d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)
r49 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r49, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r49, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r50 = gettid()
ptrace$setopts(0x4206, r50, 0x0, 0x0)
tkill(r50, 0x3b)
ptrace$setregs(0xd, r50, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r50, 0x0, 0x0)
stat(&(0x7f0000001780)='./file1\x00', &(0x7f00000017c0))
r51 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r51, 0x0, 0x0)
r52 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r53=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r52, &(0x7f0000000080)='./file0\x00', 0x0, r53, 0x800)
r54 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r54, 0xffffffffffff8001)

01:33:20 executing program 2:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TCGETS(r3, 0x5401, &(0x7f00000001c0))

[  503.413212] binder: 5941:5946 ioctl c0306201 200006c0 returned -14
[  503.514237] binder: BINDER_SET_CONTEXT_MGR already set
[  503.526909] binder: 5967:5971 ioctl 40046207 0 returned -16
[  503.536803] binder: 5967:5971 BC_INCREFS_DONE u0000000000000000 no match
01:33:20 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r2, 0xffffffffffff8001)
write$9p(r2, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYBLOB="b556adda15308572c25bfb0b3a7d97c166af7cc5022556534048c20db7b103c8dc4bec35be672b8ab6e8b6a443dc776c6129e454054124aab8584086c0bbd14b071ebe611ea323396a142a45ab2a2a1c004bd7d40346a280e30599e58562a2d4c418e31fb339e4401a49e54a173e36ad9b9b84b6ddf7454f963aeafd370e46982bcfb51ac9ae69487130becb1e008a4f7218564b3d2c8471059b92e73c86e7dd6850b94383aa5680e940c7fa5e0bbdc0633506628423390e2b3db75a8bac0b1ed81824ceaa848d86bf23b3a3ae91167f45575fbcd3fd227124770061d4dac97ac23f8a0ac7", @ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0]], 0x10000047b, 0x0, 0x0})

01:33:20 executing program 1:
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)

[  503.575139] binder_alloc: 18758: binder_alloc_buf, no vma
[  503.585497] binder: 5967:5984 DecRefs 0 refcount change on invalid ref 0 ret -22
[  503.597621] binder: 5967:5971 transaction failed 29189/-3, size 0-0 line 3274
01:33:21 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200140, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000100)={0x8, 'lapb0\x00', {'caif0\x00'}, 0x1f})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x0, 0x0)
r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:audisp_remote_exec_t:s0\x00', 0x2a)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, 0x0, 0x0)
r5 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r5, &(0x7f0000000080)='./file0\x00', 0x0, r6, 0x800)
ioctl$TUNSETGROUP(r2, 0x400454ce, r6)

[  503.654560] binder: 5967:5984 unknown command 0
01:33:21 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)
r49 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r49, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r49, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r50 = gettid()
ptrace$setopts(0x4206, r50, 0x0, 0x0)
tkill(r50, 0x3b)
ptrace$setregs(0xd, r50, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r50, 0x0, 0x0)
stat(&(0x7f0000001780)='./file1\x00', &(0x7f00000017c0))
r51 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r51, 0x0, 0x0)
r52 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r53=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r52, &(0x7f0000000080)='./file0\x00', 0x0, r53, 0x800)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')

01:33:21 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r0, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0)='seturity.ca\x02\xff\x8f\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x4, 0x2}, {0x2, 0x5}], r0}, 0xfffffffffffffdb0, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(0xffffffffffffffff, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

[  503.678328] binder: 5967:5984 ioctl c0306201 20000000 returned -22
[  503.700711] binder: undelivered TRANSACTION_ERROR: 29189
[  503.709350] binder: BINDER_SET_CONTEXT_MGR already set
[  503.715258] binder: 5967:5971 ioctl 40046207 0 returned -16
01:33:21 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
r2 = accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x800)
sendto(r2, &(0x7f0000000180)="e66ff44fa0abbb2d91b0d495f5fa56aa97e460bb20590ebe36f05f02f7cecbb8d8e7e3ca5b92eb81462d3d5aee5b7113f99f110f2369b5e0a9f9a3597f25201f563375d36246a6ab93e01027a84f2a3a0c92662e25f77a8ff919bd55146516e73ec57057641f98e367964f3151f66e5e0f65183f111dd7cda28ba46552eeaac6c094dc3764bbbd13", 0x88, 0x44010, &(0x7f0000000240)=@xdp={0x2c, 0xc}, 0x80)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32], 0x0, 0x0, 0x0})

[  503.722562] binder: 5967:5984 BC_INCREFS_DONE u0000000000000000 no match
[  503.729901] binder_alloc: 18758: binder_alloc_buf, no vma
[  503.737035] audit: type=1400 audit(1575336801.056:62): avc:  denied  { create } for  pid=5992 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:audisp_remote_exec_t:s0 tclass=key permissive=1
[  503.760149] binder: 5967:5989 DecRefs 0 refcount change on invalid ref 0 ret -22
[  503.767711] binder: 5967:5989 unknown command 0
[  503.813473] binder: 5967:5984 transaction failed 29189/-3, size 0-0 line 3274
[  503.821446] binder: 5967:5989 ioctl c0306201 20000000 returned -22
[  503.831868] binder: undelivered TRANSACTION_ERROR: 29189
[  503.959584] binder: undelivered TRANSACTION_ERROR: 29189
[  503.975669] binder: undelivered TRANSACTION_ERROR: 29189
[  504.010673] binder: undelivered TRANSACTION_ERROR: 29189
[  504.046073] EXT4-fs: Invalid sb specification: sb=0x000000p07fffffff,inite,jqfmt=vfsold,minixdf,commit=0x0000000000000003,jqfmt=vfsv1,OȜ�*J���f������X����ځA?^FkQG/
R'G���4����p��T��ȵ��1�18446744073709551615,subj_type=/dev/null,errors=continue
[  504.148551] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
01:33:21 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000))

[  504.238235] binder: 6006:6011 unknown command -1
01:33:21 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xbb, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

01:33:21 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x40, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
fgetxattr(r1, &(0x7f0000000000)=@known='system.advise\x00', &(0x7f0000000140)=""/201, 0xc9)

[  504.279558] binder: 6006:6011 ioctl c0306201 200006c0 returned -22
[  504.306060] binder: undelivered TRANSACTION_ERROR: 29189
01:33:21 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='proc\x00', 0x8000, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')
ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000001c0)=0x7ff)

01:33:21 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)
r49 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r49, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r49, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r50 = gettid()
ptrace$setopts(0x4206, r50, 0x0, 0x0)
tkill(r50, 0x3b)
ptrace$setregs(0xd, r50, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r50, 0x0, 0x0)
stat(&(0x7f0000001780)='./file1\x00', &(0x7f00000017c0))
r51 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r51, 0x0, 0x0)
r52 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r53=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r52, &(0x7f0000000080)='./file0\x00', 0x0, r53, 0x800)

01:33:21 executing program 0:
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r0, 0xffffffffffff8001)
write$9p(r0, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000052cd3"], 0x0, 0x0, 0x0})

[  504.400382] binder_alloc: 18758: binder_alloc_buf, no vma
[  504.438026] binder: 6025:6028 transaction failed 29189/-3, size 245-0 line 3274
01:33:21 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xd201cb9ca2234896)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8c0000003400000326bd7000fbdbdf25130000005c3176e633e84794628eb8cac98245ddc17f0c89e57404292f42512998b2f4b8aec845b1d2a2c99d69bfb864a889390802000000000000006f210533d0eb967b9d93c6b646072ed3ced07ed37c914c5fb41539d8a34ff53659e2d9ddded6e0dea4f50d0a72e7d3628c00a763dfa71b9cafb6ed63fb277463"], 0x8c}, 0x1, 0x0, 0x0, 0x10008804}, 0x8000)
ftruncate(r1, 0xffffffffffff8001)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r6, 0xffffffffffff8001)
write$9p(r6, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r7, 0xffffffffffff8001)
write$9p(r7, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r7, &(0x7f0000000300)='syz1\x00', 0x1ff)
mkdirat$cgroup(r7, &(0x7f0000000300)='syz1\x00', 0x1ff)
bind$inet(r6, 0x0, 0xfffffffffffffe76)
r8 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r9=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r8, &(0x7f0000000080)='./file0\x00', 0x0, r9, 0x800)
fchown(r3, r4, r9)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080))
r10 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="086310400000000000000000000000000000000000634040000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0564ab4cadaf0ed304ec7ce569731ac6b628035aae9980b81dbe17bad2cc9ec0a791f762d7f10ba595f8b71400bcd96826f769bf97c4fba255fa4abaf9dc6d195d217a54a5c3a89b1d43b7492a48b0b21dd17ab1e888e66e35446e59f8c6286643bef52c29357adb964f77c24244c049818ef2bd74de467532ec39d6ae8c419c8da0db86d1704c6549394f8eb00"], 0x0, 0x0, 0x0})
fcntl$getflags(r10, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000))

01:33:21 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x2c8, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0})
setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000180), 0x4)

01:33:21 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
rt_sigpending(&(0x7f0000000000), 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="5d00000000000000000000000000000000000000000000000000007c0d452800000000000000b2d7000000000000000000000000000000000000000000000000ec650000"], 0x0, 0x0, 0x0})

[  504.493727] binder: undelivered TRANSACTION_ERROR: 29189
01:33:21 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
pipe(&(0x7f00000007c0))
ftruncate(r3, 0xffffffffffff8001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r4)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x260100}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x238, r5, 0x400, 0x70bd26, 0x0, {}, [@TIPC_NLA_LINK={0xb4, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37fe3547}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xc8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x41587a00}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x200, @dev={0xfe, 0x80, [], 0x23}, 0x7ceab9d7}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7fffffff, @remote, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff00}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x30000002}, 0x4)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000420}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x174, r5, 0x5fbd7f7fefde6e62, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcfb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9000000}]}, @TIPC_NLA_BEARER={0x78, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2c60}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'eql\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x5c84a0d4324bb4cb}, 0x80)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
write$ppp(r3, &(0x7f0000000340)="2ac94fdecadde121b91f4b562acf4eff87d8596f0a5718c7fa8a54c16927e8089772757f4dbd4c7492ea6870802f5300441bdbe6bfb02ffc1f0964b3e305eb93012fe402a9d9ba830a1d2a8436f50629c690a7c071d39ed18bcd5706c85c608bfd6b346825db83da05474e0b6f40d99c99b84b69436039f988e5d43884597c2c57446c2b6918183b59bec04202c7c8b01093aa65d26084c6c77be491f253c0492b683dbc9337ea43ce2d29da22a288e32f5efdf00c8506e81279466a9e18869bb273f3e31b59886adcb40a08f6aeeee9e8fc5887a74ca565ac1affe332b4c53088f72986122ee3b3a2a6cb24", 0xec)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:21 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)
r49 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r49, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r49, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r50 = gettid()
ptrace$setopts(0x4206, r50, 0x0, 0x0)
tkill(r50, 0x3b)
ptrace$setregs(0xd, r50, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r50, 0x0, 0x0)
stat(&(0x7f0000001780)='./file1\x00', &(0x7f00000017c0))
r51 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r51, 0x0, 0x0)
open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xfffffffffffffcd8)

01:33:21 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6)
fchmod(r2, 0xc0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00634040000000000000000000000000000000052cd3800000a51dbbdf3813ad5bc262a23de9de266162c24729f1569c4d90df76b0c99c117de868545a4466557c6a0e3275632d299c5237d37813bd2ed3ffc10850e7e1a8dd8cff9666c27308c875f4a2bc6a329f601bee8c7b8a14768570e065dc57a6bc4a3e7923eb8c11171ce5d45b79a70811a37675361fcbeb98e771f6bcf133e7f05099fc7648f529078379ba38e6410e4534c90ad71aa79dfa"], 0x0, 0x0, 0x0})

[  504.605104] EXT4-fs: Invalid sb specification: sb=0x000000p07fffffff,inite,jqfmt=vfsold,minixdf,commit=0x0000000000000003,jqfmt=vfsv1,OȜ�*J���f������X����ځA?^FkQG/
R'G���4����p��T��ȵ��1�18446744073709551615,subj_type=/dev/null,errors=continue
[  504.662911] binder: BINDER_SET_CONTEXT_MGR already set
[  504.668460] binder: 6047:6052 unknown command 0
[  504.699795] binder: 6039:6051 ioctl 40046207 0 returned -16
[  504.718135] binder: 6039:6058 BC_INCREFS_DONE u0000000000000000 no match
[  504.737219] binder: 6047:6052 ioctl c0306201 20000000 returned -22
[  504.742041] binder_alloc: 21369: binder_alloc_buf, no vma
[  504.757639] binder_alloc: 21380: binder_alloc_buf, no vma
[  504.766777] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  504.779670] binder: 6047:6052 unknown command 0
[  504.785663] binder: 6039:6058 transaction failed 29189/-3, size 0-0 line 3274
[  504.790525] binder: 6056:6061 transaction failed 29189/-3, size 5170803491578243389-8565723679291797801 line 3274
[  504.814266] binder: 6047:6052 ioctl c0306201 20000000 returned -22
01:33:22 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioprio_get$pid(0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:22 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='\x8b\x00\x00v/bi\xe8\x1aer#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  504.863557] binder: undelivered TRANSACTION_ERROR: 29189
[  504.873075] binder: undelivered TRANSACTION_ERROR: 29189
[  504.878946] EXT4-fs: Invalid sb specification: sb=0x000000p07fffffff,inite,jqfmt=vfsold,minixdf,commit=0x0000000000000003,jqfmt=vfsv1,OȜ�*J���f������X����ځA?^FkQG/
R'G���4����p��T��ȵ��1�18446744073709551615,subj_type=/dev/null,errors=continue
[  504.919770] binder: BINDER_SET_CONTEXT_MGR already set
[  504.925405] binder: 6039:6058 BC_INCREFS_DONE u0000000000000000 no match
01:33:22 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)
r49 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r49, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r49, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r50 = gettid()
ptrace$setopts(0x4206, r50, 0x0, 0x0)
tkill(r50, 0x3b)
ptrace$setregs(0xd, r50, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r50, 0x0, 0x0)
stat(&(0x7f0000001780)='./file1\x00', &(0x7f00000017c0))
r51 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r51, 0x0, 0x0)
open(0x0, 0x0, 0x100)

[  504.961536] binder: 6039:6046 ioctl 40046207 0 returned -16
[  504.990797] binder_alloc: 21369: binder_alloc_buf, no vma
01:33:22 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="006340400000001000400100000000000000000000000000001e00"/55], 0x0, 0x0, 0x0})

