x7f0000000380)={[{@background_gc_off='background_gc=off'}, {@background_gc_on='background_gc=on'}, {@prjquota={'prjquota', 0x3d, '/dev/zero\x00'}}, {@fastboot='fastboot'}, {@prjjquota={'prjjquota', 0x3d, '/dev/zero\x00'}}], [{@dont_appraise='dont_appraise'}]}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x40, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980)=0x2, 0xffffffffffffff87) r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 03:48:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) 03:48:08 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000180)=0x80) setxattr$security_smack_entry(&(0x7f0000000380)='./bus\x00', 0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00', 0x46, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000013c0)=ANY=[], 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100000f, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="f14a72fcfc56c5"], 0x0, &(0x7f00000002c0)='f2fs\x00', 0x8043a, &(0x7f0000000300)='vmnet1\x00') mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f000000b000/0x1000)=nil) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r1, 0x48201) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000940)={'filter\x00', 0x4}, 0x68) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xbfe00) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000280)) 03:48:08 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0xaaaaaaaaaaaadc0, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) r1 = add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="f9a9a2a39d05103590a80025bb21cfa60edc42ae8e04afa63918affb8887d3bc9c7431bb558c175d5ffd3cc743a0d7fb25593306789b4d8b7796df8984221adb77375630378189579a8ec31c5cb56d6251ef8e8ffa43661e5f9e2122fb408662f0de01faf81d8a6950a77991aeb1511b2caed79affd9730aba61ce2057539d65b7da59b961e2230bac357ea0782ff32b2aa27a9116dc1c1ae6b44f00", 0x9c, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r1, 0xffffffffffffffff) [ 1237.663936] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1237.733702] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1237.809601] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1237.863944] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1237.911463] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1237.960174] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:48:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f323c123f319bd070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="4000000000000000a13272ce2c276032b061c093df798fd88ba160d49e81f95f7712c2fa7ff00455036deffa68dfc593b415025c99f0db67f30e989adc05ec850523f86b9b98c095a5a13147000000000000000000"], 0x8) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x805, 0x8) [ 1238.062300] binder: 4877:4901 BC_INCREFS_DONE u0000000000000000 no match [ 1238.078231] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1238.086645] binder: 4874:4880 transaction failed 29201/-28, size 24-8 line 3255 [ 1238.094822] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1238.119796] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1238.143599] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 03:48:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x10000, 0x80) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000480)={0xe, 0x5, 0x5, 0x8, 0x4b, "52dedab35e02fe83b302064b2ac73a6dcf16519677042d444b9213891e496199b6d46df392add2dfff01f875c1d3995f36df6fd5850c61ac8136cab802f4babcf6f537326ef998789da91b"}, 0x57) r2 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@empty}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsync(r4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000da00000000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1238.171586] binder: 4877:4901 BC_ACQUIRE_DONE u0000000000000000 no match [ 1238.191542] binder: 4877:4897 transaction failed 29201/-28, size 24-8 line 3255 [ 1238.191866] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1238.206301] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1238.245660] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1238.307043] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:48:09 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0x4) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x37) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x1) close(r0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x8000000000003bf, 0x0, 0x0) dup2(r1, r2) [ 1238.373705] loop4: p1 p3 p4 [ 1238.377232] loop4: p1 size 100 extends beyond EOD, truncated [ 1238.397122] binder: 4873:4890 transaction failed 29201/-28, size 24-8 line 3255 [ 1238.454228] loop4: p3 start 201 is beyond EOD, truncated [ 1238.459711] loop4: p4 size 1747 extends beyond EOD, truncated 03:48:09 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000000c0)={0x0, 0xd1, &(0x7f0000000580)="90f594fca295013058c273bfbf3b71bcb1156300cab10e73984034ddf3617eb7dc23691110d89311fbd3fe31b5892d0689290528baa8fb5ba3b890e17d5aa1eaedf0135a4ee26564d4addfe8f8ea26e5e964c6dcb16959c9d156c802e4bcf5e1b86cf726370298833664423386951488b21fb4e6b0a03a30260691af6c18314f2b1f704c0899f0b0c0d20b4ed5bdba4ff1c43a3a188d170ed0882a9f3a0d52f2a204000e9ecf9cd60886758acbc9bfb61c1f214a502ea87e1bcd79e86667b41cc4185557b1fa72818546aef63145cf4625"}) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 03:48:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="ffffff7f3c123f319bd070afceaefc19ed66da028a29c46c600379ecdfea825ff85e24fcb8bc440600000000000000b5c51540e26f4a7afef6839d7fe35f90008a97b583a8e7491e63be8292b72384bd9634fda297088bdad04a5d9f6335ee9b3ca095f4cc08fc33fe7dd4ec77f0b16bf621c0c41982f611efa119ff575924bd5f9d4eeeb900"/155) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) 03:48:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1239.367511] loop4: p1 p2 p3 p4[EZD] [ 1239.371844] loop4: p1 start 1 is beyond EOD, truncated [ 1239.408208] loop4: p2 start 101 is beyond EOD, truncated [ 1239.424839] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1239.440031] loop4: p3 start 201 is beyond EOD, truncated [ 1239.461499] loop4: p4 start 301 is beyond EOD, truncated [ 1239.468443] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1239.526291] binder: 4919:4927 transaction failed 29201/-28, size 24-8 line 3255 03:48:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 1239.621666] binder: 4918:4938 BC_INCREFS_DONE u0000000000000000 no match 03:48:10 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r2 = open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f00000006c0)="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", 0x0, 0x1}, 0x8e638748) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000710000000000000018000000000000000800000000000000d33160d1", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1239.683983] binder: 4918:4946 Release 1 refcount change on invalid ref 1 ret -22 [ 1239.712467] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space 03:48:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="1762752065e76d735b47a247689e4c328a92bc7eda492da84f60b3a06718ac02") r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x3010c080}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xd8, r2, 0x302, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7000000000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x41) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000000)) getsockopt$inet_buf(r0, 0x0, 0x2b, &(0x7f0000000040)=""/105, &(0x7f00000000c0)=0x69) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r4, 0x8, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x4, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0xf08, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) recvfrom$inet6(r3, &(0x7f0000000700)=""/96, 0x60, 0x40000000, &(0x7f0000000780)={0xa, 0x4e21, 0x2, @rand_addr="8d756bbf45065c61298f69e23a669825", 0x1000000000}, 0x1c) ioctl$int_out(r3, 0x0, &(0x7f0000000140)) [ 1239.801388] binder: 4918:4946 BC_ACQUIRE_DONE u0000000000000000 no match [ 1239.813121] kauditd_printk_skb: 298 callbacks suppressed [ 1239.813127] audit: type=1400 audit(2000000890.612:36931): avc: denied { map } for pid=4944 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1239.819669] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:48:10 executing program 3: socket$netlink(0x10, 0x3, 0xc) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0xfffffffffffffffc, @remote, 0x1}, 0x1c) write$binfmt_script(r1, &(0x7f0000002ec0)={'!! ', './file0'}, 0xfdef) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r0, &(0x7f0000000040)="964003df86e4d0a733f0de652c6411e8d4c5d41b8c779dc78c3ab2c45e6198e60853516824021a1eb8e33f283394c0bc280fc447de50941a326aef7beca9d84b6f7e4c67fee81288c1fbafd1c71e1aab65736ba5c32e12f198ad6bbefd73ad73c0e7162c05be292aa1ad3984eea92f8490ffd30442a447fade7b0ca57f3f459a99965d8d0a1bd79ce27a91138f6b52aadc39c3cb6f9703b87913094abc437f016318155c958bf85dd6ee1d40ef03496810ddadb66b", &(0x7f0000000100)=""/122}, 0x18) [ 1240.011093] audit: type=1400 audit(2000000890.622:36932): avc: denied { map } for pid=4944 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1240.060584] binder: 4918:4929 transaction failed 29201/-28, size 24-8 line 3255 03:48:10 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1240.166913] audit: type=1400 audit(2000000890.662:36933): avc: denied { map } for pid=4939 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1240.263432] binder: 4952:4953 unknown command 0 [ 1240.283273] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1240.310598] binder: 4952:4953 ioctl c0306201 20000140 returned -22 [ 1240.353585] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1240.392261] binder: 4952:4954 transaction failed 29201/-28, size 24-8 line 3255 [ 1240.395053] audit: type=1400 audit(2000000890.662:36934): avc: denied { map } for pid=4942 comm="modprobe" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:48:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod(&(0x7f0000000080)='./file0\x00', 0x1120, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) fcntl$setpipe(r1, 0x407, 0x2000004) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSETATTR(r3, &(0x7f0000000100)={0x7, 0x1b, 0x1}, 0x7) write$binfmt_elf32(r1, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}]}, 0x58) ioctl(r2, 0x0, &(0x7f0000000540)="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") fcntl$setpipe(r1, 0x407, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) 03:48:11 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000009c0)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000ac0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', r1}) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1240.565226] binder_alloc: 17238: binder_alloc_buf size 8192 failed, no address space [ 1240.608208] loop4: p1 p2 p3 p4[EZD] [ 1240.612430] loop4: p1 start 1 is beyond EOD, truncated [ 1240.637855] audit: type=1400 audit(2000000890.662:36935): avc: denied { map } for pid=4937 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1240.667561] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1240.670895] loop4: p2 start 101 is beyond EOD, [ 1240.697843] binder: 4955:4957 transaction failed 29201/-28, size 6144-2048 line 3255 [ 1240.712180] truncated [ 1240.712185] loop4: p3 start 201 is beyond EOD, truncated [ 1240.712190] loop4: p4 start 301 is beyond EOD, truncated 03:48:11 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0xffffffffffdffffe) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000280)='TRUE', 0x4, 0x3) write$P9_RREADDIR(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f000000290200060000000001000000020000000000000000010000000000000105002e2f62757300"], 0x29) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x40000) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000100)=0x1ffe00) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./bus\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffb) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000680)={0x10000, 0xfffffffffffffff8, 0x8}) add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000580)=0xc) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000300)='./bus\x00', 0x200, 0x2, &(0x7f0000000400)=[{&(0x7f00000003c0)="ddd34037", 0x4, 0x6}, {&(0x7f0000000480)="7f68d6e9d786f5ea349ad3f77e8b0ee89898123e0be093e9ae42034ab758c12fda866d36a69cdaba2e63cbba7d94af5b414c975900c19f16e81a2c266d0773b8ad5d58f4c58d1b8fea5e854124a9644ec275b89e", 0x54, 0x9}], 0x800000, &(0x7f00000005c0)={[{@dots='dots'}, {@fat=@fmask={'fmask', 0x3d, 0x96f}}, {@fat=@umask={'umask', 0x3d, 0x3}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffe29}}], [{@smackfshat={'smackfshat', 0x3d, '^%-ppp0cgroupsystem#'}}, {@uid_lt={'uid<', r3}}, {@permit_directio='permit_directio'}]}) creat(&(0x7f0000000140)='./bus\x00', 0x0) [ 1240.867701] audit: type=1400 audit(2000000890.672:36936): avc: denied { map } for pid=4944 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1240.961775] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1240.962721] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1240.980960] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1240.984980] audit: audit_backlog=65 > audit_backlog_limit=64 03:48:11 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000280)={0x0, 0x70, 0x14, 0x21e4, 0x6, 0x8, 0x0, 0x9, 0x8, 0x8, 0x8, 0x7, 0x5, 0x80000000, 0x3, 0x9, 0x1, 0x101, 0x0, 0xfd1, 0x3, 0x1, 0x200, 0x7f50, 0x6, 0x3, 0x4, 0x229, 0x2, 0xbde, 0x4, 0x7, 0x0, 0x3ff, 0x7a, 0x8, 0x1ff, 0x401, 0x0, 0x1f, 0x6, @perf_config_ext={0x1, 0x8001}, 0x2020, 0x5, 0x0, 0x5, 0x1f, 0x4, 0x10000}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000000c0)={0x9, 0x20, 0xffffffffffffffff, 0x400}) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1241.107578] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1241.147987] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1241.168112] binder: 4967:4987 BC_INCREFS_DONE u0000000000000000 no match 03:48:12 executing program 0: r0 = socket$unix(0x1, 0xfffffbfffffefffe, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f000000f000)) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) [ 1241.248737] binder: 4967:4985 transaction failed 29201/-28, size 24-8 line 3255 [ 1241.276540] loop4: p1 p2 p3 p4[EZD] [ 1241.280937] loop4: p1 start 1 is beyond EOD, truncated [ 1241.309432] binder: 4967:4987 BC_ACQUIRE_DONE u0000000000000000 no match [ 1241.316319] loop4: p2 start 101 is beyond EOD, truncated [ 1241.321776] loop4: p3 start 201 is beyond EOD, truncated 03:48:12 executing program 2: close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000380)=0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="17630000"], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x5, 0x63fc, 0x0, 0x1ff, 0x0, 0x5112, 0x1800, 0xb, 0x9, 0xf7, 0xffffffffffffffff, 0x6, 0x660e, 0x3, 0x5, 0x3, 0x80000001, 0x1, 0x5, 0x9, 0x1ff, 0xffffffffffff0000, 0x8e3, 0xffec, 0x8000, 0x1, 0x5, 0x501084f6, 0x6, 0x5, 0x3, 0x9, 0xd83a, 0x780, 0x58, 0x80, 0x0, 0x7, 0x0, @perf_config_ext={0x6, 0x3f}, 0x10010, 0x0, 0x91, 0xd, 0x1, 0x8, 0x401}, r3, 0x1, 0xffffffffffffffff, 0xcd8ad25d2e42f198) openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x189000, 0x0) [ 1241.367782] loop4: p4 start 301 is beyond EOD, truncated 03:48:12 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fgetxattr(r0, &(0x7f0000000040)=@random={'user.', 'GPL+\x00'}, &(0x7f0000000080)=""/165, 0xa5) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) 03:48:12 executing program 0: r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x3) fcntl$addseals(r0, 0x409, 0x9) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RLERROR(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="825b0100000000000000000700f375d6704cd2548f000000000000946fd367983e23e0eb5a2f9325e167b1e866afef73d4366b41b58f54b62d532854925aaa295098997ee52b1cd910ff5e5290a55e11ee767c14bdd4dcfd3e1383476d894ec472e3f7ee1770179bcc054ae3539fc41f4d79a74cdefe3605927ffc1d2191b96275ce66b115594b4bbdc2c07fb38c6c3947e6176a8f1ece4a314b6aef12dc56a81bde5c22d1caa174092e7b3621599a14b9f89888122d7090f0e76df7eea48138ecf6b61fbb8763a8254e96df1acc"], 0x7f) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000000)) [ 1242.017522] loop4: p1 p2 p3 p4[EZD] [ 1242.032080] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1242.053268] loop4: p1 start 1 is beyond EOD, truncated [ 1242.078800] binder: 5005:5013 unknown command 25367 [ 1242.081338] loop4: p2 start 101 is beyond EOD, [ 1242.089793] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1242.117534] truncated [ 1242.128487] binder: 5005:5013 ioctl c0306201 20000140 returned -22 [ 1242.133956] loop4: p3 start 201 is beyond EOD, truncated [ 1242.179227] loop4: p4 start 301 is beyond EOD, truncated [ 1242.186186] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1242.194568] binder: 5000:5012 transaction failed 29201/-28, size 24-8 line 3255 [ 1242.206317] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1242.258978] binder: 5005:5015 transaction failed 29201/-28, size 24-8 line 3255 03:48:13 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0xfffffffffffffef4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc0, 0x8, 0x2, 0x9, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r4 = open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={0x0, @local, @loopback}, &(0x7f00000004c0)=0xc) connect$packet(r4, &(0x7f0000000500)={0x11, 0x0, r5, 0x1, 0x1, 0x6, @dev={[], 0x1f}}, 0x14) r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1242.354632] binder: 5005:5023 unknown command 25367 03:48:13 executing program 3: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x80003) sendfile(r1, r2, 0x0, 0x8080fffffffe) [ 1242.393277] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1242.413608] binder: 5005:5023 ioctl c0306201 20000140 returned -22 03:48:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000080)=')user\x00', 0x6, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0xaaeb3c07d963540, 0x0) getsockopt$netlink(r1, 0x10e, 0xb, &(0x7f0000000100)=""/63, &(0x7f0000000140)=0x3f) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) 03:48:13 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780)='/dev/ptmx\x00', 0x10000, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getuid() ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c6300006abdb20014d53e285faf4d1a980fe6cebcb9372022d2c50576c456c1d2ade37504747ff2ce4b9a2560265692c5454a5ec792af"], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) r2 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000480)="1bb88e7f8f92c582e27589f6695b1f57569f22cac9472ec17f6b2c7eee85dac1074ea14cdfbb4ddfc1fabcce61b088ba41721720ab5553f3de4fcc51d12b5bc595e6cfcc7db2e613ffd53bbdf9989fde03c3bb3d27c1fa5e9a034eb70352ba19b7bd325098b1fb5386431f16bc0a0f23132f0b6bb386e65b5509cfae55ea092756c2bb1835875b2b6c58b3efcc6fb0ab1dda881d02321aef9e6c5d20041c9c44467ecbc63517b5ec907a94c23c6f2deb12b842e63b49", 0xb6, 0xfffffffffffffffd) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xa02000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r4, 0x2, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x810) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000280)='cifs.idmap\x00', &(0x7f00000002c0)='/dev/binder#\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1242.443804] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1242.463745] binder: 5005:5015 transaction failed 29201/-28, size 24-8 line 3255 [ 1242.526750] binder: BINDER_SET_CONTEXT_MGR already set [ 1242.565579] binder: 5010:5027 ioctl 40046207 0 returned -16 [ 1242.576518] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1242.609588] binder: 5010:5027 BC_INCREFS_DONE u0000000000000000 no match [ 1242.628554] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:48:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) readv(r0, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/226, 0xe2}, {&(0x7f00000003c0)=""/247, 0xf7}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f00000004c0)=""/218, 0xda}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x6) clone(0xb0000002, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r1, 0x29, 0x1a, &(0x7f0000000180)="8f7269ab", 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20000004) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x23) fcntl$setstatus(r0, 0x4, 0x42806) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 1242.670664] binder: 5010:5017 Release 1 refcount change on invalid ref 1 ret -22 [ 1242.702819] binder: 5010:5028 transaction failed 29201/-28, size 24-8 line 3255 [ 1242.796269] binder: 5010:5028 BC_ACQUIRE_DONE u0000000000000000 no match 03:48:13 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1243.118686] loop4: p1 p2 p3 p4[EZD] [ 1243.131234] loop4: p1 start 1 is beyond EOD, truncated [ 1243.170171] loop4: p2 start 101 is beyond EOD, truncated [ 1243.212205] loop4: p3 start 201 is beyond EOD, truncated [ 1243.256286] loop4: p4 start 301 is beyond EOD, truncated 03:48:14 executing program 5: r0 = socket$unix(0x1, 0x8000007, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1243.353163] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1243.408810] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1243.441467] binder: 5036:5050 transaction failed 29201/-28, size 24-8 line 3255 03:48:14 executing program 4: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x21000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa4, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x52dc}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffe000000}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffffc}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000840)) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) recvmsg(r3, &(0x7f0000000600)={&(0x7f0000000040)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000100)=""/131, 0x83}, {&(0x7f0000000240)=""/129, 0x81}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f0000000400)=""/235, 0xeb}, {&(0x7f00000001c0)=""/41, 0x29}], 0x6, &(0x7f0000000580)=""/81, 0x51}, 0x3) [ 1243.933602] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1243.973972] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:48:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='cgroup\x00', 0x0, 0x0) [ 1244.048279] binder: 5036:5054 transaction failed 29201/-28, size 24-8 line 3255 03:48:14 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0x400000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0xffffffd4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = accept$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000280)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0}) fchmod(r3, 0x20) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000140)=0x101, 0x152) prctl$PR_SET_TIMERSLACK(0x1d, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000400)) r6 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000200)="efa93df274386a4093f990dedf13364a7d48a6f32ae3787c566c5577c3e60eb3737306617fc0c857f6d0c00b584bb2d097cb27e9dbe056b35af52fba9d8293d99c3be247a1e71612f8d6062ccfd82ac9df171a5bd90dffacb2ae9cc82f8eaeba94db15c30b2c128eac03860e6aeee8c9", 0x70, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f0000000480)=']-&keyring\x00', &(0x7f00000004c0)) accept4(r0, 0x0, &(0x7f00000006c0), 0x80000) r7 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f00000003c0)='net/netlink\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) keyctl$instantiate_iov(0x14, r6, &(0x7f00000002c0)=[{&(0x7f0000000440)}], 0x1, r7) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) unshare(0x60000000) sched_setaffinity(0x0, 0x1fb, &(0x7f0000000500)) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) keyctl$setperm(0x5, 0x0, 0x0) ioctl$TIOCSRS485(r5, 0x542f, &(0x7f0000000380)={0x0, 0xffffffffffffffe0, 0x5}) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000580)) writev(r1, &(0x7f0000000600), 0x0) 03:48:15 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1244.239434] binder: BINDER_SET_CONTEXT_MGR already set [ 1244.268933] binder: 5056:5069 ioctl 40046207 0 returned -16 03:48:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x100, 0x1f, 0xc1, 0xa00000000, 0x2, 0x3e, 0x2c0, 0x32, 0x40, 0x316, 0x8001, 0x8000, 0x38, 0x2, 0xfffffffffffff000, 0x7fffffff, 0x8}, [{0x7, 0x5be6, 0x101, 0xfff, 0x7fffffff, 0xf62, 0x101, 0x400}], "cb3f22a9a35fb3bb6a9bdf45e2fb997587ba9d906ad11dd65efadd154b236462a1508f93ad2c38233a9b823e11e193a8245b63d3521ebaf59fbb1399c2fe8dfc12b41db1d6882c958dfa9a29ed2dbe7239c297624d6237c6b2c1da5cb830db3efeeecb1a001dd34b6e10228dc24a69d083f9dcd71ebc9f84f5ca95d7d4017b188f741972d9f0a7f6cf5a564a62e724c4254b310d01e2e47ba8bcbc8572fbfaa61791d5dbf97e3f", [[], [], []]}, 0x41f) fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64\x00', &(0x7f0000000100)='eth0selinux\x00', 0xc, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80000, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) [ 1244.333624] binder: 5056:5069 BC_INCREFS_DONE u0000000000000000 no match [ 1244.359312] binder: 5056:5069 Release 1 refcount change on invalid ref 1 ret -22 [ 1244.417334] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1244.470456] binder: 5056:5069 BC_ACQUIRE_DONE u0000000000000000 no match [ 1244.472165] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1244.592801] binder: 5063:5067 transaction failed 29201/-28, size 24-8 line 3255 [ 1244.594192] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1244.677995] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:48:15 executing program 3: r0 = socket(0x83ffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3800000010003b0e00000000000000000000004c", @ANYRES32=0x0, @ANYBLOB="00000000000800110016968f8d01000000", @ANYRES32=0x6, @ANYBLOB="100012000800010076746905040002058a45660e615d4ac332c692aaf874156f06242fc59890d35483f12e7bd7f92fb07564b2aed7876b751d0556d07fff25c7cd4dc2aafe53d5162d21ff699ff9cb8a8c9073fa5148b2cc1ff724f165b2dfc281192ee11e6d589242335201c8829b4174b4015dde00c468544f576a723ad03c9ee03934e7f6137f24c3e7115bfa66671fe88b059e7e8213ba2023432c9222"], 0x38}}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000002c0)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x2, 0x0, 0x7546, 0x3ff, 0x0, 0x0, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x65a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x8, 0x2, 0x0, 0x2, 0x0, 0x1f}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x2, &(0x7f00000000c0), 0x0) syz_execute_func(&(0x7f0000000100)="f3e100def9575cc3b7d991d6734e4e73224a460f30096ccc2e67660e50e94d00c9c966440f38082173294ad0d26c4507c422f18cf0bf420fae9972b571b99f01467785fb") truncate(&(0x7f0000000180)='./file0\x00', 0x100000000) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={'veth0_to_hsr\x00', {0x2, 0x4e20, @rand_addr=0xc33}}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x8, 0x3f, 0x2, 0x8, 0x28000000000}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012abd7000fbdbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="3c00020038000100240001006c625f73746aedd93fed84564e65730600000000000000616c000000000000000834659e5eb8a70ef400030003000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000005) [ 1244.733431] binder: 5056:5060 transaction failed 29201/-28, size 24-8 line 3255 [ 1244.733524] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space 03:48:15 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1244.815154] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1244.833485] kauditd_printk_skb: 377 callbacks suppressed [ 1244.833491] audit: type=1400 audit(2000000895.632:37300): avc: denied { map } for pid=5076 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1244.881561] binder: 5063:5067 transaction failed 29201/-28, size 24-8 line 3255 [ 1244.898520] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space 03:48:15 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000000140), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x4010, r3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1244.958667] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1244.987782] loop4: p1 p2 p3 p4[EZD] [ 1244.991914] loop4: p1 start 1 is beyond EOD, truncated [ 1245.007469] binder: 5077:5084 transaction failed 29201/-28, size 24-8 line 3255 [ 1245.022382] audit: type=1400 audit(2000000895.702:37302): avc: denied { map } for pid=5076 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1245.074180] loop4: p2 start 101 is beyond EOD, truncated [ 1245.110828] loop4: p3 start 201 is beyond EOD, truncated 03:48:15 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x18}, 0x10) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000280)=@can, &(0x7f0000000380)=0x80) setsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000480)="0f635d6455889f331ed4", 0xa) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) statfs(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=""/42) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RLOPEN(r3, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x2, 0x0, 0x3}, 0x9}}, 0x18) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1245.130353] audit: type=1400 audit(2000000895.702:37301): avc: denied { call } for pid=5077 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1245.142378] loop4: p4 start 301 is beyond EOD, truncated [ 1245.198751] audit: type=1400 audit(2000000895.702:37303): avc: denied { map } for pid=5076 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1245.246254] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1245.310953] audit: type=1400 audit(2000000895.752:37304): avc: denied { map } for pid=5076 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:48:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x105000, 0x10) write$P9_RWALK(r0, &(0x7f0000000080)={0x3d, 0x6f, 0x1, {0x4, [{0x1, 0x1, 0x8}, {0x4, 0x2, 0x7}, {0xc0, 0x3, 0x4}, {0x4, 0x2, 0x3}]}}, 0x3d) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1245.536524] audit: type=1400 audit(2000000895.762:37305): avc: denied { map } for pid=5076 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1245.714162] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space 03:48:16 executing program 3: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) unshare(0x62020600) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f00000002c0)) keyctl$get_security(0x11, r0, 0x0, 0x1b1) add_key(&(0x7f0000000040)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)="9436701d9a6a6e43f292095bd2a6d270546c4daff94bcbdcd7d5f9d4b3ad58e4d80b472bd913d48417b8f633791555ca562f43776f4add0801bc9801781e759fe5bb0cc26faede613ff89c47f4f315", 0x4f, r0) r3 = dup3(r1, r1, 0x80000) ioctl$KDGETLED(r3, 0x4b31, &(0x7f00000001c0)) renameat2(r3, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000240)='./file0\x00', 0x4) [ 1245.747036] audit: type=1400 audit(2000000895.872:37306): avc: denied { map } for pid=5076 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1245.798410] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1245.807303] binder: 5095:5113 BC_INCREFS_DONE u0000000000000000 no match [ 1245.839267] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1245.848462] binder: 5095:5106 transaction failed 29201/-28, size 24-8 line 3255 [ 1245.885639] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1245.915164] audit: type=1400 audit(2000000895.872:37307): avc: denied { map_create } for pid=5077 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 1245.945214] binder: 5100:5103 transaction failed 29201/-28, size 24-8 line 3255 [ 1245.984550] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1246.010768] binder: 5095:5106 BC_ACQUIRE_DONE u0000000000000000 no match [ 1246.038233] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1246.075234] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1246.083103] binder: 5104:5115 transaction failed 29201/-28, size 24-8 line 3255 [ 1246.095211] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1246.097062] audit: type=1400 audit(2000000895.892:37308): avc: denied { map } for pid=5076 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1246.135282] binder: 5100:5108 transaction failed 29201/-28, size 24-8 line 3255 03:48:17 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:17 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffded, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) 03:48:17 executing program 5: socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, 0x3c) r4 = open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003e40)) r5 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80004, 0x7) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r5, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x9, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) fcntl$setflags(r2, 0x2, 0xfffffffffffffffd) r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000380)=0x8, 0x4) sendto$inet6(r3, &(0x7f0000000280)="0604db4620ef7bcb26f390177aa17d94f21b1023befdb1fe7556773d583f79bac0bd376f10f765a9f9902bdd352787a6ea6d6d", 0x33, 0x40, &(0x7f00000002c0)={0xa, 0x4e21, 0x7fffffff, @dev={0xfe, 0x80, [], 0xc}, 0x10001}, 0x1c) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000140)=0x5, 0x4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000700000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 03:48:17 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x4000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x420, 0x108, 0x0, 0x108, 0x248, 0x108, 0x388, 0x388, 0x388, 0x388, 0x388, 0x4, &(0x7f00000002c0), {[{{@ip={@multicast2, @multicast2, 0xff, 0xffffffff, 'team_slave_1\x00', 'lo\x00', {}, {}, 0x1d, 0x0, 0x20}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@unspec=@time={0x38, 'time\x00', 0x0, {0x6, 0x7, 0xb9ff, 0x3961, 0x4, 0x3f, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x1e4, 0x5}, {0xffffffff00000001, 0xfffffffffffffff8, 0x8}, {0x1f, 0x3, 0x1ff}, 0xa30b, 0x32c2}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0xfffffffffffffff8, 0x4}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x2, 0x9a, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 'bridge0\x00', 0x9}}}, {{@uncond, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x1b, 0x10001, 0x7fffffff}}, @common=@socket0={0x20, 'socket\x00'}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x11, [0x3f, 0x7fff, 0x2, 0x7, 0x2, 0x2], 0x4, 0x4}, {0x9, [0x100000000, 0x9, 0x100000001, 0x6, 0x20, 0x800], 0x5f, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) setreuid(r0, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x400040) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)=0x9) syz_execute_func(&(0x7f0000000040)="f3e100def9575c8ac2c2c9734e424a2664f0ff064a460f3038082e67660e50e94d00c9c9c4625dbae5feabc4aba39ddf4507e50c420fae9972b571112d02") [ 1246.297066] audit: type=1400 audit(2000000895.892:37309): avc: denied { map } for pid=5090 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1246.306828] loop4: p1 p2 p3 p4[EZD] [ 1246.393953] loop4: p1 start 1 is beyond EOD, truncated [ 1246.399356] loop4: p2 start 101 is beyond EOD, truncated [ 1246.406583] loop4: p3 start 201 is beyond EOD, truncated [ 1246.412175] loop4: p4 start 301 is beyond EOD, truncated [ 1246.607404] loop4: p1 p2 p3 p4[EZD] [ 1246.611647] loop4: p1 start 1 is beyond EOD, truncated [ 1246.639419] loop4: p2 start 101 is beyond EOD, truncated [ 1246.664423] loop4: p3 start 201 is beyond EOD, truncated [ 1246.691294] loop4: p4 start 301 is beyond EOD, truncated 03:48:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) geteuid() ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000140)=0x6, 0x4) syz_read_part_table(0x1, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="0090006b7f040000006c4c00000000000000000000000000e0f51532000000000220880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) 03:48:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 03:48:17 executing program 0: setpriority(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = getpid() r4 = getpgrp(0xffffffffffffffff) sendmsg$netlink(r2, &(0x7f0000001900)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0xa000002}, 0xc, &(0x7f0000000100)=[{&(0x7f00000001c0)={0x1678, 0x23, 0x200, 0x70bd27, 0x25dfdbfd, "", [@typed={0x14, 0x3c, @ipv6=@mcast1}, @typed={0x14, 0x7d, @str='selinuxselinux\x00'}, @nested={0x104c, 0x3a, [@typed={0x14, 0x15, @ipv6=@rand_addr="21bb055506bff8b8def16fe01b1c1ba8"}, @typed={0xc, 0x83, @u64=0x3}, @typed={0x14, 0x77, @str='nodev^procM^/\x00'}, @generic="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", @typed={0x14, 0x64, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @typed={0xc, 0x54, @u64=0x833}, @nested={0x26c, 0xa, [@generic="82ef94b8abd66541a15084bcdb711ba65a7c31a4576606f0d2f097d455d9541d4c81b6a6017e805337a9b0967f5b", @typed={0xc, 0x2f, @u64=0x3}, @typed={0x8, 0x24, @fd=r1}, @generic="d1d85858d6470c91eaf047dfe349d4512c3dc603b0a5abcb9711a0a28606d6cd90d9f237d0cb07ee71f0e067f0052a2b2bf48cfd09b912d31ca3efbbb4e49d91ced2f30d114b5fbc319cb93872485c35e6992fb956a5e0eb799684a3350ced9f4f67df238a6ecd2e96fb6e036e182c4a099f3f158f4de9e6fffdcb332c06b53027b225a6a0cfbdedd7ca36658369c50aced39cc9a83697131735a27ec76154a31e68d31fc2c3d1d4c3733b5a213fa3125698892ae52237e76462c641e8ec74940fc53a1684092c1a1fc1b66252fc30612dafa8884ccdbc3930ad3148f8b6a38490527cfef211220615561a", @typed={0x8, 0x28, @u32=0x1b6}, @typed={0x8, 0x3c, @ipv4=@multicast1}, @generic="d8ae8da44b3f3c9858f66182005e5aa08a8b3db4180914376d324638042d0217c75a53a19ae2320ef368ac757d1ffb9c36bec475647001452f1d90e7796025c7072c1e65660a3ef23bf9fdfcf9f827c387e000ea2315757a62f8a9d144cb504b2e38c438cfc65898624f33b2ac4c59cf22230fe859018fc381792ef1cd030dcbcb5176bd69406ab0fd4267a7f67bc9915bb5f02ff26959749053fa7b382ca4eb71005efffc88f2e4b7684678530282", @generic="347ebf0d67f38b5adcc4340d2a9eb77e3f273a45c28df476074df1963acb28639455c6168d1288ba6b6ba590661edddc47c5ed85889a011df1c1561f2b55412c8cea5f5be743b2ee7b6765512a997229390285af41b4f9f44865fd7d8dd15aae14ce469cc4f874ca1107dc7d90fef8f1912e8608a0e98d4687648586"]}, @generic="46dba7d94492c88d4ef2cbbc6d00dfe437867c0e81950c3d", @typed={0x8, 0x62, @fd=r0}, @typed={0x4, 0x7f}, @nested={0x318, 0x30, [@generic="96e85ccfdb4b3ea594e9725586037eb33bcac0028affee832cbab80d7638abe0d62a6fbb0d2aa107d23982f15079f25637fb2d15ed63774f9e400dbf0c512018171d81f6a3940cea28414c968bd0e6213018db367fa296eb587193ca706b111ef32a9b82b26c2df076ea3f1a1da81dae8311955ec917be8c205ce6258413a23da47d537f5a0f274128a702d53db48427f4eec87d87ae2a036e3ddb3b18608a9c388efc396b22eff9435079340acd6f2997ad92111066ca76fdf2a71c525ed499b7c1ac29398ae42a8c303b09447a76a88df9fe330f4f471ec112e783e565e932fdf334519c17ce5010a52674d78b62", @generic="644f0be81aecd84f062c1653339ea7149df183d7ed482fd4d4fe6200877a075e42b071762e70b487511fca0423794f71898477ef70efc95cd749f5ef98d1a7de578e217335e0f90d3380ed4a711a19bfdb2eff1079ecc90038b791501c71634556452e725a64828b907f49381d40f1533bea1fd9a425afd9eac2bb3e6e1ee9bf7b11401bad98a1742da7c11423e640dfc6868ebc811700b1af", @generic="3f4628167db27f57971926e00f484d91b60608bc6bfdfc46bc91f7f998b8004d6eb53af00c3c60a568b28738c78181fb63a9f5bf102766d77d588986ac1288f8ef3bb7949df3ef270f6dc48e4e2cca9a9aa1fdce258b1d6fab2e61730163eb4bb613cc701c6e5422c610040a996edad508ef47c548791e5284dee44c191833f2d0c49d9f052f1f0adf8d31bd1b5c62e8866b2220a41d574abac13841d644ea8771235934a80f01857006fb06b8d4b252aa59866845f368d1b42bf0c4a0", @typed={0x14, 0x1a, @ipv6=@mcast2}, @generic="2a34110940b259c01432916d18ef4df5e01783c8eb580bb255c6ea0d5dd1e068e760fa671e4549597b893ce2237fd124657e20b46a5be16ef5b4ea060b1f580d70bc31c1d65663a90d20468b41c05b72769b1934b2e71fe4f3eaa0933214028bc40923116b61dfd673bea98e96de9cc752e5299eaae7bb8a1ed93f24639eb46fab", @typed={0x10, 0x72, @str='eth1cpuset\x00'}, @typed={0x28, 0x4d, @str='!-lotrustedvmnet0@md5sumsystemem0^/\x00'}]}, @generic="b903346cbe6cc75fd6d99014642153b36d9f687bd320c5bca9d4ba6e168e864527d0d681ab227b905f15c815f2ebb751dc82bd8c7bf7f1b6d889d0f80fcabf"]}, 0x1678}, {&(0x7f0000001840)={0x50, 0x16, 0x10, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0x6b, @ipv4=@multicast1}, @typed={0x8, 0x3f, @pid=r3}, @typed={0x8, 0x5e, @pid=r4}, @generic='\rN', @typed={0x14, 0x92, @ipv6=@mcast2}, @typed={0x10, 0x36, @str='^({nodev\x00'}]}, 0x50}], 0x2, &(0x7f00000018c0), 0x0, 0x8010}, 0x880) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r5, 0x0) [ 1247.096782] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1247.145605] binder: 5128:5150 BC_INCREFS_DONE u0000000000000000 no match [ 1247.183714] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1247.257949] binder: 5128:5147 transaction failed 29201/-28, size 24-8 line 3255 03:48:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c86035e00000014c332ae8aa830ce80763e0f5b79f138e927217827836cb1d9b895870007", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100697036746e6c00000c0002000800040000000000"], 0x3c}}, 0x0) [ 1247.371424] binder: 5128:5147 BC_ACQUIRE_DONE u0000000000000000 no match 03:48:18 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1247.657548] loop4: p1 p2 p3 p4[EZD] [ 1247.661939] loop4: p1 start 1 is beyond EOD, truncated [ 1247.731918] loop4: p2 start 101 is beyond EOD, truncated 03:48:18 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="74c6840cbf879c83c258de4b90bdc53f2ccc68762ca9bca157a179f993d3d3daba1020f66aa2e937c40fc65ca80c9ac4c29b25841fe958d1c59a618fa98168a15f53766e4598dcbe9549b9b95e584e8808de6553f625a9cf45b91b5d86f0439a662dae88c2f9cfe2ea0166b76a9fbbec826fbc710a831c5409"], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1247.780075] loop4: p3 start 201 is beyond EOD, truncated 03:48:18 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x2002, 0x0) ioctl$RTC_WIE_ON(r2, 0x700f) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$RTC_WIE_ON(r2, 0x700f) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1247.832333] loop4: p4 start 301 is beyond EOD, truncated 03:48:18 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x26e1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x521a0000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x68, r3, 0x8, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0xfd, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x4000) write$cgroup_int(r2, &(0x7f0000000140), 0xffffff35) 03:48:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x121200, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000100)) getsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400000, 0x40) open(&(0x7f0000000140)='./file0\x00', 0x80000, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000180)=0x5, 0x4) [ 1248.359739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5177 comm=syz-executor.3 03:48:19 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000040)="7ab5") write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$UHID_DESTROY(r1, &(0x7f0000000100), 0x4) [ 1248.761977] binder: 5180:5190 unknown command 210028148 [ 1248.789750] binder: BINDER_SET_CONTEXT_MGR already set [ 1248.804919] binder: 5180:5190 ioctl c0306201 20000140 returned -22 [ 1248.812227] binder: 5176:5186 ioctl 40046207 0 returned -16 [ 1248.838182] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1248.883064] binder: 5176:5186 BC_INCREFS_DONE u0000000000000000 no match [ 1248.906441] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1248.946619] binder: 5176:5196 Release 1 refcount change on invalid ref 1 ret -22 [ 1248.968743] binder: 5176:5191 transaction failed 29201/-28, size 24-8 line 3255 [ 1248.968760] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1249.035359] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1249.059225] binder: 5176:5191 BC_ACQUIRE_DONE u0000000000000000 no match [ 1249.100898] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1249.111299] binder: 5180:5193 transaction failed 29201/-28, size 24-8 line 3255 [ 1249.120576] loop4: p1 p2 p3 p4[EZD] [ 1249.124852] loop4: p1 start 1 is beyond EOD, truncated [ 1249.135286] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:48:20 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1249.156644] loop4: p2 start 101 is beyond EOD, truncated [ 1249.191055] binder: 5183:5192 transaction failed 29201/-28, size 24-8 line 3255 [ 1249.201351] loop4: p3 start 201 is beyond EOD, truncated [ 1249.239179] binder: 5180:5188 unknown command 210028148 [ 1249.270235] binder: 5180:5188 ioctl c0306201 20000140 returned -22 [ 1249.282544] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1249.294811] loop4: p4 start 301 is beyond EOD, truncated 03:48:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, 0x0, 0x0, 0x80000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001e80)={0x0, @rand_addr, @multicast2}, &(0x7f0000001ec0)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r3, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000300)) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000340)={0x6, {{0xa, 0x4e23, 0x5, @local, 0x7fffffff}}}, 0x88) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@local}, &(0x7f0000000240)=0x14) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000002c0)={0x20000018}) [ 1249.347444] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1249.402514] binder: 5180:5193 transaction failed 29201/-28, size 24-8 line 3255 [ 1249.405063] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space 03:48:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x209e1e, 0x0, 0x1}, 0x2c) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 1249.475722] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:48:20 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) timer_create(0x7, &(0x7f0000000040)={0x0, 0x7, 0x6}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000002c0)={{r3, r4+10000000}, {0x77359400}}, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) 03:48:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000100)={0x0, 0x8, 0x8, 0x0, 0x40}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x100, 0x3, 0x0, 0xffffffff80000000, 0x9}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x1ff) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@rand_addr=0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x6, [@rand_addr=0xff, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x9, @multicast1, @loopback]}, 0x28) [ 1249.550676] binder: 5183:5208 transaction failed 29201/-28, size 24-8 line 3255 03:48:20 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0089eb0bcef900000000e9ff00"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1249.834540] kauditd_printk_skb: 278 callbacks suppressed [ 1249.834548] audit: type=1400 audit(2000000900.642:37588): avc: denied { map } for pid=5194 comm="getty" path="/lib/x86_64-linux-gnu/libnss_nis-2.13.so" dev="sda1" ino=2672 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1249.980755] audit: type=1400 audit(2000000900.642:37589): avc: denied { map } for pid=5211 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1250.120441] audit: type=1400 audit(2000000900.672:37590): avc: denied { map } for pid=5194 comm="getty" path="/lib/x86_64-linux-gnu/libnss_files-2.13.so" dev="sda1" ino=2714 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:48:21 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x100000000005, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000300)=""/247, &(0x7f0000000440)=0x462) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) [ 1250.333275] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1250.350327] loop4: p1 p2 p3 p4[EZD] [ 1250.360398] audit: type=1400 audit(2000000900.692:37591): avc: denied { map } for pid=5211 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1250.374872] loop4: p1 start 1 is beyond EOD, [ 1250.387894] binder: 5212:5238 BC_INCREFS_DONE u0000000000000000 no match [ 1250.436905] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1250.478183] truncated [ 1250.492913] loop4: p2 start 101 is beyond EOD, truncated [ 1250.508175] binder: 5212:5238 BC_ACQUIRE_DONE u0000000000000000 no match [ 1250.517504] binder: 5212:5234 transaction failed 29201/-28, size 24-8 line 3255 [ 1250.517716] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1250.541915] audit: type=1400 audit(2000000900.712:37592): avc: denied { map } for pid=5194 comm="getty" path="/lib/x86_64-linux-gnu/libnss_files-2.13.so" dev="sda1" ino=2714 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1250.550712] loop4: p3 start 201 is beyond EOD, [ 1250.582281] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:48:21 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xfff, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1250.654510] binder: 5221:5236 transaction failed 29201/-28, size 24-8 line 3255 [ 1250.655352] truncated 03:48:21 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1250.684304] audit: type=1400 audit(2000000900.712:37593): avc: denied { map } for pid=5194 comm="getty" path="/etc/group" dev="sda1" ino=2218 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1250.744028] loop4: p4 start 301 is beyond EOD, truncated [ 1250.796195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1250.834268] audit: audit_backlog=65 > audit_backlog_limit=64 03:48:21 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r3 = open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) getsockopt$packet_int(r3, 0x107, 0x1f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1250.845514] audit: audit_lost=378 audit_rate_limit=0 audit_backlog_limit=64 [ 1250.852853] audit: audit_backlog=65 > audit_backlog_limit=64 03:48:21 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r1 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000100)) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) write$P9_RREAD(r2, &(0x7f0000000040)={0x22, 0x75, 0x1, {0x17, "9823c0075955d52c763ad57edbc9189c7f76c1ae68a660"}}, 0x22) pipe(&(0x7f0000000080)) 03:48:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002100190000003fffffffda260200000000e80001040000040d001400ea1100000025000000", 0x29}], 0x1) r1 = accept(r0, &(0x7f0000000080)=@generic, &(0x7f0000000000)=0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 03:48:22 executing program 3: syz_execute_func(&(0x7f0000000a80)="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") r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@empty, 0x62, 0x0, 0x2, 0xe, 0x5, 0x8}, 0x20) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/92) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x4e22, @multicast2}, {0x307, @local}, 0x1a, {0x2, 0x4e23, @local}, 'veth0_to_bridge\x00'}) ioctl$RTC_PIE_OFF(r1, 0x7006) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) get_thread_area(&(0x7f0000000080)={0x9, 0x0, 0x1400, 0x80000000, 0x1, 0x1ff, 0x1, 0x3353, 0x2, 0x6}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) [ 1251.410236] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1251.477619] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1251.526295] binder: 5253:5261 transaction failed 29201/-28, size 24-8 line 3255 [ 1251.632974] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1251.670365] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:48:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/236) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="3100000013000700690006007a000010ab008048100000004600010700000054090003c0253a65a3000000000000000000", 0x31}], 0x1) [ 1251.698604] loop4: p1 p2 p3 p4[EZD] [ 1251.703280] loop4: p1 start 1 is beyond EOD, truncated [ 1251.714533] binder: 5253:5261 transaction failed 29201/-28, size 24-8 line 3255 [ 1251.728762] binder: BINDER_SET_CONTEXT_MGR already set [ 1251.731471] loop4: p2 start 101 is beyond EOD, truncated [ 1251.748150] binder: 5255:5263 ioctl 40046207 0 returned -16 [ 1251.762302] loop4: p3 start 201 is beyond EOD, truncated 03:48:22 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) [ 1251.806083] loop4: p4 start 301 is beyond EOD, truncated [ 1251.823441] binder: 5255:5263 Release 1 refcount change on invalid ref 1 ret -22 [ 1251.837052] binder: 5255:5259 BC_INCREFS_DONE u0000000000000000 no match [ 1251.888496] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space 03:48:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x5e7, 0x0, 0x4e, 0xfffffffffffffffa, 0x2, "cf30e1781dee90e1e3a8a65df5102c4704d53b", 0xffff, 0x79}) r2 = gettid() setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) fcntl$setstatus(r1, 0x4, 0x42803) [ 1251.965981] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1251.976108] binder: 5255:5280 BC_ACQUIRE_DONE u0000000000000000 no match [ 1252.031785] binder: 5260:5267 transaction failed 29201/-28, size 24-8 line 3255 03:48:22 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:23 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r2 = open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 03:48:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000408912, &(0x7f0000000180)="0adc1f123c123f319bd070") ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000000040)="bb50a488e9b311275059a5a1e38da2f1859432966d2efb506977b5857f63fe42db1c6651b01c68dcfeaf33b317e055823b6331463357c4e387dc761b9080b4cc5a84b7c3b54e3511ce9047a7c523a4032a25733f712a95b321d139cc9c2f8d09887dc49df83d18111a2ef37312d7e780f5dae1c54ee4683d2de7232b8c295172538c4324ed3ec8d7bd762b5e767ec57ee490aa32b6d70c723e7085ac8b750f220422674c179232eaeda66614a425b92ef5d508") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000100)={'vxcan1\x00', 0x1000}) [ 1252.249628] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. 