[  505.013208] binder: 6039:6058 transaction failed 29189/-3, size 0-0 line 3274
[  505.054540] binder: undelivered TRANSACTION_ERROR: 29189
[  505.063675] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
01:33:22 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000000))
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r2, 0xffffffffffff8001)
write$9p(r2, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ee80000e0ff000000", @ANYRES32=r4], 0x2}}, 0x0)
sendmmsg(r2, &(0x7f0000003280)=[{{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x800, @mcast2}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="172767613a2e78555e31b93552113658545300438568977ed866ccd18a6642e65a1af3fc7126389757644ca6c2b32a1655c999d84bc19a0c194a244ecb03e451eea0bebfc60a0414e6a33e9f0f49c972636b052ecb92d2b27f41501eed4f1536e5b7f9a6a4fd2b43eb7e8bff0fcfa6a3b1e26c1a736af1983be3e548612cdf57765577dfe9b8f0668e35c424eebb58a7a66f64d91004ebe5573b0ddfb4e2a3327a2ca3f9eb0e65b3ab4564bf3fe96277f6aa47e41d9a3cbf59d30d8e0179077f1562ab2089348f4e81b521e13a6991275b4b0fa31dc593d6d5898d972690f86295522473", 0xe4}, {&(0x7f0000000240)="c57ddf94210cb59b36999d0c9ba1656d66dea42a5bcfa732a4ceefbaec025298a38e638dc8363c55dc5565c8afcbeb0973a0bf9ecdf209ea0b5c46f0e1b5e4965e12f25f31f9547e1762f38c6aa68f71c26453929b0f8b2b4fdfb041107d0ed2aaec1b61d174481d61ab419f1d052d378a9e3e1e49e24b70a3062bb2e47f4d3b4d5a50c716593df90ea9bd6e7224325190094549fe68af92479a1d67d8dcf7ea22d76a2362ff4791f03e575e4002a28db98593d5", 0xb4}, {&(0x7f0000000480)="6dd794bdff5ed7d6e7acd745640283ea0604e3ff2e1a13c50a131ad9859aa2db93bd5062dd8d76734fa58cbc206a874cb4b512e5acec42291fcbdb73653771399d882ca7cbb960c4f7da68cc43e13416c46fad606efd760dc02ab238945b16e3c57639fc0f0f85455e3e8f8192b795824e635d624f285a27887de006bec825c7c2fb366fae8716c669e43eb0d70ea0ff409ca47419f2b5823ba91e0fa2b8ea9759be455bac424ba4643207e3e837", 0xae}], 0x3, &(0x7f0000000540)=[{0x60, 0x0, 0x9, "2504b6b11d2c348913a2d94c7e8296bc5773705b19a3c5f6066e384d17cb14b42722527c9c2454289cb9df985cc9a9f455eb0bb293c5e71034f5b29a7704046dfbb8ef66e3987f90fd16254b"}, {0x100, 0x113, 0x6eca, "cbf1aa8866ee276451529920ebbbdca5d3183f08f591a5d8946a497f459fbc7d51f8670b8b887105819766a32b0a8ac495a43390ae00a09753f2c9e043f89080dcbd4caa4e1675abf8c3d8493e9b505a590bdbc16b7017f7d444785abc2180e02caac104b7119d0f94319c0164c50882d85cea76093301e7f832b7ef1e474513cc4daa9d3f6dcc48fe9e9961d5eec9e79f296948b888b331ae6e86cef25b51f74da7b90a42d7313fb7dfde75fec4be8b76cf03bbcf0cdaed3bf207f9819952c36dc555f123555a2565794525ff0ce7e7241ce375de0613581ba6fbb38648b4065f6e0a1f2efc86f0fa97dde2"}], 0x160}}, {{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000000700)="6c21f01fcecc2c38834544c12f1b1c53839056b17b0d152fbc1926fdf57e6c192cf8e2b7b53ebe8f4ca7c9a8294eca0569cf123adba34143fd901a6207955a48e38ae3f5acd404c82857e28269cac73831ec1541d5a2440160a17401f8ef58b2a5f881947a772fe2cadc2d3dca6b6e1e15efdb44f5b29ab0d835aa1fff0e579ff9669174310797e0e552144971f4c5027bb6517c98395932cf401cc612fe73904485050bb1ad7c1563080f365cc65eade993fbf01d0f479134fd08ef6a607c9206", 0xc1}, {&(0x7f0000000800)="6ae9d4392e42d26013e6e69e58819cd5cba31303b50230f148d9d9332e3a30d42d68c664bae2c97325d99da7578c94eea8cc43b3ffb9f8e1f4f65203d33c2611e4be9dcac7b3e7450cceaf8a01156e1524847e4a65b7ce576309679bd6194dae25ec682ed381102d6b2dcb84e540ac09da08bb5ab3a0d0666108e726ce12c36825e656d409e5a04e58ba2fd14ce7f7dead9c3ae760a8e8e0998f16cdefa548d974baedba2231e40eeec4e0023a0be6a9f9cccac903b6970ae39d83ad270a80801d891de4", 0xc4}, {&(0x7f0000000900)="679d5007beab84ef0379b39efe84115d9e0e0799f89329b7f214eb2b22121339ac46efbcc03b939c7ab7aa71545ea1a46090b6d13a6e550412e8f153c0ebf11e89d0960a3e97bd0937d3fe1a713b9207dbe3ec43d11461b49dbdc3d5caf3d44a7504142784d06ea8fc1c2c075fc690d1925bc50206ef0f154820563ac981f2144ad8429e0b0e161457509c9d7c40c577a6d0839eb346d02248025f778544e651201ad1cebc8cf96fa7d38b65ae53d28df714904aaef9c346c062f5afb60d39e9856cc177f146fd0f4a591f7e33b6af7df292cb7b9c", 0xd5}, {&(0x7f0000000a00)="c5abdad4bd2ca5", 0x7}, {&(0x7f0000000a40)="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", 0xfb}, {&(0x7f0000000b40)="89c142567db261522b4a29243975fbfccd216251b8b3abf47caf4fb8bd2ce3759a0858dfc24da7279da5a3110fb74133c0ca41d472003fa26a427b32d7ff1598d8972dc8e6d13f6d26381164dc703d472c5680a32f702d82df4882130fbda99603f67ca1db6da06721e3bcb090f1c896c30d4eabfcf1aacab783e267d149cbfdad6d9fe6e288952cabeedd69631121efea7f69a182e73f58f339023908b844bce14c3038e0fea65031031beca00b0d3657e42af3e1419efde924ab28d360e513b215b6946c630cdfae7c5b96125ec5ee0977d0883658ea8064b1c0e05601d2eadbae2179d56b9eb9eac917fab6b062afa179d3b8", 0xf4}, {&(0x7f0000000c40)="d6d245c76f2ba18450f41f1acad36042c35f90a6732a0b5e44c50d5ff59c4ed4a9558bc1ae6920c61b179ef01eddb22253c80715fd0b90bada8a2a5207d98694688993545a1f48a0c6a08141331a6f0f", 0x50}, {&(0x7f0000000cc0)="c1aee9877c082aa312c9bb23d90519000dcf9181da5542e239190176c7f06968322de658ec84225ed3899df9303c4fd83fd2215d5089ef70b03c28363705ef1551fcdc1bcaa8faa407892e710131032869a5bfcaa5e958c0bf33862c52cced4c268efe90cd765880ed91f19d26bd431890571d2ceb7c0255b9111d2bdb97c26dc5d71f697003abda4bba", 0x8a}, {&(0x7f0000000d80)="471e195c5b5a623a3ebeb3678e109c3737577ba766eb659c2f5e53538d83abe5f863820b81628c7690085becbf5211b2832e3a2d3637b58403fb49f4bfcd7c3ac104846772313d32e9d17c2f562b7ef5c1946aefef37ddf860160ca3ed159a80c06262f7358e29d76dab3c62f442673883f42f3c03c926647d425f478b61867e0393f3750795877c06c96cf9907b1c75054f432546", 0x95}, {&(0x7f0000000e40)="a877a533f1cdad6a44a0b820f059cace878c7b3d96d64420cee2f3ea4f89639111533045223c68d8a1486a4828fbf1b3a23f286ded5b6ede286a158d4616fd11d23fd963efa4b3ae3114705f364ca826d06cd421c9ff910447a0ffc82049e5c2ae8a5101b503c7f6921aa5d49721eb671e714bc02e42cec14035fc82bf6d", 0x7e}], 0xa, &(0x7f0000000f80)=[{0x70, 0x119, 0x1, "b5b01e2f227d7c8f8c338c29fc17fb7f6fab8c70c3cd75334fcd01f00f9ca7d96200961dc93718b2dd6123d95ce83e5f1b79d0f72c3b61a20565ae15ff5973554a45f009c8d40e38857959b3546a897a5caee6f1d879e77ff589"}, {0x60, 0x111, 0x6, "76589d5d2a1aeba44ade943966a013f4cc4113296296de50c6cb9011f28e660ba8954667c311a4f000324cb6b62c8113a559b2df82161c6aacaa61364d0a982a2a3193956360914bf2d52c0a1932"}, {0x108, 0x112, 0x8001, "2977e41fc8f15254b479f365656ca4189a479d468e382c492e405dbec22fce5420e0d2ea7e9a6fb21f3a8d2aeb3acce6a86ca1b0b3eb9361c278d4ef9f4400c5699fa2428a1265aae47d5bdb16c91be27697e8b340eca57afd6a217dd1b2e63f2f8cd68cd878edc5232e446cf8dc88d1096db1816a07207411646c17f6b8207a029abb75db0a35eaefc8311502e54d56d41abb36ab8d39262761c508243fabb7ed94fbbf3b5c82e1d4d33f489a59166d44f6f2d61c295172a1911df79626664e63fbab98de45dd9ebe427f8d15d3115b358000296c5f6bbfa1ea55d9ac24b0639544ec45555880519614d4c47e54eea1d99d3a1730fca7"}, {0x28, 0x113, 0x7ff, "afb92c7ec34b40e26d458639c33b4ebd29ab"}, {0x48, 0x10b, 0x388b, "f6105cc0b8c56bd63403e3fdb0470b2f5c4d0fabc3e2645dc992c4dc1551f0959da2678ed3892f652f5e7d6c6adaf6e5b83f9ce4a48348"}, {0x48, 0x118, 0x4, "5b67bc124e1f34200ed5fa873ff8ad20729b26771625e34833ef6ea376de04d36cd12592bfd292afe6b8f85677845a28f12d2ff3"}, {0x1010, 0x1, 0xffffffff, "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"}, {0x98, 0x9e, 0xff, "2477462b57831016ff6cfa24b837ca866a4593b984fe909a1703de896c0c4ff62be62bd5f095499bdccce0ffcb791bcd308a6c85fc02b595f48fa80e304b4585f9f3e94df5c284dd6c479170473d8bedce0ac170c46a3a0ec0e01663b7bf3a5a273cbd81ad46649f31c0379b80372ae9eceaf6779c764032bda43ecebbd3c8471f9f9574c8cb"}], 0x1338}}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f00000022c0)="fab6bc9a0155e7824fe45378cd6cfd7693700dd10dae101c6ddb9817e0f3f26ec0a149f437674e51c3195aacebb5359088e902ad29e6c35606a5f696de32b1ad7a181edcad8650a645d6f870bbb0119ef2531eeaaff6fdd1ce9cf04b3779396966a71bb70f94595992c690ce1937a9949460a668d1249018f39223fe188153fca429383ea07821312d8af524e44c89cb97e4a4885144e2f606d5d1b4b8e56e7c0e00b5e0f97d53c6949c9620fc7d07", 0xaf}, {&(0x7f0000002380)="9f7fadf1b2ca466b981f5acda887ca652ed9aa61de5569c9afd3f9dbc935ef1bfa1ba718ed2bced7a91782b7620f75057100b3797416badae4685b8ffb72f9010b057a6c91954f711e0beb8df58f74", 0x4f}], 0x2, &(0x7f0000002440)=[{0x58, 0x117, 0xeb03, "f7dc79aeff9fc164059bf71d034c90d7de01ceb71a4e813c6361357973cca76d0bbee2f222e257da100cd006d793cf689bd8643ea5d62d63f65972c9a2366cee70"}, {0x58, 0x10d, 0x5, "490143aed900b42fcf988fe9127605f60def1ca38d3ed643f63e56e7a5a8771c6f5eb46c42e0c6c48916d6e3e44531f7322edad76985d09ef0e22ea3573836e3bf6f6cf863"}], 0xb0}}, {{&(0x7f0000002500)=@pppoe={0x18, 0x0, {0x1, @random="f18e9d43762d", 'bpq0\x00'}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002580)="20e54e", 0x3}], 0x1, &(0x7f0000002600)=[{0xe0, 0x10b, 0xfffffffa, "ec5350f18c36d879dfae3ff4ff826dbaa165613bd2722a5e71c01b6041ce1cc4fc9de7de4e65ab0475c1353b8fc7eb14ce3b8fe6f18d980406129b939c26dbba0747f0b6df0778ec83694aad4f0e323f2ec5e63a1ec30afc73c57c0e81bb0bca32063d8b39c895e6db95226c15f303d156f8a8d969bf58980ccdb10ed5926798b0bb78fab26da1ab4d9429b9789cec2989716272810dbe247f04e9c13c2f60521b0ef2bef56e8fc8e77982db8036a740022684f2df02ef9ea32a0b1c3631611e1c889b3098e76bbb1f"}, {0x30, 0x293, 0x0, "6b9191aa88b773689390092fbd3f1920d60e276a078ccb7222bac0"}, {0x58, 0x0, 0xffff8001, "31d847fc1229a68add4fced2a5f61a3ba5e2014224713e3cb21e178a947b2c42b038f8302461e0431b668c0a93b2a9cf0b49d128c07d4414e33f292d5ad6ded466ec9b"}, {0xf8, 0x0, 0x0, "7fb2a2f3a2794e37251ddf0ff50ed6d0643a6fb83077a4f75ba79e4a14b5957d4d8ab01a149eae6973f1af2cdde405031f61124372c4c07722ed0dcc073f53e9c60c0d77aaf32a1cf3f5a728a4b3fee518a6d437ddffab7330e2b0059afdf781c74106c64b621591beabccffaeba2399da1f02e0d2dd1324647ba43a758b4558f864aa64bfd69d775ada4be5a1640d577fc9a78e17a32a2ced29938700f05ef5fa542f57192005a1235e52ce405544dff65143c0aaa3fc421b3300a356d67e3b57cbe44e1b58e61fafd358b24bb1c81ce7a8d9e9592f8b96483b6db53ffdd96cf6cab9bcf6"}, {0x70, 0x105, 0x6, "e4a33505e4c3b1d7ff71449650f9cb93bc11b146914b0d742f57bfad39bcbc1bb1c4ce174ef7173b8373b4e5cb23c44a66b656c807bd37893f8bf7cd7a041cfd86332d9129079807f917c200e16c0caaec3d3e251d3fe68a3c85a3a819"}, {0x60, 0x10b, 0x20, "8908e9abfafaaba7bf81662dcfe9cd5c820675179e4ab8707c79afa77299f73e4b3648b828382b850c5c2cc10552e1fde5a0aa058d909a3717edd23a2ca6501f53db11f225a38b92495ecc97"}, {0x30, 0x109, 0x0, "79f925923b9a1339150e36b51f9be54f31a507051dea570c41dbf7105f"}], 0x360}}, {{&(0x7f0000002980)=@ll={0x11, 0x3, r4, 0x1, 0x9, 0x6, @dev={[], 0xd}}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002a00)="1db83b1252c48beed85d9823765cb7337bdb0d6f92a38b522e3bb9cab68353e722f8504c34ebe839857849c65ba30dfe41db04528a0eea0e74abf3d26bbd2fb639f825486cb787e693c4f252f8fa7d812ef01a61b4b20aee", 0x58}], 0x1, &(0x7f0000002ac0)=[{0x68, 0x116, 0x1, "65cc8b599ab20cab0ab65ebdd0a00cb80af4e2e568019bdd94339e78821c46367311cc4dfb90ce93f909d9523cfea49788539924f65e2e5ef82ca239d5a9b3054c514ad1f753e356e8252183aeaf62887d"}, {0x10, 0x10e, 0x1f}], 0x78}}, {{&(0x7f0000002b40)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002bc0)="2bb67d65413af655be2c1b492d91214e0873787c507b403c938db3d99f8bd1d46ccd7b446fbc3e97a112f3423ba33a8fdbfe3f17fc8343d371", 0x39}, {&(0x7f0000002c00)="8386345a5d8b06c10dd60cbd4ecf5007ac701074c887da34c125a2b00f09d31f7d46b70efa9593b1723f78371b7a578ef92c60c4272aa48bc53be0d044860bbf5aa9e671f0f861032148ce1aad3d40b8c1d91c770941e676956683", 0x5b}], 0x2, &(0x7f0000002cc0)=[{0x100, 0x100, 0x10000, "c8f1576f2cf72122e0dbe6f3d48bf5edd73ad850cbbf8537f84e54fa18cb356d9ef156c1bf7f542052927c91ea5774adcbb4df0f9f41241dde5b2d4e63fcafac582009f3b4bb7d59814c0d15d4d6b1758229ed0aa3d08361599509c9c71585e730595ab978cd529a9aeb19ad4037490215d6e6cfdb9eef8ea28b40a6f1f8c644b2ba33b2eda1bcd36b02b2ab6e5998cb82a81a0bbb6d8466ac0428af7356ae6ab5f23d0a586a7ebdd68a7d63ad0c5571d213ddab66eb51eb86a147181a7f673bd5038074351272a13196126b0d88fe6d3674e68d3d3a1be50d74f5c6c21a4552ef6edf856cd91a03829121491519"}, {0xf8, 0x10e, 0x1, "4f792f3dbdc28405f927ccea9d83c839843f220a462458ab22b3d991f4a440e87d84e8e434af8f4877e625e6c576b357a3b67e0a3411f17dda56783c558471a6194c10febfda71d5627dbfce56314b399aa14ecd361c511afebeec954d4e6e89058c026cd2a576bd2e8d1ed0f00cd21f3feec8a8424a31cb1ea36b2706745e202d93f4f2007d36ed999d2a80f4d2fd1ded9ab7e2e0c7a2794aff0c7d84e4f5a0295328d32f1d09fb5300958e24539769e8eb612dc28c2e567da16d881f536b75f60241fac9ee464bc79140f8f5937c733a8f14c0956afba7786891344dd59d43769d638daf"}], 0x1f8}}, {{&(0x7f0000002ec0)=@ipx={0x4, 0x9, 0x0, "be9e882661c0", 0x7f}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002f40)="ef4bf2e963f6a4c20e605a180009717ee826b60830a0091aca7f487fd4b5bbb964d0", 0x22}], 0x1, &(0x7f0000002fc0)=[{0x28, 0x29, 0x519a, "bb6c30a51f1f9ac994aedf0e5659c0988793b9f5175d8e1e"}, {0xf0, 0x29, 0x1, "c5fe0708bdc479d4940a190b552e198d6e714e64eb7fd7f8c8924df806dde98f7544ca6d93e8e17477b7d0bc74652ba65b95b1b3a924df4a752b01a279adcac118efdb781ae81bdf9073fb9a53f2c039013e76ec3769fda9e0928b25410a395fa8b4f1fff1b5294247745eb0d75be65572ed06600fb0823112f15c22ae611b97e4221efe7a3606b85baead62ab1b7fd50aa809462948d2e74848c8e41fe2424654df8b5a9d98e58b8b29547a646b18d15fad36d9db43c9346094c25ecf95c9e1f5ad9501a1301a89d9babd2a367c66b27cbbfc155aeae23eb9269a45c9"}, {0x60, 0x110, 0xfffffbff, "dbdef741d80ac023a12bebdec3f84d8af5543e24a95745fcad074d604cb8f85b3a1ce3e38a8ca5ff83472bc70b9e2c3f2dcde5e623bece56efd34dd0b48788100a331deca36043cde880ec9e1d"}, {0x28, 0x10c, 0x0, "02affdc3a8e4babb4b8e7f614804fb0d52897dc6e71e3730"}, {0x50, 0x88, 0xa5d8, "a2209ec0184311fa4531c7f4dfc89af773741392021bff615bb4931a995502b1ff67008afa4d2e55ee94020fb9b55d16cd5bd4f8ac6e299f63cbab"}, {0xc0, 0x0, 0x200, "0795debec777bccb5b72bae2a6f5e8ec8a6b3cd5a4391ad50db87bab5b549fc78a5d5e68e7241661c58584803226bc6aca3b50c0329978e89a5f83f62a71cba29be44b9249c887d84930463d733c9f5e21c86a0f81814714e9e6e8987ddeb735c86b66a656c50857d2caa01f11434d84eda4562447021ce082c402fd226bfb1606118f6f049481da40ae72f828c69f4e92c380dd967c2fcbac734d268d19baeea6d20da620d28cb91c3afcb062"}], 0x2b0}}], 0x7, 0x4040)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000052cd3"], 0x0, 0x0, 0x0})

01:33:22 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)
r49 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r49, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r49, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r50 = gettid()
ptrace$setopts(0x4206, r50, 0x0, 0x0)
tkill(r50, 0x3b)
ptrace$setregs(0xd, r50, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r50, 0x0, 0x0)
stat(&(0x7f0000001780)='./file1\x00', &(0x7f00000017c0))
r51 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r51, 0x0, 0x0)

[  505.103765] binder: 6093:6094 got transaction to invalid handle
[  505.123382] binder: 6093:6094 transaction failed 29201/-22, size 0-0 line 3128
[  505.157153] binder: undelivered TRANSACTION_ERROR: 29201
[  505.181787] binder_alloc: 21380: binder_alloc_buf, no vma
01:33:22 executing program 2:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x340)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d30783030303030303030303030ccc25c9350fb7908d4fb9bdbafdff82a30303030332c6a71666dfc5015d0b7043984feb9af12743d76667376312c4fc89cf62a4ae3bcc3d066bee4f9e08ed0580ff0ceedd48b7ee37f029ca0f4b6e581413f5e466b1f51472f0117520147fc02f3f6ced2b93baf0ceb62da", @ANYRESDEC=r0, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d66303fd80000003030303030303030362c00"])
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000004c0))
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r2, 0xffffffffffff8001)
write$9p(r2, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000240)=0xc)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r5, 0xffffffffffff8001)
write$9p(r5, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r5, &(0x7f0000000300)='syz1\x00', 0x1ff)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000640)={0x1, &(0x7f00000003c0)=[{0xdd, 0x2, 0x4, 0x1ff}]}, 0x10)
chown(&(0x7f00000001c0)='./bus\x00', r0, r4)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup2(r6, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80000)
write$P9_RSYMLINK(r9, &(0x7f00000006c0)={0x14, 0x11, 0x1, {0x88, 0x2, 0x5}}, 0x14)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:22 executing program 4:
ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000040)={0x6, 0x4})
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  505.214864] binder: 6095:6096 transaction failed 29189/-3, size 0-0 line 3274
[  505.253860] binder: undelivered TRANSACTION_ERROR: 29189
[  505.272168] EXT4-fs: Invalid sb specification: sb=0x000000p07fffffff,inite,jqfmt=vfsold,minixdf,commit=0x00000000000��\�P�y���ۯ��*00003,jqfm�Pз9����t=vfsv1,OȜ�*J���f������X���ԋ~������A?^FkQG/
R
G����ҹ;��b�18446744073709551615,subj_type=/dev/null,errors=continue
[  505.308351] binder_alloc: 18758: binder_alloc_buf, no vma
[  505.334077] binder: 6102:6110 transaction failed 29189/-3, size 0-0 line 3274
[  505.366084] binder: undelivered TRANSACTION_ERROR: 29189
[  505.370427] binder_alloc: 18758: binder_alloc_buf, no vma
[  505.387024] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  505.403030] binder: 6102:6115 transaction failed 29189/-3, size 0-0 line 3274
[  505.430294] binder: undelivered TRANSACTION_ERROR: 29189
01:33:26 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0xffffffffffffffb3, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006b40400026982742484732c3a5d0bd392ce60ea2e719927e50cf42fc594236b409b5ba5e6f7f7c66625a1d1a213331e2de413b40d5e459075be24acfe3a84bdb49540ee8efc3d6ede6616d64d5599a"], 0x0, 0x0, 0x0})

01:33:26 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x4000, 0x4)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
write(r0, &(0x7f0000000340)="e5709cd68433cfc2fb0afe46fa64d510f9780796bcdbe43f3bbb5bac88a2db001fef8a0327771f3fb119e900f36217a046aab0c46549dfe0d48fcc9a59e661fd1eef37129099177d16fce177370f1d273860302a8957912135a19279637f2331fcda5a427adeb10033eb454bf54b69674c27266c33e69e4c0b2ac24704128e3a58ba8b646e2a2c13dd824c4e8fe531a6c7257b4b9334a38ee9564963161769d02aa7d4f1e3c566340c3ef8dd3f8dafacbcce2dd1a9aba6b91d", 0xb9)
pipe2(&(0x7f00000000c0), 0x82000)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8145000}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)={0x234, r3, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8db}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x92}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c7d0e7d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2bf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb6b0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x78, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @local, 0x1ff}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x957}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x1})

01:33:26 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)
r49 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r49, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r49, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r50 = gettid()
ptrace$setopts(0x4206, r50, 0x0, 0x0)
tkill(r50, 0x3b)
ptrace$setregs(0xd, r50, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r50, 0x0, 0x0)
stat(&(0x7f0000001780)='./file1\x00', &(0x7f00000017c0))
socket$inet(0x2, 0x4000000000000001, 0x0)

01:33:26 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x8000, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
write$selinux_create(r3, &(0x7f0000000080)=@access={'system_u:object_r:systemd_unit_file_t:s0', 0x20, '/usr/sbin/ntpd'}, 0x4d)
ioctl$KDDISABIO(r3, 0x4b37)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)

01:33:26 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x127, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000500"/68], 0x0, 0x0, 0x0})

01:33:26 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f00000000c0)={'sit0\x00', {0x2, 0x415, @remote}})

[  509.207242] binder: 6363:6364 unknown command 93
[  509.212405] binder: 6363:6364 ioctl c0306201 200006c0 returned -22
[  509.220769] binder: 6363:6365 unknown command 93
[  509.225590] binder: 6363:6365 ioctl c0306201 200006c0 returned -22
01:33:26 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r0, 0xffffffffffff8001)
write$9p(r0, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x1, @empty, 0x4e22, 0x2, 'wlc\x00', 0x14, 0x0, 0x10}, {@loopback, 0x4e20, 0x4, 0xa22, 0x3ff, 0x200}}, 0x44)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000052cd3"], 0x0, 0x0, 0x0})
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$int_out(r2, 0x5460, &(0x7f0000000080))

[  509.266560] binder_alloc: 18758: binder_alloc_buf, no vma
[  509.283789] binder: 6369:6373 transaction failed 29189/-3, size 0-0 line 3274
[  509.315228] binder: undelivered TRANSACTION_ERROR: 29189
[  509.325065] binder: 6378:6382 transaction failed 29189/-22, size 0-0 line 3128
01:33:26 executing program 4:
r0 = request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='/dev/binder#\x00', 0xfffffffffffffffc)
keyctl$revoke(0x3, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000140)=@secondary='builtin_and_secondary_trusted\x00')

01:33:26 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=<r1=>0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3b)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)
r5 = getpgrp(r4)
tkill(r5, 0x88000034)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
r6 = getpgid(0xffffffffffffffff)
tkill(r6, 0x38)
r7 = syz_open_procfs(r3, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|\x01\x00\x00\x00\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xe8f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\x95g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xd6&')
ftruncate(r7, 0xffffffffffff8001)
write$9p(r7, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r7, &(0x7f0000000300)='syz1\x00', 0x1ff)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x10000001})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="08fbb20000000000000000000000000000000000006350400040ebff060000000000000000000000000000000000e5ffffffffffffff0000000000000000000000000000000000000000000000000000000000f810c48d47865ef3c62d"], 0x0, 0x0, 0x0})
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r8, 0xffffffffffff8001)
write$9p(r8, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r8, &(0x7f0000000300)='syz1\x00', 0x1ff)
linkat(r8, &(0x7f0000000340)='./file0\x00', r7, &(0x7f0000000380)='./file0\x00', 0x1e00)
fcntl$getflags(r2, 0x816)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r9, 0xffffffffffff8001)
write$9p(r9, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r9, &(0x7f0000000300)='syz1\x00', 0x1ff)
write$P9_RLOCK(r9, &(0x7f00000002c0)={0x8, 0x35, 0x1, 0x2}, 0x8)
sched_setattr(r1, &(0x7f00000000c0)={0x30, 0x1, 0x1, 0x3, 0x1, 0x1, 0x6, 0xffffffff}, 0x0)

[  509.355926] binder: undelivered TRANSACTION_ERROR: 29189
[  509.363718] binder: 6378:6382 transaction failed 29189/-22, size 0-0 line 3128
01:33:26 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ftruncate(r1, 0xffffffffffff8001)
write$9p(r0, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff)
accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r2, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:26 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)
r49 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r49, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r49, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r50 = gettid()
ptrace$setopts(0x4206, r50, 0x0, 0x0)
tkill(r50, 0x3b)
ptrace$setregs(0xd, r50, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r50, 0x0, 0x0)
stat(&(0x7f0000001780)='./file1\x00', &(0x7f00000017c0))