03:48:23 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) [ 1252.702406] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1252.747357] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1252.768560] loop4: p1 p2 p3 p4[EZD] [ 1252.777264] loop4: p1 start 1 is beyond EOD, truncated [ 1252.811460] binder: 5284:5288 transaction failed 29201/-28, size 24-8 line 3255 03:48:23 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) futimesat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) bind$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0/file0\x00'}, 0x6e) open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) [ 1252.812310] loop4: p2 start 101 is beyond EOD, truncated [ 1252.896346] loop4: p3 start 201 is beyond EOD, truncated [ 1252.935015] loop4: p4 start 301 is beyond EOD, truncated 03:48:23 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0xffffffffffffffc0, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1253.057673] binder: BINDER_SET_CONTEXT_MGR already set [ 1253.129297] binder: 5293:5310 Release 1 refcount change on invalid ref 1 ret -22 [ 1253.182730] binder: 5293:5304 ioctl 40046207 0 returned -16 03:48:24 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) tee(r1, r0, 0x2, 0x2) writev(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)="4dd16260a18eb69b5343387c62261ba59776bc86cd62f4297421c56bac773c0d5071225451157967580d7b1bd1027f16947b5f08ca8e0a39ec224902a196e040a1fb4088321800e89f01729c8258e0d124d65957f0ae1ea78293d940ccfb354155c0c615b934137877bd870a3515a61ec0ae03adce6bfaaafc15f6f713aaba99f1241e6023e500bc6efe4e77e0", 0x8d}, {&(0x7f0000000580)="046c3c80b16236496e3384bb6500de62c63143c1ae963733c2f58c8e38cb6f4713d9624e7b56816077359707969afb5505335bbf9a9610674ec5e2f6cbcda2c95fb9f840fcea5ca8b4ce2951655f967c1f0e3dcd15d9df281cbd62fc30a23c46afa90df7138396f7bb7c865f167d707c26130c80df13861ef486f6dd7288dd8b2167f8178120a9697a18fddfbc7f6fc7ac64268f9773e5e1b902dae31728632d7aa7e221b5a9aaf018edcb07b8972a8673b88d0e058e005cc2d0a9c703562076d6c9561bef85829862aacb3dce28864f05a1734dad2c39b77482f176f4a592f9", 0xe0}], 0x2) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='./file0\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1253.537829] loop4: p1 p2 p3 p4[EZD] 03:48:24 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1253.564747] loop4: p1 start 1 is beyond EOD, truncated [ 1253.624814] loop4: p2 start 101 is beyond EOD, truncated [ 1253.652238] loop4: p3 start 201 is beyond EOD, truncated [ 1253.689261] loop4: p4 start 301 is beyond EOD, truncated 03:48:24 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80000, 0x0) readahead(r0, 0x7f, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) 03:48:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x44000) ftruncate(r1, 0x1) [ 1254.090168] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1254.126045] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1254.188577] binder: 5326:5332 transaction failed 29201/-28, size 24-8 line 3255 [ 1254.402685] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1254.451056] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1254.480205] loop4: p1 p2 p3 p4[EZD] [ 1254.485642] loop4: p1 start 1 is beyond EOD, truncated [ 1254.502821] binder: 5326:5330 transaction failed 29201/-28, size 24-8 line 3255 [ 1254.513724] loop4: p2 start 101 is beyond EOD, truncated [ 1254.540068] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1254.553274] loop4: p3 start 201 is beyond EOD, truncated [ 1254.569815] binder: BINDER_SET_CONTEXT_MGR already set [ 1254.578811] loop4: p4 start 301 is beyond EOD, truncated 03:48:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x7c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x72010000, 0x700000000000000}, @random="d6de8e219d55", [], {@ipv6={0x86dd, {0x0, 0x6, "08de06", 0x38, 0x3a, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x3a, 0x0, @loopback, @loopback, [], "fca967e17f791010"}}}}}}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1254.597301] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1254.609047] binder: 5333:5347 BC_INCREFS_DONE u0000000000000000 no match [ 1254.620635] binder: 5333:5336 ioctl 40046207 0 returned -16 [ 1254.648463] binder: 5333:5347 Release 1 refcount change on invalid ref 1 ret -22 [ 1254.657653] binder: 5331:5334 transaction failed 29201/-28, size 24-8 line 3255 [ 1254.817627] binder: 5333:5349 BC_ACQUIRE_DONE u0000000000000000 no match [ 1254.848871] kauditd_printk_skb: 220 callbacks suppressed [ 1254.848880] audit: type=1400 audit(2000000905.652:37809): avc: denied { map } for pid=5348 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1254.927866] loop4: p1 p2 p3 p4[EZD] [ 1254.932479] loop4: p1 start 1 is beyond EOD, truncated [ 1254.965163] loop4: p2 start 101 is beyond EOD, truncated [ 1254.976415] audit: type=1400 audit(2000000905.692:37810): avc: denied { map } for pid=5348 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1255.020928] loop4: p3 start 201 is beyond EOD, truncated [ 1255.041207] loop4: p4 start 301 is beyond EOD, truncated [ 1255.098452] audit: type=1400 audit(2000000905.712:37811): avc: denied { map } for pid=5351 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1255.174223] audit: type=1400 audit(2000000905.712:37812): avc: denied { map } for pid=5348 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1255.207243] audit: type=1400 audit(2000000905.722:37813): avc: denied { map } for pid=5351 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1255.288062] audit: type=1400 audit(2000000905.722:37814): avc: denied { map } for pid=5348 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:48:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr="94876c3ae5747253eef9342a4c3ebe1f"}, 0x1c) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000440)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000500)={0x0, 0x8001, 0x5c}) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c) read(r2, &(0x7f00000005c0)=""/147, 0x93) getpgid(0xffffffffffffffff) sendmmsg(r5, &(0x7f0000007e00), 0x26e, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000007c0)='ip6tnl0\x00', 0x10) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getpeername$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0xfffffffffffffffe) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x3041040, &(0x7f0000000300)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303030303030303030303231302c6d6f64653d3030303030303030303030303030303030303030cb549501462e545a83c4370ea53030362c6d6f64653d30303030303030303030303030303030303030303030342c66756e633d5041", @ANYRESDEC=r6, @ANYBLOB=',dont_hash,subj_type={em0,smackfshat=TIPCv2\x00,\x00']) 03:48:26 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x3f, 0x9}) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1255.325384] audit: type=1400 audit(2000000905.752:37815): avc: denied { map } for pid=5348 comm="modprobe" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1255.350944] audit: type=1400 audit(2000000905.752:37816): avc: denied { map } for pid=5351 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:48:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000500)={0x3, 0x388e, 0x3, 0x8, 0xe, 0x6, 0x0, 0x792, 0x3ff, 0xd32, 0x7, 0x2}) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ftruncate(r2, 0x80000001) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYRES64=r3, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62071add7800", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x8f, 0x0, &(0x7f0000000600)="c8f655626f3ab9439c934e25574a38135702abf4a8b55c046ba6e632ecf22901fb3860bd3bf886289cc03f6b4f05efa867087cb0c9c8fbdb1edaa79cd3ff6fa7928652722e49c4a098050000000000000048105e2d9757a02d2557dff25100000000b6d9afe301c35e5c48ba6cef365e6f87a0c63a874e1b67f20b868b936150eaffbc2105b0380a874742cdc5fd4e"}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f00000004c0)={0x9, 0x27de24ab}) r5 = creat(&(0x7f0000000380)='./file0\x00', 0x100) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x40, 0x0) linkat(r6, &(0x7f0000000080)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x1000) 03:48:26 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0xfffffffffffffffe, 0x3) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f00000000c0)={0x2, 0x6, 0x2, 0x9, 0x5, 0x1000}) 03:48:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c12") socket$inet6(0xa, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) preadv(r1, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000200)=""/193) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x8, 0x800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) mount$bpf(0x0, &(0x7f00000003c0)='./control\x00', &(0x7f0000000400)='bpf\x00', 0x4000, &(0x7f0000000440)={[{@mode={'mode'}}, {@mode={'mode'}}, {@mode={'mode'}}]}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a0f, 0x1700) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, 0x0, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000100)) capset(&(0x7f0000000580), 0x0) open(0x0, 0xc40beb2474dfd22a, 0xf6ffffff) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 1255.505943] audit: type=1400 audit(2000000905.762:37817): avc: denied { map } for pid=5348 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1255.638958] audit: type=1400 audit(2000000905.762:37818): avc: denied { map } for pid=5351 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1255.860362] binder: 5362:5364 unknown command 6 [ 1255.890989] binder: 5362:5364 ioctl c0306201 20000440 returned -22 [ 1255.927725] loop4: p1 p2 p3 p4[EZD] [ 1255.932560] loop4: p1 start 1 is beyond EOD, truncated [ 1255.965490] loop4: p2 start 101 is beyond EOD, truncated [ 1255.998264] loop4: p3 start 201 is beyond EOD, truncated [ 1256.029384] loop4: p4 start 301 is beyond EOD, truncated [ 1256.114722] binder: BINDER_SET_CONTEXT_MGR already set [ 1256.136192] binder: 5361:5363 ioctl 40046207 0 returned -16 [ 1256.142971] binder: 5361:5383 ioctl c0306201 0 returned -14 [ 1256.218749] binder: 5361:5387 BC_INCREFS_DONE u0000000000000000 no match [ 1256.238152] loop4: p1 p2 p3 p4[EZD] [ 1256.240841] binder: 5361:5363 Release 1 refcount change on invalid ref 1 ret -22 [ 1256.252993] loop4: p1 start 1 is beyond EOD, truncated [ 1256.299614] loop4: p2 start 101 is beyond EOD, truncated [ 1256.345640] loop4: p3 start 201 is beyond EOD, truncated [ 1256.348861] binder: 5361:5387 BC_ACQUIRE_DONE u0000000000000000 no match [ 1256.408103] loop4: p4 start 301 is beyond EOD, truncated 03:48:27 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1256.465381] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space 03:48:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d88b7cb6b7f53d9aad91fdc29bc2094f7b047357ab55e04bdeeca97196b92a98296138fedf2cc21e3c66ad4c635d1e8f5af4252b399e61204b32a97d67cc2ad5e2e9cf7057753f52fca2b575cebdd0e3831ff505464d5ef9b2059d40388c9ab4100b76149967e5f79158d54a14ed6cb70232fe82335fe819b681883fe081fea410858b6b2d169549ae3f96a3df08a93b011222c3c3f7f9da51745083263799116e0f8b53ea2a653a8d7310ab11415698", 0xb0, 0xffffffffffffffff) r3 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='/selinux/policy\x00', 0xfffffffffffffffd) keyctl$reject(0x13, r2, 0x3, 0xefe0, r3) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e5153200000000000127008e030c006500000064000000c90000006400000000043200552020002d010000d306000055aa00"/88, 0x58, 0x1a0}]) [ 1256.539733] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1256.615001] binder: 5360:5367 transaction failed 29201/-28, size 24-8 line 3255 03:48:27 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x59e3c8d1e32fd902, 0x5) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="b8b21a85d6eed412a68ebe4586e9d17b7e650c852a627300000000654083f70d555290963175a075559a09afd1cdc1873f9cf9096721bac39b0b7ee063d9e126b4ea037379323eea20ae2d7a90266cb215a86e558347075b87f5151638ececc9c292810df02256a7d437056c7635ae91fae46d47382af8aaa621d6dc9b272e63e9cd1ec6c22840afa156add839ed9dee31b3e26bad0c289e913854b6360b784e24afc5fb8612f0f2e5d617cdb9b99a6b1ead29fd4eb387d903fec5507fc53f33e3763206f5a57372", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 03:48:27 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) clone(0x80002000, &(0x7f0000000480)="ce3218e5012bee3a5291dfa3811478a05e36f2fe42fbdaf02b69607e8d0f2185391454c1bf98644044c9c144d02ebe517bc9d7c4ac67fd1f0b3b1d913ac9a7aff4f91d39129e2b978a67437c3bda64fce350902c6a1fc7ac016be6fd5612047bbcd038bad1442d1f7ab077be885f91a5b67b11f7f06d3f792b0cad224c694711483df9f225f3f3d25f50f797e4a17884e86a9464f0bc299a4ce9286c59072d4f466949a0c82f12f03deb759064edca292a820b881895118f1096f48b56658e99efdb05e6eb622efe5d07c5b0fea28fd759d6ba8b", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000580)="b3371f6921c2f2e3ab680c6b98719db72d39272ff47cc86b2405e57fa2820616d2063b9d03717475f3030f0c63f043b5ddeac66f0f795a067114bd3e4a0ac37391ff93e172bd3b15b8df569475f844486b5ae3cf3931e1ad23bf219c3fc3de2a4b1cdad473e190763912ef5047939235cb011385370b85938bc1cdb17708d7622316846f65125d1ce51eec8df3387dddfd424f611f4adfb484c78e1d417fe6621744c623dfa9cab90e7dbdec98239b7e96b29455385b701344765ab0608fb411cb9ffc878c08810199345c60ccda032158cf330600a4004eb610db271aa2413a02") ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) 03:48:28 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0xe, 0x0, &(0x7f00000000c0)=0xfffffffffffffd5a) [ 1257.465686] binder: BINDER_SET_CONTEXT_MGR already set [ 1257.471022] binder: 5397:5406 ioctl 40046207 0 returned -16 [ 1257.554109] binder: 5397:5403 ioctl c0306201 0 returned -14 [ 1257.560793] binder: 5397:5406 BC_INCREFS_DONE u0000000000000000 no match [ 1257.649792] binder: 5397:5403 Release 1 refcount change on invalid ref 1 ret -22 03:48:28 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018deffffff0000000800000000000000154b01f1f3655677e8e90c5b35629b668192bfb847c634ebd735a2689759985a6cd64569432519a19442a6a1b318bb", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1257.797001] binder: 5397:5423 BC_ACQUIRE_DONE u0000000000000000 no match [ 1257.825050] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1257.887521] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1257.943180] binder: 5413:5418 transaction failed 29201/-28, size 24-8 line 3255 [ 1259.924463] kauditd_printk_skb: 289 callbacks suppressed [ 1259.924480] audit: type=1400 audit(2000000910.732:38108): avc: denied { map } for pid=5445 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1259.983808] audit: type=1400 audit(2000000910.762:38109): avc: denied { map } for pid=5445 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1260.025950] audit: type=1400 audit(2000000910.762:38110): avc: denied { map } for pid=5445 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1260.049981] audit: type=1400 audit(2000000910.762:38111): avc: denied { map } for pid=5445 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1260.075995] audit: type=1400 audit(2000000910.772:38112): avc: denied { map } for pid=5445 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1260.123730] audit: type=1400 audit(2000000910.772:38113): avc: denied { map } for pid=5445 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1260.176275] audit: type=1400 audit(2000000910.772:38114): avc: denied { map } for pid=5445 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1260.224586] audit: type=1400 audit(2000000910.782:38115): avc: denied { map } for pid=5445 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1260.283815] audit: type=1400 audit(2000000910.782:38116): avc: denied { map } for pid=5445 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1260.344019] audit: type=1400 audit(2000000910.812:38117): avc: denied { map } for pid=5445 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:48:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:48:32 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:32 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20000, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) 03:48:32 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CLR_FD(r0, 0x4c01) finit_module(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00', 0x0) 03:48:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f0000000040)={0x7ff, 0x12, 0x1, 0xffffffffffffff9c}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x6) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c630100"], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) 03:48:32 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r3 = open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4828200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getanyicast={0x14, 0x3e, 0x0, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1261.697570] loop4: p1 p2 p3 p4[EZD] [ 1261.705260] loop4: p1 start 1 is beyond EOD, truncated [ 1261.726178] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1261.734147] loop4: p2 start 101 is beyond EOD, truncated [ 1261.761584] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1261.767485] loop4: p3 start 201 is beyond EOD, truncated [ 1261.794683] binder: 5457:5464 transaction failed 29201/-28, size 24-8 line 3255 [ 1261.823574] loop4: p4 start 301 is beyond EOD, truncated 03:48:32 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) fstatfs(0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x1910824, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:48:32 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x3, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000140)={0x5, 0x7, 0x800, 0x4, 0xfff}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() rt_sigpending(&(0x7f00000000c0), 0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x13f, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="028658fe01e5ffffff000000"], 0xae, 0x0, &(0x7f0000000480)="64660253c8969a8497832c5eb38399995582cc1814f7fb3457be5739a612a0df3becb5f8ae0f1d2412b7d5f8dbbb1e4b15492f3278fc9749207d34d7f93efcbaf3f4f5580b82c927826ccc47a99ba339218595db931431e47cc7bb6304fb73ef6f60a14317bede3d51225d6ac800bd11d6200838df8d334ff9b08c7d07e798d9c8f2bd44a5787bd56ea9e570f9b22252be1efa6c674a95cb05e2bc2deda9e3541b4029af50b47a5c7487b3bcc6f5"}) 03:48:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0xcd, 0x1}) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) [ 1262.034138] binder: BINDER_SET_CONTEXT_MGR already set 03:48:32 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1262.055163] binder: 5453:5473 ioctl 40046207 0 returned -16 [ 1262.079240] binder: 5453:5473 ioctl c0306201 0 returned -14 [ 1262.102544] binder: 5453:5473 BC_INCREFS_DONE u0000000000000000 no match [ 1262.184772] binder: 5453:5462 Release 1 refcount change on invalid ref 1 ret -22 [ 1262.248615] binder: 5453:5473 BC_ACQUIRE_DONE u0000000000000000 no match 03:48:33 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:33 executing program 0: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x362) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x73, 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x80000, 0x140) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000100)={'ipvs\x00'}, 0x0) creat(&(0x7f0000000480)='./bus\x00', 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000080)=0xc58, 0x4) ftruncate(r0, 0xfffffffffffffff9) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) r3 = dup(r2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000000c0)={0x800000000000009}, 0x4) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, 0x0, 0x8000fffffffb) 03:48:33 executing program 3: mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='posix_acl_accesswlan0keyring/nodev#*md5sumcgroup\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x2000203a, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) write$ppp(r0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80000, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) [ 1262.640393] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1262.704073] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1262.728210] loop4: p1 p2 p3 p4[EZD] [ 1262.735534] loop4: p1 start 1 is beyond EOD, truncated [ 1262.752175] binder: 5482:5490 transaction failed 29201/-28, size 24-8 line 3255 [ 1262.788996] loop4: p2 start 101 is beyond EOD, truncated [ 1262.820370] loop4: p3 start 201 is beyond EOD, truncated [ 1262.822207] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1262.847694] loop4: p4 start 301 is beyond EOD, truncated 03:48:33 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000100)=""/118) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x9) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1262.878912] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1262.897855] binder: 5482:5490 transaction failed 29201/-28, size 24-8 line 3255 03:48:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2ed, 0x0, &(0x7f0000000080), 0x48, 0x0, &(0x7f0000000480)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="e524deec67d56678d5e1ac"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000280), 0x12) getsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000080)={@multicast2, @local, @multicast1}, &(0x7f0000000140)=0xc) 03:48:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) 03:48:34 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x100, 0x209e20, 0x8000000001, 0x1}, 0x2c) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x9, 0x0, 0x77fffb, 0x0, 0x10020000000, r0, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) accept4$inet(r2, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10, 0x800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000300)={r3, 0x1, 0x6, @dev={[], 0x10}}, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0xafd, 0x4, 0x7fff, 0xf, r1, 0x7e9, [], 0x0, r4, 0x4ebaa6fb, 0x4481}, 0x3c) [ 1263.413589] binder: BINDER_SET_CONTEXT_MGR already set [ 1263.424865] binder: 5499:5506 ioctl 40046207 0 returned -16 [ 1263.455153] binder: 5499:5506 BC_INCREFS_DONE u0000000000000000 no match [ 1263.502638] binder: 5499:5501 Release 1 refcount change on invalid ref 1 ret -22 [ 1263.589008] binder: 5510:5513 unknown command 0 [ 1263.601353] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1263.648006] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1263.657892] binder: 5499:5512 BC_ACQUIRE_DONE u0000000000000000 no match [ 1263.667643] binder: 5510:5513 ioctl c0306201 20000200 returned -22 [ 1263.701784] binder: 5510:5516 transaction failed 29201/-28, size 24-8 line 3255 [ 1263.709355] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1263.790522] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1263.817979] loop4: p1 p2 p3 p4[EZD] [ 1263.828110] loop4: p1 start 1 is beyond EOD, truncated 03:48:34 executing program 3: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="053fd7a35c7e36566fc75de4836006801da4485bc113e76c1e6f6bdf158f6b0f80d2a44d03c841ca3181b6d365587682ae30ba5780c6a998d1"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:48:34 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1263.857037] binder: 5509:5521 transaction failed 29201/-28, size 24-8 line 3255 [ 1263.870148] loop4: p2 start 101 is beyond EOD, truncated 03:48:34 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000480)="239f3a9c333678e4f31799500615436616baac21b4fd68dfbbe768d2d2353e0f5ad77d8666ced67e3bce07cddf9ab754f2c03f62e955a2a2284a4012a4c7ab0cde256052f9ecd1bd8cf155106e52fa14a7c6523fdd442e5b27e28010325aeb0572ffec027b1af1155a473b7927bb124506503d5d3ab426960c8fa71f92ea1ff69bfe4be69313c592d4f06a4871", 0x8d}, {&(0x7f0000000040)="d86ab876dfe4fd78e8e8ca5757db84fc30015c7bf8d7d4f1ba90d40dbba559a7053636b48a1a2e6c4f769986f93320ca73c2907729017dcc065612b5b17917ea3b6fd91f78cd", 0x46}, {&(0x7f0000000540)="22db92b56285a5535b9e1e696a1b5932314339274ceef6cfb35c1b9c05cb729f465bddb4b65167ba76178c945682b638ea15dd3a2d203c0fa463eac08f4a6dc6243d2de1d93e6750cee984bcddebc6dba337d2034fbe37ec52f198dbaea9ad6ac5bbda5fa538337c6c9daf6a3f7be8ada4ac129a15a9cb6017415204ba003f8c23", 0x81}, {&(0x7f0000000600)="e8d091254ae59e1467c8ba52e6703ef4915433cee69b1adb72c9b69c268da1d51be1f88147e2c3ccd5dbccd6d07e5eee77aea115b4f5aca913b074cb71dc2f1ab489695af1e0c6828a5c9b770eae4fef86ab480b501fab4800e9be316d285bf6ed0565481b411c3c0fb215c5e9c48952e4a8659f0c666c7b4d64adf4890db80df5c91d2b992f9be48028edce4730d3b4d271c8bbc6fd", 0x96}], 0x4, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x260, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e919dee7d7d4599fe34556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1eeb22231708e18a47bc68a2a79a0b48931f6ff6d000000000000"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1263.936274] loop4: p3 start 201 is beyond EOD, truncated [ 1263.970277] loop4: p4 start 301 is beyond EOD, truncated 03:48:34 executing program 0: r0 = socket$inet(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff095ffefd956fa283b724a6002200000000000000683540150024001d001fc41180b598bc593ab6821148a710de33a49868c62b2ca654a6613b6aabf35d0f81000000000000", 0x4c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x3c, @local, 0x4e21, 0x4, 'sed\x00', 0x2, 0x3, 0x3b}, 0x2c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 03:48:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x16e) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x1) 03:48:35 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() exit(0xffffffffffff7fff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 03:48:35 executing program 3: r0 = accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) sendto$packet(r0, &(0x7f0000000080)="021ea2262099005a8b6defe95fa0dac18582e1556b02f57a23a9194c38acee8405873735d24ef8769fee03b6d9e4b41bd4a773f51595fa5357783afe31608c5e9ffa0cdd42434833b4ee196f66fd128c5ec050d35cbdb45fd65dac61e3fde92062ec4b67f28328ec9ccbe35aa37121ce3b8282958e197055badeb6d3bff9edd9e03fa43c68493598dbed2ad0eee2b09dc498ad41dc59bdcb796431e7866f289b3cb4660b303e5eadddddead4d86ad97c9ac1580c5472e623688188a2bdc1b4fc8d067c554b569717ebf58774be76ef3f65866bc84072e572012e9bb8bb75c4783d7adfb503e6a228a175e7f90e", 0xed, 0x40000, 0x0, 0x0) r2 = socket(0xe, 0x5, 0x4e) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x9}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x1, 0x6, @random="1a3ad006dae9"}, 0x10) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r4, 0x81007702, &(0x7f0000000340)=""/164) signalfd(r0, &(0x7f0000000400)={0x100000001}, 0x8) recvfrom$packet(r0, &(0x7f0000000440)=""/85, 0x55, 0x100, &(0x7f00000004c0)={0x11, 0x1b, r1, 0x1, 0x1ec9, 0x6, @random="e56395cd0fcd"}, 0x14) r5 = getpid() ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000500)=r5) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000540)={'NETMAP\x00'}, &(0x7f0000000580)=0x1e) r6 = socket(0x11, 0x6, 0x400) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000005c0)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0xfff, 0x7ff}) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000640), &(0x7f0000000680)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'bridge_slave_0\x00', r1}) write$selinux_create(r4, &(0x7f0000000700)=@access={'system_u:object_r:boot_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x7}, 0x48) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000780)={{0x3f, @multicast2, 0x4e23, 0x1, 'rr\x00', 0x6, 0x1, 0xc}, {@remote, 0x4e24, 0x4, 0x7fffffff, 0x0, 0x2ed}}, 0x44) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000840)={0x8, 0x80000001, 0x8139e64}) ptrace$pokeuser(0x6, r5, 0xeb, 0x8) getsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000880), &(0x7f00000008c0)=0x4) signalfd(r6, &(0x7f0000000900)={0xfffffffffffff859}, 0x8) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000940)={{0x3f, @multicast1, 0x4e24, 0x4, 'sed\x00', 0x0, 0x0, 0x20}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e20, 0x0, 0x0, 0x800, 0x1}}, 0x44) write$P9_RSTATFS(r4, &(0x7f00000009c0)={0x43, 0x9, 0x1, {0x800, 0x1, 0x4, 0x200, 0x0, 0x1000, 0x7, 0x5eb7, 0x8}}, 0x43) sendmmsg(r6, &(0x7f00000078c0)=[{{&(0x7f0000000a40)=@isdn={0x22, 0x1, 0x0, 0x0, 0xee6f}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="6d18da9cbf94cdb6c33e9c1b12fa8c991af4f4c331d344b7ba9a6933f3d7a154c985d6820bfdfdcc3ec950b23f3186f3b9cbbb6ab3d322e3ea5d7a63bd90e6e3101fdb9f425b8716d877daa31f7f2a4d312e96d5abc7b919f233d1d821a408436af6e33dd58fc33edaa8a3f105edb1ac5fddb2db2262bcc02cd3b6746fc569ee34395189b5bdfbbc391d4a40b92583ab4582e8e07cb62144bd", 0x99}, {&(0x7f0000000b80)="8019a9ccec7987155038eeda54a4b494faa643163bee6f1dbba070fdd9dfd87622ea3b6b473dbade331447ea9845251926973bb5a4c29b806c1620", 0x3b}, {&(0x7f0000000bc0)="2439ac96977e2c32c87f81eeba7a71375c2ce50b64a51f4aad48f7fe51c974d0af2f4d7fef450dcd7b7edb", 0x2b}, {&(0x7f0000000c00)="f3285ba40487c32858dab8c7483a8b085dfdf52feb9796ca7d044607595ae8777a542255d4a92291bc6c06960a23b8f3487a888361fda7095226caf534c5e610eacd0b12f004824830a13e3ab7d5c6658c26fbb2157ec818670b26dbec251f0269d368d329fccec333489f421acd05c3727325b34b11757b61600bcfaef97649e5459188aef45ed9d0b8fbcf921799c31b2792e0534a2a1ce0029c78b432148705c8db42269f8850f4bf786e13defcaffd040d7036d1bbc66a3d27982d9758c14a5d009c4a1bc5842eaa413ad6290c327d1f2b127d00518b9320b29077a32f2a7460eb7b192d9ae7f7ae", 0xea}], 0x4, &(0x7f0000000d40)=[{0xd0, 0x116, 0x9, "a9efde92f6aed066286d90d70eebeb9c406afad640b98b41631b5baa90094b4f8957d22e1bed59add99eccb018672a26b0d0fac11dd11474f190ed00410e58413c331e0eb3ce4a3a8a8f7226bee4928cb07d63c9a78db8b322aff4a693869def600a3efece858c89a328410eaca118e30c5bcf58af30dcda9dd3065babcb5198490acbab3f1799438cc32664e5d1052f461dcabfa3d1dc60a75fa94f1995d76ef9ac573e2a1a2d713bf5cab15f7e985c4b77d7473f6e4c06bbd7a0"}, {0x60, 0x105, 0x6, "fed61cd657a1f5125ee77d1ba41c184afbea58859400d27061b30af9be8034f6f8d2e54550c860e43800ab960e7b012e4798e8ed974f9c6b94c2f987617ec320f236d440a87b6b3cb7983f09aa"}, {0x1010, 0x10f, 0x4, "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"}, {0xc8, 0x0, 0xfffffffffffffff8, "15f7bd32733def7aab9dae72c16674a114182f9cf6c81926524042c69f78c188a7fed2a5e9e48ae0f75f964d0dab999eb2a3006c289de91a03fc074766dfa8d256b4d66b3f8b59f5a2224440d3dc64d1420d55a59f73e709686e7c6248f1bc28e59afcd47991d54d75fe05c115909a0ed691f70672f4a0f164069e44391ec40810b08445dbde1e9ac13e9966f49d75db115b1c4364458624125eb2aabd50224b24bedefc50381de8a7815504c12018b234eac0a0"}, {0x100, 0x117, 0x2, "a6b6fe8d17da4cf940e6d0880113afbbbaabd0b2520f2a22b56e7a8efced78fd5ef5137e897b21c1314e5e3b7a6bd91ee753ff47d0ebbaf3daa884a80040ab04e7c1d1dfa967ca8d7c9cade94c410a901e104fd87eef1c7d105151c94af96855d2c8ffccf77c96588b44fefd26ed1b98c69f524087918f5fb2575dbfcc0af92edfb2c709089f2c6e623671c0e8a7b72a6b5272aedc34de842028541690ba3ad68d45506179aa5c0b6e8c2b19477265a79c2655a9c5acecf518c281bdd02ef9f2d282771694cd67059f11ada12ed73fb5621da641657f3e2308202453e7136f829fb76e848992497eb1eb7a46b83a5bc3"}], 0x1308}, 0x1f}, {{&(0x7f0000002080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x0, 0x2, 0x1, 0x0, {0xa, 0x4e21, 0x7, @mcast1, 0xbab7}}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002100)="e734bb436a357bbca5ae5bdff6d382f91c85a1cc8ad807303ccc227618cdfe8cae489560e3bf25f2243393fe397b7c4aab3c", 0x32}, {&(0x7f0000002140)="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", 0xfc}, {&(0x7f0000002240)="306cc039a2dfee3eceebcd8b75cef2a5a88ad38bfa3e74f389e66a49a3c0daa743f82f17b03ff8e63928f6d557ab68b8b09395dfd73df6e13664fffc0fb428fe230c9b66e07182faec80c0dc76f7f2a29750e6ef94ffbc9fcb2256f24a127867aae374a1dbde0caae2c138c73084f5916083272a69a20e18e17974", 0x7b}, {&(0x7f00000022c0)="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", 0xff}], 0x4, &(0x7f0000002400)=[{0x48, 0x11f, 0x61c4, "0315838b99abc13e55f6ceb312516b444226be9aa7984dbae929d30f6cae6486a67c365a9c8a5408c828f4e7f6dbf233b1b56a"}], 0x48}, 0x8}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002480)="14beb75b17c0ff1c7a07a932defd341dafa6e05d6a9376893da9325ad6601b579564426021468269d57d55bb1f6e1edbbfbbe972e35804cbd74b17336f10580505fb1dc2b91a7a853ac37421738fbee9670d8095294090", 0x57}], 0x1, &(0x7f0000002540)=[{0xb0, 0x18f, 0x9, "b7d9f0a3ffc4cc8fb7dd68c9c56e5b3a147770c17230032ee1cedd1c2259fb001fd229b5930ec956cd2045787d82a19e88b23da743f3403b0b52cd7a4dc1cd667a84fe0aeae44816764a3b2d4b6c6ad5aa545215c6a2b69bbcfa6173bcde869e2f693df86d73cd5006a59a67ce69f6f40e949742ff326dc5a6b5e8bb2b31babe5747647011dc74e687d45848fa47581467476d15408f5878dc87"}, {0xf8, 0x115, 0x1, "d9373cf2fd5a82c7cd1919e2a4fc03a00918c5fba2f50e3b5f6de4b01f4b7c1f64998f88203276b34156c06804255fdb474cb35101df2287fee1de20ce605d19b89701e11af9142ba094b7d0beea9111477f45cee21ea29d5b263e074b91172afbfdd9fed13ac4750d39019c402f08897bc37bcda16ec1a96219774e9e2f2b4adaaa51166467e6c9460984023db198bdeee296bb6a211753529dd0455b846e833c6816bc2e1b94658f61778951233c62a81bbc28fbe2203176f4990e0e36d9feaf13ae8b19378f8a80533e1872e91cb872651362e3668d036a63ca09ff0d6b4b1a"}], 0x1a8}, 