01:33:26 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x1)
ioctl$int_out(r0, 0x2, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  509.424237] binder: undelivered TRANSACTION_ERROR: 29189
[  509.456176] binder_alloc: 21380: binder_alloc_buf, no vma
[  509.464720] binder: 6391:6397 transaction failed 29189/-3, size 0-0 line 3274
01:33:26 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000004e00"/88], 0x0, 0x0, 0x0})
writev(r2, &(0x7f0000001580)=[{&(0x7f0000000100)="0a88ee67f94b17da91edb36ab453f961ba17", 0x12}, {&(0x7f0000000140)="66180f7b066eb12b757509e9f4be35b812c7ebc8abd35488cf3a2b86263f83465f031b048f616264ab7dbbf1f6d1f830ec4f5a859d6bed9c26c4cdad0a8c1c3c8433b886cf679f125cfa9e812e539109ff2c60243da22435206b984be40af4dc9f80c726a74d37c033d9fc5de6fa4578d75b34697ed0954b425722b54dfe73dfceb6edf7001a24b27dd604012187dd8d7e7ee3e88a07afec53294331ad047da271e1c2e8e9e3f1e700f29711f116cf65c8b755fcec3c32", 0xb7}, {&(0x7f0000000200)="ce50bdd401c5496bfc4e7f6fbd47be17890a9b7f8c488fb30273994878da1ec7b6d3c7004d434d81441a33ba3bfdd3180caf417802110f4c5d1c51a3b1a3cd2b679c35044983ba56dda9dcfe8bcb0c9471fe1098d95894d74dd364a365d2c20bcc9bdb84a2d1c66adb45607b9f31458426fd8e1590a3974aabbca28ede2a5e448f6201250770cb3d4bde0c8646120316975ab1d522f517aba5ab74c7f1a053962140f2ba58f5b4fca60bf92d6f8cb4496769753a488b84702ba603", 0xbb}, {&(0x7f00000002c0)="e6d20ae5a56f2a77faa03cc56f8422ed3d2f806c6805b2901a6a2d033c44691f4f0f6adcc8aaedb58802013e3c5c3e8578b6448eca07a5a2244e7f54ec4d1e8bdd3062d5a5907fe40747a791ca4fafddfa0804488462bccd9da6d7f68e29b559fc99c6148617bca1cb414fc12dd0a94a27f96eff395a962e68095fd5a225454d2ad28c4bbbf6c0870140823a40395277b4de541d5210624657d16ca3c4de60fa5827506cd384ecb1bbf26b09ce541f802a76c6ff6012f3de74bc0c681b643de1c869bd31092f11dc0a81c4cf0730a11d5e704e1850691e5388a5ce3892763b990c64d1aec2668c880d2726", 0xeb}, {&(0x7f00000003c0)="f366155c8016ff28736bbda0c452de4db53ec7dfd08da9f880a88f9f75bb0765fe0369a2c300b69da016c65526da315d2149b10bdd8bf9844136c4d3f1fd6adb56c519ee9099305ab3ece1e9263ee161915ef011012998bfe34422eb7427a2230e5264d98d49cfea0956403cb02661609bf1351dbd5247f8428a848b9ed810b2dc332f019be89c63a43b20ae2adac9dcbdfd736a2a1c04b7fc07102af148b9930c453fc2e47d618a5c883f563d6e767212de33832f12f153d6abb1531feb1281251f11e132ebec60cd7c65be650451462f3d48e1498d00ae55415fb9d63f23566110fad519ffa90c402129689e1672b9d36f49c60c831c99ecd9a9654faa361d42472e7e62e2479bbf20605bfa8b4f7ff8b572e2f85b9aa1fa39d598e625cd7e7ffbc3eddd5ea3399c18f23b5c1849e6905c48f804c525be0e6b5412343261786f246048658e611c7a58e26a7f65c45c7baa5c3b2e8354885068e888f5206c50ed45a8587a7663e14a67b54e9278c1fa0ff5256ebe32b8f96103f77c0120aa844dd821b68a2657f9885df5b28eda1c79d12c429add649289192d3e21ed6636086136b3b8f8f423a95a2056907fde96d71ee976a297890ee16f64cfe6e707bd264f0de638ccb375ae217452894aad15c8db21b8d8f6b802a80198bdb58092d4fb915637b7e183e896ddbd4abe8e786469a38ce38620d4f669934261aba2de50c531884d9ee45f947ee044aa1608148897189a6f7eeb3666334d7a13cb65c9df6f00232c38e1586e8e7f6ff5e20101890b5f4764801fe78eb516a69ab70a6348ea04efcd9611542f44119611224ac6a99c117c8931f727f5eda487800816998bb8c29007dc522eacc7f40d09addad36d228fb42578e6246ee489da072b099addc0fe7997e96f74d0581028591e57337dcccdffe3ff4183aa99304d30e6aff9b5733feb1ad3340dbe4575fb166460cec7c8675247b4e191b306ee7c0ccab72102a52a83c303eb67731838afa0800c49675818852aa48a13abb738a6fff0615b60f1fc0b2253c0921ca7e32147e88f496f92f805c061d3e53ae49eede83c07480c71aee34ec704825f53f2d2989e19195062a3640b7cb0d5b36a2a9198ca021b95aeb62a7ba16ad79633afb23878d0b6100ead490475c6e106c3cfdf29cc212557eb1b591c7d7fc9f3cfd63f0f38ce7d1d1b594eb5da1a2dee1b1dbafc61cd81e4ebe43ffbec133ec3b40e05e37a946519846e3473ff38eccfa700c9a6efd2a851ec1d52a203d6895e0afc7c15634352816e1d46729bae9533dec3643a8d51b8abedf12d48498da29f25f212b7af4b7455311e9b26495688960eae5d830b84cd1fb50e0faac22a4572fe6ea4cb9e42791c119a4ff18136a360d41c2f2ca2a1b7cdb4303a3bb4cae20d34152e588eca7ed5311e3ea600b7531b36d42143354ec652d0c8abbdb956f78f9405f47e681a9e1f2b5b2485e6501363cfb7c2b980a5d740a0708a9dd72f2583d4df7d1be27817e371cf6e02715a6d8098cc6d67b80ba4b2a164e400e5f8ae78e3811a9eb844868efb78ffe03c517633871138ebb2161e434ea4a6ec9939aeacce60c8d104755618fc8554bee6227a71112e21d1484474d419a79a6d5558a67b4f16f6aba8f05cb3b13381d3c2ea653e74b1973320c78b3d855deadc83efddda4475d5878553fa55bd6a7a5f3f71829044ac721bcd49d72d17c225787877034f8a1cb70b5edff2efae69348790e69929fbd876cfd43920391a8b313861f607fb71fc754e83d61e839bb414397d38757c3e814614088780f2141c3812da0d76999031eb86a403168fb9220f609f4a09fd7d1112bf358a1d434aae1e28704dc42b9b7e5843c5ca0d2f58259a2e27ebdaddbc7adf6d7c3dd909df7cf2c2c303761464ba1355f7027a36aba62545d4cb339316d16a56a60051f83ddec7c6e4bfb1c9255aaad605cb6781e7b3b0239d6fec19d760f893d31f0b04cf2601f629beb9ad21c4669aa1ff54838263ac0f33375f6a4a2f40c3cdcd4748cf0b50fe538bdd3415b4c0d0019de5a796d312c4f6b1def9f7ff7136540638e639fd6566737d35369f4a90edaf33625b9b4c3525b06547aa5053c2a6de0731de0c010c375e1a44a42677eed91227ba8f5660fdcde7f629e6bfd636039f3c810c74c8fc5dc620d89a6e5138f6607dddb110b043826962a48547eeb5f60b7123cb9dc8ccd18ae4bc086c21dcb002afa62edd9aa09f5e13ae9847cbabfae47d97c26092614ff90af90ef3ead36d38fb130b271e22f27a161face886fe48a4be544aff5664df9ccb5ac8990b4fd27144207c536164ad17f7228080e8132b7cdc0b07f171508852c3f3c1f8547bda0ceb037cd43d297350963e52798e2c1ea645b1f5e866649108e1af42eb64cdf807545b43c1ceeb8d50c9bf64464d9f72e620e0344b3dc0acfea55eac59c0d076abaa1f346c8dbb4c89edee4665c01bd83123087b0235b98a7d56e096c147ff6a963abae2128ed4ce21c359b955bdab0ea19d643fec413d81bcc5d06d5b945dbb5799913e76ef283bcf49b01c47e16c053f38aaf5743528bcf96cb22ea1fef913d6fe61d135d14f5db8240db7e1e2f1b1e923e9c1ba0ed30196650f1f95bd192fd00300337675cbdf876e86379039ffdcf5b9ed27286030fd00f0afb0ded30da24cba4d0d6d0eb60329a6c9d8d9abca855c8e876a2a728ad5fadb22befed92bd9f5890c642d8ca078732da1af3bd7c2f818e5f4e2f9c600ec77c7aaa20c8de42321217c5c9b0dac385d3c75c61456bb74f8584c98218895cf4c0192e4bef024a53e4da1c7e7fb605d1ceabe350d5154a495b7afef5b6d83e40a429b100acb5bbcd786a68adfae45edc1dcc12bc6010acd38de838aed638d275afef76e6e168eadab8644fb13ff0634329bbec86dcdcab1c28f80cb3bdc569bb804805066d7cf1c39a1934541a95bd9214116038264a5d81b07dd6dd24109ad77fdc8342fcfbc03d9a3b24022b7dbbaf8bf4bcef5ccc0b86b521075fc72d392ff5f09f588c8305f59d26bfdd86be29a5fa575f79f93ca18147085ead639e041e8e6ae36fab65ccc3403bd6404cb12e9e9a9746a89aad310568d4b6df68edb99836c3c94990f45faf32bf01c011bb97a03967493290ad688e1756c7cb300ec4804b8040ed163282db818d59ffa8636acc76f8113cdd11ba0814a5593393883b3210fabb68a882c608f9933832d84e1d47b4995159e36ea0202897b8ef043404ecf711fad9094f9112194214558d9f0ddf019633dbc0e8975cd8cbb9039d4ab04d9904718893e43765ce2c3ec58f729df89a74ae51181af003f411d967bfb34d83002d7d84a82cf3c12d6eaeffca7102a71d1b71ef2dadd5da13ee39e815f389880c82da76352881752fd91876524ada2dcb07c50d7f4ce6f9703c7df330028dc0612d317f699a7a1177542babc26979865f69e8f18eb6846ef1ec47773d7cca84ff8c80927a3daa41356c0c1e3c16d63080aa4ccce99eb3ab3e053187d3218ba6bb347526736ad23422f83d98b6a0316efce90deba9be885bc3f83ff12845b3187ea2d80ecf9aa112a8eae821fd9b1f7e0c2bee78e4c814446847b2d4a2d70589b26eca1a3835a0b237fe6179c9d7c9e8a443733034b08f26a6d2c43ceeea93cdf83fe212ee0b3c7c36f54a28c9a32c8ee98c65569dde2d92d0bd11e5adcdc342225b755b16c3d8787e6cbfc45c1e8f6b5f12e9dd9544f071b9660d85289ce6a29693f2534808789e4e63af79d87946b333f909a752d044aa6d2c8cd63bbc066a65c00e328a61107102b4909888eda4a1d1d15567b9b71c2a9f4e315fbc5d40f962e2acd5fd4ef41eaa15ee62f4f92c4679ac7bed5e85b46f723ccbc34b6546dc312ff2c95fef8440c1ede2b8460cc785fe1aae6e6324fc294c81959136babebfc9d048a9516671d887aa388cb246e44dafb54b72bc009009e76fba410fb7334641d5758f6d346747037a07d4904a874ef0fba15ac7a0b3c8190fb991789e581568f5308972c79c00b3f0d27c9049a70ac6196cbf34980341218028edb104d53d79a4e50dd963e7272618fffa33bb0587db73a568c9b6f40110275bc3f860fb767d49ebe32d366709b3ddbb9b14367bf838da7fb33bef555159f7773cb498b6efb7b5719d8b8a3612d6abf21c58d9b4a0df1421264d8a751492dc1c505bd670a4cf5f55fd84bd8849893e3dfbc0bf045e04d4c1ca83c329080cd3fdf4668e7138d94422a115dffae4388aa31e1e159301d4062d721636e9048d4fd122cac3dd38b33f8a07f8dd46637d682d67faa0411e29a2d1c76fd5c563b4df2176098ccbd3ca3057c5a05641c575e38df667e5f7c3e08ea25f2e20dfa55c44f1daf61bf13273762214c5a9d4e6b046986041b9fd44fe76e0da380b135ff8e3f1fac2536225adae182c49e5aaac3c09a21678c082e159681dd9c5fdb84f6ee8ed92c14944c7e6a59ded9e6a792bff71a1159bc249afc9e08a10a3ac5d1ddc881a9a75b7f464281aed5dbe686b8c46a42030dfd117a06c1d0c1f7bb92d16dff891afda1c1bd6fc446f37ea25f2e37152a0786edb31cfb7a93cfb32753f31af96c36688a761aae1f72819d2fc51777bac5dd67dad31b521e2fb75715a8a6810b550eeda247ff8c1e238b7d326b7ebb92dd86a006f65af0a089743cf1507d5a1aeb7e9b53b99a3f0c678cf1653f46f89a332166f25c33570361db64b64b5c40241b6c95bbeb228e3e347f24ea261a1934efd37e7bda1ef4d11d48549b1c3117855e7cf1af079b72547103240a9d3aafa3160b431a69111daf910d43cd9ff921bf65ab1ddbc06c4b6cef77b0e3d44bbb976bd7ddd488845c38800558e5232822ba91329a3f3d7b2a50a69fce83fad011ebf04aae42cb2ba7d84da21f5c1b98d0c6f81d135a50e9145512ae58352e0432fcfe2c55aefa3f75aa1bd28eede27030add16a8d96a51af19a39c5a21a98ef30f6b21e79d049f9a7551ba63f9385dbb7ee2d9026f249cf97aa380770fb77d610402d1b9b88ec55f1ce3087632483b4ac7d58e24308104350e60062bf1475e9113efaa78a8c9899e78c290fc924f5bf1438797a8a4e06eac89a2e723964658ee4ea55fd4eeeeb0963f11555e2927b6fee17461b80bb4e6552ec729dd628015308995bdd27f6c1e935a071e7008061d988a1ba76a30fd7a5b4232bec12a7eaf758599ecc297c57ff743592e159bede29100bb51a399ce7afbbbf5acc60f6348e2d8c40954d3a148c62985d4a1f7fb9fa5f510a9d6fe4642605895b11407a07de586be860aa1b8966809532ae0e33ba24f2c0d52b40eafb78aacf88f4b93680a2684bbf2b26b131a2b9f93c430067eb76b7b1a05a79f9168b7b552af78cc54b4945faf13b8e386c4f91686c2fc302cde4d6995a2bbd5d465b1a38c2af2ac352bbc9d684ded0f7250cbee4b5b489130790e37d75633100a647b95a0dc63f8e3b6c79d915e0555e6a5808f7528688e10ae69a3af9429f96ee7828867c92884d113602cc9ee62276163f06dc61ae8f27a55c6ef318f731e09001f69d2d624c3fc75973bcc3206900432fa915fe90a35d032a1b73c53387159fe53ea9b5b7cc80d8f75dffdf339613bbdc81d907ae677c284b148b08324555d587e1d39c8254bdba699e765c4eb7d9f582d597969edfdf73289ebe16053b6a88d5d36f0de392e27f75bc5e97b3ffc86f57b12ad5e0dadc5fa35cf97d5a6a632d5bf25f980ac7fa38fc61a8fc4f9c4425be64c8f84a54a85d1c0f3e180596", 0x1000}, {&(0x7f00000013c0)="a5a417c465f107ffe0d4c5b0d9b79cbc05350b509d0d3383689b411175761116a7f7a958ce21023887969bef337bfa4d9cd5004d5ac46af35ba66a3cd39e2e010340ffc281ffb81b27c85595cb8bebe047580edfb70b02beb35aafe2ef32ba6626063e21c30411b69b689aa384ca7a788d1fadf68642ffdc91ed364e6e70ea0bca", 0x81}, {&(0x7f0000001480)="f508ece81570711322721f02d654ff974947f0c70ea41b5feee5790ec9f377ded769d030e56f692f28063e0b2752bb9c03b697420b58ed", 0x37}, {&(0x7f00000014c0)="7eaaa50184a946c9d6cb813c8a4082926afd0b655167a1700c8f817179d050e7782b160bf635d70e6b8c2f9c8fcb947ff08ff450a9b88a80f5974d6c456c34006a2b48bfd938c45b87b688f89ec2211f45a216d85325f71f16fabfb6ff069bd52f478b8e2ac4871eaf9cce27c667c3a618ca0fe33baabfba97baea27f014e8490775a3c7cc8d12a50eb0ed4ce1f875", 0x8f}], 0x8)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0))
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000))
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x568, 0x1f8, 0x310, 0x3d0, 0x3d0, 0x3d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, &(0x7f0000001600), {[{{@uncond, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x4, @loopback, 0x4e22}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x1fe, 'veth0_to_team\x00', 'lo\x00', {0xff}, {0x540cbf7e085e8c76}, 0x8, 0x4, 0x42}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x4, [0x7fff, 0x0, 0x1, 0x5, 0x4, 0x7ff], 0x1, 0x9}}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8d0b, 0xfc5d, @local, 0x4e22}}}, {{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x0, 0x7f}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x14}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3f, 0x40400, @rand_addr=0x4, 0x4e23}}}, {{@uncond, 0x0, 0x98, 0xc0}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x2, 0x2}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'netdevsim0\x00', 'nr0\x00', {}, {}, 0x32, 0x2, 0x41}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x1, @ipv4=@empty, 0x4e23}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8)

[  509.512906] binder: BINDER_SET_CONTEXT_MGR already set
[  509.550959] binder: 6391:6404 ioctl 40046207 0 returned -16
01:33:26 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r0, 0xffffffffffff8001)
write$9p(r0, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ee80000e0ff000000", @ANYRES32=r2], 0x2}}, 0x0)
sendmsg$inet(r0, &(0x7f0000001340)={&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000080)="0c264ec9269422e27f05b3810ece0e78c719756d17e5e124c278b25b3c824f45284d82b5e2716a42fe734b3d236d3798553d6eb1252a7c5a33e68e786e066cc190204c016c912c59313440", 0x4b}, {&(0x7f0000000140)="fa1029c6c110a55400abd88df2bce8b08a6a09cac9b6c32d707f31305d310c5196cfdf6b8e4935108e786394c2fe0779ed12f9585095fb270d4bd87c710499c6d6b2a23fa77a3582c38c2cb7b81557417a1e7906e248ea2cf2aeff58fd951e317facfd01e48764b1c76d1a713576c12d26c71d705d15984d81a13e7851cf0572b57f80eb9d39aeb3c56ab0a162ece60f19b13c33ce459ff22566ae83aed30d561931116d6b661c83b12b0717ea6662b94ed6adeccb68cd82ab7252694ab8519ddbbcf6f052237ad0e7671a57710e55f43818825280328fb2a44617667ca29a9449f691", 0xe3}, {&(0x7f00000002c0)="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", 0x1000}], 0x3, &(0x7f0000001300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0xff}}}], 0x40}, 0x20008840)
open(&(0x7f0000001380)='./file0\x00', 0x4000, 0x2)
r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  509.558645] binder: 6391:6397 BC_INCREFS_DONE u0000000000000000 no match
[  509.580828] binder: 6408:6411 transaction failed 29189/-22, size 0-0 line 3128
[  509.589555] binder_alloc: 21380: binder_alloc_buf, no vma
[  509.601759] binder: BINDER_SET_CONTEXT_MGR already set
[  509.608723] binder: 6406:6409 ioctl 40046207 0 returned -16
[  509.608943] binder: 6391:6397 transaction failed 29189/-3, size 0-0 line 3274
[  509.623158] binder: 6406:6409 BC_INCREFS_DONE u0000000000000000 no match
[  509.628727] binder: undelivered TRANSACTION_ERROR: 29189
[  509.640186] binder_alloc: 633: binder_alloc_buf, no vma
[  509.642705] binder: 6408:6419 transaction failed 29189/-22, size 0-0 line 3128
[  509.645670] binder: BINDER_SET_CONTEXT_MGR already set
01:33:27 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xbcad8bdd62f62ccb, 0x0, 0x0})

[  509.645681] binder: 6413:6417 ioctl 40046207 0 returned -16
[  509.651233] binder: 6406:6409 transaction failed 29189/-3, size 0-0 line 3274
[  509.658650] binder: undelivered TRANSACTION_ERROR: 29189
[  509.664374] binder: 6413:6417 BC_INCREFS_DONE u0000000000000000 no match
[  509.687419] binder_alloc: 21369: binder_alloc_buf, no vma
[  509.690922] binder: undelivered TRANSACTION_ERROR: 29189
[  509.701609] binder_alloc: 18758: binder_alloc_buf, no vma
[  509.702445] binder_alloc: 21380: binder_alloc_buf, no vma
01:33:27 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCSRS485(r3, 0x542f, &(0x7f00000000c0)={0xfffffffb, 0x9, 0x80000001})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

[  509.714661] binder: 6416:6421 transaction failed 29189/-3, size 0-0 line 3274
[  509.737854] binder: 6413:6417 transaction failed 29189/-3, size 1308622848-0 line 3274
[  509.748344] binder: BINDER_SET_CONTEXT_MGR already set
01:33:27 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)
r49 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r49, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r49, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r50 = gettid()
ptrace$setopts(0x4206, r50, 0x0, 0x0)
tkill(r50, 0x3b)
ptrace$setregs(0xd, r50, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r50, 0x0, 0x0)

[  509.758741] binder: 6391:6404 transaction failed 29189/-3, size 0-0 line 3274
[  509.765812] binder: 6391:6422 ioctl 40046207 0 returned -16
[  509.769725] binder: undelivered TRANSACTION_ERROR: 29189
[  509.774924] binder: BINDER_SET_CONTEXT_MGR already set
[  509.794141] binder: 6391:6397 BC_INCREFS_DONE u0000000000000000 no match
[  509.794972] binder: 6413:6428 BC_INCREFS_DONE u0000000000000000 no match
[  509.808204] binder: 6413:6424 ioctl 40046207 0 returned -16
01:33:27 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xad6701a780e91f4d)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000))

[  509.808745] binder: undelivered TRANSACTION_ERROR: 29189
[  509.815765] binder_alloc: 21369: binder_alloc_buf, no vma
[  509.825468] binder: 6413:6428 transaction failed 29189/-3, size 1308622848-0 line 3274
[  509.827068] binder_alloc: 18758: binder_alloc_buf, no vma
[  509.843023] binder: undelivered TRANSACTION_ERROR: 29189
[  509.846332] binder: 6416:6421 transaction failed 29189/-3, size 0-0 line 3274
[  509.848855] binder_alloc: 21380: binder_alloc_buf, no vma
[  509.904082] binder: undelivered TRANSACTION_ERROR: 29189
[  509.921270] binder: undelivered TRANSACTION_ERROR: 29189
[  509.933635] binder: 6391:6397 transaction failed 29189/-3, size 0-0 line 3274
[  509.945992] binder: undelivered TRANSACTION_ERROR: 29189
[  509.958320] binder: undelivered TRANSACTION_ERROR: 29189
01:33:27 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
creat(&(0x7f0000000040)='./file0\x00', 0x2)

01:33:27 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000e050c837000000000000000800f3000000000013088ff74478ee5b2a5b1900000100000000000000000400000000000000bc07005a80d1f3a0d28b921800000000000000200000000000000000600c00000000000000000080bb5adecdfd5c39b5ca849500e5af106ad2a2ee24e1ccb9b0"], 0x0, 0x0, 0x0})
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1)
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0xf801, 0x1}, @sack_perm, @window={0x3, 0x279, 0x9}], 0x3)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000140))

01:33:27 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x8)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:27 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000180)=""/82)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000))

01:33:27 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r2, 0xffffffffffff8001)
write$9p(r2, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x3, 0x920, 0xff, 0x5, 0x1, 0x4})
write$UHID_DESTROY(r1, &(0x7f0000000000), 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000052cd3"], 0x0, 0x0, 0x0})
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x9, 0x0, "fb1629a34c493674be6cbd9be4909d9fa042189239340d05daa2cd0d3078225bf73095687278fb4a9349277a27cddfe796b94b21d61e621026385c276af0a724263c8fbe4891a913824fe1630b7bec18"}, 0xd8)

01:33:27 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)
r49 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r49, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r49, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r50 = gettid()
ptrace$setopts(0x4206, r50, 0x0, 0x0)
tkill(r50, 0x3b)
ptrace$setregs(0xd, r50, 0x0, &(0x7f0000000080))

[  510.007343] binder: undelivered TRANSACTION_ERROR: 29189
[  510.078596] binder: 6448:6455 got transaction to invalid handle
[  510.092021] binder_alloc: 18758: binder_alloc_buf, no vma
[  510.101311] binder: 6448:6455 transaction failed 29201/-22, size 256-262144 line 3128
[  510.107742] binder: 6447:6456 transaction failed 29189/-3, size 0-0 line 3274
[  510.111133] binder_alloc: 21380: binder_alloc_buf, no vma
[  510.122853] binder: 6453:6459 transaction failed 29189/-3, size 0-0 line 3274
[  510.145338] binder: 6448:6455 ioctl 40106614 20000140 returned -22
[  510.147950] binder: undelivered TRANSACTION_ERROR: 29189
[  510.156374] binder_alloc: 21380: binder_alloc_buf, no vma
[  510.163306] binder_alloc: 18758: binder_alloc_buf, no vma
[  510.165092] binder: undelivered TRANSACTION_ERROR: 29189
01:33:27 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')
chdir(&(0x7f00000000c0)='./file0\x00')

[  510.168983] binder: 6447:6456 transaction failed 29189/-3, size 0-0 line 3274
[  510.186950] binder: 6448:6455 got transaction to invalid handle
[  510.194584] binder: 6453:6459 transaction failed 29189/-3, size 0-0 line 3274
[  510.203021] binder: 6448:6455 transaction failed 29201/-22, size 256-262144 line 3128
[  510.206364] binder: undelivered TRANSACTION_ERROR: 29201
[  510.219425] binder: undelivered TRANSACTION_ERROR: 29201
01:33:27 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x8, 0x2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000100"/68], 0x0, 0x0, 0x0})

01:33:27 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x8, 0x0, &(0x7f0000000240)=[@acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0})

01:33:27 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634000000000052cd300"/25], 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
splice(r0, &(0x7f0000000000)=0x7ff, r1, &(0x7f0000000040)=0x10000, 0x0, 0x4)

[  510.241070] binder: undelivered TRANSACTION_ERROR: 29189
[  510.252767] binder: undelivered TRANSACTION_ERROR: 29189
01:33:27 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)
r49 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r49, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r49, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r50 = gettid()
ptrace$setopts(0x4206, r50, 0x0, 0x0)
tkill(r50, 0x3b)

01:33:27 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
write$P9_RLINK(r1, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x2})

[  510.358967] binder_alloc: 18758: binder_alloc_buf, no vma
[  510.366154] binder: 6478:6485 Acquire 1 refcount change on invalid ref 2 ret -22
[  510.384584] binder: 6479:6484 transaction failed 29189/-3, size 0-0 line 3274
01:33:27 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
r2 = dup3(0xffffffffffffffff, r1, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f00000001c0)={0x7, 0x4d, 0x2}, 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r0, r3)
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)=0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:27 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x800)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0863104000000000000000000000000000000000006340400000000062b7d629b9d6ce5d04000000000038e30000000000000000000000000000000000000000000000000000000000000000000000008700000000000000000000000000000000e4ff3d51068055c680008d16fe98136c41df82ee85533dd20116c836fa332c037243"], 0x0, 0x0, 0x0})
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x10000002)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

01:33:27 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000))

01:33:27 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r0, 0xffffffffffff8001)
write$9p(r0, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff)
r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x100c1, 0x0)
write$P9_RRENAME(r2, &(0x7f00000003c0)={0x7, 0x15, 0x1}, 0x7)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000879584878d7cc739d0736dd700"/80], 0x0, 0x0, 0x0})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=<r4=>0x0)
ptrace$poke(0x5, r4, &(0x7f0000000280), 0x0)
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))

[  510.413947] binder: 6483:6490 unknown command 4219648
[  510.426511] binder: undelivered TRANSACTION_ERROR: 29189
[  510.435729] binder: 6483:6490 ioctl c0306201 200006c0 returned -22
[  510.492107] binder: 6483:6490 unknown command 4219648
01:33:27 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)
r49 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r49, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r49, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r50 = gettid()
ptrace$setopts(0x4206, r50, 0x0, 0x0)

01:33:27 executing program 5:
syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0xc04)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000140))
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000))
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r2, 0xffffffffffff8001)
write$9p(r2, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
write$binfmt_elf64(r2, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x3, 0x8, 0x8, 0x40, 0x95a1e97281448089, 0x5, 0x1, 0x26d, 0x40, 0x1b6, 0xfffffffa, 0xfffd, 0x38, 0x0, 0xc004, 0x7ff, 0xff00}, [{0x5, 0x8001, 0x1f, 0xfffffffffffffffe, 0x7, 0x7, 0x3f, 0xfffffffffffffffe}], "28eaaa94c7d97f6b598d7ec1b217cfc60b7db45d062d6bd99add3c5dda73dcf7ee922729fb1f9c35755496ec5d86c7d79ab6650b9a89a181babaa5de701987f6ec93fcd350ba63171f9f785e3ed748ca2b9355c3ff27a35df05bf1b7cda94c7e12b47fbf6fcdba3a058002e3be468eff1ef7d994559b0cbf4eb0d48779143955d7b3d9236a8a30670218aa6ccdc870191e2ea4f5f6f4dae511d4231ccb02"}, 0x2b3)
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x78)

[  510.547631] binder: 6483:6490 ioctl c0306201 200006c0 returned -22
[  510.570704] binder: 6504:6512 BC_INCREFS_DONE node 1857 has no pending increfs request
[  510.587424] binder: 6504:6512 got transaction to context manager from process owning it
01:33:27 executing program 0:
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140))
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0xffffffffffffff98, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0})
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x206000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x2, 0x2, 0x8, 0x0, 0x7}})
r2 = gettid()
syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/uts\x00')

[  510.607644] binder: 6504:6512 transaction failed 29201/-22, size 0-0 line 3119
[  510.625725] binder: 6504:6516 ioctl 40086602 20000000 returned -22
[  510.635205] binder_alloc: 18758: binder_alloc_buf, no vma
[  510.643543] binder: 6511:6513 transaction failed 29189/-3, size 0-0 line 3274
01:33:28 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
umount2(&(0x7f00000000c0)='./bus\x00', 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
faccessat(r1, &(0x7f0000000400)='./bus\x00', 0x120, 0x800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_GET_CHILD_SUBREAPER(0x25)
r3 = dup2(r0, r2)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r4, 0xffffffffffff8001)
write$9p(r4, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r4, &(0x7f0000000300)='syz1\x00', 0x1ff)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r6, 0x8c, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2200020}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044008}, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

[  510.670230] binder: 6504:6516 ioctl 6612 0 returned -22
[  510.685848] binder: 6504:6512 got transaction to context manager from process owning it
[  510.697635] binder: undelivered TRANSACTION_ERROR: 29189
[  510.704318] binder: BINDER_SET_CONTEXT_MGR already set
[  510.712107] binder_alloc: 18758: binder_alloc_buf, no vma
[  510.719403] binder: 6504:6512 transaction failed 29201/-22, size 0-0 line 3119
[  510.727956] binder: 6517:6522 ioctl 40046207 0 returned -16
[  510.734338] binder: 6511:6513 transaction failed 29189/-3, size 0-0 line 3274
[  510.744222] binder: 6517:6531 BC_INCREFS_DONE u0000000000000000 no match
[  510.751563] binder: undelivered TRANSACTION_ERROR: 29189
[  510.757326] binder: undelivered TRANSACTION_ERROR: 29201
[  510.761252] binder: 6504:6533 ioctl 40086602 20000000 returned -22
01:33:28 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
r2 = accept$unix(r1, &(0x7f0000000440)=@abs, &(0x7f00000000c0)=0x6e)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000140)={0x8, 'hwsim0\x00', {'bridge0\x00'}, 0x7})

01:33:28 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)
r49 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r49, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r49, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
gettid()

[  510.772947] binder_alloc: 21369: binder_alloc_buf, no vma
[  510.778273] binder: 6504:6516 transaction failed 29189/-22, size 0-0 line 3128
[  510.780443] binder: undelivered TRANSACTION_ERROR: 29201
[  510.786366] binder: 6504:6512 ioctl 6612 0 returned -22
[  510.808018] binder: 6517:6531 transaction failed 29189/-3, size 0-0 line 3274
01:33:28 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000db41efc9f8ef9f00"/25], 0x0, 0x0, 0x0})

[  510.831227] binder: undelivered TRANSACTION_ERROR: 29189
[  510.845014] binder: BINDER_SET_CONTEXT_MGR already set
[  510.853399] binder: 6517:6531 ioctl 40046207 0 returned -16
[  510.859239] binder: undelivered TRANSACTION_ERROR: 29189
[  510.873950] binder: 6517:6522 BC_INCREFS_DONE u0000000000000000 no match
01:33:28 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
renameat(r1, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00')
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0063404000b800"/68], 0x0, 0x0, 0x0})

[  510.882305] binder_alloc: 21369: binder_alloc_buf, no vma
[  510.896714] binder: 6517:6522 transaction failed 29189/-3, size 0-0 line 3274
[  510.905999] binder: undelivered TRANSACTION_ERROR: 29189
[  510.925693] binder_alloc: 18758: binder_alloc_buf, no vma
[  510.946084] binder: 6541:6546 transaction failed 29189/-3, size 0-0 line 3274
[  510.949517] binder: 6544:6549 got transaction to invalid handle
[  510.957087] binder: undelivered TRANSACTION_ERROR: 29189
[  510.966967] binder_alloc: 18758: binder_alloc_buf, no vma
[  510.984752] binder: 6541:6546 transaction failed 29189/-3, size 0-0 line 3274
01:33:28 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ee80000e0ff000000", @ANYRES32=r3], 0x2}}, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @dev={[], 0x11}}, 0x10)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x105002, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x10001}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4802)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0063404000000000000000000000d90000000000000000000100000000000000000000ffde00000000000000010081000000024afa288136a01a3993a9e191ce7bc7000000000000000000000000000000000000aa6b2560ffecfe529d0ad15fff6afcf8fa229323122aa2f29cf4c1"], 0x0, 0x0, 0x0})

01:33:28 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

[  511.004214] binder: undelivered TRANSACTION_ERROR: 29189
[  511.005815] binder: 6544:6549 transaction failed 29201/-22, size 0-0 line 3128
01:33:28 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)
r49 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r49, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r49, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

01:33:28 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
r2 = syz_genetlink_get_family_id$fou(0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r2, 0x110, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x32}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x48}}, 0x80)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r2, 0xc20, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000))

01:33:28 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
fgetxattr(r1, &(0x7f0000000000)=@known='trusted.syz\x00', &(0x7f0000000140)=""/220, 0xdc)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000052cd3"], 0x0, 0x0, 0x0})

[  511.094299] binder: undelivered TRANSACTION_ERROR: 29201
[  511.105276] binder: 6562:6564 transaction failed 29189/-22, size 0-0 line 3128
[  511.139218] binder: undelivered TRANSACTION_ERROR: 29189
[  511.153982] binder_alloc: 18758: binder_alloc_buf, no vma
[  511.160891] binder: 6561:6563 transaction failed 29189/-3, size 222-5332824908768542721 line 3274
[  511.176911] binder: 6562:6569 transaction failed 29189/-22, size 0-0 line 3128
[  511.196681] binder: undelivered TRANSACTION_ERROR: 29189
[  511.197076] binder_alloc: 21380: binder_alloc_buf, no vma
[  511.208579] binder: 6573:6575 transaction failed 29189/-3, size 0-0 line 3274
[  511.231566] binder: undelivered TRANSACTION_ERROR: 29189
01:33:28 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)
r49 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r49, 0x40046207, 0x0)

01:33:28 executing program 1:
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0)
setsockopt$inet_opts(r1, 0x0, 0xc862b46c8e2bbcb7, &(0x7f0000000380)="20fc1af6887d2a9ad1fc89d63b8609e14f510f765119eb5af85750772edc5844eabf432460c81d8eaed453b75e357aacd552e6bb6d2ab59386b15c4e6e1b37ae231eb4aa6d82313c4d6f7c2336013776ee1e519f003f0152e8183cd6d73e6f28716fdb9e382b1f3cb061d5836f2c5deed07ba337d225634e9a74d108", 0x7c)
ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000300)=""/119)

[  511.243446] binder: undelivered TRANSACTION_ERROR: 29189
[  511.261897] binder_alloc: 21380: binder_alloc_buf, no vma
[  511.276923] binder: 6573:6584 transaction failed 29189/-3, size 0-0 line 3274
[  511.290844] binder: undelivered TRANSACTION_ERROR: 29189
[  511.388668] binder: 6592:6594 BC_INCREFS_DONE node 1874 has no pending increfs request
[  511.397593] binder: 6592:6594 got transaction to context manager from process owning it
[  511.406508] binder: 6592:6594 transaction failed 29201/-22, size 0-0 line 3119
[  511.416409] binder: undelivered TRANSACTION_ERROR: 29201
[  511.427049] binder: 6592:6594 BC_INCREFS_DONE node 1876 has no pending increfs request
[  511.435337] binder: 6592:6594 got transaction to context manager from process owning it
[  511.443618] binder: 6592:6594 transaction failed 29201/-22, size 0-0 line 3119
[  511.451242] binder: undelivered TRANSACTION_ERROR: 29201
01:33:28 executing program 4:
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xffffffffffffff4a, 0x0, &(0x7f0000000240)=[@decrefs={0x40046307, 0x3}], 0xf31, 0x0, 0x0})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))

01:33:28 executing program 5:
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000000c0))
r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x1000)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000))
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r2, 0xffffffffffff8001)
write$9p(r2, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556aa2bdf9471c28f1a", 0xfffffffffffffd92)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$getownex(r3, 0x10, &(0x7f0000000280))
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000140)=0x3f, 0x4)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a79666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000002c0)=<r5=>0x0)
stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(r4, r5, r6)
sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000100)=0x70c91e67)

01:33:28 executing program 0:
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r0, 0xffffffffffff8001)
write$9p(r0, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x3})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x24, 0x0, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYPTR64, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES64], @ANYBLOB="711f80581c81ec87ef4191e1a6f9c6588023c86104c700d2a8ae34b1449b8811202fa3f24eff04924bf82184e51e5d81fc6c3b1d73dfe23887ae4390e3f6c1049dddc8461c8259205730daa64a173b3abb199d4a82adbaed2164495c5f9a3af0a3959e118876306f7c7ca393111d9553a4f3b6b9dd087635febbafb496e1b97f73a40200b2c1bca359ecec0af6a0397f6fed7379075a4ab582bb1acd3f26057bdd3c195cdf946990a34701b93c57e3f81b21199abe70dab95df30e571275359dd4d522bfac1ee1bdc1e25b0edf1c6290c671c00fb6bf874695f5f1f308ab0f0adf502ffa8db8cbb743dc10f99a6d3235b615", @ANYRESOCT, @ANYRESDEC=r1]], 0x0, 0x0, 0x0})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x9, 0x401})

01:33:28 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076b7964bf3476e3050d772c8d38eb2c9d9a10472882b9df517e7162383e801c682c5f6c76494cf57a49451a7a9a6cf0207b1c7517f5a01526afdb631674e0bceae8ac7d29b"], 0x0, 0x0, 0x0})

01:33:28 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000240)='stack\x00')
mkdirat(r1, &(0x7f00000002c0)='./bus\x00', 0x6b)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400600)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r4, 0xffffffffffff8001)
write$9p(r4, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r4, &(0x7f0000000300)='syz1\x00', 0x1ff)
faccessat(r4, &(0x7f00000001c0)='./bus\x00', 0x10, 0xe80)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000000c0))

01:33:28 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)

[  511.561803] binder: BINDER_SET_CONTEXT_MGR already set
[  511.567284] binder: 6605:6608 transaction failed 29189/-22, size 0-0 line 3128
[  511.576739] EXT4-fs: Invalid sb specification: sb=0x000000p07fffffff,inite,jqfmt=vfsold,minixdf,commit=0x0000000000000003,jyfmt=vfsv1,OȜ�*J���f������X����ځA?^FkQG/
R'G���4����p��T��ȵ��1�18446744073709551615,subj_type=/dev/null,errors=continue
[  511.578245] binder: undelivered TRANSACTION_ERROR: 29189
[  511.608478] binder: BINDER_SET_CONTEXT_MGR already set
[  511.609961] binder: 6604:6616 BC_INCREFS_DONE u0000000000000000 no match
[  511.614263] binder: 6604:6609 ioctl 40046207 0 returned -16
[  511.638406] binder: 6603:6611 ioctl 40046207 0 returned -16
[  511.647166] binder: 6603:6611 BC_INCREFS_DONE u0000000000000000 no match
[  511.649676] binder_alloc: 21380: binder_alloc_buf, no vma
[  511.656879] binder: 6604:6609 unknown command 536871808
[  511.670441] binder: 6604:6609 ioctl c0306201 200006c0 returned -22
[  511.677329] binder_alloc: 18758: binder_alloc_buf, no vma
[  511.684376] binder: 6604:6616 transaction failed 29189/-3, size 0-0 line 3274
[  511.701763] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
01:33:29 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)

01:33:29 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r2=>0x0}, &(0x7f0000000040)=0xc)
write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  511.707763] binder: 6603:6623 ioctl c0306201 20000040 returned -14
[  511.710662] binder: 6603:6611 transaction failed 29189/-3, size 0-0 line 3274
[  511.729570] binder: undelivered TRANSACTION_ERROR: 29189
[  511.744836] binder: BINDER_SET_CONTEXT_MGR already set
01:33:29 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@getqdisc={0x4c, 0x26, 0x602, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf, 0xffe0}, {0xf}, {0x9, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3b)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r5, 0x0, 0x0)
wait4(r5, &(0x7f00000000c0), 0x0, &(0x7f00000001c0))
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

[  511.765087] binder: undelivered TRANSACTION_ERROR: 29189
[  511.776687] binder: BINDER_SET_CONTEXT_MGR already set
[  511.788913] binder: 6604:6616 ioctl 40046207 0 returned -16
[  511.796920] binder: 6604:6609 unknown command 536871808
[  511.801044] EXT4-fs: Invalid sb specification: sb=0x000000p07fffffff,inite,jqfmt=vfsold,minixdf,commit=0x0000000000000003,jyfmt=vfsv1,OȜ�*J���f������X����ځA?^FkQG/
R'G���4����p��T��ȵ��1�18446744073709551615,subj_type=/dev/null,errors=continue
[  511.802488] binder: 6604:6625 unknown command 536871808
[  511.830799] binder: 6603:6611 DecRefs 0 refcount change on invalid ref 3 ret -22
[  511.831506] binder: 6603:6626 ioctl c0306201 20000040 returned -14
[  511.846363] binder: 6604:6609 ioctl c0306201 200006c0 returned -22
[  511.854904] binder: 6603:6623 ioctl 40046207 0 returned -16
[  511.858596] binder: 6629:6634 transaction failed 29189/-22, size 0-0 line 3128
[  511.870636] binder: 6603:6611 unknown command 0
[  511.878579] binder: undelivered TRANSACTION_ERROR: 29189
[  511.896869] binder: 6603:6611 ioctl c0306201 200006c0 returned -22
01:33:29 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4000, 0x0)
openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x1})
mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

01:33:29 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:29 executing program 4:
prctl$PR_MCE_KILL_GET(0x22)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  511.915441] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  511.929013] binder: 6604:6625 ioctl c0306201 200006c0 returned -22
01:33:29 executing program 0:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x66, &(0x7f0000001980)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x2, 0xffffff3a, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "00ac04", 0x0, 0x0, 0x0, @empty, @local}}}}}}}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000052cd3"], 0x0, 0x0, 0x0})

01:33:29 executing program 5:
syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="086310400000000000000000000000000000000000634040000000000000000000e2c600"/88], 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x3})

[  511.992077] binder: 6647:6649 BC_INCREFS_DONE node 1882 has no pending increfs request
[  512.000599] binder: 6647:6649 got transaction to context manager from process owning it
[  512.008808] binder: 6647:6649 transaction failed 29201/-22, size 0-0 line 3119
[  512.025588] binder: 6647:6649 ioctl c018620c 20000000 returned -22
01:33:29 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)

[  512.034640] binder: 6647:6649 got transaction to context manager from process owning it
[  512.044507] binder: 6647:6649 transaction failed 29201/-22, size 0-0 line 3119
[  512.066495] binder_alloc: 21380: binder_alloc_buf, no vma
[  512.090164] binder: 6650:6653 transaction failed 29189/-3, size 0-0 line 3274
[  512.096275] binder: undelivered TRANSACTION_ERROR: 29201
[  512.103865] binder: 6647:6649 BC_INCREFS_DONE node 1886 has no pending increfs request
[  512.110219] binder: undelivered TRANSACTION_ERROR: 29201
[  512.112281] binder: 6647:6660 ioctl c018620c 20000000 returned -22
[  512.128045] binder: 6647:6649 got transaction to context manager from process owning it
[  512.142956] binder: undelivered TRANSACTION_ERROR: 29189
[  512.154338] binder: 6647:6667 got transaction to context manager from process owning it
[  512.159233] binder_alloc: 18758: binder_alloc_buf, no vma
[  512.165446] binder: 6647:6649 transaction failed 29201/-22, size 0-0 line 3119
[  512.183913] binder: 6647:6667 transaction failed 29201/-22, size 0-0 line 3119
01:33:29 executing program 1:
epoll_create1(0x80000)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

01:33:29 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
lsetxattr$security_ima(&(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=@v1={0x2, "c291cdf83ed15f2f2c5f06313032"}, 0xf, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

[  512.193096] binder: 6657:6662 transaction failed 29189/-3, size 0-0 line 3274
[  512.201149] binder: undelivered TRANSACTION_ERROR: 29201
[  512.207244] binder: 6658:6663 BC_INCREFS_DONE u0000000000000000 no match
[  512.211125] binder: undelivered TRANSACTION_ERROR: 29201
[  512.227608] binder_alloc: 21369: binder_alloc_buf, no vma
01:33:29 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x7c11f39bb26594ec, 0x0)
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x101, 0x7})
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000080)="215810f82d4ffb8caa81b8eee7", 0xd}, {&(0x7f0000000140)="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", 0xfd}, {&(0x7f0000000240)="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", 0xfd}, {&(0x7f0000000380)="69923372eb67aa5d2cd6a45c0045735b1a98e4bef328689b73e1b4681535c3d88052e138eb9bebd658ff2e69599ff4a7faa104335b574d25a5355e3f60dde32b05b13cf728fc05b7647d29f0f197b89a3ed6252965adaae15648eca8ecf5593d4cbe9b597546a944b60174c4e62e426f86cc0db3db6b9d71e44f15691d5c78440a246d93b8420ad88e2cfa42f884363ad9811971cd016037266fb2765e21f935baee056b4cbca53f0de7964b283b96a6f91a91e2fc7a539f9cdee88d988fad7c2fd7ed", 0xc3}, {&(0x7f0000000480)="5c57252cdf0ddca1d8ba51532211918519000d50465ec4f7951da153ba2f06538a049b7d9a5cdc5d3b6b3c8b94db0f77a6e20ad90ea22484e1ce74062fbba25317d64f4840fb041a7eb160cd16ba9bccca293e2793bf1de2789235b62a5bd174bf3eb73962fbf749582b0ba955661e8ef22a765aa0e033d7d7d2f617300ec7ed39ad8d554cce42145656f7327ff0fe43d05a12865841741d95045ffb573f98ce860b99c879882d58c6f7426c1d9e80c89f6e49d45cd14d1f45", 0xb9}, {&(0x7f0000000540)="4f3fb060f52068fe279707b5b2081e73857c773258c4c3d3e6a4ed7169fc67d597ca8f05d7f035e7bcabd2c34e7d3f309e420e70f1b7d026b575580048310d661645d33fbdd7133351b8ee15b2beb0b384e150e79de6b1db2bd09124e3f8707a821b2b1cc3354de895aedc9735c832b0e6fdc41a1f5641aca74287e492c0ab678996ba2212a02fa4d5101e3b6c6054afb06812", 0x93}], 0x6, 0xffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000052cd3"], 0x0, 0x0, 0x0})

[  512.255390] binder: 6658:6663 transaction failed 29189/-3, size 0-0 line 3274
[  512.264951] binder: undelivered TRANSACTION_ERROR: 29189
[  512.272369] binder: undelivered TRANSACTION_ERROR: 29189
[  512.283818] binder_alloc: 18758: binder_alloc_buf, no vma
[  512.295368] binder: 6675:6676 transaction failed 29189/-22, size 0-0 line 3128
[  512.303114] binder: 6658:6673 BC_INCREFS_DONE u0000000000000000 no match
[  512.306719] binder: 6657:6677 transaction failed 29189/-3, size 0-0 line 3274
[  512.315124] binder_alloc: 21369: binder_alloc_buf, no vma
[  512.324622] binder: undelivered TRANSACTION_ERROR: 29189
[  512.336616] binder: 6675:6682 transaction failed 29189/-22, size 0-0 line 3128
[  512.341448] binder: 6658:6673 transaction failed 29189/-3, size 0-0 line 3274
01:33:29 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffec3, 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0})

[  512.348825] binder: undelivered TRANSACTION_ERROR: 29189
[  512.365124] binder: undelivered TRANSACTION_ERROR: 29189
[  512.376143] binder_alloc: 21380: binder_alloc_buf, no vma
[  512.390829] binder: undelivered TRANSACTION_ERROR: 29189
[  512.398875] binder: 6684:6688 transaction failed 29189/-3, size 0-0 line 3274
01:33:29 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xcae42485edbd12fc)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/stat\x00')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
write$UHID_INPUT2(r1, &(0x7f0000000080)={0xc, 0x33, "96d2a17caee56dd9f2f78143fcaf703fb8686611cf1190beec614f906faefc6601e67437e207fb599fba9a06f96fc0510322fb"}, 0x39)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000))

01:33:29 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r47 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r48=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r47, &(0x7f0000000080)='./file0\x00', 0x0, r48, 0x800)

01:33:29 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x9f761a3bae0e0610, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:29 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r1 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r1, &(0x7f0000000080)='./file0\x00', 0x0, r2, 0x800)
setgid(r2)
r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r4, 0xffffffffffff8001)
write$9p(r4, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r4, &(0x7f0000000300)='syz1\x00', 0x1ff)
r5 = accept4$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000200)="9728cf26ba945cc5768788186bc33f5f", 0x10)
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  512.463002] binder: undelivered TRANSACTION_ERROR: 29189
[  512.469937] binder_alloc: 21380: binder_alloc_buf, no vma
[  512.493341] binder: 6684:6695 transaction failed 29189/-3, size 0-0 line 3274
01:33:29 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000010000cd1423123fbfac0e0e65b80000000091ffffffffffffff000000000000000000000200"/68], 0x0, 0x0, 0x0})

[  512.533609] binder: 6700:6703 transaction failed 29189/-22, size 0-0 line 3128
[  512.538369] binder: undelivered TRANSACTION_ERROR: 29189
[  512.558644] binder: undelivered TRANSACTION_ERROR: 29189
01:33:29 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000000052cd3"], 0x0, 0x0, 0x0})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000040)="4bb269bd01bebe93a621feb6ebba6d24d576a48d32a02df5c1d686ee04b7df72d8c0e92aa56b58a9a1fd31b7e35887e779af9d43b94b68016afaec4d318fbef031464924a408396b9ef8", 0x4a)

01:33:29 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
sendto(r1, &(0x7f0000000340)="c4452bf7fc98508fe0e11065095a64645a34e56a503858a38bc98a60fc3e9c649e682692762d5d5d71f4e4c49657cc80b48202eef60505f596f90c928b13bcfb0e07f7d91fbb1449dc98864569c5f17e9318682fbe1f6cfadd64a280b9be04e7ab54da7d0664401416c5f4cdd6250663bd4e601e91f00ca307a6db1670ca2d6a7c006943afaf38a33f35157bd7bc4249be7eee9016da2fa49d63966e42b6ad3e4aa9a7d2592a18e0cfa1ebab468aca7b8e11a4067bac41c6ade1cbf0e6bdc819d0eab7a814038765", 0xc8, 0x40004, &(0x7f0000000240)=@ethernet={0x306, @broadcast}, 0x80)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=<r2=>0x0)
syz_open_procfs(r2, &(0x7f00000000c0)='net/psched\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setregid(r4, 0xee00)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000001c0))
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000))
setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', &(0x7f0000000100)='/dev/binder#\x00', 0xd, 0x2)
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)

01:33:29 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xfffffffffffffcd8)

01:33:29 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x5)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
fchown(r0, r4, r7)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

[  512.592893] binder: 6700:6711 transaction failed 29189/-22, size 0-0 line 3128
[  512.619062] binder: undelivered TRANSACTION_ERROR: 29189
01:33:30 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x3, 0x2, 0x2, <r2=>0xffffffffffffffff})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r4, 0xffffffffffff8001)
write$9p(r4, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r4, &(0x7f0000000300)='syz1\x00', 0x1ff)
r5 = accept4(r4, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80, 0x140400)
clock_gettime(0x0, &(0x7f0000000180)={<r6=>0x0, <r7=>0x0})
ppoll(&(0x7f0000000140)=[{r2, 0x1224}, {r0, 0x2e}, {0xffffffffffffffff, 0x1000}, {r3, 0x1505}, {r0, 0x3000}, {r5, 0x200}], 0x6, &(0x7f00000001c0)={r6, r7+10000000}, &(0x7f0000000200)={0x2376b86a}, 0x8)

[  512.712059] binder_alloc: 18758: binder_alloc_buf, no vma
[  512.732324] binder: 6715:6720 transaction failed 29189/-3, size -7274496-65535 line 3274
[  512.753808] binder: 6725:6730 unknown command 0
01:33:30 executing program 5:
prctl$PR_MCE_KILL_GET(0x22)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

01:33:30 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000052cd3"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xffffffffffff2531)

[  512.757743] binder: undelivered TRANSACTION_ERROR: 29189
[  512.765043] binder: 6725:6730 ioctl c0306201 200006c0 returned -22
[  512.774124] binder: 6727:6732 transaction failed 29189/-22, size 0-0 line 3128
[  512.780863] binder: 6725:6730 unknown command 0
[  512.786377] binder: 6725:6730 ioctl c0306201 200006c0 returned -22
01:33:30 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xfffffffffffffffe, 0x40b5d1dabce834b5)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0xba2)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = dup3(r1, r2, 0x0)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0xa6d, 0x3, 0x2, 0xb9a, 0x1, 0x6, 0x7, 0x7f, 0x1ff, 0x81, 0xec9, 0x5})
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)

[  512.835729] binder_alloc: 21369: binder_alloc_buf, no vma
[  512.854168] binder: undelivered TRANSACTION_ERROR: 29189
[  512.854899] binder: 6727:6732 transaction failed 29189/-22, size 0-0 line 3128
01:33:30 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
open(0x0, 0x0, 0x100)