0x2}, {{&(0x7f0000002700)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002780)="ae0290fac62d5417397430e39a28bdae3a25bb14a7128290198490ea884f926ff513dd0e6178da58389bcbb7b35b830a3dc8b4a9e3f7ba9e9a491f8c8c12fe162f9d68d04fcbaac8302d1a47d1223ee602b6490191bf2d5efb6a3a5d71cd55b93d32b914471b9c60029de7c62ff625252b4cb2192698d0706221f2338191611c5ff28147dfe3b757575f9e27643b7f644085c7c67439648f820d3f844fdfa56ed81d81614e81ccf923b04156a756ef17509362a8ff78fff851dab1a9c27d445c366c902f1c68511b8815f0cc1a858486ee693e5b46ed645b813f3907e07df0cbad72338faa527df4ac81b2728593aa8be0", 0xf1}, {&(0x7f0000002880)="8c1da0724cf34ea6576cb90f7cdf5bb9b1d03186b1e35d7eef631ae93d1a6d65a41a7f69dddc2acca0948931", 0x2c}, {&(0x7f00000028c0)="5a4411507bfe8c52e0f02de9fa3e5f09d11cf5101d576a08915d68433f366e8372002a5c2aaf76bd0513616b461077f57d389739c009c0859224595db441ded555efb462f352074b1394adc05313c0fa872d61fd405c063ef1dff5f1c71a3a8811860b48efbcdf4156cc111a824fd5a5c29d9f4bbb7cb73ae574188c8044620cc6a7535932efe027f81c51c0c067ed4921f505518be3b5c189d5ec24d136f330bdce3d804b8a6904ada79c7c", 0xac}, {&(0x7f0000002980)="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", 0xfb}, {&(0x7f0000002a80)="1ee80c57559faee26d7c9c863e09b9db071842c18220765cf1e8b804a70ffa93aabc7587d9d94dbe10ca31daf3589f6c72b4f58afb6528786ae79be5f74433a0a80fa0b9d2c956b4d6a865390853ca5f", 0x50}], 0x5, &(0x7f0000002b80)=[{0x70, 0x108, 0x6, "8a1e32797f09ba92d1bf99aacdd9beba56cf1acd159c8b4e7f2a78d544178dca59f08f713368f9ef91d6594c04796a0d8f35031341294457a0d703a33e9c95de39ffb99034b50715d629f58c4e5e0644b3451274b18758378eb8ed4409cac3e2"}, {0x1010, 0x84, 0x0, "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"}, {0x68, 0x0, 0x40, "379facd89e544fc2c85a92612733078b3821827fe58fc50540b69235837414cbf3a2650c676c87b0f6c3b8a0e290fd36235b502862aa2f5078b0c135a8e01126f53b06c6ed413c65578f5e95052a06334b572d1d96e28e"}, {0xb0, 0x10d, 0xe9, "3b1e60fbed0d009f924bbf6efe7e78e3304220529a30f6cc4104f2d41e2f1b15c32a1f7756a1ae4d462c7a437b61581d138e40e6ac9adc95689117b7e69002db89ceab43f0adf0fd3f02c3b61cc5e0d7e7dfee255c4a57c8cd83457ffb0a726c49f05362524cb6f45a4df695cd5d82df5e22b68e5511d94c25b53017054f7ecce7e82f01d78481fbce61ff8f73a522f6909962df1657207cc82bc34e"}], 0x1198}, 0x1f}, {{&(0x7f0000003d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x0, 0x0, 0x4, {0xa, 0x4e20, 0x4, @mcast1, 0x2}}}, 0x80, &(0x7f0000005500)=[{&(0x7f0000003dc0)="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", 0xfb}, {&(0x7f0000003ec0)="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", 0x1000}, {&(0x7f0000004ec0)="8d7e9b1f7059f95df1b9b9509d4f20f6ab1f40db83a400b2eec65b4375e1b4c3c438166ddb7d071b07927bb56658d4c819fa6c1665febb9a9e993c4515b28a22e56e6dcff5c7dd493b6ba894a7e3c234748d91ae887e", 0x56}, {&(0x7f0000004f40)="947b6519a87dfef97c03ce6a9d377f2ca53bca7d2078a4946d09e5ad5428183526f9f617cb6e717dd3583bd9a6fcff2241c03d78f7180fd63d15835cdd86838f37d3b05cd0973b8ad02ae878f5413229fc9539c745f795c09ed5ba62f7d77c175cc0eeaec4179a1d5d3244e53ee1604501051458a5a99ada7ff01985d20481d3aaba82faed67fb4563b84f56a37373b53ddaece68cb50dee8451892333e265aa6d9dc288022341cb3c94cd8bad58a2ae3cd986b83d368aea482b9355c23326d7aa397fbcf88e05a2ce982738ed30f2281d2deef5b5bda117d38a59b7e07f6e75", 0xe0}, {&(0x7f0000005040)="8a8f03240c67e62b08f124914ddfeb34eb4208f2ae84373ca438bff637a53ea052f689b41c2e435f01df50ca9b3fd55651df78b1758b6a7011e93b010330fae2d31c758755c8142372b8de00ced0ead5f4d970337c853664ee2b81b3cf4241fc9ac361325ce24bf95d2ea5", 0x6b}, {&(0x7f00000050c0)="61d91fa8bf53abbfb7f5a14869655827e7b179fc1a9740b0edd7640ce80b5ff5d3554d3562e6fd47d0569ed09c4bcb800bd460b76e938ef7ed6e4aaf94525b027f2059d4be03921b7cb1650653040969f11d119abf804c5d09d94a93acb4a0943caa2d9110e4215bb1fa0069d0ceb927ef6332b67c3594874c5d0670a583a3f2f2f15836b4bd5ee30855393804a1d0122a4b2a9fe8ce627f97eb35804fb9bc5c260c823be1f5aa42a51c", 0xaa}, {&(0x7f0000005180)="aa0beb386722c59995704aa3a8969d96b0aff1f6dcef72ec35d45c0ac70401913f90f6824b3805a33dea8cf946ed180542947ee6613ba7e58f82c1de79222d527c990b1500887efb56a2ea542c2bcb74bc1e78d7e9df5df8d6c0ee90d4774bd3857fa70f7a829ca6b8d0af8e2293d8c8960b94f164d2f2a1af0549969b2c8d251e3158ebea21bca7e0b95583aafc9ad0bf8c8bbe83cb78c645d1a37a4a4bd133238a2eb3dbf1f11048d4bd03f4a6a6387c019ea2b963082f7f1e22186cd12210c4106183ea6e442c2e42549f9638e1ca15cfbe3b4709db5057b585a0d1300af2792e5e74eddf", 0xe6}, {&(0x7f0000005280)="2117325ff9acabbadeaafe10d8dfadd752b309ba1e18e5fa26591eaf0ea57cad313f1031c9cf5894e7e572f1a5594f83de9cdef96bc9c46d5be971b2d57e788f036d8443b434f4ba5dbee57800f5a6ba1175e5b0266d877b66d4ea70f03ecbf1f768ece76b46bf9f5c853f01429071aadada26f865ebc1ac625d1829e069121505044e91b3c8166ec554fd615afa4e1c443a1f9f0cced9ccc60677c581487af678196d08530b8df4ee1b2ee0c391f02365f0ba71d57d4e9f02ce8759472dab22271c9dd779f0bb5fceeb08d384b045bb088cb3a43d100c91a4e8501bb57da070300cfa7d78ba2d70b9e4b7d120d02b297612aa3d67d52c9596", 0xf9}, {&(0x7f0000005380)="fe776fde4ea3f3eb80c45d4d7cad7ecec19dc3c4159dc897654cb1b523d0c80faa9760fa345c8d534ecacc868e63034b401f899e08e239109a999d11bcd648a4a7218fe30a2afae469114d68604edbc9e8893bd6720cc2bd7bb9d5c5cc870a0f17e9c3083aa8601b30762643d78de06dabd23376339c84639d51f1ca8b94ed62c6db26e2f57e82bc96fb9b719d5939089ccc9fe6720fcb52934507a6", 0x9c}, {&(0x7f0000005440)="3566fe3739a93d810db712116d4bac67b26c66d7fcb856938f35a68727ff031cb65ebfe8920db91de53c4a3a6c18d9b867b740036c10b7f115234c763a07de668a702a69156a96ae477c06a71726954d220e572da6b9c6a8260a9ed85ec8a4cfd88ec8b0e57ff9bda7d83795b920555f5d14c5bd4082c8ee3ebcb4e8e77c308970c0d1e5978218926f3e9dc9b254c6892b18da167e1c4dc85e765e8edde812", 0x9f}], 0xa, &(0x7f00000055c0)=[{0x1010, 0x102, 0x0, "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"}, {0x30, 0x71e28d65f7e0543f, 0x4, "a96323fef827de99f477d3a1a1bbb83fa7d6d1593e5a128be94c1f31"}, {0x20, 0x13f, 0x1cd, "d5480274def316421ae26675a7"}, {0x68, 0x11, 0x8, "e02dc2ca3c125d7048964cc130384acac039250be5846d6c117fa4a773a5583e46269095d9ba1c2db17b4c36aa583aa7c0cc45ace4ff251002a88245d219c80fcfe007f561953b6e59d5246b0c9bacb8531fc7563763"}, {0x38, 0x114, 0x4, "040ad35ba21205b4b9fd582a40b96e5192552c3219187ea8ea54523fd59e094f0f5fffc9edf133"}, {0xf0, 0x114, 0x5, "58090d64e180ce789a3367ed380a16faea707987d099779db197cffd9927c15f1a44021732616119c3edfd8c9aead8a21c8f29e465b9b0df3e27d26adc33fe978fc3a8559234ad79bfd93410182b571682ac1f57bb44f0b3d557ccd286f8348165291035748e8ec909607326a4b388b6953db36368d6352bf5dda8bc4d23b6a45dd86aaff82e9ee08d97657807e97581afa9287404ddd6e28341fe731b0f8c9c2df2d97387cc4d7de3cc3d3f2eb5ab89288646753628587eee1557d5b2265d60e83fb627e40d3084bc103b584009b8a2bf98966fdd45d39e49d455"}, {0x30, 0x11f, 0x2, "f53808d013beff91f66f168531793991d4ec277ad3f6d6f423eb9fea0ccfaa"}, {0x1010, 0x10f, 0x0, "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"}], 0x2230}, 0x4}, {{&(0x7f0000007800)=@xdp={0x2c, 0x4, r1, 0x28}, 0x80, &(0x7f0000007880)}}], 0x6, 0xbd6a4cf5d33e1f43) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000007a40), &(0x7f0000007a80)=0x40) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000007ac0), &(0x7f0000007b00)=0x14) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000007b40)=""/1) [ 1264.723271] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1264.752254] binder: BINDER_SET_CONTEXT_MGR already set [ 1264.765277] binder: 5538:5548 ioctl 40046207 0 returned -16 [ 1264.805615] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1264.858295] binder: 5543:5552 transaction failed 29201/-28, size 24-8 line 3255 [ 1264.864753] binder: 5538:5548 Release 1 refcount change on invalid ref 1 ret -22 [ 1264.880039] binder: 5538:5542 BC_INCREFS_DONE u0000000000000000 no match [ 1264.997059] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1264.997264] loop4: p1 p2 p3 p4[EZD] [ 1265.008864] kauditd_printk_skb: 247 callbacks suppressed [ 1265.008872] audit: type=1400 audit(2000000915.792:38365): avc: denied { call } for pid=5543 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 03:48:35 executing program 0: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/create\x00', 0x2, 0x0) write$selinux_create(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6465766c6f675f743a73302073797374656d5f753a73797374656d0000000065726e656c5f743a73302030301630303030301c30303030303087b6000036202e2f66696c653000"], 0x3b4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e22, 0x5, @mcast1, 0x800}, {0xa, 0x4e21, 0x80000001, @rand_addr="05bffb2b5cd9a90776e4354d30902a1d", 0x3e0fb606}, 0x1, [0xfffffffffffffff7, 0x30000000000, 0x4, 0x6, 0x4, 0x80000001, 0x9, 0x1]}, 0x5c) [ 1265.043716] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1265.045572] binder: 5538:5548 BC_ACQUIRE_DONE u0000000000000000 no match [ 1265.082508] loop4: p1 start 1 is beyond EOD, truncated [ 1265.116630] loop4: p2 start 101 is beyond EOD, truncated [ 1265.136537] binder: 5543:5550 transaction failed 29201/-28, size 24-8 line 3255 [ 1265.141524] loop4: p3 start 201 is beyond EOD, truncated 03:48:36 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1265.180789] loop4: p4 start 301 is beyond EOD, truncated [ 1265.211692] audit: type=1400 audit(2000000915.812:38366): avc: denied { map } for pid=5556 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:48:36 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="000002008b10305d97b46a8dcadef8cae722c37761c2f6c07997d592abafa3cd6b9ba27588f19ff3562573f103da4fe64bd16b"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) set_thread_area(&(0x7f0000000080)={0x7, 0x20001000, 0x1000, 0x3f, 0x3ff, 0x6, 0xc600, 0x7, 0x7ff, 0x5}) 03:48:36 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'bpq0\x00', {0x2, 0x4e21, @loopback}}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mincore(&(0x7f0000ff2000/0x4000)=nil, 0x4000, &(0x7f0000000280)=""/4096) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ff7000/0x3000)=nil) [ 1265.421480] audit: type=1400 audit(2000000915.812:38367): avc: denied { map } for pid=5556 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1265.557597] loop4: p1 p2 p3 p4[EZD] [ 1265.561920] loop4: p1 start 1 is beyond EOD, truncated [ 1265.580204] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1265.613994] loop4: p2 start 101 is beyond EOD, truncated [ 1265.638223] audit: type=1400 audit(2000000915.832:38368): avc: denied { map } for pid=5556 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1265.656090] loop4: p3 start 201 is beyond EOD, [ 1265.671034] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1265.698933] truncated [ 1265.715674] loop4: p4 start 301 is beyond EOD, truncated 03:48:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) r1 = dup(r0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r2 = getpgid(0xffffffffffffffff) ptrace$setregs(0xf, r2, 0x0, &(0x7f00000001c0)) prctl$PR_CAPBSET_DROP(0x18, 0x0) set_robust_list(0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x4030582a, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0xff) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x1ff) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x7fff, 0x80000001}, 0x14) shutdown(r0, 0x1) [ 1265.752330] binder: 5555:5563 transaction failed 29201/-28, size 24-8 line 3255 03:48:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008911, &(0x7f0000000080)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1265.803377] audit: type=1400 audit(2000000915.842:38369): avc: denied { map } for pid=5556 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1265.910214] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1265.945119] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1265.974913] audit: type=1400 audit(2000000915.902:38371): avc: denied { map } for pid=5556 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1266.025470] binder: 5555:5563 transaction failed 29201/-28, size 24-8 line 3255 03:48:36 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f00000000c0)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000000340), &(0x7f00000003c0)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340000000ebeb000000000000090000000066820000000000000018000000000800000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) getcwd(&(0x7f0000000580)=""/211, 0xd3) [ 1266.159252] audit: type=1400 audit(2000000915.892:38370): avc: denied { create } for pid=5538 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1266.218140] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1266.253411] binder: BINDER_SET_CONTEXT_MGR already set [ 1266.290889] binder: 5575:5584 ioctl 40046207 0 returned -16 [ 1266.301734] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1266.332467] binder: 5580:5587 transaction failed 29201/-28, size 24-8 line 3255 [ 1266.349549] audit: type=1400 audit(2000000915.962:38373): avc: denied { map } for pid=5556 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1266.369148] binder: 5575:5582 BC_INCREFS_DONE u0000000000000000 no match 03:48:37 executing program 3: mkdir(0x0, 0x43) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x100, 0x0) ioctl$void(r0, 0x5451) r1 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) bind(r1, &(0x7f00000002c0)=@in={0x2, 0x4e24, @multicast2}, 0x80) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, "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", 0x1000}, 0xfffffc41) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000400), 0x1) fadvise64(r1, 0x0, 0x0, 0x4) mount(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0) setns(r1, 0x20000) chdir(&(0x7f0000000000)='./file0\x00') setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x112f, 0xffffffffffff8001}]}, 0xc, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) link(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x1f) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1, 0x8000000000000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) [ 1266.374796] binder: 5575:5584 Release 1 refcount change on invalid ref 1 ret -22 [ 1266.452356] binder: 5575:5590 BC_ACQUIRE_DONE u0000000000000000 no match [ 1266.495100] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1266.529955] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:48:37 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1266.557490] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1266.579171] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1266.596071] binder: 5580:5587 transaction failed 29201/-28, size 24-8 line 3255 03:48:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="86485b2bae92396b7ca4d9c8a4290adfb0fc7617742a3380e0") r1 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000001c0)='system_u:object\x03\x00:tetex_data_t:s0\x00\n\xf8gY\x19\xdc\xaec\xe2\xc6Ng\x93\x7f\xaf\x88&\x9c\xf8\x822V\x97.\x807\x8c\xf1\x1f\x91\x1f\xac\xf6\x10s\t\x03`\xef\xa1\xfe\x18\x95\xb1\x16\xb21\x8c\xd6\xbb\xb751Z\b1y#=\xff2\xc4\xca\x00\xde\xb0\x1fr\xb2E,x\x1d+\xd1iX\x057d\x91\x05\xa1v\x1c\xbeAh\xb1\xd3F\xb8\x1dHu\xa8\xbb\xc9\"\xab\x8d\xed\b\\\x90zp_$\x8bpG,\x95\xca\xf0(G/\xbb]c.\xe7\xbe|\x040fg\xf0\xc4 h\xeeW\x84\xfa\x14f\xd49\xec\xd4\xf4\xb2%$Z\x19\xe2:\xd7\xf3\xbeo\x0e?\xac\x05\x98L!i~\xcb\xe3V\xb4\xf2?\xc7\xf3\x8b\x86\x1fR\x14\xb7\xb7\b\x13\xb1\xd4\xa9\x9b\x04[\x9c\x90', 0xe0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000002}) 03:48:37 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0xfffffffbfffffffc, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:selinux_config_t:s0\x00', 0x26, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1266.758310] loop4: p1 p2 p3 p4[EZD] [ 1266.762511] loop4: p1 start 1 is beyond EOD, truncated [ 1266.805661] loop4: p2 start 101 is beyond EOD, truncated [ 1266.835422] loop4: p3 start 201 is beyond EOD, truncated [ 1266.867137] loop4: p4 start 301 is beyond EOD, truncated [ 1267.027071] binder: 5601:5605 unknown command 4219648 [ 1267.062649] binder: 5601:5605 ioctl c0306201 20000440 returned -22 03:48:37 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='sched\x00') setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x4, 0x4) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/102) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r2, 0x0, &(0x7f0000000240)="0adcf71a6f26fa85ca3995bf7fc0d37072923938e28ffb3cdb67aa034436af764ce5858ac54ba9a5f0b0e26ef6cfd8c1efd957c1ea33c19800cea5466292ed58bb1aaa1e48c222a524991211f02eb39ec9cb7e68b52f1f2d71a13211f5632cfc58109b49572414d183d935c956aa113b98e9458ad2da89e677e84cdd5be1cb1758801c5f888a0468889029dac1b36c26069837a8c60657ee424f9456e82e412bcc61d70781f27ab88e227ccf7d316fe1a8f9dec3fdaefd2ca9aee579dfedb132a9be7d8c1042bd7e75dbb51a03c0acda0f6e13d6acc89c37875f89580d7191076941824f68d3") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1267.165647] binder: 5601:5608 unknown command 4219648 [ 1267.208536] binder: 5601:5608 ioctl c0306201 20000440 returned -22 03:48:38 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x2, 0x1, 0x100000001, 0x2, 0x7fff}, 0xc) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1267.377264] SELinux: Context system_u:object is not valid (left unmapped). [ 1267.461820] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1267.529184] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:48:38 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6) ioctl$sock_proto_private(r1, 0x89ee, &(0x7f00000000c0)="5351e96ef8204e150d29105d0a83a7052cad5ea993d07882e9d5f340d7e4d62c51589cf57f9f5f914f00e76dc97b0f35e8897ed90916f12e31e80641e9e12b5de5247572096b1905acff3f45c663d0b4f1a5b12a5ffd3d799c405c20f29cae527bc8b466fb5aaf3f25c43ca47d0b0674d226da886dbafa38745183ddfc") sched_setaffinity(0x0, 0xffe7, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x80000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000080)) [ 1267.586480] binder: BINDER_SET_CONTEXT_MGR already set [ 1267.590821] binder: 5610:5618 transaction failed 29201/-28, size 24-8 line 3255 [ 1267.591792] binder: 5609:5621 ioctl 40046207 0 returned -16 [ 1267.644677] binder: 5609:5621 Release 1 refcount change on invalid ref 1 ret -22 [ 1267.746599] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1267.807034] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1267.860275] binder: 5610:5622 transaction failed 29201/-28, size 24-8 line 3255 03:48:38 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x42) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=0x111) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) readahead(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) write$ppp(r3, &(0x7f0000000380)="781be18eec8af095ab5ca59127e9f2d7eb6a77289744357be92c24b06fa1b2054589096263eebf166ca67cf21cb8889384b998fee655e9f3ad32033cec5276055d3fdfcdffc3460aec9fb0cf08badd2b2faf1603d2a58524d7dd601e04ab65403743fe6c4f67b622d18c8a8835c19206cba21a9a3393a6ddd298b7bd6a81387dadc4318f3603adc9656f5c828df2cd9c88639ca08a65e10394b1c6a8ea7f5bafea5825f3b2fe16f3634802fd189410ee", 0xb0) syslog(0x3, &(0x7f0000000080)=""/39, 0x32c) fcntl$setlease(r1, 0x400, 0x1) 03:48:38 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x9) [ 1267.979577] loop4: p1 p2 p3 p4[EZD] [ 1268.000155] loop4: p1 start 1 is beyond EOD, truncated [ 1268.028855] loop4: p2 start 101 is beyond EOD, truncated 03:48:38 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1268.075810] loop4: p3 start 201 is beyond EOD, truncated [ 1268.114774] loop4: p4 start 301 is beyond EOD, truncated 03:48:39 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f00000000c0)=0x2da9) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r7 = open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) r8 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600)=0x0, &(0x7f0000003640)=0x0, &(0x7f0000003680)=0x0) r15 = gettid() ioctl$BLKPBSZGET(r7, 0x127b, &(0x7f0000000100)) getresgid(&(0x7f0000003a40)=0x0, &(0x7f0000003a80)=0x0, &(0x7f0000003ac0)=0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)=0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r6, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r20 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000280)=""/72) write$P9_ROPEN(r3, &(0x7f0000000140)={0x18, 0x71, 0x1, {{0xa0, 0x2, 0x4}, 0x100000001}}, 0x18) ioctl$BINDER_WRITE_READ(r20, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00Y@@\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/40, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="00000000a6185b009c7c677fa94e65346540446a44eb8add464e3c1edf6ecc3088ea568f23bb1b906fa944589c431f8dedc3b8f5019207ef2d02db96bdc18ba1ecb231eca06a1e1b658462db1b663ea5926a539ed3324293f1ad1581921be2c7569b20237c45eb27cb5c6c799060baae9c00000000254b2daa5482f85f63e82abe448317851174380f8a33e87609"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) listen(r2, 0x8001) sendmmsg$unix(r7, &(0x7f0000003700)=[{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000580)="e4129508a7a4656d106e20225ff23e174b599eabb0b5573a879c5b47934d27f8322359e749dbe4af8ce8103bc77424b5365804de62ac0d0ed390dea3aea847cbe802198586dcbb3c5d7399e4c4d60baaa75774d4ee27b94464eeb5ed88d90f50c2a42a3da340b8adea7470e87dbd8e49f860fcb72f2b4d60c9574b7c36cfe581fcd7d0e7a0dc310a51b63a94151c988ef4b72103f662520ff76419f23101721abe8b394d82159a31053615ecd32888ffe52c78", 0xb3}, {&(0x7f0000000640)="ca3a5fa7e7c0af56e389c40a884f89b697ded4163dfdb2c292a16980de0fa052a950d5935787e66a9edd03e88dfd33d8f93117f522f5e31c28a390344692cbbab9ae342903e9153f4d1ae4b40a4c8f84e60795df9b2ccc4663d7b75196fe1a189b43c88897c60bfbf09016bc1220f93ccb59e579cb613e85fb2c9a752c3906e362c54b551d383194a1b75497eca46fe53e2cb3bc4dbae7184d2b0c5e17f0eb0ad2aa71f7d997af6dca2e5b83970f77305e0c5e986c32581999f82746c00857ee", 0xc0}, {&(0x7f0000000700)="198e606aea8a076c52b046ffe27ca0639feae8f99d4f8fd0620c3528e44675f5dc9481e3513b78fdc0e7a9ee4cf276ca12f4889c76590f5ede1827103a0a9bc30d2542eeaebf46c171ce64260dad6ba57ec24c441220fff002af1bbadc546a1116a92eaac84424bc4b4734abc1752695c1ba23e352e32f3dbe962a5e8d3a451576db241fc2bacaee301c6cddf8650d312d8966d140fe919dfc391cc0c793703b7e56a41e1011c2d9a7a633d50a730182165446f282b091cb48628fb20322c72393d16528c12599025b70b027e6dcf25a2b943377be2ac38d8380db8a5bb37d2016b97ed33fcc313da167bf955178e3189219388aee841688f9", 0xf9}, {&(0x7f0000000800)="cf6be6a8bae000807f12cc1b812d09e33b9d77540a5555d48fa0c05f713013f20cf050314242989040693891eae79212e320a3e98ec15857eefce2cf7195d5d1a89157647fff7d62acc71cb3881cbb67c9e8f50f34f5a3007df8b7a6be28fd90746d76c2f1faf81c2a941dd7c0ea4ff8ece7a5214cabbf4b435639dcde4f3d97fed06c8aafb4ec25566da2ba770b183ff8bf407b2a62ae4da8c2a0f766a4f82da833c4b418ed39bdb4c9c29b264bc3d257a66787797b0967b0b17a42b7b647857e5b4994da", 0xc5}, {&(0x7f00000009c0)="915fb47a59459568ac343abc4589b4825065b5ce49ed3b6be094111c5e14a973c4d80f7798cf0f5f7062485dbc4285c437178482d3a081d83194416cb05824337a7e9bd39a1a28839129505f741b1e857cacad4148ba34ec4501e9cc714386ea7646f4574c16a0f83139a40c7efd2ab1dd6b7596a9dad39de58d929bc22570c6221c586667810d0630b5eff0d1b25896fba4ee62739173a95134e20e9d94608e8a846509560428df0c14d116add9f396", 0xb0}, {&(0x7f0000000900)="7fe3f512343e61dc82b5cd8e1086bb54fac4883d8a8a749a7f7f3750627f65cc80d29e1c534993834da16d515d0cee8412c5cbcb05da13d9427665324bddb4b9c54b4205a026c1b87e30a726d1abd56ec68aec6109fba4f00b4efe818d94c09d731084a3", 0x64}, {&(0x7f0000000b80)="4ab1986aa9773d1b53e6eab5cb33d0eec63fa5c4e5e97156760bb1b490d7f3e19ec6b3606195d6f9f02b2807758c4b321757c1f64ba7e40c4ae3352acc2ca6594ce431da44dfab16ae08b1f9e11ac9385c1561a4ba441439d478d827a0fbabaf5abac5fcd06a7e0ea917fe68702415c8a624b4faaf5f4b39a45294af46dd72165daad0d232d7a9c8bf70907c74af47c888ed64f368ef2e4be4d63a6af735d05d45135846693400a34b4e677508f655e24a6a430e257c0d698bc5909a59e51be1d91a7ffc99fc2a9b18559c8e05e53c3fa3b743446dcf55c394423bc35b3f7351d5ca3d6f815ddffb8b7aaf9b3af187cce2", 0xf1}, {&(0x7f0000000c80)="f36928e5b24d15c88460d9682f9fbf3a23d7fb367a147f29c49ce2e26c741447b8513ade13b98be3e3736794a3de2dde829ab333f29d567587e87d5b681742bcc81247503ba8e2708cf4e795c6f2f5fca7dc069886a428cb927861e116926de65c944560e4f7f6ed64c2afdb54ba2a0a177f1d23b16c48e787115ef40c16fd4bc1088102907db77f41a1b95634567cd92e2adde60c3f6cbd32d706c376d2c6ee57af845709082ac569bab13095fa30eadddf3623a230ecdb63286e7469c41083f8479f753af5293a13ed83e77d0c90b4d4479965cff2469da18a9a0bd1abccd79395a019fe8be61038571a1e4e404b", 0xef}], 0x8, 0x0, 0x0, 0x85}, {&(0x7f0000000d80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000e00)="c2d07853644e98d2b7007a247cdf76d552530ed474e7aed70f9da23dc7b64db29b7d0e2f652f0ee165a4c43fbef0d88556e8bd8640d71a435f2a604e6df93edf5c15aea935d999bf688e74e8b616c69543798798d7a014f0768a3b9ca40c9728ccee3569ab92aefd165e99b09847cfad", 0x70}, {&(0x7f0000000240)="b1751afa7f0ff489d6942e6221d8be7af2fdbac0765fe19701722eb9842d0b8cd3d0aef64dc780123628c9426939e9d93052a7a7", 0x34}, {&(0x7f0000001dc0)="03c5335fbb010cdf32f30e46f69eeb2ff2180a9b7b578dd70ed8c82e2fc1e1ed7655488d385e995e28b52a0b320740131f803eb764a18c7b13a1f8b5a27dffaf3d5d60898f075ac07f1fa20bb234b4930143379108563d9873c69a58c0c90e6506906293e2e478b8265b9ece92a6f7340de3b0416f112f386ef0ae8e67ab710cc73e551c53dcb881b94dd21c73524f34fa88d4002b9ce1965c0e5c0b148ac5bc0a5bd9e7a9d9194e9d7b8c3a0389b3d1b6599a032b8f1aa453f0c8775f4f134e857117b88bc1ec68d117d61fa6f5b5679877c352d2b2903588c9545447d801aaa8bcc83185d7a9c03cd55b15fc7c3f7128e83c1b102a1021f3229ac3a3f2f4a487abbdccf20dfcb24abb46e5158e099e1364a92b56a866ce8f0e47c87001b66b4c15ca77e462de9e3502e4de2c7b82e96e79e6c544b89f3a187fea81880b356af1058d7d2421d46481d617cb7b90d5ae33946769b354701571b0b59d3c9c1293c925e6677de4b96606e72f5f6943c155047ccb57bc1df7653c0dd8ab5f467a3fcd73b3a2880db2b9d379c2595a3f3f07ade03ce10264140f9bd89b136816254888b556bf478f3f49eba175e0af4590b1d34ed648576baa92a101ca250dba8a2df6333811d97ee22878c8d8774f6fecb58b4d28656b273efa983747e4010c9a7aa756689cd7299b4ebbc9a06f98a70361f915b60610e1ed576a72aff5d5640ab359deff03b054a498bacbc2aeb31a7c2f402bb754f5befc311cf64df5e22beca24eabab79d817c99a7f0529414880f63f41e0442c98bc21599132bda4558b5c1aeae1a8a04972c42c0ee82de0cf508b48a019cfcfe75d0bae94d47dbf78855fd87367f4236abf34a30880f6ac3c28cb04acd3c161bf0bbbc73ecf165f204b3038ab4c0904b5567b1f1b66190ab39f5a99c00b2a17441488c55bcc2f64d65aee7d650e69cce95d24942f3ee44d481da9278bbf465f158527b30f85fa35a9beaa964236e2b82ccf23d0ed40d05ccb05ee9811a675a82208b7501927563f23c07cb4f4e1697c4123a9f8486a54ba37514194037b579438b8c0f75c18d4b4f95d640dbdd2fd5fe02a2f8ad2f7acb27f8836c10df4e22b92caf8f788824222fec66802a158e34315e227cd49f215f4eb9893841a12fe7e2b694c5264d459711a4a2a9efc0a12c904417d5d2fed48ba2194fc850227fcb8ca5a93b74ea8abd1d3c3f412f35ee6c1dde40f5669dbb9934d8124723c1d924accd18ec3b24f4966adf293181a764ba5c49ea9f1ca23ad42dba2359fb191124dbc5591939f05e8a216e8094b9f4e894e3919780a9b7297aaf4ab082211cc771d205a729644e5db21e95ab0724c7227c443ceeb2e9a3fe463796b13af120d8e9ed523355fdec5ec2fa34544bc0bc448fdb6d4c28acadb80b17e63c7299530c36ce0563344d1e37ebcd15d99c94a593b9e237802ab98d2f884fa890f385c931b55ca8bbcd18b9d1cba6d09b52cf44605bba974f371bf60f99192eb7cf44fc9be4f6a54ddbf0590d7170085123bda82aed5a8c7b7081b0443f2191dac23b4b21123abf199e8cfdfe21d1f2c485664022bad0d6ff34e8211575feb50f3353eabb2dc80d9152b4cb7d19cbe3a24721ee8976a62956b0dc8db9191e6a332d5f95ea3e361e5f83a2388c803cd37bd208059325bc080819f7ccce6b7f2a230aa646e1d70ac45c70dde19320f2f54847c8906f0e2dd54fe7b163b911749b55f5d460dd3e7cfff9629fdb09f05aea9a3bffc1b1144f5514350c6f8d09fcffddf05c735dc8d113e9a1d56f93f570b6de02c37fefdacca05ea6283b630c6d97a84258990b951234a2b12319208a242a51f516f3e4c4724ee5ba9115bf9e8bf5ca2c7d269ee28c461c50c9816a01c520e9f70d6b845ff73134d252a594b0e69421a15b73117e78e68be1421f0b93c4f7d2b69f6b111f24ddb7c6cdf7c9262a555ed554b462dbd7706677cd0c43355265452948d21eec8bea8a65f1e62acbc3452be3e851c66c3d4afe8d0e2224dacdb11422fdf0b28a825df4328276c42e998cabdbf477c12fdb65337cf47289eba7be6b524084b2ffa55bb9c31e998ac809153c6c09a1b51bcb36b18b0cb5fa23f0adccd79d491b2988679f0614daaf37aa8e44855510e69cd9986e5e256af9ae687d8497e53508415a68a493590eea43403148ff2f9ae1c1d073d9b2f475ed71a218aedd197b155fd200f79c65116f6810d5654325ffddc226b5a4d396ffe8b9d2d0318ad8b1a66a4fc87eb90e719c71e7f193734a199252655a6581f09a9161c6c020c646ff2d03a60911357e61974b4c65fb687fd1106dc7d0aac0709fc36ff6b5b81e19c5002d7326b7827dcca56c540a248a15d4b71591d9c67aceff57aad42468d99c134f20e8a8cb803d5251466ca8835f6e1f12fd49abec712070a896115e02121c1732a206ca9a1b9e19e88890a6e1bf3cfbb27b0d36ae7e9e8ba356bbab5c6e5a93186b3521f79e08c5df189e33cb1c6d87775147d7eb314e915aec0b26504c8af836a294e1b2562af3c668c88b883aeec70c1305b6d98284fc2fed388879019f8e990f97205b8b26ad97620cf80e734de6b9925fcb7397677f11ba52ab115504e7041d274aeaa1431409d5a9b0d08e0e367a878e396a442892770d38c60466f339e46f02b3f09dbd53a6ff097f12895f52844f3858ca345eaefbbb759e6b125c54a592bcad8b4be6303e4f55c0e22534b8a79c738f778103d7de7a8d4e0131f5aa34be46d6bc292053b04e3ef5c5c44cbd81c817649a0d9f38f6264e3f5f22ba7f3e37caf162aa78f996c2fb702366c67ef30a226d325727e14f4aedd5c02a915be84e6587aca064c957769be79f44c020ff45a633aef5b03d909cd9a256b91d201209af4c0a6db802cff468a6f254c45c280207d85eb6d8a4ef7e2723ddc8bf91c6b16ecf79e82c0fc438f274f482b344aa643648ab684110d1880fd9df9bcc691031f9eec1886216a6cc3897307665eb83edb58599100c3cb272532e48b5c31687d4e032ccc35312e5b73e71b523f1d4fbc4d2dc66f513aad54917a85c2c0474b256402fe52f55be171c90dad191023a26dc485181224bceea012f975bbae6eb22f754e2388602a059c67c20c15b5b980c9a18ac68acb3b1b5770e6fbc1cb379b137c128aa187f3684329c49a7cef3daecf61875b1e34a3c599d88b38e4d2bd6ac6630d9efa023cd5da355026fd60f58617a182bf26bafbc642b9b04b13b580f41e7ee61b3dc481183fd355cf1b4d8301d5ba59bbd3aee6098e1426ac90e7bf6fe2ecca1f3fcc0c12d701508e31ac4720cc3f81d4e1873df667fd44ee35f15cbbfdf862dd6b42e10396fbbdae64d2333ba6819e5201029bcf2a1f298d3cb6e9c8e28cf67ebc413d2a58b0ddb69278ccf298d9bb9c541cf82f02e4fb77344b29ae492e53e678d92ab0cd241162b9a12be070221b3c74c9e677879c7b23fe67816574e173302c446459483b1f02559f15162b120cf36612879bd828c7087b4953ff70f4e194a16005ab0cef620f91b7f37b8f9808b5cf8b76af1f9d0f75c0423a97da993a3b1a823787bbf5e6ae8c305d3631fe5b85af377f247eae1664455803406a850d44522cf500aa31150c90de8e9c7695c887f53154e47d23c947fbc340667e84d184626247533945175d18f8d6f01108c0ef91bde101c1b55d5237466acb0625ba4bda2d1cb45f2577383a37015115613352396e1cead03121294037d354d69a42442e812f9a15b58f4eda82786ae95f12e1eb478f340dcbeeba428b95380985d05a1e15183bbf293343a26995cff2adb8096a8ae74331cac20b1e80332fff0f0f34c29633533a100f82895c20bf40cc3b0430f0108c7f7b20ab5e860793652f3fd9289740e20fbf441a489998104d9dbb50e5dc0d5a3c877424cfd80219e092965baa2b6de8792d4b2885e3e4a85b5fb14c60d671d799b46aa25cfbe28cac7f22e3e5d93c1c8b40bb2b19ffd8cde1f54b98108d484d71912dd7d8c87aa119881f690ee999970d41be4637397210c806e0f0b80628e12bc47dfc2fd6639d531fa7baf2ce93bb3612db5bb32ccc826c89e4e105d6f45f6d10718aeebb2c1fd0fc7d7017ba865cbe26003c76c339a80e305615f2148bbdaf3c61203599f15a57b37f51adf75a66365d591f6689ac62778a59b1e25c0b803804176935ff2493c8558b234b4b8e7d3eee7926dd52bcdab09d6110375e655e72639e4b387325024c374bf8466e1b683c5c32b2242b799f6c20cb94f520c742c70a3678657248e23ea083342a108cdb7f4dea2ec5fbb8733cfcce0b2491a2f484f45049900648598ace90de91c530b913b9b7c04172120d9fb87289f56d741544534936746dff48c2c289edf81638543cd3a0be8ecc430a39223deff48598b9351cb67e8872d04ca90242fa72ef8ee3d612720a2c8c0c949baea556f272f2116a4c7621b4b76d36077ace370dfbd69e90831d02697d58a2b4988473a26b9e0380876dfc00b72ab82ddfb4b9783a67c502c7997a180b89036317a3110f8ef91b1c93af9065d054b38732d634dfff106ba6b03d52a036513af4fba7c49268355eae6017ba5eb0a69274f2e28f9266f97b1301b278cdb1dd0f625f19363fd5a228332a17743eb96382253d7beaaa0d5b876bfb4ed9e2fa423a8ff7aaedbf1153bda6415809aef92ab8824b3091a157e4dd059376d9a6b0c68926c5d3c0cea251af35336416464805773cdf929b21355083d4886d92cf0d7d4ce57d126fc9067074dbb0f7709791e6239dd07de81b626d11e680453b616d1a2bac5b4fa2d1e3c6289841b4cf060e19b814be928a302f8e7e52257890208c844f2c5312dec455484830be5bf6cae41e712ad401935c3c03ac443ecea53572c8f2be0dcf6cbfa01b938980c4c8507ca9dd230ad295dfa24a2f2df8ef63bd3152c13c6c13dc0ad35e7e7c173a2b0dcd562137726cbf7e18c4f484af9c8e7e9759b5c3cb08d5a31d23a9b77521e712bf0c35c3e1b1c72e993cd8858d497dfdeb1cdb0d7eef5d46b68e948b836483d9068e0a901a1bf5394d8f92ac2068365b6ad3db56e45b68ef07b55741a3dfaf4dccb213c071be192fea0a8d0c67e68941c0e87298087387bbe978178e0b01d20418efbced69b13d7f56e2efc1c5dfbd6b4f0422206cdba17abe56f20536c9d542aac6a4fa3c39e067019ddae15002f641181cb871874787f7a544d2d19b5cedfd1fd54611b5400bf5fcaa851bd07ceac20eee589468c4f618f4f538c9fbbc561705be72f40007425c4e84f2a5fc8bf0555d10448bc861c408d2b4b57ca319a31a2b685a3b0aa320d7e172ef029a1aa3a9656f0bbabbe50f2a1d1c447cf2ac9c46a84f8695778580100be2267050f03af39bc36f4c66f2c05627b4586c351eaf4e529ea30de4b3ce5c57213444c8d604ba2a40830638dead5e6fac3df2c4dac6e602fd48cd3973edcfe882c959f31cad602bdb1472d9a8fdeed1133eb823dc2543a5420eaf13f21e951770e412dce5e3cd46527fb39757714ed31388301acf8db79608876d51fd7df95f9c5b857c1070850933ec6acdfc0882b8b1d30d4666493f47905997032268bd4729195a3e2d2cfa7b6cbbc424250a11657186361341147ba8328b291151e0588606dcb80e371ec332316acd43a3d92523761c345acc91ff6e1525031d5391f4965106dbf4333a309f7a94ad4de967762029a2ad5e90e488c8d79ae0bb4e414b2dc961834a98e10f0e9a0e9365e445212c9e6ca6341940b69c", 