01:33:30 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x30000002})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r4 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000002c0)=0x80, 0x100000)
fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'L-', 0x401}, 0x28, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

[  512.887932] binder: 6738:6741 transaction failed 29189/-3, size 0-0 line 3274
[  512.918939] binder: undelivered TRANSACTION_ERROR: 29189
[  512.930268] binder: undelivered TRANSACTION_ERROR: 29189
01:33:30 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200140, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000100)={0x8, 'lapb0\x00', {'caif0\x00'}, 0x1f})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x0, 0x0)
r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:audisp_remote_exec_t:s0\x00', 0x2a)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, 0x0, 0x0)
r5 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r5, &(0x7f0000000080)='./file0\x00', 0x0, r6, 0x800)
ioctl$TUNSETGROUP(r2, 0x400454ce, r6)

01:33:30 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00J\x00'/68], 0x0, 0x0, 0x0})

[  512.933854] binder: BINDER_SET_CONTEXT_MGR already set
[  512.970237] binder_alloc: 21380: binder_alloc_buf, no vma
[  512.977602] binder: 6747:6748 ioctl 40046207 0 returned -16
[  513.003693] binder: 6747:6755 BC_INCREFS_DONE u0000000000000000 no match
[  513.007174] binder: 6746:6751 transaction failed 29189/-3, size 0-0 line 3274
[  513.031656] binder_alloc: 18758: binder_alloc_buf, no vma
[  513.038680] binder: 6758:6761 transaction failed 29189/-22, size 1241513984-0 line 3128
[  513.044835] binder: BINDER_SET_CONTEXT_MGR already set
[  513.049851] binder: undelivered TRANSACTION_ERROR: 29189
[  513.059833] binder: 6747:6755 transaction failed 29189/-3, size 0-0 line 3274
[  513.062693] binder: 6753:6759 ioctl 40046207 0 returned -16
[  513.068277] binder: undelivered TRANSACTION_ERROR: 29189
01:33:30 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x24, 0x0, &(0x7f0000000040)=[@dead_binder_done, @dead_binder_done, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0})

01:33:30 executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x6613c9d7b41f1ef2, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000052cd3"], 0x0, 0x0, 0x0})

[  513.085388] EXT4-fs: Invalid sb specification: sb=0x000000p07fffffff,inite,jqfmt=vfsold,minixdf,commit=0x0000000000000003,jqfmt=vfsv1,OȜ�*J���f������X����ځA?^FkQG/
R'G���4����p��T��ȵ��1�18446744073709551615,subj_type=/dev/null,errors=continue
[  513.085815] binder: 6758:6766 transaction failed 29189/-22, size 1241513984-0 line 3128
[  513.119896] binder: undelivered TRANSACTION_ERROR: 29189
[  513.127417] binder: BINDER_SET_CONTEXT_MGR already set
[  513.129387] binder: 6753:6768 BC_INCREFS_DONE u0000000000000000 no match
[  513.134536] binder: 6747:6748 ioctl 40046207 0 returned -16
[  513.151402] binder: 6747:6755 BC_INCREFS_DONE u0000000000000000 no match
[  513.165103] audit: type=1400 audit(1575336810.486:63): avc:  denied  { block_suspend } for  pid=6753 comm="syz-executor.2" capability=36  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1
[  513.168952] binder_alloc: 633: binder_alloc_buf, no vma
[  513.208982] binder_alloc: 18758: binder_alloc_buf, no vma
[  513.219600] binder_alloc: 21380: binder_alloc_buf, no vma
[  513.219901] binder: 6747:6755 transaction failed 29189/-3, size 0-0 line 3274
[  513.231110] binder: 6771:6775 transaction failed 29189/-3, size 0-0 line 3274
[  513.240780] binder: undelivered TRANSACTION_ERROR: 29189
[  513.241566] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  513.249571] binder: undelivered TRANSACTION_ERROR: 29189
[  513.261313] binder: 6753:6768 transaction failed 29189/-3, size 0-0 line 3274
[  513.263770] binder_alloc: 21380: binder_alloc_buf, no vma
[  513.272157] binder: undelivered TRANSACTION_ERROR: 29189
01:33:30 executing program 4:
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='timers\x00')
ftruncate(r0, 0xffffffffffff8001)
write$9p(r0, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='auxv\x00')
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000240)={0x5, {{0xa, 0x4e27, 0x40, @remote, 0xfff}}}, 0xfffffffffffffdf9)

01:33:30 executing program 1:
alarm(0x1)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
r2 = perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x70, 0x8, 0x5, 0x0, 0xcc, 0x0, 0x10001, 0x80000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x401, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x208, 0x1f, 0x4, 0x1, 0x4, 0xffff7519, 0x2}, r1, 0xf, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000400)={0x0, 0x70, 0x2, 0x81, 0x7, 0x1, 0x0, 0x400, 0x10000, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f00000003c0), 0x6}, 0x20, 0x3ff, 0xff, 0x4, 0x8001, 0x7, 0x8})
ftruncate(r0, 0xffffffffffff8001)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{0x6, 0xff, 0x4a, 0x100}, {0xf8, 0x4, 0xde, 0x928}, {0x1f, 0x31, 0x3, 0x80}]})
write$9p(r0, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff)
recvfrom(r0, &(0x7f0000000000)=""/98, 0x62, 0x100, &(0x7f0000000080)=@llc={0x1a, 0x20, 0x0, 0xb9, 0x5, 0x6, @remote}, 0x80)
r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00634040000000000000000000000000000000004971a2df6dff4db419794d00"/68], 0x0, 0x0, 0x0})

[  513.281983] binder: 6774:6776 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  513.294247] binder: 6771:6777 transaction failed 29189/-3, size 0-0 line 3274
[  513.303740] binder: undelivered TRANSACTION_ERROR: 29189
[  513.313231] binder: 6774:6776 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  513.323580] binder: undelivered TRANSACTION_ERROR: 29189
01:33:30 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
open(0x0, 0x0, 0x100)

[  513.335330] binder: 6774:6776 BC_FREE_BUFFER u0000000020ffc000 no match
01:33:30 executing program 0:
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x1000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r0, 0xffffffffffff8001)
write$9p(r0, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x8c, 0x4, 0x5}}, 0x14)
mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000009bf119ef821dbb76e500000000004f31bc3cf702bf26052cd3"], 0x0, 0x0, 0x0})

01:33:30 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r2, 0xffffffffffff8001)
write$9p(r2, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000002c0)={0x4, [0x0, 0x0, 0x0, 0x0]})
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3b)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
r4 = perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x5, 0x9c, 0x32, 0x80, 0x0, 0xffff, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x40, 0x0, 0x200, 0x1, 0x1, 0x8, 0x101}, r3, 0xe, 0xffffffffffffffff, 0x1)
r5 = dup2(r0, r4)
mount(&(0x7f0000000340)=@sr0='/dev/sr0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='efivarfs\x00', 0x871f7cc2cba3626c, &(0x7f0000000400)='/dev/binder#\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:30 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000052cd3"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xffffffffffff2531)

[  513.393434] binder: 6782:6784 transaction failed 29189/-22, size 0-0 line 3128
01:33:30 executing program 4:
r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@ipv4={[], [], @broadcast}, 0x7, 0x1, 0xfc, 0x4, 0x6, 0x3ff}, &(0x7f0000000180)=0x20)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x3d2, 0x0, 0x0, 0x0}}], 0x6d, 0x0, 0x0})
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x8, 0x0, 0x2, 0x4, 0x3, 0xf000}, &(0x7f0000000200)=0x20)

[  513.445848] binder: undelivered TRANSACTION_ERROR: 29189
01:33:30 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000052cd3"], 0x0, 0x0, 0x0})

[  513.497001] binder: BINDER_SET_CONTEXT_MGR already set
01:33:30 executing program 1:
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x881, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0xfffffffffffffeba, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff16, 0x0, 0x0, 0x0}}], 0xfffffffffffffe2f, 0x0, 0x0})

[  513.543778] binder_alloc: 21369: binder_alloc_buf, no vma
[  513.543876] binder: 6792:6796 ioctl 40046207 0 returned -16
[  513.562661] binder: 6792:6807 BC_INCREFS_DONE u0000000000000000 no match
[  513.583314] binder_alloc: 18758: binder_alloc_buf, no vma
01:33:30 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x1fa, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0})

[  513.586361] binder: 6799:6804 transaction failed 29189/-3, size 0-0 line 3274
[  513.604835] binder: 6803:6809 transaction failed 29189/-3, size 978-0 line 3274
[  513.614559] binder_alloc: 633: binder_alloc_buf, no vma
[  513.627353] binder: 6812:6817 BC_INCREFS_DONE node 1915 has no pending increfs request
[  513.640615] binder: 6803:6809 ioctl c0306201 200001c0 returned -14
[  513.643800] binder: 6792:6807 transaction failed 29189/-3, size 0-0 line 3274
[  513.653883] binder: 6812:6817 got transaction to context manager from process owning it
[  513.669058] binder: undelivered TRANSACTION_ERROR: 29189
[  513.670293] binder_alloc: 18758: binder_alloc_buf, no vma
[  513.678745] binder: undelivered TRANSACTION_ERROR: 29189
[  513.683554] binder: 6812:6821 ioctl c0306201 200006c0 returned -14
01:33:31 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r46 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r46, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)

01:33:31 executing program 5:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=<r3=>0x0)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x8200, 0x0)
setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000002c0)=@ccm_128={{0x304}, "f023314cb608b366", "2fee596dfc073a320e836fcfd6f88502", "71326305", "6fc3a78ffdb3a1cb"}, 0x28)
fcntl$lock(r2, 0x6, &(0x7f00000001c0)={0x0, 0xeda0f587da2e51ea, 0x4, 0x6, r3})
r5 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

[  513.697311] binder: 6803:6818 transaction failed 29189/-3, size 978-0 line 3274
[  513.711745] binder: 6812:6817 transaction failed 29201/-22, size 0-0 line 3119
[  513.725552] binder: 6803:6818 ioctl c0306201 200001c0 returned -14
[  513.734846] binder: BINDER_SET_CONTEXT_MGR already set
[  513.737803] binder: undelivered TRANSACTION_ERROR: 29189
01:33:31 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
restart_syscall()
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

[  513.755783] binder: BINDER_SET_CONTEXT_MGR already set
[  513.761422] binder: 6812:6821 ioctl 40046207 0 returned -16
[  513.767259] binder: undelivered TRANSACTION_ERROR: 29201
[  513.769613] binder: 6822:6823 ioctl 40046207 0 returned -16
[  513.777667] binder: 6812:6826 BC_INCREFS_DONE u0000000000000000 no match
[  513.788337] binder: 6822:6829 BC_INCREFS_DONE u0000000000000000 no match
[  513.800274] binder: undelivered TRANSACTION_ERROR: 29189
01:33:31 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x3dfa46437e9c7497, 0x4)

[  513.806424] binder_alloc: 21380: binder_alloc_buf, no vma
[  513.808900] binder: 6812:6817 ioctl c0306201 200006c0 returned -14
[  513.814836] binder: 6822:6829 transaction failed 29189/-3, size 0-0 line 3274
[  513.824032] binder: 6812:6826 transaction failed 29189/-22, size 0-0 line 3128
[  513.830156] binder: 6822:6823 unknown command 0
[  513.836061] binder: undelivered TRANSACTION_ERROR: 29189
[  513.845188] binder: 6822:6823 ioctl c0306201 200006c0 returned -22
01:33:31 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="006340400000001200"/68], 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040))
setrlimit(0x4, &(0x7f0000000000)={0x1000, 0x8000})

[  513.888345] binder: undelivered TRANSACTION_ERROR: 29189
[  513.888918] binder: BINDER_SET_CONTEXT_MGR already set
[  513.895214] binder: BINDER_SET_CONTEXT_MGR already set
[  513.901040] binder: 6827:6830 ioctl 40046207 0 returned -16
[  513.923746] binder_alloc: 18758: binder_alloc_buf, no vma
01:33:31 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
socket$inet(0x2, 0x4000000000000001, 0x0)

[  513.938660] binder: 6822:6829 ioctl 40046207 0 returned -16
[  513.945102] binder: 6827:6832 BC_INCREFS_DONE u0000000000000000 no match
[  513.948669] binder: 6822:6823 unknown command 0
[  513.962165] binder_alloc: 21369: binder_alloc_buf, no vma
[  513.962806] binder: 6822:6823 ioctl c0306201 200006c0 returned -22
[  513.978713] binder: 6836:6838 transaction failed 29189/-3, size 0-0 line 3274
[  513.985185] binder: 6827:6832 transaction failed 29189/-3, size 0-0 line 3274
[  513.988204] binder: 6822:6841 unknown command 0
[  514.005793] binder: 6822:6841 ioctl c0306201 200006c0 returned -22
[  514.018938] binder: undelivered TRANSACTION_ERROR: 29189
[  514.026398] binder_alloc: 18758: binder_alloc_buf, no vma
[  514.027139] binder: 6842:6846 got transaction to invalid handle
01:33:31 executing program 5:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=<r3=>0x0)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x8200, 0x0)
setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000002c0)=@ccm_128={{0x304}, "f023314cb608b366", "2fee596dfc073a320e836fcfd6f88502", "71326305", "6fc3a78ffdb3a1cb"}, 0x28)
fcntl$lock(r2, 0x6, &(0x7f00000001c0)={0x0, 0xeda0f587da2e51ea, 0x4, 0x6, r3})
r5 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

[  514.033739] binder: undelivered TRANSACTION_ERROR: 29189
[  514.048276] binder: 6836:6838 transaction failed 29189/-3, size 0-0 line 3274
[  514.070855] binder: 6842:6846 transaction failed 29201/-22, size 0-0 line 3128
01:33:31 executing program 0:
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000580)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xd7w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xc9\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
getsockopt$inet6_int(r1, 0x29, 0xca, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_open_dev$binderN(&(0x7f0000000080)='/dev/nder#\xff\x00', 0x0, 0x2)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r2, 0xffffffffffff8001)
write$9p(r2, &(0x7f0000000500)="714fe694f6c224c560246609412d999e76e31e54fe67bccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fb500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
getsockopt$inet6_tcp_buf(r2, 0x6, 0x5656f4e0d31436fd, &(0x7f0000000480)=""/116, &(0x7f00000000c0)=0x74)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0xe9, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="006340400000000000f5cf3cbbd993819ce8a030eafa16825874b884eb72750939edc316aa03a8a3b586a4b955f558f4362f398329f45ba0c8bbab1a1d6165dce7b9e6571549547adcc9d0d224f96daf26d418d4b45768b44ceade173802f01e93ac89d032547fbf3bc8b5367cc7c020983384e4bef64c5787691ae508873007d79f3fcbd7cf51d9d7c088fda69db0f84be6ede1fe41bddedf8ef6e742f8dc49358a4c1b1c1d18adf4e3af88ef948a21993e47afd4b1336c5c5598556119899e6ea1b0a3b5684039dc771d8ffce38a0cddca70c1bb6d179db9b620c843e1a463b21664380b840a6195"], 0x0, 0x0, 0x0})

[  514.100830] binder: undelivered TRANSACTION_ERROR: 29189
[  514.125372] binder: undelivered TRANSACTION_ERROR: 29201
[  514.134990] binder: 6842:6846 got transaction to invalid handle
[  514.154547] binder: 6842:6846 transaction failed 29201/-22, size 0-0 line 3128
01:33:31 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1802)
r1 = add_key(&(0x7f0000000200)='ceph\x00', 0x0, 0x0, 0x0, 0x0)
keyctl$reject(0x13, r1, 0x0, 0x1b, 0xfffffffffffffffe)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r1, 0x70, 0x11}, &(0x7f0000000100)={'enc=', 'oaep', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f0000000180)="957f115f91f0b825f31048fddaeb99205df25b8e0ada8867b8a545a6d6763a2d5dd2f4984deb6fb32deab2618d458ccc956ec33e6938a52928b5d4877e9427698b3d38f0a2bc9fe46939e04a8f18a5c3a9831ea047464c27945beb7d02c353362106703c6bf27fa30727cfe3f7ef84df", &(0x7f0000000200)="eb1fac854116575b17292f4638258b943e")
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0xc)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

01:33:31 executing program 2:
mkdir(&(0x7f0000000300)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x40, 0x0)
lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v1={0x1000000, [{0x0, 0x1}]}, 0xc, 0x2)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r0, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
stat(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@ipv4={[], [], @multicast1}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000980)=0xe8)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r3, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x31, 0x7fe}], 0x0, &(0x7f0000000680)=ANY=[])
getresuid(&(0x7f0000000a80), &(0x7f0000000ac0)=<r7=>0x0, &(0x7f0000000b00))
stat(&(0x7f0000000b40)='./bus\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
fstat(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000cc0)=0xc)
setxattr$system_posix_acl(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000000d00)={{}, {0x1, 0xe}, [{0x2, 0x0, r0}, {0x2, 0x5, r1}, {0x2, 0x3, r2}, {0x2, 0x3, r3}, {0x2, 0x4, r4}, {0x2, 0xc, r5}, {0x2, 0x0, r7}, {0x2, 0x4, r8}, {0x2, 0x1, 0xffffffffffffffff}], {0x4, 0x3}, [{0x8, 0x4, r9}, {0x8, 0xb, r10}], {0x10, 0x2}, {0x20, 0x1}}, 0x7c, 0x0)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r11, 0xffffffffffff8001)
write$9p(r11, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r11, &(0x7f0000000300)='syz1\x00', 0x1ff)
r12 = dup3(0xffffffffffffffff, r11, 0x180000)
r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_statq\x00', 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r13, 0x4c09, 0x20)
r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="80000000e22ddc675dc01f3fb2d1b15cc56e16ee12cac9fbfa35a593bfb6dd01b09e927e0b71e221a3d8b05d47ed7d8de2babee915442143c01765234511c84c5d4bb5d34c28b1c38e10e59e7087e10e6afff0663dd752cdc80a4e004b8c1a50f3b4252dfc36cc6122d4c0226ac36dfe98ee07b052f1f07c59fef67a5c79c5056b70ea66a877523012b7379a3aec7cbf7051651f17744b846bf291503ac433bfea9e2e0ce46c5e996fbbf8f1a107d9fd0eedbf2cb000e1801dec6791efee20a3789016eb26ae28b0718c61757ddc9fb48c3526f0a5079fe3293623b509bfab8a340a20dca70de8f8c020968f3bd7", @ANYRES16=r14, @ANYBLOB="000c2cbd7000fcdbdf25080000002800030014000200626f6e645f736c6176655f3000000000080007004e210000080005007f00000138000100080009002b0000000800080002000000080002003b0000001400030000000000000000000000000000000001080009004b0000000c000300080007004e220000"], 0x80}}, 0x8800)
sendmsg$IPVS_CMD_NEW_DEST(r13, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x16048}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="346fa82622f59d2179510700000019fc", @ANYRES16=r14, @ANYBLOB="02002dbd7000fcdbdf25050000000c00020008000e00100000001c000200080007000800000008000500ff7f000008000800ff0f00001400020008000b000a000000080005000400000028000300080008000000000014000600fe88000000000000000000000000010108000500e000000108000400010000000800050009000000"], 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
sendmsg$IPVS_CMD_NEW_DAEMON(r12, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a8000393c8ef734f8e2bd44894d5817f3ede69e57526022ab0a313c0b49dbb3b8ef625cd1c41c5cbc98b03ad2a4ffb8e832f512f3f17b06e62ebc2c02f51e2a657e10a6d61f2b9743d2c7eba67b982228b1f498ce870f12b94f9f996f4b27d3c6aaca5871155576e2508970912fa8ae1c8c83691fb67de84f44fe24ac1a596d8b91d043cccb438c206a4fc3dbf00e6cd92ef8f7dfbb1d4fd4c9fabd65ab5859616d3", @ANYRES16=r14, @ANYBLOB="a95ffffffffffcdbdf25090000004000010014000300ff01000000000000000000000000000114000300fe8000000000000000000000000000bb08000900560000000c000700020000000b0000001c0001000800020029000000080009007e000000080004004e2000003800030008000500ac1e00010800030002000000080008003000000008000400030000001400060000000000000000000000000000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x8010}, 0x40040)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = dup2(r15, r16)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

[  514.195773] binder: undelivered TRANSACTION_ERROR: 29201
01:33:31 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)
lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))

01:33:31 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x3, 0x4)
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x80000000)
keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x26, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0})

[  514.272675] binder_alloc: 18758: binder_alloc_buf, no vma
[  514.275451] binder: BINDER_SET_CONTEXT_MGR already set
[  514.297324] binder: 6864:6867 transaction failed 29189/-3, size 0-0 line 3274
01:33:31 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r0, 0xffffffffffff8001)
write$9p(r0, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x13694a77411320dd}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x34, r1, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x100488c6)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r4, 0xffffffffffff8001)
write$9p(r4, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r4, &(0x7f0000000300)='syz1\x00', 0x1ff)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r5, 0xffffffffffff8001)
write$9p(r5, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r5, &(0x7f0000000300)='syz1\x00', 0x1ff)
pipe2(&(0x7f0000000200)={<r6=>0xffffffffffffffff}, 0x80800)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000006c0)={0xfffffe30, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[], @ANYRES64, @ANYRES32=r5], 0xfffffffffffffe21, 0x0, 0x0})

[  514.322472] EXT4-fs: Invalid sb specification: sb=0x000000p07fffffff,inite,jqfmt=vfsold,minixdf,commit=0x0000000000000003,jqfmt=vfsv1,OȜ�*J���f������X����ځA?^FkQG/
R'G���4����p��T��ȵ��1�18446744073709551615,subj_type=/dev/null,errors=continue
[  514.328503] binder: 6861:6863 ioctl 40046207 0 returned -16
[  514.350465] binder: 6861:6874 BC_INCREFS_DONE u0000000000000000 no match
[  514.361699] binder_alloc: 21369: binder_alloc_buf, no vma
[  514.365399] binder: BINDER_SET_CONTEXT_MGR already set
[  514.369552] binder: undelivered TRANSACTION_ERROR: 29189
[  514.377038] binder: 6871:6877 unknown command 0
[  514.396519] binder: 6861:6874 transaction failed 29189/-3, size 0-0 line 3274
[  514.399919] binder: 6871:6877 ioctl c0306201 200006c0 returned -22
[  514.412651] binder: 6866:6883 BC_INCREFS_DONE u0000000000000000 no match
01:33:31 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0xff90, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = accept(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6, &(0x7f00000000c0)=0x80)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000001c0))

[  514.415687] binder: 6866:6876 ioctl 40046207 0 returned -16
[  514.430712] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  514.437560] binder_alloc: 633: binder_alloc_buf, no vma
[  514.446563] binder: 6866:6883 transaction failed 29189/-3, size 0-0 line 3274
[  514.454623] binder: 6871:6889 unknown command 0
[  514.467340] binder: BINDER_SET_CONTEXT_MGR already set
[  514.474976] binder: 6878:6885 ioctl 40046207 0 returned -16
[  514.493602] binder: undelivered TRANSACTION_ERROR: 29189
[  514.503024] EXT4-fs: Invalid sb specification: sb=0x000000p07fffffff,inite,jqfmt=vfsold,minixdf,commit=0x000000X,errors=continue
01:33:31 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)
getpgrp(0x0)

[  514.520880] binder: 6871:6889 ioctl c0306201 200006c0 returned -22
[  514.529898] binder: 6878:6895 BC_INCREFS_DONE u0000000000000000 no match
[  514.548042] binder_alloc: 18758: binder_alloc_buf, no vma
[  514.555462] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  514.561049] binder_alloc: 21380: binder_alloc_buf, no vma
[  514.564177] binder: BINDER_SET_CONTEXT_MGR already set
01:33:31 executing program 5:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=<r3=>0x0)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x8200, 0x0)
setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000002c0)=@ccm_128={{0x304}, "f023314cb608b366", "2fee596dfc073a320e836fcfd6f88502", "71326305", "6fc3a78ffdb3a1cb"}, 0x28)
fcntl$lock(r2, 0x6, &(0x7f00000001c0)={0x0, 0xeda0f587da2e51ea, 0x4, 0x6, r3})
r5 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:31 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
fstat(r1, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  514.574970] binder: 6894:6898 transaction failed 29189/-3, size 127-65424 line 3274
[  514.584316] binder: 6878:6895 transaction failed 29189/-3, size 0-0 line 3274
[  514.595823] binder: 6878:6885 ioctl 40046207 0 returned -16
[  514.613751] binder: 6878:6885 BC_INCREFS_DONE u0000000000000000 no match
[  514.613811] binder: undelivered TRANSACTION_ERROR: 29189
[  514.622539] binder_alloc: 21380: binder_alloc_buf, no vma
[  514.626616] binder_alloc: 18758: binder_alloc_buf, no vma
[  514.639400] binder: 6894:6898 transaction failed 29189/-3, size 127-65424 line 3274
[  514.640305] binder: 6878:6885 transaction failed 29189/-3, size 0-0 line 3274
[  514.648571] binder: undelivered TRANSACTION_ERROR: 29189
01:33:32 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  514.703150] binder: undelivered TRANSACTION_ERROR: 29189
[  514.730085] binder: undelivered TRANSACTION_ERROR: 29189
01:33:32 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc)