0x1000}, {&(0x7f0000000e80)="1efcd263a057e1505c98dbe0a014da0f21c0bda1bad69e4b7ff4e4d1114c77f572f75dc5226331ed8f53595e40b7c013d60f170bf291393f7bdb2e6c6d609ff623a0d6962baa99cb02a0da105f81508d9f7139d423abfb687660bee95c50e399ce8d90bedd65bfa999502af88a715f6bc8b9ec84afb6ddff652c", 0x7a}, {&(0x7f0000000500)="1cf45d28e72cf38d46bd3bf4cfa80928ba28610b8bde51355fb7245b113144ea375a247662a460f355334c15d1ac6480ca52f705b3cb9eaf", 0x38}], 0x5, 0x0, 0x0, 0x800}, {&(0x7f0000000f80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000001000)="2787ac4aa54a37386822a137e1315a05e58c4aee59de6420a544732a", 0x1c}, {&(0x7f0000001040)="76216b03a5b267364166935c3fa0b0e7cd808f0e9ba74193a51e436931256e9dc7e104aedbe304a51756d3856a00b30749fb4fe5b341989e13aad93866239d49411c0633da81227be267df24992c9901aec64d3899571f22ee18028a2fb5cfca30dcac06e9e4f7fe4b8417cee9b1ee2cae028f34406dcd90f657f0c43e7b1be929df561b787becff6b1b58848460372df5d23e98dfb688d5077910d11c128d89184d8fce0525d6fe06ccffe01719124e4c366a3c542920f5c2197194093fdf78976aebf27ce7b077747c864e1ba288426c0837a3f582ac2a3a0bfe8824f26a82fc7641f9a310a7c38b960b9ed38090563a75be", 0xf3}], 0x2, &(0x7f0000001180)=[@cred={0x20, 0x1, 0x2, r19, r14, r11}, @cred={0x20, 0x1, 0x2, r19, r13, r16}], 0x40, 0x4008000}, {&(0x7f00000011c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001240)="37c84bab6621dcfcc1811ccc504543ea29bc7b3ba89cbc5ab21dde784bc05abf36a3706c6b431656cb03bc4797562cd57467c5928f408912b0f5fd0f886794a36fb8224d2c35a1d4c913d6410e639c08e7d7ddbe78e5b6", 0x57}, {&(0x7f00000012c0)="f6c27b6740b88bac4b7ffae9b744b26fdcbc01a89f980181f12a71cf9cc309ad8dfd43a1bd81e8f5c7283bc97a03b9800ca68edd34251f9e459a13b3cc73005de1075ce0180a64b5822fa29ff0d469e0cf04350a49d1ff6d7b89b81063d6ca17ad0598f218761f7201a8c7e421e5211314595e9909f3f02961a244c577fa4f301f24ba674830a1860d27eeb944de56f8bc4f8f61612f8aef446d41043b992fc84ca4100319bf69aa", 0xa8}, {&(0x7f0000001380)="380d2898f6ae80d95e0c29827f1b3e22878cdfa174e9520eb6d8a02aca6c6208292bcbf6595f711e6a04c4f05c110e344d48c531af08", 0x36}, {&(0x7f0000003e80)="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", 0x1000}, {&(0x7f0000004e80)="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", 0x1000}], 0x5, &(0x7f0000001440)=[@rights={0x20, 0x1, 0x1, [r4, r1, r6, r0]}, @cred={0x20, 0x1, 0x2, r15, r10, r18}, @rights={0x20, 0x1, 0x1, [r6, r4, r4]}, @cred={0x20, 0x1, 0x2, r9, r12, r17}, @rights={0x30, 0x1, 0x1, [r20, r0, r20, r20, r2, r20, r20]}], 0xb0, 0x1}, {&(0x7f0000001500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001580)="5ced422c93c50a5cb2ebfa7346363a1e1b60a52875954514fd2941a5f1c8495dea8ccd270f79d583d5e6ca880a70bf87ce664f14c3b9329b84c66700cec0ada4f5f62d052493dac9511cb58f20a19486e92152f8243c6f21c407f1191c22505f8dd8e37232e4acf5356b5c31ebe12191717d2d0a3f1a6a5c0bc732fd1d5db0877291", 0x82}, {&(0x7f0000001640)="c20f4bd905d3f7873e678dce080d4cb6aedb5128ad827ac113db50bca568aa84c71df69fff9884add31e60e9c2a096e92af0405c5b1d30d360b1a5ae8f4fd583ed72bdcced66ecd0d79a78077f3f673f6e24b8e7ed733c62d5e58b63941d066e09a23f789d8b220a7bb854ce68efdd126117cca1a2931f0a01ab0e54052de398f99724243e2119bc1c62cd48df45c789dc1dad2043c01b80307595e74d152f459de503bb1732172a05dd6cedb2e21f5b9a3c9610e42945c0b8b01319368d86", 0xbf}, {&(0x7f0000001700)="f425ed1e11ed23654126fb9d27701ea34f89b16def8180f8c94c63d19165b545c95ec414ab55806f25410cbf20261e168d47bc7e758e138ddd5c631c8bd6e3e9f14e4b3d204c9aa192471796074582e21c2d4aedf045add1cb1ff26b926b598fd6559dd9db38807d986e8faa8bdda8d2b254149e55873139ba6f0c96d85be5fd251065b6c4d02e1e97d9", 0x8a}], 0x3, &(0x7f0000001800)=[@cred={0x20, 0x1, 0x2, r9, r12, r8}], 0x20, 0x84}, {&(0x7f0000001840)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001b80)=[{&(0x7f00000018c0)="4c6e7c0f035a6172b0bdce75d3c52448bc44f81c231c268c6174ceff249a93f61195b79b08c8c1b440aa36a6a71c6b386a8179c0b35593417007192be410c88ed029f99c060d433c2c64e1a4eefa57fdd605e780a6c12e692731ec", 0x5b}, {&(0x7f0000005e80)="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", 0x1000}, {&(0x7f0000001940)="510e6cf9e8cf6c52079212afde23a5f6232ee82d8e2129c90d2908236a656f773760d4f2fa8ae36760988ea2d6df2bffee5a7bfcda6b61e450e86abde260660887d781398a75634f84231aaec66637a84dcde28c0268d902c03d6f479930b47a4ffc1b5cdbbbb97cdbde91530037d2790de8ae9ec9941a96a92e0050b2450b3782fe6eb92a359b9754d0d9641329f81fbd7a884b69037535712f70cd93ac4fa95934781d1c55caa4ce1f", 0xaa}, {&(0x7f0000006e80)="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", 0x1000}, {&(0x7f0000001a00)="5dfce6b99236466d42d9d872142b625f110d4e209b91cb813ff418abbcde139aa2bd29e2dbf317c8bf765a39e1915772d95b9f1b14b603ffdc008480e742be80597f0e6f288995507c638de4af7ec7dab93b758789b455ab2fa30c599fa8a1b7228610ca5001a10ff7b17a30e0a35edd3c899908469fdeaa8275ece19def0e4a6e8dc07ac624caec16f0eb3e1778242e5ae7f598e81026bb0a9ce93740585909a1b102ff67189ccdea32145e7615a7cbef0127c9dd115e622f75f29384d5c5fdf5261b64372793d06da627e759a275fb4530f1735fb1e7169bab7dd003ec00b1218fd81d43b438e7dbc4e501b549e1d3", 0xf0}, {&(0x7f0000007e80)="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", 0x1000}, {&(0x7f0000001b00)="b7c4d5f125fcb56e79463264ad35f4e1f00062903a24a6182cdb86414faa92d77815dfde07195194b2fc6e42401cbff5bcdf63cb1f993d424494e5e70895f42b6ae8cd59b91b7ef8aaca80677368d49d5be4b52ef50742fb04e935f30207f3b883554b57deffa569a1dbae61a45d45f8f7", 0x71}], 0x7, &(0x7f0000001c00)=[@rights={0x18, 0x1, 0x1, [r6, r6]}, @rights={0x38, 0x1, 0x1, [r1, r20, r0, r2, r0, r2, r1, r1, r2]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r1, r2, r20, r4, r2]}, @cred={0x20, 0x1, 0x2, r9, r14, r11}, @rights={0x28, 0x1, 0x1, [r7, r2, r3, r6, r4, r0]}], 0xd8, 0x80}, {&(0x7f0000001d00)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000002dc0)="f64d8807bc9b807bc7aeba3f82170a5d6391d0522df9f83b1c1781db3cb2a73c587c65e9718685ea5a4537afc54cda397f69500dce97d713335cc001374912b234c6dfdaa6a98893bb0b01259b344c69f24e42e12db0d142a4c072ee212308da447f3ff2d7ebafbc36ef7053592c713c3b6bf3940d56f7871db98d3759d4633841967bf27d950741de1e7dbc", 0x8c}, {&(0x7f0000002e80)="0f41519eaddc4d7539ca2f3a02a1e4880a9f338196eefc52575875d93631eff23e9be13b035a2fee59b21e8949ae76dd3f007a50ed310fe7feaab22a01c82cac47cf9ba68088b0d625afbd72a21ab4e86efbad709349e9a0ac96018c14a134c664ff90ae18449007371a58ad56127aa0eaf9aee89b10e48074a071692db0d25cd7e25298f57cae25d538d0b8391bcd4efd4fc0e8cc4cd8a547c8c1cecce401fa127b17", 0xa3}, {&(0x7f0000002f40)="02597502535f8c207c11b02aa465067b48de0977e091b5e2274a75426fea86f3d2850fd40ab594fd13492c47fa689376e0ac4084e4dc31e3dd026ba563197c341c8095a43e84647fc3153e95f587728db82077", 0x53}, {&(0x7f0000002fc0)="62d4b5b81866379dbeee827f3d34e026717540b2ef67205044167d29249b6e8d7f", 0x21}, {&(0x7f0000003000)="4ddd205ab29670b3351fca7ad70e7cb00a6f83923c1e49f9276c866a2d76740829cd734547be486cfa7131098a492d47022213c4012a0ce1554f3fccc64009c93b8fcbf9c82db3bf259876836a5429272e49150d1ad42213d2ca8c49ebd09946070b8b1084ab8d622a192514ef3d4ba177231299ec3bb69158a27539d3afc045", 0x80}], 0x5, &(0x7f0000003100)=[@rights={0x20, 0x1, 0x1, [r4, r20, r5]}, @rights={0x18, 0x1, 0x1, [r3]}, @rights={0x38, 0x1, 0x1, [r0, r0, r7, r2, r5, r1, r0, r1, r0]}], 0x70}, {&(0x7f0000003180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003480)=[{&(0x7f0000003200)}, {&(0x7f0000003240)="95a7e602560a64cb53d3ae9259ace767eddf4612446777153a483506c1a5c2a9a53ea9017ef5e8bfcde40e5dafa20373c4cd1c12329e452de9258f1dd3047fb8ec766317a09215d016e0f9bdc401d9ac4abf4866c3ddc5894a19efeec6e7ed3c8854c1c0a04f9f46ab8589426eabc814696e1161e8c4800a179a72acb5594767c2108419684ac27cc6f053d6f761add946815c784294938b0ddc4427dc1bea927012c993229d11dc411514175487982e41891d07ff52e2dfe1a7c2ac92b883f68ec45cdccc3bbce474e0589260a902f4d1925d76e5f0ff72b7a79f22531368ba97935ac1f3564749861d77c86505fa04c16da6e4986e32b6e38a27d2", 0xfc}, {&(0x7f0000003340)="9e9572c144a18c5d30092f39680ec6c20927390dec7e9fe96d433365647481f65caa5dcacd0517ed87e945fdc903d5efeef1a0a63d775fa22944b1c13f418ca56f1827e699474e1fdbd128a9f49d9619be4ee2fed6a458b38dbfa8025c9279baf213815d0655465d02be2b3f6063079adca4a8a406d71e78c3e11a13083e072b16f189c9c4f75978b629e1144abb310a52d746a2c138b143e9e84c5b814c6b6ad6a6bac7a4378b008efd3ee6ce700962ecb584d7cbbd2e7e672b81e2db585e51d3be0c83e635b2110778572a2c01bbdfb13fa4d276b0ee4e8fae01294462", 0xde}, {&(0x7f0000003440)}], 0x4, &(0x7f00000034c0)=[@rights={0x20, 0x1, 0x1, [r4, r20, r0]}, @cred={0x20, 0x1, 0x2, r15, r10, r18}, @rights={0x10}], 0x50, 0x44050}, {&(0x7f0000003540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000035c0), 0x0, &(0x7f00000036c0)=[@rights={0x28, 0x1, 0x1, [r4, r4, r1, r0, r7, r7]}], 0x28, 0x800}], 0x9, 0x5) 03:48:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) finit_module(r0, &(0x7f0000000180)='(\x00', 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r3, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x10001}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x800}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x1fc2, 0x4]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$TCFLSH(r2, 0x540b, 0xd4) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000140)='(\x00') ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x68, &(0x7f0000000080)=""/89) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1268.674500] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1268.703250] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1268.753738] binder: 5641:5649 transaction failed 29201/-28, size 24-8 line 3255 03:48:39 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x4000, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x20000000000006, 0x209e1e, 0x3, 0x1, 0xffffffffffffff9c, 0x0, [], 0x0, 0xffffffffffffffff, 0xe8}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffd51, 0x0, &(0x7f0000000300), 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) 03:48:39 executing program 3: r0 = getpgrp(0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/status\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000005c0)=0x1, 0x12) r2 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80021020}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="04002abd7000fcdbdf250e0000002c0002000800090000000000080008000800000008000b000a000000080003000300000008000500990f0000400003000800010003000000080001000200000008000100020000000800030002000000090000004e23000014000600fe8000000000000000000000000000aafb84bb5243741b2f478bba35f2732c2a2c413ad6cfcdecb7c97a284e2fd736c274f87df36fc4620b203a02b8e6ad149e8d915e42352c38e08b4c5bb831dc2d6cd9cf2b1892b7deb30c7017720d28a2143bdb61f632212a"], 0x80}, 0x1, 0x0, 0x0, 0xc084}, 0x240008c5) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xdc, r4, 0x401, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7bc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5e289ec7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = gettid() rt_sigprocmask(0x3, &(0x7f0000000500)={0x6}, &(0x7f0000000540), 0x8) rt_sigprocmask(0x0, &(0x7f00000000c0)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r5, 0x23, &(0x7f0000000040)={0x0, 0x0, 0x4}) rt_sigtimedwait(&(0x7f0000000000)={0x7fffffffffffff26}, &(0x7f0000a72ff0), 0x0, 0x8) 03:48:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x30c, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72cc350d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x442e, @mcast1, 0xffffffff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x12}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x73}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x635bff31}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc4c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x179}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_BEARER={0x194, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @mcast2, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x42fa, @local, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x100000001, @rand_addr="28e8c30d7d16e558fa45203b4a181681", 0x7ff}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xcfa, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xd3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc1de}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'hwsim0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1f, @mcast1, 0x800}}, {0x14, 0x2, @in={0x2, 0x4e24}}}}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1268.964712] binder: BINDER_SET_CONTEXT_MGR already set [ 1269.017445] binder: 5645:5654 ioctl 40046207 0 returned -16 [ 1269.054659] binder: 5645:5661 Release 1 refcount change on invalid ref 1 ret -22 03:48:40 executing program 0: clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = gettid() r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x40400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080), 0x4) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$peekuser(0x3, r1, 0x10001) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000004, 0xa4}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1f, &(0x7f0000000080)) 03:48:40 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000000c0)={0x5, {{0x2, 0x4e24, @multicast1}}}, 0x88) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000280)={0xe, 0x2, 0x0, 0xffff, 0x62, "3d8662dbb9ffe74e3beaf6c83b5d43544e825acae10a1f832618b596ef208b81fc154ba8ec2cacb65d46eb407744781a5d752aedb4c350872072ba42d06e6baab5bd29a1eb04df864823a2c1c4be3ac0736a147f01d720a60fd2368b5dd6e576b5fe"}, 0x6e) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 03:48:40 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1269.927519] loop4: p1 p2 p3 p4[EZD] [ 1269.932024] loop4: p1 start 1 is beyond EOD, truncated 03:48:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/127) ioctl$KDDELIO(r0, 0x4b35, 0x9c4) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xffffffffffffff0a, 0x12, 0x1, 0x4}, {0x8, 0x5, 0x1, 0x6}, {0x2, 0x100000000, 0x4, 0x6}, {0x6, 0x9, 0x101, 0x8000}, {0x100, 0x100, 0x3afb6df7, 0x2}, {0x9, 0x100000, 0x2, 0x7}]}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000280)=@get={0x1, &(0x7f00000001c0)=""/138, 0x5}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000300)={0x6, 0x1, 0x6542, 0xfa7, 0x11, 0x9, 0x1, 0x93a5, 0xffffffff, 0x3, 0x800, 0x3ff}) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000340)) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000380)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000023c0)={r1, &(0x7f00000003c0)="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", &(0x7f00000013c0)=""/4096}, 0x18) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002440)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000002600)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002480)={0x10c, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf4}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x100000000}]}, @TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xdda, @local, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x10c}}, 0x24000000) ioperm(0x9, 0x0, 0xfffffffffffffffc) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000002640)) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000002680)=""/207) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000002780)=0x80) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000027c0)) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000002800)=""/211) getpeername(r1, &(0x7f0000002900)=@isdn, &(0x7f0000002980)=0x80) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000029c0)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000002a00)) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x80000001) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000002a40)={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0xd}, 0x101}, {0xa, 0x4e23, 0x7fff, @mcast2, 0x7}, 0x5, [0xffffffffffffbe6d, 0x9, 0xbe2, 0x181, 0x5, 0x7fffffff, 0x7919, 0x8]}, 0x5c) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000002ac0)="bbbb7d14b310e9ca98cc072786985f6be205c8aa39247f0db573ed3f32031ece3a139960d6ff83ad2c4b32934f65c80b5a3866094fb312d7fda5ab1f5180fa724fcf2e7573af92213eaf3cbf6acd7564f0f6a1439f5fe7c207c38dae563845") statfs(&(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80)=""/119) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002d40)={r1, &(0x7f0000002c00)="8abe7e546a9596d2203db8394c0f7843149bc7d4586da76997fbed3bdb73408da2eea0e96c2a4fa9365eb7ebdbdaae120cbf1f7dad2f3e24b6f1cd0b2cb7795c2c9caa73521e681d24d714284308692ac713604461f7e889cdfa41cb3c0fcd7576d97d99178d52f9cc32753966f44f39217f9ebee30793ef6eeb5765a75f2cb542", &(0x7f0000002cc0)=""/118}, 0x18) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000002d80)='/selinux/context\x00', 0x2, 0x0) [ 1270.016260] kauditd_printk_skb: 216 callbacks suppressed [ 1270.016268] audit: type=1400 audit(2000000920.822:38585): avc: denied { map } for pid=5677 comm="modprobe" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1270.044517] loop4: p2 start 101 is beyond EOD, truncated [ 1270.049983] loop4: p3 start 201 is beyond EOD, truncated [ 1270.124992] loop4: p4 start 301 is beyond EOD, truncated [ 1270.190997] audit: type=1400 audit(2000000920.822:38586): avc: denied { map } for pid=5666 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:48:41 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x400, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', r1, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) [ 1270.414964] audit: type=1400 audit(2000000920.862:38587): avc: denied { map } for pid=5677 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:48:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00', &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x1f, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x22000, 0x80) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000140)=""/85) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000080)) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) splice(r2, &(0x7f0000000280), r3, &(0x7f00000002c0), 0xff, 0x2) [ 1270.581151] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space 03:48:41 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x3c1000, 0x4) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) [ 1270.688264] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1270.748735] audit: type=1400 audit(2000000920.862:38588): avc: denied { map } for pid=5677 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1270.775977] binder: 5690:5704 BC_INCREFS_DONE u0000000000000000 no match [ 1270.783944] binder: 5689:5698 transaction failed 29201/-28, size 24-8 line 3255 [ 1270.847251] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1270.855752] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1270.868555] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1270.875187] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1270.878496] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1270.881006] audit: audit_lost=383 audit_rate_limit=0 audit_backlog_limit=64 [ 1270.948100] binder: 5690:5704 BC_ACQUIRE_DONE u0000000000000000 no match 03:48:41 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() write$P9_RWRITE(r2, &(0x7f0000000140)={0xb, 0x77, 0x2, 0x9}, 0xb) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) getsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="41f53b7010080a52ee85aafd9c5ef6a91d16f6036b3d73192a00fdf9326029f01624b96800bae8742163f3c977683ac6d2af45dd48bd36"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 03:48:41 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$unix(0x1, 0x1000000805, 0x0) socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) dup2(r0, r0) tkill(r3, 0x27) llistxattr(0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42a02) 03:48:42 executing program 3: clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000000c0)) [ 1271.717337] loop4: p1 p2 p3 p4[EZD] [ 1271.721734] loop4: p1 start 1 is beyond EOD, truncated [ 1271.755548] loop4: p2 start 101 is beyond EOD, truncated 03:48:42 executing program 2: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f0000000200)="941957437a56d328aea3b92313ecdb57fe59166d9de596ed8738fa105e192169af41f19cdeb85110ed31541f142d66f9b1cdc8911954191ed784adc51a0910b48d83cfa1059c506a663080bf15fc215997672d5ac1dae9168c4a78b55f6338e9f96246241aabe8a054116577be80a6bd5c9bb750310062338d15a2198f0fa006cd822471aea4a5d7290b543522ee26150e286e058d7de581e1c2dbb1a2ae178cba968c3e575eb6d5b315be09c90e0fe71370f70def5609bff17ec2f73653e32e09f3c9d33dce69dc45f961a7e9f9548e094a88aeb6cae89e52d88f79f57cade3719016b5bfd1d94815e2bd1dd698144fdb3ec7b598") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00000000c0)={'ip6_vti0\x00', {0x2, 0x4e21, @multicast2}}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x4e24, @rand_addr=0x1000}}}, 0x88) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x775, 0x1f, 0x40, 0x0, 0x0, 0x3, 0x200, 0xd, 0x100000001, 0x9, 0x8, 0xffffffffffffff3b, 0x0, 0x2, 0x24970ef2, 0x1c36b766, 0xffffffff, 0x950, 0x2, 0xfec, 0x6, 0xff, 0x9, 0x99, 0x0, 0x6, 0x6, 0x401, 0x8, 0x9, 0xffffffffffffffff, 0xb6, 0x5, 0x3, 0x3, 0x4, 0x0, 0xffffffffffff7fff, 0x1, @perf_config_ext={0x5, 0x20}, 0x0, 0x1, 0xffff, 0x7, 0x7d5, 0x1, 0x7}, r2, 0xa, r2, 0x8) openat$cgroup_type(r2, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) [ 1271.797523] loop4: p3 start 201 is beyond EOD, truncated [ 1271.832147] loop4: p4 start 301 is beyond EOD, truncated 03:48:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") [ 1272.206458] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1272.257142] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1272.292603] binder: BINDER_SET_CONTEXT_MGR already set [ 1272.333217] binder: 5721:5726 transaction failed 29201/-28, size 24-8 line 3255 [ 1272.352617] binder: 5722:5737 ioctl 40046207 0 returned -16 [ 1272.360214] binder: 5722:5738 got transaction with invalid offset (0, min 0 max 0) or object. [ 1272.424549] binder: 5722:5727 BC_INCREFS_DONE u0000000000000000 no match [ 1272.437457] binder: 5722:5737 Release 1 refcount change on invalid ref 1 ret -22 [ 1272.456728] binder: 5722:5738 transaction failed 29201/-22, size 0-8 line 3349 03:48:43 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={@ipv4={[], [], @multicast1}, 0x5, r5}) r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1272.541967] binder: 5722:5737 BC_ACQUIRE_DONE u0000000000000000 no match 03:48:43 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:43 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:43 executing program 4: creat(&(0x7f0000000000)='./bus\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000380)='./bus\x00', &(0x7f0000000400)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:fsadm_log_t:s0\x00', 0x1d, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) wait4(r1, &(0x7f0000000080), 0x2, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) 03:48:44 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() write$P9_RWRITE(r2, &(0x7f0000000140)={0xb, 0x77, 0x2, 0x9}, 0xb) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) getsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="41f53b7010080a52ee85aafd9c5ef6a91d16f6036b3d73192a00fdf9326029f01624b96800bae8742163f3c977683ac6d2af45dd48bd36"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1273.376880] SELinux: Context system_u:object_r:fsadm_log_t is not valid (left unmapped). [ 1273.448270] binder: BINDER_SET_CONTEXT_MGR already set 03:48:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x100) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x5, 0x4, 0x20, 0x7fff, 0x800}) ioctl$RTC_UIE_OFF(r1, 0x7004) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) openat$cgroup_ro(r1, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1273.472383] binder: 5754:5764 ioctl 40046207 0 returned -16 [ 1273.503544] binder: 5754:5769 Release 1 refcount change on invalid ref 1 ret -22 03:48:44 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00y\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1273.810193] binder: BINDER_SET_CONTEXT_MGR already set [ 1273.837689] binder: 5755:5774 ioctl 40046207 0 returned -16 03:48:44 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1273.946725] binder: 5755:5774 BC_INCREFS_DONE u0000000000000000 no match [ 1273.991628] binder: 5755:5774 Release 1 refcount change on invalid ref 1 ret -22 [ 1274.076592] binder: 5755:5774 BC_ACQUIRE_DONE u0000000000000000 no match [ 1274.108368] binder: 5755:5761 got transaction with invalid offset (0, min 0 max 0) or object. [ 1274.166357] binder: 5755:5761 transaction failed 29201/-22, size 0-8 line 3349 [ 1274.295852] binder: undelivered TRANSACTION_ERROR: 29201 03:48:45 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x10000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0xfffffffffffffff8, {{0xa, 0x4e24, 0x6, @empty}}}, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xa, &(0x7f0000000000)="d070") 03:48:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f00000012c0)=ANY=[], 0xffffffffffffff69) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400201) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/222, 0xde}], 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000280), &(0x7f00000001c0)=0x2ab) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="030008010100a13760287d98b8c460b1c8d967a6864855a4259c6bbdf370b3f11246325b3db6606fc03849cfd35ddf2e1a79a3af2acec16fb52a2b6d2e4b496d50a9b0c5d9eae1ebbe6ada4d08e89abc35209d88adfec4018b79ede4f309df9ec964b292991a34bb8e983cfb088dc5a84087981907f06fb553fea321920d8c9d4873b3d9dd0c5986d721bc7c6413a81735bbf75f9d084d5ae7b25fe013387057e9a810dd75913a01000000"], 0xab, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x81, 0x800, 0x8, 0x5, 0x8}) 03:48:45 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) fcntl$addseals(r1, 0x409, 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x1) execveat(r5, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="00000000000000000d36e7aaca73fa7e6376b1aa98dc6b0924e41298e2b571d6721025f1aada29c944c46bdea91fe6b5f545df5cef773ad702d70dcddbbe9a665c947a4b81d1b9c86fb9f078f8c03573afbbafe7af08ba1a8646c23d2d60155163d688da7254ad4ba016b7976e856362e3df0da5a759e13c570e7fbbf78c8de0a9e81ba0106d43071535f402da0d18131f"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 03:48:45 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:45 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() write$P9_RWRITE(r2, &(0x7f0000000140)={0xb, 0x77, 0x2, 0x9}, 0xb) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) getsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="41f53b7010080a52ee85aafd9c5ef6a91d16f6036b3d73192a00fdf9326029f01624b96800bae8742163f3c977683ac6d2af45dd48bd36"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1274.959846] binder: 5786:5795 got transaction with invalid offset (0, min 0 max 0) or object. [ 1274.994687] binder: 5786:5798 BC_INCREFS_DONE u0000000000000000 no match 03:48:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x17c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x12}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="2202254981581f1a75a1f77e1565474b"}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7fffffff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3ef4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x14}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffffd}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xd}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x29}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x17c}}, 0x8000) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0ae60e0000003f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1275.065492] binder: 5786:5795 transaction failed 29201/-22, size 0-8 line 3349 [ 1275.068076] kauditd_printk_skb: 321 callbacks suppressed [ 1275.068085] audit: type=1400 audit(2000000925.832:38862): avc: denied { map_create } for pid=5792 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 1275.175288] binder: 5786:5798 BC_ACQUIRE_DONE u0000000000000000 no match 03:48:46 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() write$P9_RWRITE(r2, &(0x7f0000000140)={0xb, 0x77, 0x2, 0x9}, 0xb) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) getsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="41f53b7010080a52ee85aafd9c5ef6a91d16f6036b3d73192a00fdf9326029f01624b96800bae8742163f3c977683ac6d2af45dd48bd36"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 03:48:46 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1275.341467] binder: undelivered TRANSACTION_ERROR: 29201 [ 1275.389925] audit: type=1400 audit(2000000925.932:38864): avc: denied { create } for pid=5786 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:48:46 executing program 0: sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)="e5a2c82c07f6e2763f21fdcb5721bf8e", 0x8) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x400000000010, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x5) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000005c0), &(0x7f0000000600)=0x4) ioctl(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={0x1}, 0x8) close(r0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000080)=""/40, 0x28}, {&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000000440)=""/222, 0xde}], 0x6) setgid(0x0) ftruncate(r3, 0x88001) sendfile(r0, r3, 0x0, 0x800000000024) [ 1275.587278] audit: type=1400 audit(2000000925.952:38865): avc: denied { write } for pid=5786 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1275.617975] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1275.683549] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1275.726334] binder: 5793:5817 BC_INCREFS_DONE u0000000000000000 no match [ 1275.760845] binder: 5812:5812 transaction failed 29201/-28, size 24-8 line 3255 [ 1275.760861] binder: 5793:5815 got transaction with invalid offset (0, min 0 max 0) or object. [ 1275.797346] audit: type=1400 audit(2000000925.832:38863): avc: denied { map_create } for pid=5793 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 1275.854980] binder: 5793:5815 transaction failed 29201/-22, size 0-8 line 3349 [ 1275.976917] audit: type=1400 audit(2000000926.082:38866): avc: denied { map } for pid=5805 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:48:46 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r7 = open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) r8 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600)=0x0, &(0x7f0000003640)=0x0, &(0x7f0000003680)) r13 = gettid() getresgid(&(0x7f0000003a40)=0x0, &(0x7f0000003a80)=0x0, &(0x7f0000003ac0)=0x0) r17 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c80)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000001d40)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0xa200}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x30, r17, 0x200, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000040) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)=0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r6, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r19 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f0000001b40)=[{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000280)="a7da446e5e27346cfa064aa5c67c6811df830986c2ebe8cb9955d2e8f8765eef428e58f38d63656de9638c7cde26e3064e6026939cb210f68a6072ede6862f9ce3e059200ac5", 0x46}, {&(0x7f0000000140)="1e4aa938626aa3c1344f65bd9b4a4f", 0xf}, {&(0x7f0000000380)="f995ac", 0x3}, {&(0x7f0000000480)="a544f9d88eb0fa5bdbcb6f13a5917951c11efefd56360380b9c077daed60cc362c19933ea4407d846bae49c7475b34ea96f7cf17ae5dfa3a271d1ae3006e3ba3d550d60af05700", 0x47}, {&(0x7f0000000580)="52269c149a52a854a45cfe158a7e3b58f234c52221a1373d1600a6bf1cc430bb93cbffd48f210ebb8329480382ec0844ec06eb85af6450c19774559285dfc048cb077215c45f8c16c796ce34767711b9f467bae318c25078bca510cb4da71cecf4346029474943e120b060f47208934462d1fd715f87b162085939d3365b4da60bd38c5cdb0bd820794ad263236f4116c3df2231776c1384927aa76846b59bf10de7cf", 0xa3}, {&(0x7f0000000640)="d0e4b6736ca064579c2e312328b66bb032ab92615c87e8c4bb8939e03f760cb1c508bbab82268c6665ffaf81ac8747ea27332e23ef01112d4afd84e2b8967fb3ec225f739a93b8b85c6e855794231ace51f28c4a62302fb30297d70b5cf82f7116842985f29f5fba7d41e91463ca74afa30b2b2c37706a37cadc6ea9cb34a784041b1c24a64d18fd0188ca1287f6611c02b8", 0x92}, {&(0x7f0000000700)="5971c5f41d79e109c593c7786f583232c211b921deda8db23e131a66891f33033779cbfe080bfc1f461d5ca7f1f58babb042a03a2e0255a31e45395504ef5d609d1eb81f0d2a4d58c808c4cadfd95221e3bc8912b337600cc96554e84df8439190258bb215b9dd5102386f0f5f09d91ab207cab09778701d15938fd73e42dda7d89b6ba142f5ae8c3a95eeb9b86e7d4a27213e96a482b03f2eb99a09b9951f11f00ff0f3e1ded664b3d5a811bacfe033e58b729f37e30b12547a5f0c0c2d2555cea3d60305a6e8c237", 0xc9}, {&(0x7f00000003c0)="b7af2794b24aabb7fc2c83a31240d4b50f5db735ecfb3b86ed548fa6dc", 0x1d}, {&(0x7f0000000800)="a10981633af123f742b75b09986bd49e9859c16524d284ac4a4f126ebbe1f714d2d052fcc39399e30e007a4f446868184e7a488a3326cc5d730476a14d91bb6f0be61d488eb6b523f03cd11f41e75599bef29b4bc875735ccdf9022a324053f4d92d3861e28a26fc0c1315d2072d588562532fe5a7c37dd2ddbaa976d029f16bafe4c77708073745a77c74c16ac589e7cc041aa4685923b6a5ccd99a655fd671f8eea3d21ae12eaf0413f21febc14651c212a85080836fe4a2770e0c1b3a92bb8203688234605107b6c00108dc", 0xcd}, {&(0x7f0000000500)="a3357749799b2764ac1fb2f6c8e74a43c27f99c5b92540053429cf9e2de717fab0180caf7d770634f1dc6cfa", 0x2c}], 0xa, &(0x7f0000000b80)=[@rights={0x20, 0x1, 0x1, [r6, r19, r0]}, @cred={0x20, 0x1, 0x2, r9, r11, r15}, @rights={0x10}, @rights={0x28, 0x1, 0x1, [r19, r5, r7, r3, r2]}, @rights={0x28, 0x1, 0x1, [r3, r5, r0, r19, r4, r6]}], 0xa0}, {&(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000c40)="a5c8dd9585f2f760e55bad6b6de889eb907b8ae2e7fff1d3053f50a49cbadfc66d7add58b0cbe7099452b9fa6ff7df9eb4db61554e41f1d2003cd9516bba27af8c252b15348c0d0a95221c0383d8726f23dfb3c595f8a8bf1366c1941203414b2f48367c502950434bbedd1d3dc88957bf8986a027726124c782fae2b509341ca1d0692d6333d1bc0daab7a11b9ab34accbf7290ccd0edb34641180dd3b3ec95d8fd39dcf8de0ee70873048737c36ce85764252260c2f9f4e034991a641c1ad7a7ea9ac8b1e5cdd72e915c3dbd6fb3", 0xcf}, {&(0x7f0000000d40)="4af90a59e325749163d62e445b4cc9d6d01c9b5880d6bdc349eca39f719b6484ca7747bdbae973c14b394e3cda836414dceb74ba246b8b8d44f13d6243cee8f442261fb918c3bd5960240cba7a455a9b62a82b75b6a7f6f67b22c3dda235602b6d78a378405b65624bbb25a23733938e0999b731cc17cf0c50ee2473e88034ef785afadb4f8add73dcc679540163", 0x8e}, {&(0x7f0000000e00)="7b3d9d00df05bae235567cc9ca33fc4c5021b98374faf08ab6b7a22760c9b777297241538fd4cb96ed01a0cb7a6e64e3117ee4b740a0b022c6ae36d546064fc3da1300313fbafd021915b0d3d5c27b33b125727a354bb493b77dffabb62b1ae3bee81ae739fa155d69b9910332d25703a6782f5dd30c1f6ec9386d32b930dc492ad8cdad435fabff63ed1c0b9eb6c59cca9f0fc0bcf639e8b9de2ceac8936290bfcc659ae9dca563306ed7c60d6e05310f6ea031ba9c45a7a164bc17c1bb2ac8af0f09", 0xc3}, {&(0x7f0000000f00)="05e1c86422b6af0cf5d27f36de3b373a889082288aa38ea6160e0661083fb6578c42ccb4b1f17a3f2c06002b89da4b5b46fa6dc98a428d481284fe4cf13b35e68adf4aaf033f91df65b5ab7b2e71061f565e7fef354336451054fd1b09c218c6b3ebf9ae9641dc3c2a0dc66a631454cbad1d02a7294f57a09979179d8cef4d63bcb3a59f20a6f825ba1458d3bbc044a57b92141d56fc031df8f883db75b6c5f328d2d08007576a3fb1ba0b30493fafbcf5f71373eeaea5033b8566da49eb6a7ec3c18a63ecb8ff79a26d15fbc580f38478b8", 0xd2}], 0x4, &(0x7f0000001000)=[@rights={0x18, 0x1, 0x1, [r5, r6]}, @rights={0x18, 0x1, 0x1, [r1, r2]}, @rights={0x18, 0x1, 0x1, [r2]}, @cred={0x20, 0x1, 0x2, r13, r11, r16}, @cred={0x20, 0x1, 0x2, r9, r12, r10}, @cred={0x20, 0x1, 0x2, r9, r12, r14}, @rights={0x28, 0x1, 0x1, [r19, r19, r3, r4, r6, r3]}, @cred={0x20, 0x1, 0x2, r9, r11, r8}], 0xf0, 0x880}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001180)="212fff6a491a3c5ee9b0b67dde8973a7672121b7db2d4c84d9137a52e2f9b33e681d09e64d034a918a8b1ba0896fc13832be4e3c7d80162c053bf18792ce84ebae745fcfa1c70723e2427dc2b23e202801415c10776d0b69ff54907adf7a5950bc81c5fbaf461252108380bbc2bcd343d03f609a30fca0b6368ec84c99c92c195f254621a7b07d9973aa32e33c53610b62b96aa3305abb5e04cd57dbd33469cf9da35cc02b861bec0b91ab80409bf3e7ce14544b3b48ad5f2087fe7010130ebad8558fffc144bf5d6810f08c1da1ab002011ba70b8ea00b513bbb4bdde24c18d6009017145f04e", 0xe7}, {&(0x7f0000001280)="295b8965ccb71df196cb1640652f22fd57a08a3230393263e78195b08067d9ba1b5c07a01ed51e664053676423ff76af64a2778c20b484a34c2f7e469160d8a5c197548922039608b683feea8f39deed48ce462890683158786395503cd670aab7839bb02580eecc6c58527c3dbee8d66b4f933246789241f2161ba8b74b18bb49888d526807f5bfbd4a618990fdbd8f47414525a88c4249e2cdb02bc221a9ba068020b1a2defdfb15e8b6505e7562a3a5f204b99e764d8f71ef93b11f15da224318a21fbd183c95ac2aa221c3934d578a2fe651b203", 0xd6}, {&(0x7f0000000ac0)="781e443adc7c6dbcda801ed47e3b5e33a16d99fb7355649465c1", 0x1a}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000001380)="9341863cc0c458b7007f865fb30337229e3939bbf051bb2317982711c091ee91aaa209b1fe99b551ce733e62793647465417770dbb026b304446ee5f77a03d8abfc079f75491", 0x46}, {&(0x7f0000001400)="36c2d4b42f81c0b740d77874a620a7d1f65449148b9a57811ce65f7d8aa185", 0x1f}, {&(0x7f0000001440)="09147fd419f22d4e6da183c465b2d92a9a7108900f6e073c58740fea82b1a8257270e548f6c9e6c35f52c04a7c58c14214f86a6d6311b13cb16c2bc8e57b4987814421a1a4ae55c1a99f86d4fdbac437c6f311401ea3e65ee034ecbc31b4e92ae122f558997ff27db11eb7476fd5e4016fa00e3667c9bb29382dd24a0b1a70234f3b8127242340c50b1d9331330489ffa284eb31e59f673d66bed56fb3e665068d3b07f416781c3145f89dde", 0xac}, {&(0x7f0000001500)="c4445c3c1bdad9eaee662f33c9d4e2e1ea272b4ac3a59082ba76069ce249bb5c119931e8e9f24eb2c09412cb2472004293558fa5b2fe3e0669897a06c131222829a670e6188afd598d39b9153c4b1afa9bb3ef769963330f4ef8d9b487454db2b2538be6e52f4f10f1b86a82144394b3f18de23d932ba5b95f8f5cb93b8e05c1df9abd379892c60ea5800e16f8f68bac658021c3c98d54626e72b2e5d0323cafbcb2fac0e102ec29d25ab7498b79824d00", 0xb1}, {&(0x7f00000015c0)="34c297d55c3902de971bf80a98b0079d90f5da4616a39ff3a4b593c7d870690955ec7f1e5e1d0d958424ed60133151a6ca0ccb3697d6d1c6", 0x38}, {&(0x7f0000001600)="9ebdfb3913a9b0206e5f249e171dc68572647b9a35afb3b9705f716596b4e3b1ff4b5147b2afd59908df8f86f4b3238b3cff207958918df4053feea847ae82d01d8416641348281d0f70a96602b7568405d86468c0ec463fc4422a4dd3bdc2b0a987dd", 0x63}], 0xa, 0x0, 0x0, 0x4840}, {&(0x7f0000001740)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000017c0), 0x0, &(0x7f0000001800)=[@cred={0x20, 0x1, 0x2, r9, r11, r15}, @cred={0x20, 0x1, 0x2, r18, r12, r15}, @rights={0x28, 0x1, 0x1, [r5, r6, r5, r4, r5, r7]}, @rights={0x20, 0x1, 0x1, [r0, r4, r1, r1]}, @rights={0x28, 0x1, 0x1, [r7, r3, r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r13, r12, r10}], 0xd0, 0x20008000}, {&(0x7f0000001900)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000003e80)="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", 0x1000}, {&(0x7f0000001980)="f9de8cef8ecb684a30fe29154748da5851a0db9604aa95d8559b9cbbeea3dcdd9f2c69e33d6f45826da8a30daf028514e110235791d9f30bec9ae8af4bf38203323658336335e7b5ccc16a9600d0ea1f07cb6bc82082941cc8243add200aa54e72e1849ec1a10b7e095176a982940b25915ee44b262539afc432a815f530277ac4d0b8fa4e47298e006eccb8392ade0e65b2e90309eb681d368e7dff753df6b2f6ef947033215231a5d20137c4b380e2bfd2ebcb863621c2a66d649996b8e1ea64dcceadf56628c80b667c299253cff47f041e", 0xd3}, {&(0x7f0000001a80)="e1d4b5586c36178bfd1f9096d0c35aecc64487ba45873c16b53529be0b749a5132f5731a49af0c236ea660c86677664a269a9edbd716d63177f3a1a72929dca28f9376b9f529", 0x46}, {&(0x7f0000004e80)="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", 0x1000}], 0x4, 0x0, 0x0, 0x800}], 0x5, 0x4040) ioctl$BINDER_WRITE_READ(r19, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1276.119942] loop4: p1 p2 p3 p4[EZD] [ 1276.189903] loop4: p1 start 1 is beyond EOD, truncated [ 1276.231021] audit: type=1400 audit(2000000926.092:38867): avc: denied { map } for pid=5803 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1276.283461] loop4: p2 start 101 is beyond EOD, truncated [ 1276.339995] loop4: p3 start 201 is beyond EOD, truncated [ 1276.390033] loop4: p4 start 301 is beyond EOD, truncated [ 1276.403620] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1276.412071] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1276.419476] audit: audit_backlog=65 > audit_backlog_limit=64 03:48:47 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_procfs(r0, &(0x7f00004c6f8b)='mounts\x00') mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000080), 0xff97) connect(r1, &(0x7f0000000140)=@in={0x2, 0x4e22, @loopback}, 0x125) [ 1276.437533] audit: audit_backlog=65 > audit_backlog_limit=64 03:48:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@initdev, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) getsockopt$netlink(r0, 0x10e, 0xf, &(0x7f0000000100)=""/240, &(0x7f0000000000)=0xf0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x84800) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000240)=0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000280)=r3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000020000100000000000000000002140000000000000000a1a2822b0542f068ff149e91000000000000"], 0x20}}, 0x0) [ 1276.544236] binder: BINDER_SET_CONTEXT_MGR already set [ 1276.578512] binder: 5823:5836 ioctl 40046207 0 returned -16 [ 1276.636689] binder: 5823:5836 BC_INCREFS_DONE u0000000000000000 no match [ 1276.681862] binder: 5823:5837 Release 1 refcount change on invalid ref 1 ret -22 [ 1276.767700] binder: 5823:5834 got transaction with invalid offset (0, min 0 max 0) or object. [ 1276.798645] binder: 5823:5837 BC_ACQUIRE_DONE u0000000000000000 no match 03:48:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x3) epoll_create1(0xac2f8580fb53bde0) [ 1276.877244] binder: 5823:5834 transaction failed 29201/-22, size 0-8 line 3349 03:48:47 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:48 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x200000, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500)='nbd\x00') r3 = dup3(r0, r0, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffff000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xb8d2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x48055) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup2(0xffffffffffffffff, r4) prlimit64(0x0, 0x2, &(0x7f00000000c0), 0x0) syz_execute_func(&(0x7f0000000100)="f3e100def9575cc3b7d991d6734e4e73224a460f30096ccc2e67660e50e94d00c9c966440f38082173294ad0d26c4507c422f18cf0bf420fae9972b571b99f01467785fb") ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000740)) r6 = syz_genetlink_get_family_id$tipc2(0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000200)={{0x62, @remote, 0x4e22, 0x2, 'sh\x00', 0x20, 0x1ff, 0x6e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x1, 0x6, 0xffffffffffffffff, 0x10000}}, 0xffffffffffffff71) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x170, r6, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7d4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'teql0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffffffffffb, @dev={0xfe, 0x80, [], 0x19}, 0x3f}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffeffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3389}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x80) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x22}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r2, 0x700, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r2, 0x202, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000180)=0x2) 03:48:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ppp\x00', 0x400000, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e24, @rand_addr=0x5}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1, 0x140) getdents(r1, 0x0, 0x3eeb7301) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)) getpid() r2 = getpid() r3 = syz_open_procfs(r2, 0x0) write$selinux_validatetrans(r3, &(0x7f0000000280)=ANY=[], 0x0) accept$unix(0xffffffffffffff9c, &(0x7f0000000440)=@abs, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002b80)='/selinux/policy\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f00000005c0)={0x200}, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100)) getpeername$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x7, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r3, &(0x7f0000000340)="725f3be526811246b0cb312c95e41358c46fa2c7b6387ab9a815a7459115b6e4018eee175c213530ee5787a1693f77a14fcbf1e51be6fd9f47272c8c242a15ce2ef4241c6b52fde6bc5bb6a2565c190ec7d31ed6e6d3da60baf782935250818a9dbb68d58bef4c2f018dc4230409d7397c5774ea38ae", 0x0}, 0x18) ptrace(0x10, r5) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000600)=r5) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002680)={@remote}, &(0x7f0000000180)=0x217) sched_getparam(r5, 0x0) ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff) symlinkat(&(0x7f0000000540)='./file0\x00', r3, &(0x7f0000000580)='./file0\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) 03:48:48 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x7, 0x1000}, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x2) futex(0x0, 0x83, 0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 1277.797785] loop4: p1 p2 p3 p4[EZD] [ 1277.815559] loop4: p1 start 1 is beyond EOD, truncated [ 1277.845881] loop4: p2 start 101 is beyond EOD, truncated [ 1277.869034] loop4: p3 start 201 is beyond EOD, truncated [ 1277.894720] loop4: p4 start 301 is beyond EOD, truncated [ 1277.963736] binder: 5860:5875 got transaction with invalid offset (0, min 0 max 0) or object. 03:48:48 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1278.015838] binder: 5860:5878 BC_INCREFS_DONE u0000000000000000 no match [ 1278.034735] binder: 5860:5875 transaction failed 29201/-22, size 0-8 line 3349 [ 1278.175088] loop4: p1 p2 p3 p4[EZD] 03:48:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x108042, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000200)=@known='trusted.overlay.upper\x00', &(0x7f0000000240)='\x00', 0x1, 0x2) write(r1, &(0x7f0000000600)="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", 0x11d) r3 = perf_event_open(&(0x7f00004e7000)={0x0, 0x70, 0xe0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x666f) pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='4', 0x1}], 0x1, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) r4 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() r6 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SVE_GET_VL(0x33, 0xba90) recvmmsg(r6, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close(r4) ptrace$setopts(0x4206, r5, 0x0, 0x0) pause() tkill(r5, 0x33) setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @rand_addr=0x800}}}, 0x108) unlinkat(r1, &(0x7f00000001c0)='./file0\x00', 0x200) [ 1278.202580] loop4: p1 start 1 is beyond EOD, truncated [ 1278.250271] loop4: p2 start 101 is beyond EOD, truncated [ 1278.288456] loop4: p3 start 201 is beyond EOD, truncated 03:48:49 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1278.328207] loop4: p4 start 301 is beyond EOD, truncated 03:48:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x3, 0x100000400000003a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0xfffffffffffffffe, 0x80000000}, @mss={0x2, 0x3}, @mss={0x2, 0x5}, @timestamp, @sack_perm, @timestamp], 0x6) sendmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="8200f231effe0b", 0x7}], 0x1}}], 0x1, 0x8000) write(r1, &(0x7f0000000180)="00f3", 0x2) 03:48:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x1) ioctl$RTC_UIE_ON(r1, 0x7003) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) 03:48:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x1}) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c10964c0f05bf03000000c4a37bf0c50141e2e9c422e9aabb3c0000004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") [ 1279.036568] binder: 5892:5904 transaction failed 29189/-22, size 24-8 line 3118 03:48:50 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0xf0ff7f) 03:48:50 executing program 5: socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f00000002c0)=0x6) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730052375cf0e6ea92ab37db8bbef90a100000a38e9c8cee62c139b847cc9d758fe5df74c6a8945749376e6c292079bad62e0579", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 03:48:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r1, &(0x7f00000002c0)=""/240, 0xf0) [ 1279.290879] binder: BINDER_SET_CONTEXT_MGR already set [ 1279.320433] loop4: p1 p2 p3 p4[EZD] [ 1279.347089] loop4: p1 start 1 is beyond EOD, truncated [ 1279.358743] binder: 5894:5914 ioctl 40046207 0 returned -16 [ 1279.361212] binder: 5894:5915 got transaction with invalid offset (0, min 0 max 0) or object. [ 1279.385453] binder: 5894:5915 transaction failed 29201/-22, size 0-8 line 3349 [ 1279.386622] loop4: p2 start 101 is beyond EOD, truncated [ 1279.421720] binder: 5894:5899 BC_INCREFS_DONE u0000000000000000 no match [ 1279.444945] binder: 5894:5914 Release 1 refcount change on invalid ref 1 ret -22 [ 1279.462472] loop4: p3 start 201 is beyond EOD, truncated [ 1279.489497] loop4: p4 start 301 is beyond EOD, truncated [ 1279.538746] binder: 5894:5914 BC_ACQUIRE_DONE u0000000000000000 no match 03:48:50 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xb3c3, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x167) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000000)) close(r0) 03:48:50 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$selinux_attr(r0, &(0x7f0000000140)='system_u:object_r:pam_console_exec_t:s0\x00', 0x28) 03:48:50 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") [ 1279.987253] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1280.008454] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1280.073246] binder: 5921:5932 transaction failed 29201/-28, size 24-8 line 3255 [ 1280.129669] kauditd_printk_skb: 286 callbacks suppressed [ 1280.129676] audit: type=1400 audit(2000000930.932:39140): avc: denied { map_create } for pid=5921 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 03:48:51 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x28, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r5, 0x1, 0x8}, 0xc) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1280.315679] audit: type=1400 audit(2000000931.102:39141): avc: denied { map_create } for pid=5934 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 1280.377943] loop4: p1 p2 p3 p4[EZD] [ 1280.382395] loop4: p1 start 1 is beyond EOD, truncated [ 1280.397996] loop4: p2 start 101 is beyond EOD, truncated [ 1280.426644] loop4: p3 start 201 is beyond EOD, truncated [ 1280.450616] loop4: p4 start 301 is beyond EOD, truncated [ 1280.488503] audit: type=1400 audit(2000000931.292:39142): avc: denied { call } for pid=5934 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1280.488590] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1280.535073] binder: 5934:5957 BC_INCREFS_DONE u0000000000000000 no match [ 1280.619932] audit: type=1400 audit(2000000931.412:39143): avc: denied { create } for pid=5934 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1280.651009] binder: 5934:5958 BC_ACQUIRE_DONE u0000000000000000 no match [ 1280.663861] loop4: p1 p2 p3 p4[EZD] 03:48:51 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000540)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:pam_console_exec_t:s0\x00', 0x28) [ 1280.670894] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1280.687756] loop4: p1 start 1 is beyond EOD, truncated [ 1280.709226] loop4: p2 start 101 is beyond EOD, truncated 03:48:51 executing program 3: syz_genetlink_get_family_id$tipc(0x0) syz_execute_func(&(0x7f0000000000)="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") 03:48:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x1}) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") [ 1280.717177] binder: 5934:5952 transaction failed 29201/-28, size 24-8 line 3255 [ 1280.753131] loop4: p3 start 201 is beyond EOD, truncated 03:48:51 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1280.805257] audit: type=1400 audit(2000000931.422:39144): avc: denied { write } for pid=5934 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1280.814198] loop4: p4 start 301 is beyond EOD, truncated 03:48:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$getregs(0xe, r2, 0x6, &(0x7f0000000140)=""/11) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1280.943278] audit: type=1400 audit(2000000931.582:39145): avc: denied { map } for pid=5959 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1281.065859] audit: type=1400 audit(2000000931.582:39146): avc: denied { map } for pid=5959 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1281.163324] audit: type=1400 audit(2000000931.582:39147): avc: denied { map } for pid=5959 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1281.286300] audit: type=1400 audit(2000000931.582:39148): avc: denied { map } for pid=5962 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1281.420528] audit: type=1400 audit(2000000931.592:39149): avc: denied { map } for pid=5962 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:48:52 executing program 0: 03:48:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1281.669097] binder: BINDER_SET_CONTEXT_MGR already set [ 1281.705709] binder: 5968:5987 ioctl 40046207 0 returned -16 [ 1281.739506] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1281.780650] binder: 5968:5969 BC_INCREFS_DONE u0000000000000000 no match [ 1281.799593] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1281.815737] binder: 5968:5987 Release 1 refcount change on invalid ref 1 ret -22 [ 1281.854603] binder: 5968:5988 transaction failed 29201/-28, size 24-8 line 3255 03:48:52 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000100)='/dev/zero\x00', 0xa, 0x3) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r4 = open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() write$P9_RMKNOD(r2, &(0x7f0000000140)={0x14, 0x13, 0x1, {0x28, 0x1, 0x2}}, 0x14) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000280)={{0x2, 0x4e21, @remote}, {0x6}, 0x0, {0x2, 0x4e22, @broadcast}, 'ip6_vti0\x00'}) r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1281.958990] binder: 5968:5987 BC_ACQUIRE_DONE u0000000000000000 no match 03:48:52 executing program 3: 03:48:52 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:53 executing program 0: 03:48:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') preadv(r0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f00000002c0)=""/114, 0x72}], 0x3, 0x0) [ 1282.466494] loop4: p1 p2 p3 p4[EZD] [ 1282.470559] loop4: p1 start 1 is beyond EOD, truncated [ 1282.498674] loop4: p2 start 101 is beyond EOD, truncated [ 1282.543961] loop4: p3 start 201 is beyond EOD, truncated [ 1282.574280] loop4: p4 start 301 is beyond EOD, truncated 03:48:53 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x0, 0x0) syz_execute_func(&(0x7f0000000000)="994a2ae92c10964c0f05bf03000000c4a37bf0c50141e2e9c422e9aabb3c0000004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") 03:48:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x3, 0xffffffff, &(0x7f0000000100)="df6ba48f44117ae6eab37645c79986f54ee9f2bd9bb06abae2c31949ed59a0f402f732289b195a25ac3bd3826eb2be784d52a447179794cef3438a25a0a191cb868ca1067d9e0e4682ae77c7d7b302aaa02f33091934be2c73e2c19bbb8c28207a3533839d226d3ddd2e53a6aed91f87595f5b522539e5dc1d8a45a45a978f226d55c096423203c3af03f1e2328a529524f08549af16529c4b8504f9cf6b4b29e3", 0xa1) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x7, 0x7, 0x2}) fchmod(r0, 0x0) ioctl(r0, 0x7, &(0x7f0000000080)="0a65582aa958a16a1cf401") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x3ba) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000340), 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) fsetxattr$security_capability(r1, &(0x7f00000001c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x0, 0x1}, {0x4, 0x8}], r2}, 0x18, 0x2) fcntl$setlease(r0, 0x400, 0x1) 03:48:53 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x84080, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r2 = open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000000c0)) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="000000800000000c"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1283.033793] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 03:48:53 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/uts\x00') [ 1283.118808] binder: BINDER_SET_CONTEXT_MGR already set [ 1283.132051] binder: 5998:6013 ioctl 40046207 0 returned -16 [ 1283.197468] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1283.241017] binder: 5998:6014 BC_INCREFS_DONE u0000000000000000 no match [ 1283.280891] binder: 5998:6014 Release 1 refcount change on invalid ref 1 ret -22 [ 1283.289636] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1283.378109] binder: 5998:6013 transaction failed 29201/-28, size 24-8 line 3255 [ 1283.468965] binder: 5998:6013 BC_ACQUIRE_DONE u0000000000000000 no match 03:48:54 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:48:54 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/net\x00') setns(r0, 0x0) 03:48:54 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) ioctl$TCSETA(r1, 0x5406, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000ec0)="61ce6ed94f41f48fddb17be75acd5fff8e4109548bec482bfc0c6321cc4cae47952fade164de0d115b601581953f9a337ea011906254b229aa6c3a8d246142c633fc0f54b0218c5becb9fd513c8914bdfad4668e36b8ffb24d6f7dc5e8119510898eca216a75ce4e6a295af4b6bc4dae50e31997f687b4bbc532210cef625534447e1a449d37a6163113a57c34f68e15230f660c161a41fa5330b0f852d2e337c373b2efe237dad926b57ba2421c33d21b5f8b412a3468010211cc46be2fc19f9731cab96ede51d898", 0xc9}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 03:48:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x4004000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') write$P9_RAUTH(r3, &(0x7f0000000080)={0x14, 0x67, 0x1, {0xdc, 0x2, 0x8}}, 0x14) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x0, &(0x7f0000000200)) io_setup(0xffff, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) io_getevents(r4, 0x7, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400)={r5, r6+10000000}) write$selinux_user(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="738661e28f487871f8c013797374656d5f753a6f626a6102e781ff81648d18387119000000b9725f617574685f743a733020726f6f740000000000000000"], 0x25) [ 1284.063310] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1284.108677] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1284.157669] binder: 6027:6030 transaction failed 29201/-28, size 24-8 line 3255 03:48:55 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x5) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10}], 0x10}, 0x3ff}], 0x1, 0x0) 03:48:55 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x4, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 03:48:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') preadv(r0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000280)=""/31, 0x1f}], 0x2, 0x0) 03:48:55 executing program 0: r0 = gettid() pipe(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write$P9_RLERRORu(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) prctl$PR_MCE_KILL_GET(0x22) creat(0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:48:55 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1284.821112] binder: BINDER_SET_CONTEXT_MGR already set [ 1284.859306] binder: 6036:6049 ioctl 40046207 0 returned -16 [ 1284.879725] binder_alloc: 17238: binder_alloc_buf size 24 failed, no address space [ 1284.923374] binder: 6036:6049 BC_INCREFS_DONE u0000000000000000 no match [ 1284.943736] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1284.966788] binder: 6036:6049 Release 1 refcount change on invalid ref 1 ret -22 [ 1285.022548] binder: 6036:6053 transaction failed 29201/-28, size 24-0 line 3255 [ 1285.136452] kauditd_printk_skb: 250 callbacks suppressed [ 1285.136461] audit: type=1400 audit(2000000935.942:39400): avc: denied { map } for pid=6059 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:48:56 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1285.280254] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1285.312835] audit: type=1400 audit(2000000935.952:39401): avc: denied { map } for pid=6050 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1285.355499] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) 03:48:56 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001640)=[{&(0x7f0000000240)=""/197, 0xc5}], 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/full\x00', 0x101100, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000e80)=0x6238, 0x4) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0xec5, 0x4) [ 1285.399676] binder: 6048:6057 transaction failed 29201/-28, size 24-8 line 3255 03:48:56 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_elf32(r3, &(0x7f0000000b80)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x10001, 0xc6, 0x80000000, 0x1, 0x2, 0x3, 0x100000001, 0x204, 0x38, 0x57, 0x2, 0xabe, 0x20, 0x1, 0x4, 0xbd8f, 0x6}, [{0x6474e551, 0x1, 0x5, 0x7, 0x26b, 0xfffffffffffffff9, 0x3, 0x101}, {0x5, 0x4f38, 0x4d, 0x5, 0x7f, 0x6, 0x1, 0x8ea}], "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", [[], [], [], [], []]}, 0x676) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) r5 = open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) sendto$inet6(r2, &(0x7f00000000c0)="b5691fb7d49f72e578b71a2c8d3756a1941729c3c3cdf0341f5f12cf650838d8ae6cbc15eee0867e6f34841ee31a756b5dc24e9eda71c2fb4ef8ff7ef3bfab698c5cf35b2642d22e6c27df91b6fca66616ee71a8a6dc0201cb9f61b1b480915b832a88fcf2b058ab6cad4d75bd6e05a72f385ef39b417dd2754710e25ada931ac46d90ae201dc3", 0x87, 0x44, &(0x7f0000000280)={0xa, 0x4e22, 0x100000, @mcast1, 0x1f}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1285.478747] audit: type=1400 audit(2000000935.962:39403): avc: denied { map } for pid=6054 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1285.558651] loop4: p1 p2 p3 p4[EZD] [ 1285.563938] loop4: p1 start 1 is beyond EOD, truncated [ 1285.587808] loop4: p2 start 101 is beyond EOD, truncated [ 1285.633729] loop4: p3 start 201 is beyond EOD, truncated [ 1285.641174] loop4: p4 start 301 is beyond EOD, truncated [ 1285.657788] audit: type=1400 audit(2000000935.982:39404): avc: denied { map } for pid=6054 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:48:56 executing program 3: r0 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept(r0, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0}}, 0x0) r3 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$smack_current(r3, &(0x7f0000000040)='\x00', 0x1) recvmmsg(r1, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) [ 1285.847089] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1285.858035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1285.864692] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1285.870501] audit: audit_lost=407 audit_rate_limit=0 audit_backlog_limit=64 [ 1285.874918] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1285.883840] audit: type=1400 audit(2000000935.982:39405): avc: denied { map } for pid=6059 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:48:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 03:48:57 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0090006b7f040000006c4c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200552020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1286.485346] binder: BINDER_SET_CONTEXT_MGR already set [ 1286.490853] binder: 6082:6085 ioctl 40046207 0 returned -16 [ 1286.549451] loop4: p1 p2 p3 p4[EZD] [ 1286.553611] loop4: p1 start 1 is beyond EOD, truncated [ 1286.559298] loop4: p2 start 101 is beyond EOD, truncated [ 1286.579335] loop4: p3 start 201 is beyond EOD, truncated [ 1286.584901] binder: 6082:6101 BC_INCREFS_DONE u0000000000000000 no match [ 1286.595336] binder: 6082:6101 Release 1 refcount change on invalid ref 1 ret -22 [ 1286.601762] loop4: p4 start 301 is beyond EOD, truncated [ 1286.626163] binder_alloc: 17238: binder_alloc_buf size 24 failed, no address space 03:48:57 executing program 2: syz_execute_func(&(0x7f00000000c0)="b11591cd801b69696c69dc00d9d9d0c44139fd5bf9c7c7e4c653fb0fc4014c58c4a1e96be7c44149f2168f4808eebce00000802000c421fc51c1ea01efc48192558dc3c36645c4c1e173fb65f1400fae28787c3e460f569f000000003ef0954200fcc401fe5ff6c4a27d33e4646736676666430fefb3000000000804f4c4837d1118fbc40213f5930a0000000013a4001369879f000000fe") r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000001c0)={0x1000, 0x82, "dcc7b31d07e896845dde7f57956f78713aa44c43df62733739ea7069bc79e4a302eafa8a98ccb5426e9d88bfbeee2de5d2445ca02bd0da234a8febaa29a92a6a8fe508e2ece4f151688899e634a9e9a99ff7cd04ecc9559270be83dfa0a7d1fe2b7633d24fa3d0d5998899a389042646786320b7ba2a18dc9b4ef2b1b2bbea3c5cc1"}) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) fsetxattr(r1, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000080)='\x00', 0x1, 0x2) [ 1286.661388] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1286.689804] binder: 6082:6085 transaction failed 29201/-28, size 24-0 line 3255 [ 1286.777025] loop4: p1 p2 p3 p4[EZD] [ 1286.781102] loop4: p1 start 1 is beyond EOD, truncated [ 1286.807959] loop4: p2 start 101 is beyond EOD, truncated 03:48:57 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) gettid() getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a6a7300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1286.826797] loop4: p3 start 201 is beyond EOD, truncated [ 1286.836022] loop4: p4 start 301 is beyond EOD, truncated 03:48:57 executing program 4: unshare(0x20020000) socket$inet(0x10, 0x3, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) keyctl$get_keyring_id(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x20002000005) listxattr(0x0, &(0x7f00000013c0)=""/21, 0x15) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, 0x0, 0xbfffe, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind(r3, &(0x7f0000000380)=@in6={0xa, 0x4e23, 0x3, @loopback, 0x4}, 0x80) r4 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$PPPIOCDISCONN(r3, 0x7439) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) faccessat(r5, &(0x7f0000000080)='./file0\x00', 0x10, 0x400) poll(0x0, 0x0, 0x400007a) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') 03:48:57 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1287.047628] loop3: p1 p2 p3 p4[EZD] [ 1287.052328] loop3: p1 start 1 is beyond EOD, truncated [ 1287.085332] loop3: p2 start 101 is beyond EOD, truncated [ 1287.105548] loop3: p3 start 201 is beyond EOD, truncated [ 1287.118325] loop3: p4 start 301 is beyond EOD, truncated [ 1287.542309] binder: BINDER_SET_CONTEXT_MGR already set [ 1287.547847] binder: 6118:6122 ioctl 40046207 0 returned -16 [ 1287.557803] binder_alloc: 17238: binder_alloc_buf size 24 failed, no address space [ 1287.565661] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1287.574639] binder: 6118:6122 transaction failed 29201/-28, size 24-0 line 3255 [ 1287.584021] binder: 6118:6122 Release 1 refcount change on invalid ref 1 ret -22 03:48:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1004008912, &(0x7f00000000c0)="0adc1ff23b123f319bd050") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000001700)={@local, @random="e7dc0bd148fe", [], {@ipv6={0x86dd, {0x0, 0x6, "8604ef", 0x44, 0x2c, 0x0, @remote, @dev, {[], @gre}}}}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000000)=0xf52, 0x4) 03:48:58 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x20000000003, 0xffffffffffffffff) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x2000002001}) 03:48:58 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1288.351462] binder: BINDER_SET_CONTEXT_MGR already set [ 1288.356838] binder: 6127:6129 ioctl 40046207 0 returned -16 [ 1288.365660] binder_alloc: 17238: binder_alloc_buf size 24 failed, no address space [ 1288.373373] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1288.383612] binder: 6127:6129 transaction failed 29201/-28, size 24-0 line 3255 [ 1288.393007] binder: 6127:6129 Release 1 refcount change on invalid ref 1 ret -22 INIT: Id "6" respawning too fast: disabled for 5 minutes 03:48:59 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1289.264994] binder: BINDER_SET_CONTEXT_MGR already set [ 1289.270947] binder: 6132:6135 ioctl 40046207 0 returned -16 [ 1289.280989] binder_alloc: 17238: binder_alloc_buf size 24 failed, no address space [ 1289.289227] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1289.298947] binder: 6132:6135 transaction failed 29201/-28, size 24-0 line 3255 [ 1289.308947] binder: 6132:6135 Release 1 refcount change on invalid ref 1 ret -22 03:49:00 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1289.375849] binder: 6132:6137 BC_ACQUIRE_DONE u0000000000000000 no match [ 1289.681857] binder: BINDER_SET_CONTEXT_MGR already set [ 1289.688358] binder: 6139:6141 ioctl 40046207 0 returned -16 [ 1289.698190] binder_alloc: 17238: binder_alloc_buf size 24 failed, no address space [ 1289.706368] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1289.715904] binder: 6139:6141 transaction failed 29201/-28, size 24-0 line 3255 [ 1289.725915] binder: 6139:6141 Release 1 refcount change on invalid ref 1 ret -22 03:49:00 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1289.791285] binder: 6139:6143 BC_ACQUIRE_DONE u0000000000000000 no match [ 1290.105873] binder: BINDER_SET_CONTEXT_MGR already set [ 1290.111867] binder: 6145:6147 ioctl 40046207 0 returned -16 [ 1290.121715] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1290.129657] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1290.138907] binder: 6145:6147 transaction failed 29201/-28, size 24-8 line 3255 [ 1290.149006] binder: 6145:6147 Release 1 refcount change on invalid ref 1 ret -22 [ 1290.163713] kauditd_printk_skb: 245 callbacks suppressed [ 1290.163722] audit: type=1400 audit(2000000940.962:39601): avc: denied { create } for pid=6145 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1290.193858] audit: type=1400 audit(2000000940.972:39602): avc: denied { write } for pid=6145 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1290.221843] audit: type=1400 audit(2000000940.992:39603): avc: denied { map } for pid=6148 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 03:49:01 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getpgid(0x0) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r2, &(0x7f0000003780)) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000480)=0xfa1cb98fb83f0733) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940)) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1290.252292] binder: 6145:6149 BC_ACQUIRE_DONE u0000000000000000 no match [ 1290.261225] audit: type=1400 audit(2000000940.992:39604): avc: denied { map } for pid=6148 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1290.293590] audit: type=1400 audit(2000000940.992:39605): avc: denied { map } for pid=6148 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1290.319206] audit: type=1400 audit(2000000940.992:39606): avc: denied { map } for pid=6148 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1290.345086] audit: type=1400 audit(2000000941.002:39607): avc: denied { map } for pid=6148 comm="modprobe" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1290.368936] audit: type=1400 audit(2000000941.012:39608): avc: denied { map } for pid=6148 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1290.394388] audit: type=1400 audit(2000000941.012:39609): avc: denied { map } for pid=6148 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1290.421765] audit: type=1400 audit(2000000941.022:39610): avc: denied { map } for pid=6148 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1290.651738] binder: BINDER_SET_CONTEXT_MGR already set [ 1290.657468] binder: 6151:6153 ioctl 40046207 0 returned -16 [ 1290.667490] binder_alloc: 17238: binder_alloc_buf size 32 failed, no address space [ 1290.675747] binder_alloc: allocated: 12280 (num: 388 largest: 32), free: 8 (num: 1 largest: 8) [ 1290.684952] binder: 6151:6153 transaction failed 29201/-28, size 24-8 line 3255 [ 1290.695411] binder: 6151:6153 Release 1 refcount change on invalid ref 1 ret -22 INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes [ 1303.503465] kauditd_printk_skb: 37 callbacks suppressed [ 1303.503474] audit: type=1400 audit(2000000954.302:39648): avc: denied { map } for pid=6158 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1303.532383] audit: type=1400 audit(2000000954.322:39649): avc: denied { map } for pid=6158 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1303.558697] audit: type=1400 audit(2000000954.322:39650): avc: denied { map } for pid=6158 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1303.583044] audit: type=1400 audit(2000000954.322:39651): avc: denied { map } for pid=6158 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1303.609427] audit: type=1400 audit(2000000954.342:39652): avc: denied { map } for pid=6158 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1303.632178] audit: type=1400 audit(2000000954.342:39653): avc: denied { map } for pid=6158 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1303.657816] audit: type=1400 audit(2000000954.342:39654): avc: denied { map } for pid=6158 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1303.682320] audit: type=1400 audit(2000000954.352:39655): avc: denied { map } for pid=6158 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1303.706610] audit: type=1400 audit(2000000954.362:39656): avc: denied { map } for pid=6158 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1303.730772] audit: type=1400 audit(2000000954.402:39657): avc: denied { map } for pid=6158 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1313.688667] kauditd_printk_skb: 10 callbacks suppressed [ 1313.688674] audit: type=1400 audit(2000000964.492:39668): avc: denied { map } for pid=6159 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1313.716808] audit: type=1400 audit(2000000964.502:39669): avc: denied { map } for pid=6159 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1313.740883] audit: type=1400 audit(2000000964.502:39670): avc: denied { map } for pid=6159 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1313.765278] audit: type=1400 audit(2000000964.502:39671): avc: denied { map } for pid=6159 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1313.790759] audit: type=1400 audit(2000000964.512:39672): avc: denied { map } for pid=6159 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1313.815522] audit: type=1400 audit(2000000964.522:39673): avc: denied { map } for pid=6159 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1313.839885] audit: type=1400 audit(2000000964.522:39674): avc: denied { map } for pid=6159 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1313.865509] audit: type=1400 audit(2000000964.522:39675): avc: denied { map } for pid=6159 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1313.889679] audit: type=1400 audit(2000000964.532:39676): avc: denied { map } for pid=6159 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1313.914109] audit: type=1400 audit(2000000964.572:39677): avc: denied { map } for pid=6159 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1323.864649] kauditd_printk_skb: 10 callbacks suppressed [ 1323.864656] audit: type=1400 audit(2000000974.672:39688): avc: denied { map } for pid=6160 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1323.893242] audit: type=1400 audit(2000000974.682:39689): avc: denied { map } for pid=6160 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1323.921327] audit: type=1400 audit(2000000974.682:39690): avc: denied { map } for pid=6160 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1323.945412] audit: type=1400 audit(2000000974.682:39691): avc: denied { map } for pid=6160 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1323.971514] audit: type=1400 audit(2000000974.692:39692): avc: denied { map } for pid=6160 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1323.995664] audit: type=1400 audit(2000000974.702:39693): avc: denied { map } for pid=6160 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1324.021338] audit: type=1400 audit(2000000974.702:39694): avc: denied { map } for pid=6160 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1324.045777] audit: type=1400 audit(2000000974.702:39695): avc: denied { map } for pid=6160 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1324.070130] audit: type=1400 audit(2000000974.712:39696): avc: denied { map } for pid=6160 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1324.094268] audit: type=1400 audit(2000000974.742:39697): avc: denied { map } for pid=6160 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1334.040903] kauditd_printk_skb: 10 callbacks suppressed [ 1334.040912] audit: type=1400 audit(2000000984.842:39708): avc: denied { map } for pid=6161 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1334.068936] audit: type=1400 audit(2000000984.842:39709): avc: denied { map } for pid=6161 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1334.091622] audit: type=1400 audit(2000000984.842:39710): avc: denied { map } for pid=6161 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1334.116184] audit: type=1400 audit(2000000984.852:39711): avc: denied { map } for pid=6161 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1334.146259] audit: type=1400 audit(2000000984.852:39712): avc: denied { map } for pid=6161 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1334.169468] audit: type=1400 audit(2000000984.852:39713): avc: denied { map } for pid=6161 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1334.194935] audit: type=1400 audit(2000000984.852:39714): avc: denied { map } for pid=6161 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1334.219351] audit: type=1400 audit(2000000984.852:39715): avc: denied { map } for pid=6161 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1334.244007] audit: type=1400 audit(2000000984.852:39716): avc: denied { map } for pid=6161 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1334.268067] audit: type=1400 audit(2000000984.892:39717): avc: denied { map } for pid=6161 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1344.204710] kauditd_printk_skb: 10 callbacks suppressed [ 1344.204719] audit: type=1400 audit(2000000995.012:39728): avc: denied { map } for pid=6162 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1344.235860] audit: type=1400 audit(2000000995.012:39729): avc: denied { map } for pid=6162 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1344.260393] audit: type=1400 audit(2000000995.012:39730): avc: denied { map } for pid=6162 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1344.284369] audit: type=1400 audit(2000000995.012:39731): avc: denied { map } for pid=6162 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1344.310045] audit: type=1400 audit(2000000995.012:39732): avc: denied { map } for pid=6162 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1344.332520] audit: type=1400 audit(2000000995.012:39733): avc: denied { map } for pid=6162 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1344.357995] audit: type=1400 audit(2000000995.012:39734): avc: denied { map } for pid=6162 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1344.382259] audit: type=1400 audit(2000000995.012:39735): avc: denied { map } for pid=6162 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1344.406560] audit: type=1400 audit(2000000995.012:39736): avc: denied { map } for pid=6162 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1344.430584] audit: type=1400 audit(2000000995.062:39737): avc: denied { map } for pid=6162 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1354.358728] kauditd_printk_skb: 10 callbacks suppressed [ 1354.358734] audit: type=1400 audit(2000001005.162:39748): avc: denied { map } for pid=6164 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1354.388331] audit: type=1400 audit(2000001005.172:39749): avc: denied { map } for pid=6164 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1354.414917] audit: type=1400 audit(2000001005.172:39750): avc: denied { map } for pid=6164 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1354.439993] audit: type=1400 audit(2000001005.172:39751): avc: denied { map } for pid=6164 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1354.468443] audit: type=1400 audit(2000001005.182:39752): avc: denied { map } for pid=6164 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1354.494033] audit: type=1400 audit(2000001005.182:39753): avc: denied { map } for pid=6164 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1354.521124] audit: type=1400 audit(2000001005.192:39754): avc: denied { map } for pid=6164 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1354.546114] audit: type=1400 audit(2000001005.192:39755): avc: denied { map } for pid=6164 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1354.570265] audit: type=1400 audit(2000001005.192:39756): avc: denied { map } for pid=6164 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1354.594368] audit: type=1400 audit(2000001005.232:39757): avc: denied { map } for pid=6164 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1364.521841] kauditd_printk_skb: 10 callbacks suppressed [ 1364.521846] audit: type=1400 audit(2000001015.322:39768): avc: denied { map } for pid=6165 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1364.550217] audit: type=1400 audit(2000001015.332:39769): avc: denied { map } for pid=6165 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1364.575314] audit: type=1400 audit(2000001015.332:39770): avc: denied { map } for pid=6165 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1364.601251] audit: type=1400 audit(2000001015.332:39771): avc: denied { map } for pid=6165 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1364.627582] audit: type=1400 audit(2000001015.332:39772): avc: denied { map } for pid=6165 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1364.650214] audit: type=1400 audit(2000001015.342:39773): avc: denied { map } for pid=6165 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1364.674705] audit: type=1400 audit(2000001015.342:39774): avc: denied { map } for pid=6165 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1364.699219] audit: type=1400 