[  514.740700] EXT4-fs: Invalid sb specification: sb=0x000000p07fffffff,inite,jqfmt=vfsold,minixdf,commit=0x0000000000000003,jqfmt=vfsv1,OȜ�*J���f������X����ځA?^FkQG/
R'G���4����p��T��ȵ��1�18446744073709551615,subj_type=/dev/null,errors=continue
[  514.768491] binder: BINDER_SET_CONTEXT_MGR already set
[  514.773144] binder: BINDER_SET_CONTEXT_MGR already set
[  514.775549] binder: 6878:6895 ioctl 40046207 0 returned -16
[  514.784013] binder: undelivered TRANSACTION_ERROR: 29189
[  514.794991] binder: 6907:6914 transaction failed 29189/-22, size 0-0 line 3128
[  514.809189] binder: 6906:6910 ioctl 40046207 0 returned -16
[  514.814138] binder: 6878:6885 BC_INCREFS_DONE u0000000000000000 no match
[  514.824607] binder: BINDER_SET_CONTEXT_MGR already set
[  514.828397] binder: undelivered TRANSACTION_ERROR: 29189
[  514.831786] binder: 6878:6911 ioctl 40046207 0 returned -16
[  514.836155] binder_alloc: 21380: binder_alloc_buf, no vma
[  514.843217] binder: 6878:6919 BC_INCREFS_DONE u0000000000000000 no match
[  514.849483] binder: 6906:6921 BC_INCREFS_DONE u0000000000000000 no match
[  514.860248] binder_alloc: 18758: binder_alloc_buf, no vma
[  514.863492] binder: 6907:6917 transaction failed 29189/-22, size 0-0 line 3128
[  514.869372] binder: 6918:6923 transaction failed 29189/-3, size 0-0 line 3274
[  514.877287] binder: 6878:6885 transaction failed 29189/-3, size 0-0 line 3274
[  514.895357] binder_alloc: 21380: binder_alloc_buf, no vma
[  514.899492] binder: undelivered TRANSACTION_ERROR: 29189
[  514.905194] binder: 6878:6919 transaction failed 29189/-3, size 0-0 line 3274
[  514.907181] binder: undelivered TRANSACTION_ERROR: 29189
[  514.916097] binder_alloc: 18758: binder_alloc_buf, no vma
[  514.927329] binder: 6918:6927 transaction failed 29189/-3, size 0-0 line 3274
[  514.927397] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  514.946330] binder: undelivered TRANSACTION_ERROR: 29189
01:33:32 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0063404000000000004000000000000000000000000000000100"/68], 0x0, 0x0, 0x0})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x10800, 0x0)
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000340)=@gcm_256={{0x303}, "ad9196541127f325", "54549a094a179ad0b9eea3beb1c790b6573957e0cbd3eb58e1b72c7146187297", "f8f135f5", "c8708f7cac558797"}, 0x38)

01:33:32 executing program 0:
prctl$PR_GET_TIMERSLACK(0x1e)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x0, 0x3})
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000052cd3"], 0x0, 0x0, 0x0})

[  514.959425] binder_alloc: 21369: binder_alloc_buf, no vma
[  514.970514] binder: undelivered TRANSACTION_ERROR: 29189
[  514.998781] binder: 6906:6921 transaction failed 29189/-3, size 0-0 line 3274
[  515.009636] binder: undelivered TRANSACTION_ERROR: 29189
[  515.047819] binder: undelivered TRANSACTION_ERROR: 29189
[  515.078623] binder_alloc: 18758: binder_alloc_buf, no vma
[  515.087652] binder: 6931:6938 transaction failed 29189/-3, size 0-0 line 3274
01:33:32 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0xc9, 0x2, 0x3f, "6e83c33d7e189a807214980f1bfe6eed", "8762b7160cc2e34e563f4947cb8ef196d6f77d817bdf40da8d4d39b86f3bbbcc61e6641a35d8a95567313374be33e701e85e8f8fdda60bb7189a4b905d53dedb881e676ace41e95be221b442938c24028006384a87b4a527abf914801a6a222e785b48f21e69b4edd0994972371f854fa48f23acdf1a90e2fa88513997609b8027d25e946d995da8937e546443c635a12eb938874942a435c15717e1706b16a630dcfbfb3b33c54f1cc7b2af995f4299bee7b279"}, 0xc9, 0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:32 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
fstat(r0, &(0x7f0000000340))
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
r3 = syz_open_procfs(r2, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000080)=0x4, 0x4)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r4, 0xffffffffffff8001)
write$9p(r4, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebc13af8709000000000000000a38f772866aa0214a39634552d63d7184db56870c48161bf8c1b72500000000df9471c28f1a000000", 0x4b)
mkdirat$cgroup(r4, &(0x7f0000000300)='syz1\x00', 0x1ff)
accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

01:33:32 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])
stat(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0))

01:33:32 executing program 5:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
[  515.096199] binder: undelivered TRANSACTION_ERROR: 29189
[  515.103198] binder_alloc: 18758: binder_alloc_buf, no vma
[  515.104718] binder_alloc: 21380: binder_alloc_buf, no vma
[  515.109832] binder: 6931:6938 transaction failed 29189/-3, size 0-0 line 3274
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={<r4=>0x0}, &(0x7f0000000200)=0xc)
r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08631040000000000000000000ff0f00000000000063404000e2000000200000000000000000000000000000ee91407c332db8f57d000000000000000000000000000000000010000000000000000000000000000000000092b061f10000000000a318a097b890984105807a56ab7f47b456141308d7cd9d932478f3e4bd9016d28305a0a3d067f924a8a1019d1e5c0c8c6c7f5ef5b9dd1dd66e3404a4e7b228326ef7a86f891884a6fdd395857a0682cb386a882bdaae34ea5b"], 0x0, 0x0, 0x0})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r6, 0xffffffffffff8001)
write$9p(r6, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r6, &(0x7f0000000300)='syz1\x00', 0x1ff)
write$P9_RWSTAT(r6, &(0x7f00000003c0)={0x7, 0x7f, 0x2}, 0x7)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76666776312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r7, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r8, 0xffffffffffff8001)
write$9p(r8, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r8, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000240)=<r9=>0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000148}, 0xc, &(0x7f00000002c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="181400000b0b00082abd7000fedbdf250500000838026f0014005100000000000000000000000000000000017ddeb76a50671c2b91f0af7391cbde0676004915a2e10d8aa36e5c024049a760f48f42f319e2a8548e7d3a72198df9e2d6f62ff05ae696931abe4903c2b3c1267c722e6b6226c69c0aee84849df9b8bf199c30291aef66873c809c58a07423f8ebd77a1c5b8da064455054caa18eceeda9e3313898a3c156dd89b1d309155e63de600724375b5897dbe39fa8a58696f6d2c1f64d1867517c6af14ad880cf6add06efae4c2d62c970c79ec815300c227de085c3cc3064f2657b2c5206031f41c906b7f1d2c739cc3ade4dd0f9ab5446b9433f29d74e4987a0af472251434552755188040d6a1a35304395435303ef4859b4bbea4c87533ef2514e25c2429ecf29b6e1f1cde3a090eb41962a74637978019fe1104f34d525b5e719cf6fc75d394bb02e1bf289546bb7f0a78fc0fa6d7a73d6fe38d7861c53dc7d5d91ca62aeffadd7e21771dccadba97e46c54a1dd04128241f5be7fec79e916d51647cea9adb3e2cb84bb77a0c03251b24e9959fb91c6e7d2f1fe7e3fbc79ad02288964f5d0a3c594caeabf9741d39ed1b3a0bdb0aad7e5c371f7cb42a9b321877954476e06204f0de69c79cdb31ab75e383a4b0c32ec21df9b67aac2404671e6f52262d0ee1f83ce47ea9d63191ab155bc9ea2bc1431ec49ecdff71f650a1f182fab28f6e4a062dafb71f2d323a3845ef15994c9cb03f5c604a423ae5623aecd7abcada7efb5796370c006d0070726f630000000008002400", @ANYRES32=r4, @ANYBLOB="08001c0cf23d43afd701", @ANYRES32=r5, @ANYBLOB="0000b400420014006000000000000000000000000000000000010c002a00080000000000000008003000", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="efc761bfc1f1c4bddeb679680742747afd4c64e05a61da50f7f25ee1dee60a9666999a3400c8972cbea90661"], 0x141e}, 0x1, 0x0, 0x0, 0x280088b0}, 0x41)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:32 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x206000, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0))
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffff7f00000000000000"], 0x0, 0x0, 0x0})
creat(&(0x7f0000000080)='./file0\x00', 0x82)

[  515.140458] binder: undelivered TRANSACTION_ERROR: 29189
[  515.143011] binder: 6934:6939 transaction failed 29189/-3, size 0-0 line 3274
[  515.167561] binder: undelivered TRANSACTION_ERROR: 29189
[  515.214245] binder_alloc: 21380: binder_alloc_buf, no vma
[  515.241843] binder: 6934:6948 transaction failed 29189/-3, size 0-0 line 3274
[  515.259796] binder: undelivered TRANSACTION_ERROR: 29189
01:33:32 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc9d, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

01:33:32 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x12, 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0})

01:33:32 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0))
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:32 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)
getgroups(0x4, &(0x7f0000000f80)=[0xffffffffffffffff, r45, 0xee01, 0xffffffffffffffff])

[  515.285567] binder: BINDER_SET_CONTEXT_MGR already set
[  515.296222] binder_alloc: 18758: binder_alloc_buf, no vma
[  515.314877] binder: 6953:6959 transaction failed 29189/-3, size 0-0 line 3274
[  515.319669] binder: 6950:6956 ioctl 40046207 0 returned -16
[  515.352501] binder: 6950:6964 BC_INCREFS_DONE u0000000000000000 no match
[  515.362500] binder: 6950:6964 got transaction to invalid handle
[  515.373716] binder: undelivered TRANSACTION_ERROR: 29189
[  515.379597] binder_alloc: 18758: binder_alloc_buf, no vma
[  515.383983] binder: 6950:6964 transaction failed 29201/-22, size 0-4503599627370496 line 3128
[  515.398557] binder: 6953:6959 transaction failed 29189/-3, size 0-0 line 3274
01:33:32 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = getpid()
sched_rr_get_interval(r1, &(0x7f00000004c0))
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9L\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&\x00'/104)
ftruncate(r2, 0xffffffffffff8001)
write$9p(r2, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000480), 0x4)
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000040)=""/147, 0x93}, {&(0x7f0000000140)=""/246, 0x9f}, {&(0x7f00000002c0)=""/68, 0xfffffffffffffda5}, {&(0x7f0000000340)=""/117, 0xfffffffffffffed4}, {&(0x7f00000003c0)=""/23, 0xd00}], 0x5, 0x8001)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000100000000000000000000fb00000000000000000000000000000000000020000000000000000000c9b98be4"], 0x0, 0x0, 0x0})

[  515.424570] binder: 6966:6968 transaction failed 29189/-22, size -867-0 line 3128
[  515.435614] binder: undelivered TRANSACTION_ERROR: 29201
[  515.442700] binder: 6967:6970 unknown command 808482864
[  515.442723] binder: undelivered TRANSACTION_ERROR: 29189
[  515.461600] binder: 6967:6970 ioctl c0306201 200006c0 returned -22
01:33:32 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/d\x04\x00\x00\x00\x00\x00\x00\x00r\'\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00634040000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003d3f4aae569c69f56e65765d75c573cbe26183fc580fad5f630e3ea5d6574f0bc63d9d053673c1fdc6437c87ef12c51b53fd66f256fb4a3042a5bb53a962e4f41f61bb6870db5f07c9ed5b430000000000000000"], 0x0, 0x0, 0x0})

01:33:32 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0063404000e5ff0000000004000000000000000000002000"/68], 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r2, 0xffffffffffff8001)
write$9p(r2, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x10}, 0xc)
ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000000)=0x1)

[  515.510648] binder: undelivered TRANSACTION_ERROR: 29189
[  515.547772] binder_alloc: 18758: binder_alloc_buf, no vma
01:33:32 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
r44 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r45=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r44, &(0x7f0000000080)='./file0\x00', 0x0, r45, 0x800)

01:33:32 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x8, 0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0})
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x1)

01:33:32 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000000340)='./bus\x00', 0x100)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r5, 0xffffffffffff8001)
write$9p(r5, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r5, &(0x7f0000000300)='syz1\x00', 0x1ff)
setsockopt$inet_buf(r5, 0x0, 0x25, &(0x7f00000004c0)="3662208776b12dbbc101f2ec7c39fdab793d7c9f9e4842508646eb547106cac98999f35d609dcbbe391339e6f6b4b58a904e66a5bb440d97ae60ef8c1caf3896e61cd10875dfa9d695c3cc3daf323797dec28b498f997ac9d2ac4fd32c552bcc4d14341350f8d67768215cd88d3b3271ce1108eea645b07768a5ef7ee123e3dc530bba66197d389f0157f7878b164cf78f0033f09e736614a69ede80c5a21a6eb3b6c76152f3d9381c21404ea68e06b0becc5caacdb737", 0xb7)
ftruncate(r4, 0xffffffffffff8001)
write$9p(r4, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r4, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000000))
rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000240)='./bus\x00')
lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.nlink\x00', &(0x7f0000000400)={'L+', 0x2}, 0x28, 0x2)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000001c0)={{0xf6, @multicast1, 0x4e22, 0x4, 'lblcr\x00', 0x10, 0x401, 0x4c}, {@multicast2, 0x4e20, 0x3, 0x2, 0xffff0001, 0x3}}, 0x44)

[  515.615848] binder: 6987:6988 got transaction to invalid handle
[  515.623124] binder: 6987:6988 transaction failed 29201/-22, size 0-0 line 3128
[  515.628130] binder: 6980:6984 transaction failed 29189/-3, size 0-0 line 3274
[  515.639307] binder: undelivered TRANSACTION_ERROR: 29201
[  515.647705] binder: 6987:6988 got transaction to invalid handle
[  515.674650] binder: undelivered TRANSACTION_ERROR: 29189
[  515.677952] binder: 6987:6988 transaction failed 29201/-22, size 0-0 line 3128
[  515.686905] binder_alloc: 18758: binder_alloc_buf, no vma
[  515.703305] binder: undelivered TRANSACTION_ERROR: 29201
[  515.717130] binder: 6980:6997 transaction failed 29189/-3, size 0-0 line 3274
01:33:33 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000084000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000499e1a46439631438eba9d50b2b25d6b3a2e0fffd863b5cebab556ecb969a624a1bb7faa565bb6cf91ba60db2ba254686f81c390d1e711be19b1b6b832f5b8fc7b1d39ebf3c21c"], 0x0, 0x0, 0x0})

01:33:33 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)

[  515.735958] binder: undelivered TRANSACTION_ERROR: 29189
[  515.744680] binder: 7000:7003 unknown command 3
[  515.749788] binder: 7000:7003 ioctl c0306201 200006c0 returned -22
01:33:33 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'vxcan1\x00', {0x4}, 0x4})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  515.785303] binder: 7000:7003 unknown command 3
01:33:33 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

[  515.815371] binder: 7000:7003 ioctl c0306201 200006c0 returned -22
[  515.828606] binder: 7011:7017 transaction failed 29189/-22, size 0-0 line 3128
[  515.838977] binder: 7010:7016 got transaction to invalid handle
01:33:33 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xfffffffffffffcd8)

01:33:33 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x500, 0x80)
ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000040)=""/76)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000052cd3"], 0x0, 0x0, 0x0})

[  515.858563] binder: 7010:7016 transaction failed 29201/-22, size 0-0 line 3128
[  515.871861] binder: undelivered TRANSACTION_ERROR: 29189
[  515.878310] binder: 7011:7017 transaction failed 29189/-22, size 0-0 line 3128
[  515.903906] binder: undelivered TRANSACTION_ERROR: 29189
[  515.909582] binder_alloc: 18758: binder_alloc_buf, no vma
01:33:33 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r0, 0xffffffffffff8001)
write$9p(r0, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, &(0x7f0000000000)="4e1fb4a3aee942c5750e02e308180a9cd916d1fb2ae64ea3a8a0d70661c5fe0f636ef947b1c68ab398a9bec595f253221d8ee42c816b9fd668723d3fa3cade5413cf147880d0c9d4a596c5269461f3346a39e9f338ce4f66e3aabc95652bebaed9e657148fbc95ed4365b9e9b536a59c97ee34ff9f56bca251809156a7b1195a611211f2d0de66ad26f1d5daf844a7b444a7838da380340de69aebb1a0a6aa56c5e783fe", &(0x7f0000000140)=""/115, 0x4}, 0x20)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  515.915709] binder: undelivered TRANSACTION_ERROR: 29201
[  515.931849] binder: 7019:7020 transaction failed 29189/-3, size 0-0 line 3274
01:33:33 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r1, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r2 = add_key(&(0x7f0000000140)='ceph\x00', 0x0, 0x0, 0x40, 0x0)
keyctl$reject(0x13, r2, 0x0, 0x1b, 0xfffffffffffffffe)
r3 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="e2e838b9195c0b9551b0a191bcd028ec13bf49d8a409ac5ebcb03e69a46fa0eae4c7c8fbe8cbd09193e0c8fd2264eac9a5168efeba0edc1784315e41b5fa50a7a86fb5dfa692ed5e1e385d5b", 0x4c, r2)
keyctl$get_persistent(0x16, r1, r3)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  515.976963] binder: undelivered TRANSACTION_ERROR: 29189
[  515.981391] binder_alloc: 18758: binder_alloc_buf, no vma
[  516.004007] binder: 7019:7029 transaction failed 29189/-3, size 0-0 line 3274
[  516.034174] binder_alloc: 21380: binder_alloc_buf, no vma
[  516.050251] binder: 7026:7035 transaction failed 29189/-3, size 0-0 line 3274
[  516.050506] binder: undelivered TRANSACTION_ERROR: 29189
[  516.060897] binder: 7033:7039 transaction failed 29189/-22, size 0-0 line 3128
01:33:33 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xfffffffffffffcd8)

01:33:33 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r0, 0xffffffffffff8001)
write$9p(r0, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff)
r1 = openat(r0, &(0x7f0000000240)='./bus\x00', 0x80, 0x1d8)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
chdir(&(0x7f0000000100)='./file0\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={@remote, @local, @mcast2, 0x1e84cf52, 0x0, 0x0, 0x180, 0x1, 0x80140, r2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000a40)={&(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000400)="02e6cc01065dd98230a810", 0xb}, {&(0x7f0000000440)="b73ac76649b8573a0556ef1ceceb4ac45573ce7cb42c90e4a012f5d1f53cbb942a3854bfadeac14d688e66a797b48cd5bd837547f7c74233b8f512b4b41b27fe9ff7ec8e6b83313216b7ebb3e90c16ab76d583e5fb29bc08f73ed4a7c95497c7abb6730ff020a49def6ddb788ac4560872c5b664ad2d33a47799d9b8b3c9de9c8d03493869693732cfec3f42d25c6060153e427df617b23337c26897b32736d99e9e3fd010c4a8caf763fed97d173021a3c6bbbc37adb227aec46c4ae6437131556799ecdc335fbcb4903a27a5237ac887a6ccc071b5c51edb4979b4683d428e40045d896acbde004ef2d16b520443413d018ce0bf8e68f9b8985439cf", 0xfd}, {&(0x7f0000000540)="9b60ce2131aea886158c083757f5d29a411607efb5bab339c9d87f445ca85eeff59197ec71c025475fbcff15bcea93faafe7618d564e5562d18defb10cbe9ce43394f1690574ffd6eda04208ae94d48bc2ca567116f15ae04ad807e4fab0efbe77d5569c02dfd06f41871fb4b0b2686a523dcf8a467d3ecec20bbd370b82a0ecfd9753d2f627cb4f8eeb73", 0x8b}, {&(0x7f0000000700)="bc0827361b14d7f6a33803992e3c6793ab3d7bce9cc30f8ca401bd37700f3779735b1ff33b79a0835a947909a9054d909209b6d08d66acee454baf5ceabdafa5ed80d03d2b8afb65dc043563b768c2fe249043d056ed59911f1b319637a7485f1ea3276c58e3cee7dcc448d9bd2c9467df7ab8b80d3e483cc6a50da2429f1e683be14ac49e4564a8ef144a580dbd3cffff7bb40911ccb2fe0bf11839325bca7233dda3ed2d7c0e8e70696118e6c6c94c6154a593fe30e4149fa060be99d6f680e9bcf0367abe6b0bd1d9591e48523532918cc68a319f2a6e2c5f363af5f3cf4574443246", 0xe4}, {&(0x7f0000000800)="93c47181375814f06b4692a3a7fd7d7407cba65c28b355eb97585d6f73df4b99395b8344a09f27da7ae25cff13c486980928b9f0ee4c18487d3f2213feb398eccc959b3f91de3a63ce411f1193032b9a44214901558134caa49805ce6c353a93df92bde589149d878e427a831a7694f43298abf074a589c5235e39ce864d4d050bc456de9a2debce7e38bc42663d69a777b1d42847b33b43c4888341747445ebfb63746a7aec29e28f9a9148e4b07a78c364a4a4847fb3e1b7c7872280ca8382781de73b91ed9b980d", 0xc9}, {&(0x7f0000000900)="00779847ec8fbe5b338439ca0d8d9f563273bdbf4c0e5838b4f7696c0f0b841dbe57ab6d1392e76662569f4808cdd3a2ce79e65adda7f538b57e519c2e346ad5c933c3ccefda242d814c14ff8466f57a043453ccca6a9c344bdabf14877b8cf161dde4c09910482386a94ebcaf06a5265684da78f2e97292f7d347c8373cb7f86a9bb678bd3bd7235f468feccc39935de11d4aa9d813e355bf8c8cb66a90969d223e2c625f2f20a85848678244966ab09e2f4e8a976b9b451fb00c1d7061da086a495dd9a90d828e4fa9646441da58b07de0dded010b2bded24d00cbd6ce3e53cf", 0xe1}, {&(0x7f0000000600)="314713d154379ccfcf0f6bce736eace054c79a075cec42b205470b57786e2414a2934e7d733935fbb7b128e03ae3458024b1d8", 0x33}], 0x7, &(0x7f0000000a00)}, 0x4013020)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup2(r4, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000340)="4f8a00ada69fc64c2546559d39cf7295ebaf11460774127bd9952cc6aaf0b6989988ad255164bfa90e9fe7c3f00f89a9a479af262d9b5801157b48b021991f6a5613baee2e94f6e160982c5486447c10e6488bcb5a2814db36777a0cb1687d373d13e9aa4ae599a5c9bf283d764377416cc34381b404a809a819c7fbc5c349513ede6f5adc86158a7eb4f89c", 0x8c)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="086310400000000000000000000000c48981e1fa14521c40000000000000000000000000000000000000000000000065cfc000000000000000000000000000000000034541523c593c3c6aca5ace22d140fd446bc26b2048f09248a5521fac87eba28c3d00000000000000000000000000747f6f0b091577230ec800097d6dd865bde273c1488023e265a0957d7425c757b3505b8a9238f98a5c9374d8bb03352a6e454d146d890d33a561ecebb3a97a220e4b0d815f0618a564db9dab"], 0x0, 0x0, 0x0})
r8 = dup(0xffffffffffffffff)
dup3(r7, r8, 0xc0000)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

[  516.077556] binder: 7033:7041 transaction failed 29189/-22, size 0-0 line 3128
[  516.104431] binder: undelivered TRANSACTION_ERROR: 29189
01:33:33 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket(0x3, 0x4, 0x2)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r2, 0xffffffffffff8001)
write$9p(r2, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000140)=""/242, 0x5})
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'caif0\x00', 0x1}, 0x18)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000052cd3"], 0x0, 0x0, 0x0})

01:33:33 executing program 1:
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)

[  516.125541] EXT4-fs: Invalid sb specification: sb=0x000000p07fffffff,inite,jqfmt=vfsold,minixdf,commit=0x0000000000000003,jqfmt=vfsv1,OȜ�*J���f������X����ځA?^FkQG/
R'G���4����p��T��ȵ��1�18446744073709551615,subj_type=/dev/null,errors=continue
[  516.130390] binder: undelivered TRANSACTION_ERROR: 29189
01:33:33 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r2, 0xffffffffffff8001)
write$9p(r2, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
statx(r3, &(0x7f00000000c0)='./file0\x00', 0x100, 0x840, &(0x7f0000000340))
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r4, 0xffffffffffff8001)
write$9p(r4, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r4, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000040)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  516.186148] binder_alloc: 21369: binder_alloc_buf, no vma
[  516.222129] binder: 7036:7046 transaction failed 29189/-3, size 0-0 line 3274
[  516.245226] binder: undelivered TRANSACTION_ERROR: 29189
[  516.278054] binder_alloc: 18758: binder_alloc_buf, no vma
[  516.286501] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
01:33:33 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)
open(0x0, 0x0, 0x100)

[  516.287461] binder_alloc: 21380: binder_alloc_buf, no vma
[  516.292920] binder: 7054:7061 transaction failed 29189/-3, size 0-0 line 3274
[  516.299548] binder: 7053:7057 transaction failed 29189/-3, size 0-0 line 3274
01:33:33 executing program 2:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000340)=""/150)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
creat(&(0x7f00000000c0)='./bus\x00', 0x40)
r3 = dup2(r1, r2)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r4, 0xffffffffffff8001)
write$9p(r4, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r4, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:33 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
pipe2$9p(&(0x7f0000000040), 0xc800)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0xffffffffffffffbc, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  516.357524] binder: undelivered TRANSACTION_ERROR: 29189
[  516.369991] EXT4-fs: Invalid sb specification: sb=0x000000p07fffffff,inite,jqfmt=vfsold,minixdf,commit=0x0000000000000003,jqfmt=vfsv1,OȜ�*J���f������X����ځA?^FkQG/
R'G���4����p��T��ȵ��1�18446744073709551615,subj_type=/dev/null,errors=continue
[  516.380121] binder: undelivered TRANSACTION_ERROR: 29189
01:33:33 executing program 4:
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r2, 0xffffffffffff8001)
write$9p(r2, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r4, 0xffffffffffff8001)
write$9p(r4, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r4, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xe4, 0x0, &(0x7f0000000700)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/251, 0xfffffffffffffea6, 0x2, 0x1e}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x1e, 0x3}}, &(0x7f00000000c0)={0x0, 0x28, 0x48}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x5, &(0x7f00000002c0)=""/162, 0xa2, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000540)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x2, 0x1, 0x16}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0})

[  516.436373] binder_alloc: 21380: binder_alloc_buf, no vma
[  516.447883] binder: undelivered TRANSACTION_ERROR: 29189
[  516.462273] binder: 7053:7076 transaction failed 29189/-3, size 0-0 line 3274
01:33:33 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x80000001, 0x9, 0x8000, 0x9, 0x8})
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040))
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0xfff, 0x9, 0x1000})
prctl$PR_GET_FP_MODE(0x2e)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0xfffffffffffffd47, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0})

01:33:33 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
personality(0x4100008)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000052cd3"], 0x0, 0x0, 0x0})

[  516.507528] binder: undelivered TRANSACTION_ERROR: 29189
[  516.516252] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  516.571292] binder: BINDER_SET_CONTEXT_MGR already set
[  516.577005] binder: 7086:7091 ioctl 40046207 0 returned -16
01:33:33 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8ec0de62ea0b7cdaea65f51db900d2791b8c7a99be42a34dc309b60f60f4b38c276d916fdfa5483e1187ef210f675b8"], 0x0, 0x0, 0x0})

01:33:33 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r0, 0xffffffffffff8001)
write$9p(r0, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000580)=""/151)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r2, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r5, 0xffffffffffff8001)
write$9p(r5, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r5, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x5)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r6, 0xffffffffffff8001)
write$9p(r6, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r6, &(0x7f0000000300)='syz1\x00', 0x1ff)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x0)
getcwd(&(0x7f0000000340)=""/170, 0xaa)
ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000000c0)=0x10008)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

[  516.614256] binder: 7086:7091 BC_INCREFS_DONE u0000000000000000 no match
[  516.642348] binder_alloc: 18758: binder_alloc_buf, no vma
01:33:34 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
r43 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r43, 0x0, 0x0)

[  516.659799] binder: 7095:7098 ioctl 401c5820 20000080 returned -22
[  516.683724] binder: BINDER_SET_CONTEXT_MGR already set
[  516.686122] binder: 7086:7091 transaction failed 29189/-3, size 0-0 line 3274
[  516.695956] binder: 7095:7105 ioctl 401c5820 20000080 returned -22
[  516.708604] binder_alloc: 21380: binder_alloc_buf, no vma
[  516.713929] binder: 7086:7100 ioctl 40046207 0 returned -16
[  516.734067] binder: 7086:7109 BC_INCREFS_DONE u0000000000000000 no match
[  516.741794] binder_alloc: 21369: binder_alloc_buf, no vma
[  516.745118] binder: 7097:7103 transaction failed 29189/-3, size 0-0 line 3274
01:33:34 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000000)=0x6)

[  516.759541] binder: 7102:7107 transaction failed 29189/-3, size 0-0 line 3274
[  516.765631] binder_alloc: 18758: binder_alloc_buf, no vma
[  516.778635] binder: undelivered TRANSACTION_ERROR: 29189
[  516.789013] binder: 7086:7109 transaction failed 29189/-3, size 0-0 line 3274
[  516.790715] binder_alloc: 21380: binder_alloc_buf, no vma
[  516.803190] binder: 7097:7113 transaction failed 29189/-3, size 0-0 line 3274
01:33:34 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x3})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  516.805493] binder: undelivered TRANSACTION_ERROR: 29189
01:33:34 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000240)='security.evm\x00', &(0x7f0000000340)=@v2={0x5, 0x0, 0xb, 0x5, 0xb5, "4afff602368add933dacdc8014f4b3f8be63fc8fb553873f1fe577bdc4ed14c1ebbc123e3f9d0db34e08eba65fd254345dfd86c9b093d03b0a6a1843743ce05c2a2de5faf7e820266cbe2d8b66285ec88eaeb9c9653a27c339ee022484afefdb69d7719df132108952f16775f177d42fbcf3cb94793e7bcaeed9cc07f511ce43cb31c6f5e487438ff9f2c4fa9ac1169b2724499b5367fe6b60599988a2732f28a8d40dd5584ed94f7576f0e828fe613a48127e6559"}, 0xbf, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='./file0\x00')
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x1, 0x70, 0xb6, 0x1, 0x20, 0x5, 0x0, 0x7, 0x3200, 0x13, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000000c0), 0x14}, 0x0, 0x0, 0x8, 0x3, 0xa000000000, 0x3f, 0x1e})

[  516.847317] binder: undelivered TRANSACTION_ERROR: 29189
[  516.856933] binder: BINDER_SET_CONTEXT_MGR already set
[  516.862872] binder: 7086:7100 BC_INCREFS_DONE u0000000000000000 no match
[  516.871792] binder: 7086:7091 ioctl 40046207 0 returned -16
[  516.871811] binder: undelivered TRANSACTION_ERROR: 29189
[  516.886379] binder_alloc: 18758: binder_alloc_buf, no vma
01:33:34 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="521980e10d43b6e2ae0bfcb42757bbf54e742fe176de6e0000052cd300000014930eb412725f9a56b502ab0449da13ef9a3f0b1a2d0e70bbb714c638ea50332e07adb4f2e8188eccb0e95caf7e7ad5bca2045c3e59cefbb87da117e1604b20e0e6ecbfad7d32711c7362b68c9e48ec56b102801099bba605f633cd8e89db1dda17ea6591bc37dddfb20ffccaca28531417f830ef1ab60efb48a5d7ad3526350c2297c558fa95cc2c7e5360f13f01806c3f71322838b545a467c4e7352ca615cde037f975b82bbeb1435a88c75f3d2745c1dbdeafac1b67146f137aa588d707382f472e946cd85d76424ac9b1f8f6ba7f27217e99dc3caa9ada10c40678d87527540e830f1f6b5dd0ed2350f580e4265f02768531d0cf078cc77238e253c4e098fbd87adef1de677d8eade7580f83b3a2151e804d617c1364b59aa38b38f956ca961fb9bc064b8e200ec9"], 0x0, 0x0, 0x0})

01:33:34 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))
socket$inet(0x2, 0x4000000000000001, 0x0)

[  516.914636] binder: 7086:7123 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  516.917301] binder: 7119:7125 transaction failed 29189/-22, size 0-0 line 3128
[  516.929901] binder: 7086:7100 transaction failed 29189/-3, size 0-0 line 3274
[  516.946811] binder: undelivered TRANSACTION_ERROR: 29189
[  516.963446] binder_alloc: 21369: binder_alloc_buf, no vma
[  516.969240] binder: 7122:7126 transaction failed 29189/-3, size 0-0 line 3274
[  516.987041] binder_alloc: 18758: binder_alloc_buf, no vma
[  517.001955] binder: 7086:7123 transaction failed 29189/-3, size 96-24 line 3274
01:33:34 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xcbe}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000001c0)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r4, 0xffffffffffff8001)
write$9p(r4, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r4, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4)

01:33:34 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ee80000e0ff000000", @ANYRES32=r2], 0x2}}, 0x0)
r3 = geteuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast1, @in=@local, 0x4e23, 0x3, 0x4e23, 0x9, 0xa, 0x60, 0xa0, 0x1d, r2, r3}, {0x3b4, 0x3f, 0x200, 0x4, 0x800, 0x6, 0x8, 0xe3e}, {0x1ff, 0x9, 0x6, 0x5}, 0x4, 0x6e6bb6, 0x2, 0x0, 0x4, 0x2}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d3, 0x79}, 0xa, @in=@local, 0x3506, 0x1, 0x0, 0x7d, 0x525, 0x8, 0x2}}, 0xe8)

[  517.011578] binder: undelivered TRANSACTION_ERROR: 29189
[  517.019169] binder: 7119:7125 transaction failed 29189/-22, size 0-0 line 3128
[  517.037601] binder: undelivered TRANSACTION_ERROR: 29189
[  517.047499] binder: undelivered TRANSACTION_ERROR: 29189
01:33:34 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffdcd, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="006340400300"/54], 0xffffffffffffff59, 0x0, 0x0})
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000080)={0x6, 0x7f})

[  517.064762] binder: 7130:7134 unknown command -511698606
[  517.102485] binder: 7130:7134 ioctl c0306201 200006c0 returned -22
[  517.120302] binder: undelivered TRANSACTION_ERROR: 29189
01:33:34 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x3, &(0x7f00000000c0)=[{0x400, 0x6c, 0x0, 0x80}, {0x0, 0x2, 0x7f, 0x1}, {0x0, 0x5, 0x6c, 0x4}]})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000200))
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:34 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)
stat(&(0x7f0000000ec0)='./bus\x00', &(0x7f0000000f00))

[  517.144093] binder: 7145:7148 ioctl c0306201 20000000 returned -14
[  517.150958] binder: undelivered TRANSACTION_ERROR: 29189
[  517.158636] binder_alloc: 21369: binder_alloc_buf, no vma
[  517.173804] binder: 7145:7148 ioctl c0306201 20000000 returned -14
01:33:34 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="009c2a0aa53b21ecc27d41e53eabca5fee637fa8801e8b5ecd847087821e84f22ac545bc42292fbf9334559a698d177ee5ba914e8a7d23b7de"], 0xfffffffffffffc8c)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10)

[  517.190653] binder: 7147:7149 transaction failed 29189/-3, size 0-0 line 3274
[  517.197045] binder: 7146:7152 BC_INCREFS_DONE u0000000000000002 no match
[  517.211516] binder: 7146:7152 unknown command 0
[  517.229747] binder: 7146:7152 ioctl c0306201 20000000 returned -22
01:33:34 executing program 1:
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)

[  517.256528] binder: undelivered TRANSACTION_ERROR: 29189
[  517.299264] binder: 7146:7157 BC_INCREFS_DONE u0000000000000002 no match
[  517.309577] binder_alloc: 21369: binder_alloc_buf, no vma
[  517.319690] binder: 7147:7149 transaction failed 29189/-3, size 0-0 line 3274
[  517.321098] binder: 7146:7157 unknown command -893620482
01:33:34 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r0, 0xffffffffffff8001)
write$9p(r0, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x9)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1f"], 0x1)

01:33:34 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:34 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)
fcntl$getown(r42, 0x9)

[  517.352109] binder: undelivered TRANSACTION_ERROR: 29189
[  517.370144] binder: 7146:7157 ioctl c0306201 20000000 returned -22
01:33:34 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'bcsf0\x00'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000f3ffffff00"/68], 0x0, 0x0, 0x0})

01:33:34 executing program 4:
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x39a528454b8135c6, 'cpu'}, {0x68, 'cpu'}, {0x2d, 'io'}, {0x2b, 'pids'}, {0x2d, 'io'}, {0x2d, 'io'}, {0x2b, 'memory'}]}, 0x24)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='\x00\xff\xd4F\x19\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000a0000006600000000000000000000000096f45c72000000edc30400"/68], 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0xfffffffffffffffd)

01:33:34 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r1, &(0x7f0000000080)="3c3cfb59d5c5f658d479911f4ef2eafc54"}, 0x20)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
perf_event_open$cgroup(&(0x7f0000000000)={0x247837e29a5e9c99, 0x70, 0x9, 0xf0, 0x8, 0x3, 0x0, 0x1ff, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xfff, 0x3ff}, 0x80, 0xa82, 0x80000000, 0x4, 0x5, 0x50, 0x1}, r0, 0xe, r1, 0xc)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

01:33:34 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000200)='./file0\x00', 0x100, 0x2, &(0x7f0000000300)=[{&(0x7f0000000240)="f9a5341eb50907724b1ce6683c6f9e3f5d30cafc52af88f18ca57782fed70c556d07580406fef3cb070e9404a5e0a19edfde2cca9ae3618f110b0febeb845d698418277ca73972c0cf318e494d003997721d542a", 0x54, 0x5}, {&(0x7f00000002c0)="a0024f86a860ce5cb2ce7687421c14ec2903e6ab215f9529f5f12547e9f0a2224483717cf01739758d", 0x29, 0x4}], 0x20, &(0x7f0000000340)={[{@numtail='nonumtail=0'}, {@shortname_mixed='shortname=mixed'}], [{@audit='audit'}, {@appraise='appraise'}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x30, 0x66, 0x39, 0x33, 0x61, 0x36, 0x31], 0x2d, [0x61, 0x34, 0x32, 0x65], 0x2d, [0x63, 0x33, 0x61, 0x30], 0x2d, [0x65, 0x39, 0x65, 0x37], 0x2d, [0x220bba2fec22f841, 0x61, 0x62, 0x0, 0x66, 0x66, 0x33, 0x31]}}}, {@obj_role={'obj_role', 0x3d, 'eth0posix_acl_access@'}}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0))
fallocate(r0, 0x28, 0x6, 0x8)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="00f8a34ba01f11e028645ddffd4e5087993598dccf5253408def67e1d68e2152659e5fe9c615121e5f623ee13e884f6ce4b00407ed88789e21b0ceb8d90a628ce6ea9828f60a71dfe19b5759b1188e9db6a670752fc4887cd572c9d62b9f46a121f0efe2c94046a48c5a3ec36ac2dd57e8d44853c3771481f6224150d0648108b785dac40d715850898f966fade3f23a5ce3fe63ca0c14a0b590c32d1aa70a106c183b6ea4a0d0761a6711"], 0x1)

01:33:34 executing program 0:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1)

01:33:34 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r42, &(0x7f0000000300)='syz1\x00', 0x1ff)

[  517.538380] binder: 7185:7194 transaction failed 29189/-22, size 0-0 line 3128
[  517.573827] binder: undelivered TRANSACTION_ERROR: 29189
01:33:34 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup2(r0, r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r2, 0xffffffffffff8001)
write$9p(r2, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xf5)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:34 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e24, 0x6, @ipv4={[], [], @multicast2}, 0x8}, {0xa, 0x4e22, 0x40, @empty, 0x85}, 0xff, [0x0, 0x6, 0x10001, 0xfffffffb, 0x0, 0x8, 0x80, 0x7]}, 0x5c)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, 0x0})

[  517.612889] binder_alloc: 21369: binder_alloc_buf, no vma
[  517.628065] binder: 7190:7200 transaction failed 29189/-3, size 0-0 line 3274
[  517.639928] binder: undelivered TRANSACTION_ERROR: 29189
01:33:35 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r2, 0xffffffffffff8001)
write$9p(r2, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)

01:33:35 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1)

01:33:35 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x3)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r0, 0xffffffffffff8001)
write$9p(r0, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff)
r1 = fcntl$dupfd(r0, 0xc0a, 0xffffffffffffffff)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x240000, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r1, 0x10, &(0x7f00000004c0)={&(0x7f00000003c0)=""/200, 0xc8, <r3=>0xffffffffffffffff}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r2, 0x10, &(0x7f0000000540)={&(0x7f0000000340)=""/88, 0x58, r3}}, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x102008}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x68, r4, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x72}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2e}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xf08172a2a7fa2c14}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5a}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x240a4880}, 0x81)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendfile(r5, r6, &(0x7f0000000280)=0x80000001, 0x8000000000000000)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1)

[  517.785311] binder_alloc: 21369: binder_alloc_buf, no vma
[  517.812937] binder: 7229:7233 transaction failed 29189/-3, size 0-0 line 3274
01:33:35 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r0, 0xffffffffffff8001)
write$9p(r0, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x800000, 0x4)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x5c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000006e3c0900000000000000000035cdf533f71e95000000000000000000000000000000000000000000000000000000000000000000000000e518da8efb14a9f1480dc49f8be8"], 0x0, 0x0, 0x0})
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000000))

[  517.858323] binder: undelivered TRANSACTION_ERROR: 29189
[  517.864740] binder_alloc: 21369: binder_alloc_buf, no vma
01:33:35 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f00000002c0)='./file0\x00', 0x7c, 0x6, &(0x7f00000016c0)=[{&(0x7f00000003c0)="ffacaea2aa517c70a94ae0b9ea329a221d53a5fb13564e3eb335098aac96b598a2eb2677b415dbf45ea647ceef9d2e50422c9971e84333791937e650cefe1f1d0c0030182f6bd0fa34184ed7dd0299d9ec098dbc1539f5b950f3742d9c9511c378216679a00dd70bdaa14392aa5d6df925082374baec50ea5d373b5cba7e0913969a7b3c280f1d0aa1227147bc28ad39d6ddb378481ad23bcc60bb54bd6174ce946b9aab4132bd11be2c6c1ce17666cb789916bd53bc839f043a70520f52c292e5a286944d9d0d3b6f08a1", 0xcb, 0x4}, {&(0x7f00000004c0)="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", 0x1000, 0x4}, {&(0x7f00000014c0)="9f1f5e62ef071b9a8748706317c4b786ab3e03322b195d1225", 0x19, 0xfffffffffffffffd}, {&(0x7f0000001500)="4d49d112f05b7a4eb6c6833868f429a437a3904123266172769d335888a0478622ed3bbcac27685c0d03f191e1c68f040bbd3007dfdda9b364ee22911f83622b997eda39e897f98f05e8ec4a76bd840f9970c0068a0152dfe6f03874fc0b6ec6f67237ddf159a3939b03c6f7be4b64a6538cbb0f9d56287e453b04575e15e01c8767a7bb61b6dd00a42b7350cb6b691461e359d301be6a08e47fddab90b4b54e85c5e439387ba6d58824e99e4bfa322cdd371792f896205637a8673e15f0298981a3039fed3460bfb84a0841fd434da49c168fde68c4c3f6f8c02171c7ce0baa9217c2630fa560", 0xe7, 0x10000}, {&(0x7f0000001600)="1aeaea7447e39cb067b6064125bc5df45fda49262dbe4e0e47223f20b5b5d5716114bbebe02c3aa984717b886096b3ab49777e7bcd270cdabc499f077b709ece899fd22a3476333401bf19ecbaf19a1c563480cc6596ed8861be8eeb140fc31c3c8f51b763e9508a08170507", 0x6c}, {&(0x7f0000001680)="8da91c3b5fc4294c76acd79436fc3dad48fd44dc823cb02fdfd513afede0a691098fb14abdfc45100074ebb5e9fc", 0x2e, 0x4}], 0x81040, &(0x7f0000001780)={[{@noload='noload'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'em0'}}]})
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz0\x00', 0x1ff)
r4 = accept4(r3, 0x0, &(0x7f00000000c0), 0x0)
recvfrom$unix(r4, &(0x7f00000001c0)=""/126, 0x7e, 0x2001, &(0x7f0000000340)=@file={0x1, './bus\x00'}, 0x6e)

[  517.901760] binder: 7229:7238 transaction failed 29189/-3, size 0-0 line 3274
01:33:35 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)
write$9p(r42, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)

[  517.947643] binder: undelivered TRANSACTION_ERROR: 29189
[  517.957549] binder: 7245:7250 transaction failed 29189/-22, size 163960228935117-0 line 3128
[  517.971873] binder: BINDER_SET_CONTEXT_MGR already set
[  517.977369] binder: 7244:7246 ioctl 40046207 0 returned -16
[  518.015303] binder: 7244:7246 BC_INCREFS_DONE u0000000000000000 no match
[  518.036543] binder: undelivered TRANSACTION_ERROR: 29189
[  518.045789] binder_alloc: 18758: binder_alloc_buf, no vma
01:33:35 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24000, 0x0, 0xfffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl(r0, 0xf8f4, &(0x7f0000001700)="cce59104766dbe2e766115b67e23cf7003d444c8181d971b438574d10f860e8544de6b5e93b39e85a5399f2c99e3f785af3863175b24bc34baf34f38c4274b0ba560a8bbdb6514b68b30201444a7ca82be098a815d87d6c6521c7639843411deb1607385ca9c4ec08acfb7c446cc2e370deeb92305a23ec5bb87586ca2196927a7814577f8c3b35b915d9b62c9711e37dbad1dcb028b2e669603e40189b2210df637")
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0))
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = dup(r2)
sendmsg$sock(r3, &(0x7f00000016c0)={&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x1}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000000)="0c23a4be4a4cc0decfe1c23212", 0xd}, {&(0x7f0000001200)="f43729fd6b15a30739688ae1f8438d0f97961c71656312102cf3b8cc9c058cc460dbca2c7dfc5a0c60a5170ab6b83b56a01a9c1698eba25ecd3ce2053b95570bb921b80db29ae54b123e1dc72db52f754b2e0a422525e5322d6f23beafcec9c416a8e27dbad1182c6c825966f5d76e70133c52de68060b74de5a0eeca24468f7651de1f7623bd354d14f4965b1974a01649598407af065cc55b5438435de16399782b4832faaf01a314c077a", 0xac}, {&(0x7f00000012c0)="d53a6331212af70a3d79e27684b724b451e58146af60a0a4d64ba6768223f167314c7f72bb71c79861ddd4114282595ff89134bf4be1b78e02deec3138230cd09bba644e364dc84c47b7441d9d1109d77460d207c628e75ef55c576d0c836282dde67804800de2a12dccbcf4b6906d21b4fec0ed3614f23cc175f27f7cb3a13fbcd1ce56d625691268880d37ca47c29300e4fe47a5c2eb18bae3b50312088bc00f717c5436d6e8f5cf5f1e0dc275db6dddc4f4292d484b3bb3c136a7fc1d20004d493dde90849232199944478134d1a6143375c9a293", 0xd6}, {&(0x7f00000013c0)="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", 0xfc}, {&(0x7f00000014c0)="92beb04efd397027472fd08b618d35e4d6392565eb910cef14164eae15051ee9c4f76db9dd0d99d1f2aab4e58d8659b9a47c6d04bed97239b4ec2f54e63c3e92e94a8bc68e57582e56996d3fa766e24ca94e14dba8c859eed50664e5fd2b763057fc5f979f9a471a6caabef25bf0e31d48761713d691cda58e2f79ee5c72b9cf41e70b8bc762c2863e62a407e26c7bf9f65e2ee44c4b98a14c2e001594a807", 0x9f}, {&(0x7f0000001580)="103769a5243c6e91594a7210fac70d60d60640290795fb35a735cb449408fb66e8e28d776d70f73823573c8f80a831c08d56d793bd2630712b4fe4795077273f09b16b786dce1e2d4a1b87a2eda7bcea2ca0907328b8e9c561177a80cd1c", 0x5e}, {&(0x7f0000000100)="f6b6e44166b62f7eea8fc49f4828a0f67b96c0cc710c4576764d4da6f0c88c3d386e77511b60", 0x26}], 0x8, &(0x7f0000001680)=[@mark={{0x14, 0x1, 0x24, 0xd0}}], 0x18}, 0x40000)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1)

[  518.069699] binder: 7244:7246 transaction failed 29189/-3, size 0-0 line 3274
[  518.095299] binder: undelivered TRANSACTION_ERROR: 29189