audit(2000001015.342:39775): avc: denied { map } for pid=6165 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1364.723464] audit: type=1400 audit(2000001015.342:39776): avc: denied { map } for pid=6165 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1364.747527] audit: type=1400 audit(2000001015.362:39777): avc: denied { map } for pid=6165 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1374.634406] kauditd_printk_skb: 10 callbacks suppressed [ 1374.634416] audit: type=1400 audit(2000001025.442:39788): avc: denied { map } for pid=6166 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1374.666815] audit: type=1400 audit(2000001025.442:39789): avc: denied { map } for pid=6166 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1374.691720] audit: type=1400 audit(2000001025.442:39790): avc: denied { map } for pid=6166 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1374.719501] audit: type=1400 audit(2000001025.442:39791): avc: denied { map } for pid=6166 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1374.743616] audit: type=1400 audit(2000001025.442:39792): avc: denied { map } for pid=6166 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1374.767367] audit: type=1400 audit(2000001025.442:39793): avc: denied { map } for pid=6166 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1374.791883] audit: type=1400 audit(2000001025.442:39794): avc: denied { map } for pid=6166 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1374.816527] audit: type=1400 audit(2000001025.472:39795): avc: denied { map } for pid=6166 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1374.840712] audit: type=1400 audit(2000001025.472:39796): avc: denied { map } for pid=6166 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1374.865128] audit: type=1400 audit(2000001025.492:39797): avc: denied { map } for pid=6166 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1384.802428] kauditd_printk_skb: 10 callbacks suppressed [ 1384.802438] audit: type=1400 audit(2000001035.602:39808): avc: denied { map } for pid=6167 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1384.830729] audit: type=1400 audit(2000001035.602:39809): avc: denied { map } for pid=6167 comm="getty" path="/sbin/getty" dev="sda1" ino=16170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1384.854633] audit: type=1400 audit(2000001035.602:39810): avc: denied { map } for pid=6167 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1384.878539] audit: type=1400 audit(2000001035.612:39811): avc: denied { map } for pid=6167 comm="getty" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1384.904631] audit: type=1400 audit(2000001035.612:39812): avc: denied { map } for pid=6167 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1384.927275] audit: type=1400 audit(2000001035.612:39813): avc: denied { map } for pid=6167 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1384.952286] audit: type=1400 audit(2000001035.612:39814): avc: denied { map } for pid=6167 comm="getty" path="/lib/x86_64-linux-gnu/libutil-2.13.so" dev="sda1" ino=2681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1384.977077] audit: type=1400 audit(2000001035.612:39815): avc: denied { map } for pid=6167 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1385.001271] audit: type=1400 audit(2000001035.632:39816): avc: denied { map } for pid=6167 comm="getty" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1385.025398] audit: type=1400 audit(2000001035.662:39817): avc: denied { map } for pid=6167 comm="getty" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 INIT: Id "2" respawning too fast: disabled for 5 minutes [ 1431.513859] INFO: task syz-executor.5:1847 blocked for more than 140 seconds. [ 1431.521288] Not tainted 4.14.113+ #61 [ 1431.526549] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1431.534779] syz-executor.5 D25640 1847 1 0x00000004 [ 1431.540494] Call Trace: [ 1431.543095] ? __schedule+0x91c/0x1f30 [ 1431.547115] ? HARDIRQ_verbose+0x10/0x10 [ 1431.551189] ? __sched_text_start+0x8/0x8 [ 1431.555506] ? lock_downgrade+0x5d0/0x5d0 [ 1431.559665] ? lock_acquire+0x10f/0x380 [ 1431.563626] ? __mutex_lock+0x2c1/0x1430 [ 1431.567962] schedule+0x92/0x1c0 [ 1431.571400] schedule_preempt_disabled+0x13/0x20 [ 1431.576701] __mutex_lock+0x559/0x1430 [ 1431.580611] ? perf_trace_lock+0x11e/0x4e0 [ 1431.584893] ? check_preemption_disabled+0x35/0x1f0 [ 1431.589920] ? lo_release+0x78/0x190 [ 1431.593755] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1431.599293] ? HARDIRQ_verbose+0x10/0x10 [ 1431.604756] ? lock_downgrade+0x5d0/0x5d0 [ 1431.608911] ? lock_acquire+0x10f/0x380 [ 1431.612927] ? __blkdev_put+0x1cb/0x6d0 [ 1431.617148] ? lo_compat_ioctl+0x130/0x130 [ 1431.621815] ? lo_release+0x78/0x190 [ 1431.626782] lo_release+0x78/0x190 [ 1431.632467] ? lo_compat_ioctl+0x130/0x130 [ 1431.636856] __blkdev_put+0x518/0x6d0 [ 1431.640668] ? bd_set_size+0xb0/0xb0 [ 1431.644446] ? blkdev_put+0x75/0x4c0 [ 1431.650868] ? blkdev_put+0x4c0/0x4c0 [ 1431.655350] blkdev_close+0x86/0xb0 [ 1431.658993] __fput+0x25e/0x700 [ 1431.662268] task_work_run+0x118/0x190 [ 1431.666224] exit_to_usermode_loop+0x13b/0x160 [ 1431.670816] do_syscall_64+0x372/0x4b0 [ 1431.674771] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1431.680187] INFO: task syz-executor.0:1846 blocked for more than 140 seconds. [ 1431.687963] Not tainted 4.14.113+ #61 [ 1431.692473] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1431.700834] syz-executor.0 D25144 1846 1 0x00000004 [ 1431.709924] Call Trace: [ 1431.712553] ? __schedule+0x91c/0x1f30 [ 1431.716509] ? HARDIRQ_verbose+0x10/0x10 [ 1431.720627] ? __sched_text_start+0x8/0x8 [ 1431.724835] ? lock_downgrade+0x5d0/0x5d0 [ 1431.728990] ? lock_acquire+0x10f/0x380 [ 1431.732949] ? __mutex_lock+0x2c1/0x1430 [ 1431.738288] schedule+0x92/0x1c0 [ 1431.741761] schedule_preempt_disabled+0x13/0x20 [ 1431.746580] __mutex_lock+0x559/0x1430 [ 1431.750482] ? __mutex_lock+0x6aa/0x1430 [ 1431.754623] ? __mutex_unlock_slowpath+0x9a/0x7d0 [ 1431.759527] ? lo_open+0x19/0xb0 [ 1431.762894] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1431.768439] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1431.773947] ? kobject_get_unless_zero+0x27/0x40 [ 1431.778699] ? get_disk+0xd0/0xd0 [ 1431.782140] ? exact_match+0x9/0x20 [ 1431.787470] ? blkdev_ioctl+0x1810/0x1810 [ 1431.791630] ? loop_unregister_transfer+0x90/0x90 [ 1431.796655] ? lo_open+0x19/0xb0 [ 1431.800033] lo_open+0x19/0xb0 [ 1431.803225] __blkdev_get+0x963/0xf90 [ 1431.807631] ? __blkdev_put+0x6d0/0x6d0 [ 1431.811631] blkdev_get+0x97/0x8b0 [ 1431.815264] ? bd_acquire+0x171/0x2c0 [ 1431.819081] ? bd_may_claim+0xd0/0xd0 [ 1431.823586] ? lock_downgrade+0x5d0/0x5d0 [ 1431.827802] ? lock_acquire+0x10f/0x380 [ 1431.831782] ? bd_acquire+0x21/0x2c0 [ 1431.835583] blkdev_open+0x1cc/0x250 [ 1431.839551] ? security_file_open+0x88/0x190 [ 1431.844119] do_dentry_open+0x44e/0xdf0 [ 1431.848104] ? bd_acquire+0x2c0/0x2c0 [ 1431.851917] vfs_open+0x105/0x230 [ 1431.855449] path_openat+0xb6b/0x2b70 [ 1431.859273] ? path_mountpoint+0x9a0/0x9a0 [ 1431.864653] ? perf_trace_lock+0x11e/0x4e0 [ 1431.869778] do_filp_open+0x1a1/0x280 [ 1431.873773] ? may_open_dev+0xe0/0xe0 [ 1431.877615] ? lock_downgrade+0x5d0/0x5d0 [ 1431.881786] ? lock_acquire+0x10f/0x380 [ 1431.885941] ? __alloc_fd+0x3f/0x490 [ 1431.889670] ? _raw_spin_unlock+0x29/0x40 [ 1431.893999] ? __alloc_fd+0x1bf/0x490 [ 1431.897814] do_sys_open+0x2ca/0x590 [ 1431.901654] ? filp_open+0x60/0x60 [ 1431.905429] ? SyS_mkdirat+0x146/0x220 [ 1431.909322] ? _raw_spin_unlock_irq+0x35/0x50 [ 1431.914462] ? do_syscall_64+0x43/0x4b0 [ 1431.918606] ? do_sys_open+0x590/0x590 [ 1431.922480] do_syscall_64+0x19b/0x4b0 [ 1431.926423] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1431.931861] INFO: task syz-executor.4:1851 blocked for more than 140 seconds. [ 1431.939211] Not tainted 4.14.113+ #61 [ 1431.947037] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1431.955152] syz-executor.4 D25640 1851 1 0x00000004 [ 1431.960835] Call Trace: [ 1431.963426] ? __schedule+0x91c/0x1f30 [ 1431.967367] ? HARDIRQ_verbose+0x10/0x10 [ 1431.971440] ? __sched_text_start+0x8/0x8 [ 1431.975709] ? lock_downgrade+0x5d0/0x5d0 [ 1431.979865] ? lock_acquire+0x10f/0x380 [ 1431.983882] ? __mutex_lock+0x2c1/0x1430 [ 1431.987958] schedule+0x92/0x1c0 [ 1431.991309] schedule_preempt_disabled+0x13/0x20 [ 1431.996318] __mutex_lock+0x559/0x1430 [ 1432.000292] ? blkdev_reread_part+0x1b/0x40 [ 1432.004706] ? mark_held_locks+0xa6/0xf0 [ 1432.008774] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1432.014360] ? trace_hardirqs_on_caller+0x37b/0x540 [ 1432.019379] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 1432.024621] ? __wake_up_common_lock+0xe0/0x170 [ 1432.029301] ? blk_mq_unfreeze_queue+0x38/0x70 [ 1432.033947] ? blkdev_reread_part+0x1b/0x40 [ 1432.038277] blkdev_reread_part+0x1b/0x40 [ 1432.042422] loop_reread_partitions+0x72/0x80 [ 1432.047704] loop_clr_fd+0x828/0xac0 [ 1432.051422] lo_ioctl+0x813/0x1970 [ 1432.055235] ? kasan_slab_free+0xb0/0x190 [ 1432.059403] ? kmem_cache_free+0xc4/0x330 [ 1432.063538] ? putname+0xcd/0x110 [ 1432.067057] ? do_sys_open+0x250/0x590 [ 1432.071019] ? do_syscall_64+0x19b/0x4b0 [ 1432.075153] ? loop_clr_fd+0xac0/0xac0 [ 1432.079050] blkdev_ioctl+0x4d9/0x1810 [ 1432.082930] ? blkpg_ioctl+0x910/0x910 [ 1432.086897] ? lock_downgrade+0x5d0/0x5d0 [ 1432.091176] ? lock_acquire+0x10f/0x380 [ 1432.095443] ? debug_check_no_obj_freed+0x148/0x5c0 [ 1432.101065] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1432.106465] ? trace_hardirqs_on_caller+0x37b/0x540 [ 1432.111850] block_ioctl+0xd9/0x120 [ 1432.115515] ? blkdev_fallocate+0x3b0/0x3b0 [ 1432.119830] do_vfs_ioctl+0xabe/0x1040 [ 1432.123759] ? selinux_file_ioctl+0x426/0x590 [ 1432.128518] ? selinux_file_ioctl+0x116/0x590 [ 1432.133488] ? ioctl_preallocate+0x1e0/0x1e0 [ 1432.137930] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 1432.143736] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1432.150699] ? putname+0xcd/0x110 [ 1432.154220] ? do_sys_open+0x255/0x590 [ 1432.158095] ? filp_open+0x60/0x60 [ 1432.161635] ? security_file_ioctl+0x7c/0xb0 [ 1432.166132] SyS_ioctl+0x7f/0xb0 [ 1432.169509] ? do_vfs_ioctl+0x1040/0x1040 [ 1432.174449] do_syscall_64+0x19b/0x4b0 [ 1432.178345] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1432.183952] INFO: task syz-executor.2:28591 blocked for more than 140 seconds. [ 1432.191306] Not tainted 4.14.113+ #61 [ 1432.195656] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1432.203614] syz-executor.2 D25640 28591 1 0x00000004 [ 1432.209347] Call Trace: [ 1432.211929] ? __schedule+0x91c/0x1f30 [ 1432.215880] ? HARDIRQ_verbose+0x10/0x10 [ 1432.219952] ? __sched_text_start+0x8/0x8 [ 1432.224154] ? lock_downgrade+0x5d0/0x5d0 [ 1432.228310] ? lock_acquire+0x10f/0x380 [ 1432.232270] ? __mutex_lock+0x2c1/0x1430 [ 1432.236395] schedule+0x92/0x1c0 [ 1432.239771] schedule_preempt_disabled+0x13/0x20 [ 1432.244579] __mutex_lock+0x559/0x1430 [ 1432.248463] ? __mutex_unlock_slowpath+0x9a/0x7d0 [ 1432.253299] ? perf_trace_lock+0x11e/0x4e0 [ 1432.257653] ? __blkdev_get+0xf3/0xf90 [ 1432.261559] ? refcount_inc_not_zero+0x81/0xe0 [ 1432.266221] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1432.271706] ? kobject_get_unless_zero+0x27/0x40 [ 1432.276534] ? get_disk+0xd0/0xd0 [ 1432.280102] ? exact_match+0x9/0x20 [ 1432.283793] ? kobj_lookup+0x325/0x410 [ 1432.287692] ? blkdev_ioctl+0x1810/0x1810 [ 1432.291920] ? __blkdev_get+0xf3/0xf90 [ 1432.295868] __blkdev_get+0xf3/0xf90 [ 1432.299592] ? __blkdev_put+0x6d0/0x6d0 [ 1432.303560] blkdev_get+0x97/0x8b0 [ 1432.307808] ? bd_acquire+0x171/0x2c0 [ 1432.311656] ? bd_may_claim+0xd0/0xd0 [ 1432.315588] ? lock_downgrade+0x5d0/0x5d0 [ 1432.319781] ? lock_acquire+0x10f/0x380 [ 1432.323811] ? bd_acquire+0x21/0x2c0 [ 1432.329984] blkdev_open+0x1cc/0x250 [ 1432.333874] ? security_file_open+0x88/0x190 [ 1432.338294] do_dentry_open+0x44e/0xdf0 [ 1432.342263] ? bd_acquire+0x2c0/0x2c0 [ 1432.346368] vfs_open+0x105/0x230 [ 1432.349985] path_openat+0xb6b/0x2b70 [ 1432.353857] ? path_mountpoint+0x9a0/0x9a0 [ 1432.358094] ? perf_trace_lock+0x11e/0x4e0 [ 1432.362322] do_filp_open+0x1a1/0x280 [ 1432.366173] ? may_open_dev+0xe0/0xe0 [ 1432.369994] ? lock_downgrade+0x5d0/0x5d0 [ 1432.374195] ? lock_acquire+0x10f/0x380 [ 1432.378238] ? __alloc_fd+0x3f/0x490 [ 1432.381949] ? _raw_spin_unlock+0x29/0x40 [ 1432.386159] ? __alloc_fd+0x1bf/0x490 [ 1432.389975] do_sys_open+0x2ca/0x590 [ 1432.393759] ? filp_open+0x60/0x60 [ 1432.397448] ? SyS_mkdirat+0x146/0x220 [ 1432.401366] ? _raw_spin_unlock_irq+0x35/0x50 [ 1432.405987] ? do_syscall_64+0x43/0x4b0 [ 1432.409956] ? do_sys_open+0x590/0x590 [ 1432.414276] do_syscall_64+0x19b/0x4b0 [ 1432.418226] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1432.423938] INFO: task blkid:6110 blocked for more than 140 seconds. [ 1432.430435] Not tainted 4.14.113+ #61 [ 1432.435383] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1432.443356] blkid D28376 6110 2979 0x00000004 [ 1432.449188] Call Trace: [ 1432.451843] ? __schedule+0x91c/0x1f30 [ 1432.455876] ? HARDIRQ_verbose+0x10/0x10 [ 1432.459959] ? __sched_text_start+0x8/0x8 [ 1432.464167] ? lock_downgrade+0x5d0/0x5d0 [ 1432.468334] ? lock_acquire+0x10f/0x380 [ 1432.472419] ? __mutex_lock+0x2c1/0x1430 [ 1432.476567] schedule+0x92/0x1c0 [ 1432.479947] schedule_preempt_disabled+0x13/0x20 [ 1432.484767] __mutex_lock+0x559/0x1430 [ 1432.488663] ? __mutex_lock+0x6aa/0x1430 [ 1432.492710] ? __mutex_unlock_slowpath+0x9a/0x7d0 [ 1432.497606] ? lo_open+0x19/0xb0 [ 1432.500981] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1432.507865] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1432.513333] ? kobject_get_unless_zero+0x27/0x40 [ 1432.519144] ? get_disk+0xd0/0xd0 [ 1432.522602] ? exact_match+0x9/0x20 [ 1432.526573] ? blkdev_ioctl+0x1810/0x1810 [ 1432.530732] ? loop_unregister_transfer+0x90/0x90 [ 1432.535835] ? lo_open+0x19/0xb0 [ 1432.539197] lo_open+0x19/0xb0 [ 1432.542387] __blkdev_get+0x963/0xf90 [ 1432.546460] ? __blkdev_put+0x6d0/0x6d0 [ 1432.550598] blkdev_get+0x97/0x8b0 [ 1432.554410] ? bd_acquire+0x171/0x2c0 [ 1432.558325] ? bd_may_claim+0xd0/0xd0 [ 1432.562116] ? lock_downgrade+0x5d0/0x5d0 [ 1432.566693] ? lock_acquire+0x10f/0x380 [ 1432.570714] ? bd_acquire+0x21/0x2c0 [ 1432.574673] blkdev_open+0x1cc/0x250 [ 1432.578420] ? security_file_open+0x88/0x190 [ 1432.582833] do_dentry_open+0x44e/0xdf0 [ 1432.587125] ? bd_acquire+0x2c0/0x2c0 [ 1432.590940] vfs_open+0x105/0x230 [ 1432.594798] path_openat+0xb6b/0x2b70 [ 1432.598606] ? path_mountpoint+0x9a0/0x9a0 [ 1432.602830] ? perf_trace_lock+0x11e/0x4e0 [ 1432.607366] do_filp_open+0x1a1/0x280 [ 1432.611165] ? may_open_dev+0xe0/0xe0 [ 1432.615198] ? lock_downgrade+0x5d0/0x5d0 [ 1432.619436] ? lock_acquire+0x10f/0x380 [ 1432.623404] ? __alloc_fd+0x3f/0x490 [ 1432.627416] ? _raw_spin_unlock+0x29/0x40 [ 1432.631658] ? __alloc_fd+0x1bf/0x490 [ 1432.635774] do_sys_open+0x2ca/0x590 [ 1432.639485] ? filp_open+0x60/0x60 [ 1432.643005] ? __perf_sw_event+0x4e/0x80 [ 1432.647368] ? do_syscall_64+0x43/0x4b0 [ 1432.651330] ? do_sys_open+0x590/0x590 [ 1432.655413] do_syscall_64+0x19b/0x4b0 [ 1432.659302] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1432.664981] INFO: task syz-executor.3:6112 blocked for more than 140 seconds. [ 1432.672245] Not tainted 4.14.113+ #61 [ 1432.676824] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1432.684824] syz-executor.3 D26992 6112 1863 0x00000004 [ 1432.690443] Call Trace: [ 1432.693028] ? __schedule+0x91c/0x1f30 [ 1432.697286] ? HARDIRQ_verbose+0x10/0x10 [ 1432.701337] ? perf_trace_lock+0x11e/0x4e0 [ 1432.705865] ? __sched_text_start+0x8/0x8 [ 1432.710069] ? lock_downgrade+0x5d0/0x5d0 [ 1432.714450] ? lock_acquire+0x10f/0x380 [ 1432.718426] ? __mutex_lock+0x2c1/0x1430 [ 1432.722594] schedule+0x92/0x1c0 [ 1432.726225] schedule_preempt_disabled+0x13/0x20 [ 1432.730977] __mutex_lock+0x559/0x1430 [ 1432.735074] ? lock_downgrade+0x5d0/0x5d0 [ 1432.739218] ? lo_ioctl+0x83/0x1970 [ 1432.742844] ? avc_has_extended_perms+0x5e0/0xc20 [ 1432.747966] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1432.753493] ? lock_downgrade+0x5d0/0x5d0 [ 1432.757874] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 1432.762978] ? avc_compute_av+0x3fd/0x550 [ 1432.767378] ? check_preemption_disabled+0x35/0x1f0 [ 1432.772418] ? avc_has_extended_perms+0x706/0xc20 [ 1432.777553] ? lo_ioctl+0x83/0x1970 [ 1432.781222] lo_ioctl+0x83/0x1970 [ 1432.785022] ? filename_parentat.isra.0+0x3e0/0x3e0 [ 1432.790039] ? loop_clr_fd+0xac0/0xac0 [ 1432.794128] blkdev_ioctl+0x4d9/0x1810 [ 1432.798027] ? blkpg_ioctl+0x910/0x910 [ 1432.801913] ? check_preemption_disabled+0x35/0x1f0 [ 1432.807214] block_ioctl+0xd9/0x120 [ 1432.810844] ? blkdev_fallocate+0x3b0/0x3b0 [ 1432.815461] do_vfs_ioctl+0xabe/0x1040 [ 1432.819344] ? selinux_file_ioctl+0x426/0x590 [ 1432.824232] ? selinux_file_ioctl+0x116/0x590 [ 1432.828800] ? ioctl_preallocate+0x1e0/0x1e0 [ 1432.833218] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 1432.839261] ? __fget+0x1ff/0x360 [ 1432.842725] ? lock_downgrade+0x5d0/0x5d0 [ 1432.847158] ? lock_acquire+0x10f/0x380 [ 1432.851181] ? __fget+0x44/0x360 [ 1432.857480] ? check_preemption_disabled+0x35/0x1f0 [ 1432.862514] ? security_file_ioctl+0x7c/0xb0 [ 1432.867130] SyS_ioctl+0x7f/0xb0 [ 1432.870493] ? do_vfs_ioctl+0x1040/0x1040 [ 1432.874860] do_syscall_64+0x19b/0x4b0 [ 1432.878746] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1432.884386] INFO: task blkid:6115 blocked for more than 140 seconds. [ 1432.890884] Not tainted 4.14.113+ #61 [ 1432.895493] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1432.903568] blkid D28400 6115 3602 0x00000004 [ 1432.909432] Call Trace: [ 1432.912077] ? __schedule+0x91c/0x1f30 [ 1432.916196] ? HARDIRQ_verbose+0x10/0x10 [ 1432.920258] ? __sched_text_start+0x8/0x8 [ 1432.924581] ? lock_downgrade+0x5d0/0x5d0 [ 1432.928718] ? lock_acquire+0x10f/0x380 [ 1432.932673] ? __mutex_lock+0x2c1/0x1430 [ 1432.936940] schedule+0x92/0x1c0 [ 1432.940302] schedule_preempt_disabled+0x13/0x20 [ 1432.945323] __mutex_lock+0x559/0x1430 [ 1432.949225] ? check_preemption_disabled+0x35/0x1f0 [ 1432.954546] ? lo_open+0x19/0xb0 [ 1432.957925] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1432.963363] ? HARDIRQ_verbose+0x10/0x10 [ 1432.967649] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1432.973213] ? lock_downgrade+0x5d0/0x5d0 [ 1432.977564] ? refcount_inc_not_zero+0x81/0xe0 [ 1432.982249] ? check_preemption_disabled+0x35/0x1f0 [ 1432.987490] ? loop_unregister_transfer+0x90/0x90 [ 1432.992345] ? lo_open+0x19/0xb0 [ 1432.995939] lo_open+0x19/0xb0 [ 1432.999130] __blkdev_get+0x267/0xf90 [ 1433.003061] ? __blkdev_put+0x6d0/0x6d0 [ 1433.007254] blkdev_get+0x97/0x8b0 [ 1433.010795] ? bd_acquire+0x171/0x2c0 [ 1433.014786] ? bd_may_claim+0xd0/0xd0 [ 1433.018588] ? lock_downgrade+0x5d0/0x5d0 [ 1433.022712] ? lock_acquire+0x10f/0x380 [ 1433.026910] ? bd_acquire+0x21/0x2c0 [ 1433.030644] blkdev_open+0x1cc/0x250 [ 1433.034593] ? security_file_open+0x88/0x190 [ 1433.039178] do_dentry_open+0x44e/0xdf0 [ 1433.043191] ? bd_acquire+0x2c0/0x2c0 [ 1433.047343] vfs_open+0x105/0x230 [ 1433.050798] path_openat+0xb6b/0x2b70 [ 1433.054945] ? path_mountpoint+0x9a0/0x9a0 [ 1433.059191] ? perf_trace_lock+0x11e/0x4e0 [ 1433.063416] do_filp_open+0x1a1/0x280 [ 1433.067479] ? may_open_dev+0xe0/0xe0 [ 1433.071350] ? lock_downgrade+0x5d0/0x5d0 [ 1433.075797] ? lock_acquire+0x10f/0x380 [ 1433.079778] ? __alloc_fd+0x3f/0x490 [ 1433.083490] ? _raw_spin_unlock+0x29/0x40 [ 1433.087956] ? __alloc_fd+0x1bf/0x490 [ 1433.091907] do_sys_open+0x2ca/0x590 [ 1433.095876] ? filp_open+0x60/0x60 [ 1433.099423] ? __perf_sw_event+0x4e/0x80 [ 1433.103491] ? do_syscall_64+0x43/0x4b0 [ 1433.107765] ? do_sys_open+0x590/0x590 [ 1433.111739] do_syscall_64+0x19b/0x4b0 [ 1433.115866] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1433.121293] INFO: task blkid:6116 blocked for more than 140 seconds. [ 1433.127865] Not tainted 4.14.113+ #61 [ 1433.132189] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1433.140235] blkid D28152 6116 28789 0x00000004 [ 1433.146099] Call Trace: [ 1433.148743] ? __schedule+0x91c/0x1f30 [ 1433.152630] ? HARDIRQ_verbose+0x10/0x10 [ 1433.156818] ? __sched_text_start+0x8/0x8 [ 1433.161035] ? lock_downgrade+0x5d0/0x5d0 [ 1433.165382] ? lock_acquire+0x10f/0x380 [ 1433.169361] ? __mutex_lock+0x2c1/0x1430 [ 1433.173406] schedule+0x92/0x1c0 [ 1433.176819] schedule_preempt_disabled+0x13/0x20 [ 1433.181676] __mutex_lock+0x559/0x1430 [ 1433.185612] ? __mutex_lock+0x6aa/0x1430 [ 1433.189681] ? __mutex_unlock_slowpath+0x9a/0x7d0 [ 1433.194665] ? lo_open+0x19/0xb0 [ 1433.198041] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1433.203486] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1433.209022] ? kobject_get_unless_zero+0x27/0x40 [ 1433.213818] ? get_disk+0xd0/0xd0 [ 1433.217259] ? exact_match+0x9/0x20 [ 1433.220921] ? blkdev_ioctl+0x1810/0x1810 [ 1433.225129] ? loop_unregister_transfer+0x90/0x90 [ 1433.229974] ? lo_open+0x19/0xb0 [ 1433.233318] lo_open+0x19/0xb0 [ 1433.236553] __blkdev_get+0x963/0xf90 [ 1433.240369] ? __blkdev_put+0x6d0/0x6d0 [ 1433.244415] blkdev_get+0x97/0x8b0 [ 1433.247961] ? bd_acquire+0x171/0x2c0 [ 1433.251743] ? bd_may_claim+0xd0/0xd0 [ 1433.255613] ? lock_downgrade+0x5d0/0x5d0 [ 1433.259764] ? lock_acquire+0x10f/0x380 [ 1433.263791] ? bd_acquire+0x21/0x2c0 [ 1433.267670] blkdev_open+0x1cc/0x250 [ 1433.271383] ? security_file_open+0x88/0x190 [ 1433.275909] do_dentry_open+0x44e/0xdf0 [ 1433.279898] ? bd_acquire+0x2c0/0x2c0 [ 1433.283772] vfs_open+0x105/0x230 [ 1433.287238] path_openat+0xb6b/0x2b70 [ 1433.291030] ? path_mountpoint+0x9a0/0x9a0 [ 1433.295319] ? perf_trace_lock+0x11e/0x4e0 [ 1433.299565] do_filp_open+0x1a1/0x280 [ 1433.303346] ? may_open_dev+0xe0/0xe0 [ 1433.307323] ? lock_downgrade+0x5d0/0x5d0 [ 1433.311492] ? lock_acquire+0x10f/0x380 [ 1433.315506] ? __alloc_fd+0x3f/0x490 [ 1433.319240] ? _raw_spin_unlock+0x29/0x40 [ 1433.323369] ? __alloc_fd+0x1bf/0x490 [ 1433.327226] do_sys_open+0x2ca/0x590 [ 1433.333857] ? filp_open+0x60/0x60 [ 1433.337408] ? __perf_sw_event+0x4e/0x80 [ 1433.341467] ? do_syscall_64+0x43/0x4b0 [ 1433.345570] ? do_sys_open+0x590/0x590 [ 1433.349478] do_syscall_64+0x19b/0x4b0 [ 1433.353363] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1433.358840] INFO: task blkid:6120 blocked for more than 140 seconds. [ 1433.365486] Not tainted 4.14.113+ #61 [ 1433.369793] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1433.377790] blkid D27816 6120 30455 0x00000004 [ 1433.383477] Call Trace: [ 1433.386171] ? __schedule+0x91c/0x1f30 [ 1433.390169] ? HARDIRQ_verbose+0x10/0x10 [ 1433.394409] ? __sched_text_start+0x8/0x8 [ 1433.398643] ? lock_downgrade+0x5d0/0x5d0 [ 1433.402775] ? lock_acquire+0x10f/0x380 [ 1433.406803] ? __mutex_lock+0x2c1/0x1430 [ 1433.410958] schedule+0x92/0x1c0 [ 1433.414369] schedule_preempt_disabled+0x13/0x20 [ 1433.419135] __mutex_lock+0x559/0x1430 [ 1433.423061] ? __mutex_unlock_slowpath+0x9a/0x7d0 [ 1433.428237] ? perf_trace_lock+0x11e/0x4e0 [ 1433.432550] ? __blkdev_get+0xf3/0xf90 [ 1433.436573] ? refcount_inc_not_zero+0x81/0xe0 [ 1433.441277] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1433.446778] ? kobject_get_unless_zero+0x27/0x40 [ 1433.451601] ? get_disk+0xd0/0xd0 [ 1433.455106] ? exact_match+0x9/0x20 [ 1433.458818] ? kobj_lookup+0x325/0x410 [ 1433.462711] ? blkdev_ioctl+0x1810/0x1810 [ 1433.466916] ? __blkdev_get+0xf3/0xf90 [ 1433.470818] __blkdev_get+0xf3/0xf90 [ 1433.474590] ? __blkdev_put+0x6d0/0x6d0 [ 1433.478577] blkdev_get+0x97/0x8b0 [ 1433.482105] ? bd_acquire+0x171/0x2c0 [ 1433.485942] ? bd_may_claim+0xd0/0xd0 [ 1433.489745] ? lock_downgrade+0x5d0/0x5d0 [ 1433.493927] ? lock_acquire+0x10f/0x380 [ 1433.497911] ? bd_acquire+0x21/0x2c0 [ 1433.501617] blkdev_open+0x1cc/0x250 [ 1433.505374] ? security_file_open+0x88/0x190 [ 1433.509796] do_dentry_open+0x44e/0xdf0 [ 1433.513820] ? bd_acquire+0x2c0/0x2c0 [ 1433.517681] vfs_open+0x105/0x230 [ 1433.521170] path_openat+0xb6b/0x2b70 [ 1433.525048] ? path_mountpoint+0x9a0/0x9a0 [ 1433.529305] ? perf_trace_lock+0x11e/0x4e0 [ 1433.533533] do_filp_open+0x1a1/0x280 [ 1433.537429] ? may_open_dev+0xe0/0xe0 [ 1433.541255] ? lock_downgrade+0x5d0/0x5d0 [ 1433.545451] ? lock_acquire+0x10f/0x380 [ 1433.549433] ? __alloc_fd+0x3f/0x490 [ 1433.553199] ? _raw_spin_unlock+0x29/0x40 [ 1433.557600] ? __alloc_fd+0x1bf/0x490 [ 1433.561414] do_sys_open+0x2ca/0x590 [ 1433.565201] ? filp_open+0x60/0x60 [ 1433.568862] ? __perf_sw_event+0x4e/0x80 [ 1433.572924] ? do_syscall_64+0x43/0x4b0 [ 1433.576956] ? do_sys_open+0x590/0x590 [ 1433.580848] do_syscall_64+0x19b/0x4b0 [ 1433.584789] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1433.590196] [ 1433.590196] Showing all locks held in the system: [ 1433.596576] 1 lock held by khungtaskd/23: [ 1433.600949] #0: (tasklist_lock){.+.+}, at: [<00000000746cc1fe>] debug_show_all_locks+0x7c/0x21a [ 1433.610090] 2 locks held by getty/1758: [ 1433.614117] #0: (&tty->ldisc_sem){++++}, at: [<00000000644a90d4>] tty_ldisc_ref_wait+0x22/0x80 [ 1433.623161] #1: (&ldata->atomic_read_lock){+.+.}, at: [<000000007a6192a1>] n_tty_read+0x1f7/0x1700 [ 1433.632603] 3 locks held by syz-executor.5/1847: [ 1433.637403] #0: (&bdev->bd_mutex){+.+.}, at: [<0000000050bcb0b0>] __blkdev_put+0xb1/0x6d0 [ 1433.646066] #1: (loop_index_mutex){+.+.}, at: [<00000000bbbd993c>] lo_release+0x19/0x190 [ 1433.654544] #2: (loop_ctl_mutex#2){+.+.}, at: [<00000000a5d6380c>] lo_release+0x78/0x190 [ 1433.662965] 2 locks held by syz-executor.0/1846: [ 1433.667810] #0: (&bdev->bd_mutex){+.+.}, at: [<0000000001cdccff>] __blkdev_get+0xf3/0xf90 [ 1433.676484] #1: (loop_index_mutex){+.+.}, at: [<000000005ca0d7fe>] lo_open+0x19/0xb0 [ 1433.684638] 2 locks held by syz-executor.4/1851: [ 1433.689397] #0: (loop_ctl_mutex/1){+.+.}, at: [<000000002e7e3989>] lo_ioctl+0x83/0x1970 [ 1433.697868] #1: (&bdev->bd_mutex){+.+.}, at: [<000000004d7a76c4>] blkdev_reread_part+0x1b/0x40 [ 1433.707003] 1 lock held by syz-executor.2/28591: [ 1433.711747] #0: (&bdev->bd_mutex){+.+.}, at: [<0000000001cdccff>] __blkdev_get+0xf3/0xf90 [ 1433.720376] 2 locks held by blkid/6110: [ 1433.724380] #0: (&bdev->bd_mutex){+.+.}, at: [<0000000001cdccff>] __blkdev_get+0xf3/0xf90 [ 1433.732869] #1: (loop_index_mutex){+.+.}, at: [<000000005ca0d7fe>] lo_open+0x19/0xb0 [ 1433.741014] 1 lock held by syz-executor.3/6112: [ 1433.745705] #0: (loop_ctl_mutex/1){+.+.}, at: [<000000002e7e3989>] lo_ioctl+0x83/0x1970 [ 1433.754087] 2 locks held by blkid/6115: [ 1433.758049] #0: (&bdev->bd_mutex){+.+.}, at: [<0000000001cdccff>] __blkdev_get+0xf3/0xf90 [ 1433.766705] #1: (loop_index_mutex){+.+.}, at: [<000000005ca0d7fe>] lo_open+0x19/0xb0 [ 1433.774968] 2 locks held by blkid/6116: [ 1433.778938] #0: (&bdev->bd_mutex){+.+.}, at: [<0000000001cdccff>] __blkdev_get+0xf3/0xf90 [ 1433.787540] #1: (loop_index_mutex){+.+.}, at: [<000000005ca0d7fe>] lo_open+0x19/0xb0 [ 1433.795664] 1 lock held by blkid/6120: [ 1433.799532] #0: (&bdev->bd_mutex){+.+.}, at: [<0000000001cdccff>] __blkdev_get+0xf3/0xf90 [ 1433.808127] [ 1433.809761] ============================================= [ 1433.809761] [ 1433.816848] NMI backtrace for cpu 0 [ 1433.820584] CPU: 0 PID: 23 Comm: khungtaskd Not tainted 4.14.113+ #61 [ 1433.827153] Call Trace: [ 1433.829739] dump_stack+0xb9/0x10e [ 1433.833405] ? irq_force_complete_move.cold+0x2c/0x7b [ 1433.838587] nmi_cpu_backtrace.cold+0x47/0x86 [ 1433.843131] ? irq_force_complete_move.cold+0x7b/0x7b [ 1433.848313] ? nmi_trigger_cpumask_backtrace+0x119/0x147 [ 1433.853757] ? watchdog+0x5e2/0xb80 [ 1433.857370] ? hungtask_pm_notify+0x50/0x50 [ 1433.861675] ? kthread+0x310/0x420 [ 1433.865190] ? kthread_create_on_node+0xf0/0xf0 [ 1433.869851] ? ret_from_fork+0x3a/0x50 [ 1433.873932] Sending NMI from CPU 0 to CPUs 1: [ 1433.878508] NMI backtrace for cpu 1 skipped: idling at pc 0xffffffff9024ece2 [ 1433.879457] Kernel panic - not syncing: hung_task: blocked tasks [ 1433.891847] CPU: 0 PID: 23 Comm: khungtaskd Not tainted 4.14.113+ #61 [ 1433.898415] Call Trace: [ 1433.900988] dump_stack+0xb9/0x10e [ 1433.904529] panic+0x1d9/0x3c2 [ 1433.907709] ? add_taint.cold+0x16/0x16 [ 1433.911690] ? irq_force_complete_move.cold+0x7b/0x7b [ 1433.916910] ? ___preempt_schedule+0x16/0x18 [ 1433.921320] watchdog+0x5f3/0xb80 [ 1433.924871] ? hungtask_pm_notify+0x50/0x50 [ 1433.929187] kthread+0x310/0x420 [ 1433.932539] ? kthread_create_on_node+0xf0/0xf0 [ 1433.937193] ret_from_fork+0x3a/0x50 [ 1433.941247] Kernel Offset: 0xda00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 1433.952083] Rebooting in 86400 seconds..