INIT: Id "2" respawning too fast: disabled for 5 minutes
01:33:35 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
dup(r2)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
fsetxattr$security_ima(r2, &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="030212000000008b00116be6e61d9417f8dac68d492b17964c418a4281a50a"], 0x1b, 0x4)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000ff0300000000000000000000000000005f0166f50000000000000000000000000000c2d0eeecd250a76bbd3276440401b01426c26e866f27c756c9c706adadc02b663c35a34fd70b6c8f272240bc27d997df85f5a625b44b930e5b2d9be3d61734"], 0x0, 0x0, 0x0})
ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x11a4)

01:33:35 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
chroot(&(0x7f0000000140)='./file0\x00')
eventfd(0x9)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r4, 0xffffffffffff8001)
write$9p(r4, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r4, &(0x7f0000000300)='syz1\x00', 0x1ff)
write$eventfd(r4, &(0x7f0000000940), 0x8)
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00')
sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1a8, r5, 0x100, 0x5, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc1a}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf3}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x4f, 0x1, 0x52a}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20048080}, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="150100002e8e27f75363164a3f9a2b06024cceb9396506dca6958c57c907c73d1d35de387b2e312c8e16f69abc83201393219c714466241e8cca92e90dba27a0f3399b3eabd4ef0d031f9e3b4e74d3960d0002657ad20b090b45061cbe1a44e140b5696d0e171a7906b38d7915adbebc87dff41ea24e84c8c920ecae49c0d4a0c49f215087b3b7f976a59f242c06e6601475484c4d3558ce90ab7753e42c580a437b15f812e99208608a677b35a0465bb62e29a8dd8d43deb2cf97c60cceafe0d6b77bc872c9c3efb2603d39c441ec6a622d0115cca5ca1b5fef274396ad0939b153b5c76c9f163dd3", @ANYRES16=r2, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x10080}, 0x40)

[  518.175281] binder: BINDER_SET_CONTEXT_MGR already set
[  518.182517] binder: 7244:7264 ioctl 40046207 0 returned -16
[  518.182588] binder: BINDER_SET_CONTEXT_MGR already set

INIT: Id "3" respawning too fast: disabled for 5 minutes
01:33:35 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
r42 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r42, 0xffffffffffff8001)

[  518.220275] binder: 7244:7246 BC_INCREFS_DONE u0000000000000000 no match
[  518.224924] binder: 7277:7280 BC_INCREFS_DONE node 1981 has no pending increfs request
[  518.234205] binder_alloc: 18758: binder_alloc_buf, no vma
[  518.239651] binder: 7272:7282 BC_INCREFS_DONE u0000000000000000 no match
[  518.252189] binder_alloc: 21369: binder_alloc_buf, no vma
[  518.255713] binder: 7272:7276 ioctl 40046207 0 returned -16

INIT: Id "5" respawning too fast: disabled for 5 minutes
[  518.278578] binder: 7272:7286 ioctl f8f4 20001700 returned -22
[  518.288168] binder_alloc: 21380: binder_alloc_buf, no vma
[  518.291246] binder: 7244:7246 transaction failed 29189/-3, size 0-2147483649 line 3274
[  518.294443] binder: 7277:7280 got transaction to context manager from process owning it
[  518.312014] binder: 7277:7284 got transaction to context manager from process owning it
[  518.324297] binder: 7278:7283 transaction failed 29189/-3, size 0-0 line 3274

INIT: Id "4" respawning too fast: disabled for 5 minutes

INIT: Id "6" respawning too fast: disabled for 5 minutes
[  518.341389] binder: BINDER_SET_CONTEXT_MGR already set
[  518.353923] binder: 7277:7284 transaction failed 29201/-22, size 0-98797716825440256 line 3119
[  518.355816] binder: 7272:7282 transaction failed 29189/-3, size 0-0 line 3274
[  518.370770] binder: undelivered TRANSACTION_ERROR: 29189
01:33:35 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='proc\x00', 0x2802, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0)
r2 = socket(0x2, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x40c2, 0x4)
setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x0)
sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xd742bf5670036a38}, 0x40008004)
sendto$inet(r2, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f00000001c0)=0x3f, 0x4)
recvfrom(r2, 0x0, 0x20, 0x12062, 0x0, 0xfffffffffffffe00)
mkdirat(r1, &(0x7f00000001c0)='./bus\x00', 0x20)
r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r6, 0xffffffffffff8001)
write$9p(r6, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r6, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)={&(0x7f00000003c0)='./file0\x00', r6}, 0x10)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0863104000000000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000062dfe964b2c59c3c7d69503ac5a404f3ed094066384da003dbfa7ed7f143098dc08879e47eeab2bcc1b17f3f72e5f20cf18d278dc783e62817756ecd40fcb2dc1130c07dfb657f76a92dc783eb87633f22ffcc81168dcf5b32"], 0x0, 0x0, 0x0})
r7 = dup2(r0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

[  518.378227] binder: 7272:7276 ioctl 40046207 0 returned -16
[  518.386496] binder: 7272:7286 BC_INCREFS_DONE u0000000000000000 no match
[  518.397798] binder_alloc: 21380: binder_alloc_buf, no vma

INIT: Id "1" respawning too fast: disabled for 5 minutes
[  518.413673] binder: 7277:7280 transaction failed 29201/-22, size 0-0 line 3119
[  518.418426] binder: undelivered TRANSACTION_ERROR: 29189
[  518.425204] binder: 7272:7286 transaction failed 29189/-3, size 0-0 line 3274
[  518.427138] binder_alloc: 21369: binder_alloc_buf, no vma
[  518.447721] binder: 7278:7283 transaction failed 29189/-3, size 0-0 line 3274
[  518.457768] binder: undelivered TRANSACTION_ERROR: 29201
[  518.469628] binder: BINDER_SET_CONTEXT_MGR already set
01:33:35 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1)

[  518.480436] binder: 7277:7284 ioctl 40046207 0 returned -16
[  518.486183] binder: undelivered TRANSACTION_ERROR: 29201
[  518.491158] binder: 7272:7282 ioctl f8f4 20001700 returned -22
[  518.497876] binder: 7272:7276 BC_INCREFS_DONE u0000000000000000 no match
[  518.506360] binder: undelivered TRANSACTION_ERROR: 29189
[  518.515964] binder: 7277:7280 got transaction to context manager from process owning it
[  518.516634] binder: 7272:7290 BC_INCREFS_DONE u0000000000000000 no match
[  518.530627] binder: 7277:7306 got transaction to context manager from process owning it
[  518.531260] binder: BINDER_SET_CONTEXT_MGR already set
[  518.557602] binder: 7277:7280 transaction failed 29201/-22, size 0-98797716825440256 line 3119
[  518.568513] binder: BINDER_SET_CONTEXT_MGR already set
[  518.574137] binder: 7296:7299 ioctl 40046207 0 returned -16
[  518.580249] binder: 7272:7276 unknown command -1098804989
[  518.586455] binder: undelivered TRANSACTION_ERROR: 29189
[  518.597601] binder: 7277:7306 transaction failed 29201/-22, size 0-98797716825440256 line 3119
[  518.599580] binder: 7272:7276 ioctl c0306201 200006c0 returned -22
[  518.614930] binder: 7296:7299 BC_INCREFS_DONE u4040630000000000 no match
[  518.625735] binder: 7272:7290 unknown command -1098804989
01:33:35 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

01:33:36 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')

[  518.633997] binder: undelivered TRANSACTION_ERROR: 29201
[  518.645400] binder: 7272:7286 ioctl 40046207 0 returned -16
[  518.653516] binder: 7272:7290 ioctl c0306201 200006c0 returned -22
[  518.662459] binder: 7296:7299 unknown command 0
[  518.668621] binder: undelivered TRANSACTION_ERROR: 29201
01:33:36 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006db1400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000aef19d3eb46ae1dd67ef946359ef6b8face9caf3957cadf6c3e469cd6a20cb4f09124d952a71"], 0x0, 0x0, 0x0})
socket$packet(0x11, 0x2, 0x300)

01:33:36 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
stat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setfsgid(r1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1)

[  518.682416] binder: 7296:7299 ioctl c0306201 200006c0 returned -22
[  518.699553] binder: undelivered TRANSACTION_ERROR: 29189
[  518.719007] binder_alloc: 21369: binder_alloc_buf, no vma
01:33:36 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x10, 0x0, 0x5, 0x0, 0x0, 0x102044, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1702, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1)

[  518.746652] binder: 7314:7316 transaction failed 29189/-3, size 0-0 line 3274
01:33:36 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="006340409aa1ead36a519635bdc8f65f7f8a3b5141da91506b4f040000000000006c2ecfc50000000400000000000000ffff02000000000000000000000000e1ffffffff"], 0x0, 0x0, 0x0})

[  518.805894] binder: undelivered TRANSACTION_ERROR: 29189
[  518.807778] binder: 7320:7326 unknown command 1085369600
[  518.834359] binder: 7320:7326 ioctl c0306201 200006c0 returned -22
01:33:36 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000340)='security.ima\x00', &(0x7f0000000380)=@sha1={0x1, "5a35bba16e8c394c12d1606fff3997aa57cb8252"}, 0x15, 0x1)
close(r3)
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
io_setup(0x1000000000000003, &(0x7f00000000c0)=<r4=>0x0)
io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x12f}])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup2(r0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r7, 0xffffffffffff8001)
write$9p(r7, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r7, &(0x7f0000000300)='syz1\x00', 0x1ff)
pread64(r7, &(0x7f00000001c0)=""/191, 0xbf, 0xffffffff)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:36 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()
getgid()

01:33:36 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="00b2d64ad1546b7a5b490949cd7e97abc249ebc94df51ca7efc4a2b58e94718afbe38efc8df5c313e0966bd3dd5b4f13043ce83992e9a026a94bdc5053e823ff08e139351bc02cb6e0cfb92a819a8628363536a5e69735d9242e1ed518d836c2f76d165aa47a2e13fc29cff7105e284aec319b2a6b10f5fe07e923dea699ddfe77d06b0f52ccfad3adeb960341b9f97576a884061ce28a91349817beda4a72c706a621853490215df5d702eee7cb29f975454b451b5a98b8d629f5d9b9f2e0e6bf874378c7ffb9f1f03f3ec219c19d11b29a548f957c3888da834862ab0a040f8bc568b6bba1b8f6e8bab7b9af15aca18b2d8f6478cba5f903f73844cceac99dc26becd20761c9ebfc8ab50fa132b3745867c8cf6d5ba1f78ff42dc709766d59e36c39ae2f5084e2fb31fb2fe49fae37da3987a7cbbc87b3ca0c5c9dd9fbee97b34e243c8d808c24c7602514902451ed44daea2e2fd090db14d4550585b319f515cef7e046a738d956e4cf76a472a36dcea27e2432de4fd8d9a80cc6621280e31c02ecf3ae1cec48a60a43ac574c21f5dff820d8e0fe7974cdb26491a7be9dc1c4"], 0x1)

01:33:36 executing program 0:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000))
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0))
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x367)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f00000000c0)={{0x3a, @multicast1, 0x4e23, 0x4, 'lblcr\x00', 0x5, 0x80, 0x54}, {@empty, 0x4e21, 0x10003, 0x9, 0x6, 0x2}}, 0x44)

[  518.961534] binder: 7320:7326 unknown command 1085369600
[  518.967457] binder: 7320:7326 ioctl c0306201 200006c0 returned -22
[  519.006938] binder: 7340:7346 got transaction to invalid handle
[  519.039765] binder: 7340:7346 transaction failed 29201/-22, size 17179869381-844420635164672 line 3128
[  519.086656] binder: undelivered TRANSACTION_ERROR: 29201
01:33:36 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='@'], 0x1)

01:33:36 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3b)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0xec, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)
r3 = syz_open_procfs(r2, &(0x7f0000000000)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&}8\xeb\xd2\xcei\x00\x00\xbd\x8d\xae@')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x430, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r3], 0x0, 0x0, 0x0})

01:33:36 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
rmdir(&(0x7f0000000000)='./bus\x00')
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0))
r2 = socket$inet(0x2, 0x11f7b457df664656, 0x72)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r6 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x10200)
r7 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r8, 0xffffffffffff8001)
write$9p(r8, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r8, &(0x7f0000000300)='syz1\x00', 0x1ff)
ppoll(&(0x7f0000000240)=[{r1, 0x1140}, {r5, 0x90}, {r2, 0x3290}, {r2, 0x4080}, {r0, 0x3000}, {r3, 0x1000}, {r6, 0x120}, {r7, 0x4210}, {r8, 0x10}], 0x9, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={0x8001}, 0x8)
tkill(r4, 0x3b)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={[], 0x9, 0x2, 0xffffffff, 0x2, 0x7b6, r4})
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1)

01:33:36 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$unix(0x1, 0x2, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:36 executing program 4:
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=<r0=>0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28b481b845b79e67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x200000000000, 0x0, 0x0, 0x5, 0x0, 0x1000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="003f78e77ea1b409b52333ee66f16ca3ec62d3febf4e8780b0f1bce79595ce36423ed011e6ef57d7e6e28c06ba02c0113a97d80926b89d32688e8aef339c574eec3ae206c60ac955694374b373153e99d1050000007283622897d9650e5719f8846cd6b80c169eb47e4ba5d03b4603f679d5d33f7daffc1df523dba764d166c8ef2f362923b4698d8bd2386807b99e98d68ad6f246e8"], 0x1)
eventfd(0xffffffff)

[  519.250946] binder: BINDER_SET_CONTEXT_MGR already set
[  519.263939] binder: 7368:7369 ioctl 40046207 0 returned -16
[  519.282172] binder: 7368:7369 BC_INCREFS_DONE u0000000000000000 no match
01:33:36 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)
geteuid()

[  519.308081] binder_alloc: 21380: binder_alloc_buf, no vma
[  519.330297] binder: BINDER_SET_CONTEXT_MGR already set
[  519.336007] binder: 7368:7369 transaction failed 29189/-3, size 0-0 line 3274
[  519.349240] binder: BINDER_SET_CONTEXT_MGR already set
[  519.357012] binder: 7371:7376 ioctl 40046207 0 returned -16
[  519.367457] binder: 7368:7378 ioctl 40046207 0 returned -16
[  519.375878] binder: 7371:7376 BC_INCREFS_DONE u0000000000000000 no match
[  519.388590] binder: 7368:7369 BC_INCREFS_DONE u0000000000000000 no match
[  519.397783] binder_alloc: 21380: binder_alloc_buf, no vma
01:33:36 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1)
dup3(0xffffffffffffffff, r0, 0x80000)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
fstat(r1, &(0x7f0000000380))

[  519.406198] binder_alloc: 633: binder_alloc_buf, no vma
[  519.415137] binder: 7368:7369 transaction failed 29189/-3, size 0-0 line 3274
[  519.427514] binder: 7371:7376 transaction failed 29189/-3, size 0-0 line 3274
[  519.456358] binder: undelivered TRANSACTION_ERROR: 29189
01:33:36 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x2, 0x9e6, 0x3})

[  519.496377] binder: undelivered TRANSACTION_ERROR: 29189
01:33:36 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r40, r41, 0x0, 0x5, &(0x7f0000000e40)='proc\x00', 0xffffffffffffffff}, 0x30)

[  519.540405] binder: undelivered TRANSACTION_ERROR: 29189
01:33:36 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1)

[  519.586710] binder: BINDER_SET_CONTEXT_MGR already set
[  519.592190] binder: 7392:7393 ioctl 40046207 0 returned -16
[  519.607911] binder: 7392:7393 BC_INCREFS_DONE u0000000000000000 no match
[  519.627403] binder_alloc: 21380: binder_alloc_buf, no vma
01:33:36 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0))
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

[  519.646226] binder: 7392:7393 transaction failed 29189/-3, size 0-0 line 3274
[  519.659294] binder: 7392:7405 ioctl c0185879 20000000 returned -22
[  519.679730] binder: undelivered TRANSACTION_ERROR: 29189
[  519.703829] binder: BINDER_SET_CONTEXT_MGR already set
[  519.722808] binder: 7392:7407 ioctl 40046207 0 returned -16
[  519.737180] binder: 7392:7393 BC_INCREFS_DONE u0000000000000000 no match
[  519.737204] binder: 7392:7405 ioctl c0185879 20000000 returned -22
01:33:37 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000200)='./bus\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

[  519.747692] binder_alloc: 21380: binder_alloc_buf, no vma
[  519.765099] binder: 7392:7393 transaction failed 29189/-3, size 0-0 line 3274
[  519.781276] binder: undelivered TRANSACTION_ERROR: 29189
01:33:37 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r41, &(0x7f0000000300)='syz1\x00', 0x1ff)

01:33:37 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1)

01:33:37 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz0\x00', 0x1ff)
write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x7, 0x21, 0x1}, 0x7)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x5, &(0x7f00000000c0)=[{0x7ff, 0x0, 0xe1, 0x7f}, {0x0, 0x5d, 0xff, 0x5}, {0xffff, 0x8, 0x5, 0x80000000}, {0x4, 0x5, 0x0, 0x3}, {0x5, 0x1, 0x1, 0x1}]})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)="40341995388f5589909cbc5554fea9c801557211f630ac07b8961905628d9ace181eb2f2d142c345fb2362ad05044caa8484cb4dbd3320410ffd20be939eecc1c7b86dd4448989b1495035c9962de2515f8111fd98223f9fc5e1edfcaca29dcd944f3b8654176e58bbc4f3187a4b219e0c04e5dada9185acf352cd0498f0266acb2ddcb714eeaa3b18ab1c3ce4122dd5f57a47d651c7563964e7228630e900dc4b51e58773d71da2ee405235279078c8a9e327a1", 0xb4}, {&(0x7f0000000400)="fedffb22a19751f304ac3e4924e0cae6d6c1bd0c8cb25f9c5bc5b80299e31b31df0b41846985c5c1e364ff2a6234f99148a411e29ea1934fa28987ccf0e7b6d067444c3764b6546e82a63cedd3976df5ed569ca5c49cd6b095aa843cfc1c945fc3f88ca8fa145a5ad9542d7fa2fd43a0e2e02ca594a33496cd02d39e3cab7cfb884653adb6baf9481672aab77bc4e3b9085256d8fb0b7e463a0ba06f19a339ea97649c2275c4cc802f11c1381bd56cb214f150", 0xb3}, {&(0x7f0000000240)="a5a300989f2d", 0x6}], 0x3)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./bus\x00')

01:33:37 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r0, 0xffffffffffff8001)
write$9p(r0, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r1)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x260100}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x238, r2, 0x400, 0x70bd26, 0x0, {}, [@TIPC_NLA_LINK={0xb4, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37fe3547}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xc8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x41587a00}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x200, @dev={0xfe, 0x80, [], 0x23}, 0x7ceab9d7}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7fffffff, @remote, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff00}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x30000002}, 0x4)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)={0x460, r2, 0xfa671745f1b62e64, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x22}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d79}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94bc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8014}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc10c}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK={0xf8, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf4e1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbb16}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf0ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfa7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1fc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff19}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xad74}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf56}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0xfffffffffffffddd, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x10008014}, 0x4000062)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1)

01:33:37 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1)

01:33:37 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0)
write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0xa2, 0x4, 0x1}, 0x1}}, 0x18)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x40)
r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ee80000e0ff000000", @ANYRES32=r5], 0x2}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0x20}, 0x13, r5})
pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x6000)
write$binfmt_elf32(r6, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x7f, 0xb6, 0x9, 0x3, 0x3, 0x3, 0x5, 0x18a, 0x38, 0x363, 0x6f7, 0xc7, 0x20, 0x2, 0x4f8f, 0x0, 0x4}, [{0x1, 0xe0b, 0xfffffffd, 0x58, 0x9, 0x1f, 0x401, 0x3ff}, {0x7, 0x0, 0x7, 0x1, 0xed, 0xfffffff7, 0x0, 0x822}], "68b37ece1eb75d3143260f6239273e5761da94f9d7830f106dc1f4796c33a71888ea1ba9dc7c58b7c004bf1cd44b02c8d018f56133eef8558b81e4ecb70d3f45d61a297ec8651939", [[]]}, 0x1c0)
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0x245, &(0x7f00000003c0)={0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfec5)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r7}, 0xc)
r8 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
flistxattr(r8, &(0x7f0000001040)=""/4096, 0x1000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r7}, 0xc)

01:33:37 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r3, 0xffffffffffff8001)
write$9p(r3, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff)
r4 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0)
r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000440)='./bus\x00', 0xb5d492803f94df44)
inotify_rm_watch(r4, r5)
inotify_rm_watch(r3, r5)
chroot(&(0x7f00000002c0)='./bus\x00')
ftruncate(r2, 0xffffffffffff8001)
write$9p(r2, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000000)={<r6=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000080)={r6, 0xfff, 0x5})
r7 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
r8 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r9 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000006c0)={0xfffffd1e, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="335b6d56df69fc8109ec3c01d24811cc8249c4812d65c88348766cdaba82c5bb27eac2f5100f90758b69399ff5f91adf608cad0a04b0344cf75c91494a8df6878d82446a69bb857ea99c56dd8b42dd5074f85cf878cbd4b45640b53d8b845bc32f899fa9436a037edd64624a391fa44393131b9627048ef665a656e78bde9b30cc740db22d278947432800dc76f163a379c900c008f7c924c96da6d485"], 0x2d4, 0x0, 0x0})
r10 = dup3(r2, r7, 0x0)
write$P9_RSTAT(r10, &(0x7f0000000340)={0x5a, 0x7d, 0x2, {0x0, 0x53, 0x5, 0x2, {0x28, 0x4, 0x5}, 0x20800000, 0x4000000, 0xcc7e48d, 0x1000, 0xd, '/dev/binder#\x00', 0xd, '/dev/binder#\x00', 0x5, 'syz1\x00', 0x1, '.'}}, 0x5a)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)="ab84e2b437d317ad3c5479097f0d930ff80cce4ad588fc2312fcb31314505b0b24fe07144741a94eda01259d55cc780c632635512ca258f918", 0x39, r0}, 0x68)

01:33:37 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x428200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r6 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r6, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r9, &(0x7f0000000080)='./file0\x00', 0x0, r10, 0x800)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r11, 0x0, 0x0)
r12 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r12, &(0x7f0000000080)='./file0\x00', 0x0, r13, 0x800)
getgroups(0x5, &(0x7f00000004c0)=[r7, r10, 0xee00, r13, 0xffffffffffffffff])
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r14, 0xffffffffffff8001)
write$9p(r14, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r14, &(0x7f0000000300)='syz1\x00', 0x1ff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r15, 0xffffffffffff8001)
write$9p(r15, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r15, &(0x7f0000000300)='syz1\x00', 0x1ff)
r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/connector\x00')
ftruncate(r16, 0xffffffffffff8001)
write$9p(r16, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r16, &(0x7f0000000300)='syz1\x00', 0x1ff)
r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r17, 0xffffffffffff8001)
write$9p(r17, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r17, &(0x7f0000000300)='syz1\x00', 0x1ff)
r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r18, 0xffffffffffff8001)
write$9p(r18, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x67)
mkdirat$cgroup(r18, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000a80))
r19 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r19, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r20 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r20, &(0x7f0000000080)='./file0\x00', 0x0, r21, 0x800)
accept4$unix(r1, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80000)
r22 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r22, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r22, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r23 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r23, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r24 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r24, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r24, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r25 = gettid()
ptrace$setopts(0x4206, r25, 0x0, 0x0)
tkill(r25, 0x3b)
ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r25, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r26 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r26, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r27 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r28=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r27, &(0x7f0000000080)='./file0\x00', 0x0, r28, 0x800)
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
tkill(r29, 0x3b)
ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r29, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r30, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
fstat(0xffffffffffffffff, &(0x7f0000000c00))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = gettid()
ptrace$setopts(0x4206, r31, 0x0, 0x0)
tkill(r31, 0x3b)
ptrace$setregs(0xd, r31, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r31, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r32=>0x0})
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x3fd, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="a118cf34f08f11a92a545f9beea718aef8398d5fc7dc6da1712e7608ae4d5e838b06ac4565c6a67f38d21f9db287e650df9fa2bc9655850846bdf3d0806cf2b00c052680e4b0e5ba7f321f69b3bbe3eb20e04170a3ae", 0x56, 0x1000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73623d3078303030303030703037666666666666662c696e6974652c6a71666d743d7666736f6c642c6d696e697864662c636f6d6d69743d3078303030303030303030303030303030332c6a71666d743d76667376312c4fc89cf52a4ae3bcc3d066bee4f9e08ed058029ca0f4b6da81413f5e466b1f51472f0117522747fc02f390e10b349d8e95c570841e85548788c8b57f8d8431eb", @ANYRESDEC=r32, @ANYBLOB="2c7375626a5f747970653d2f6465762f6e756c6c002c637365825f752c66734d616769633d301d663030303030303030303030303030362c00"])
r33 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r33, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r34 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r35=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r34, &(0x7f0000000080)='./file0\x00', 0x0, r35, 0x800)
r36 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r36, 0xffffffffffff8001)
write$9p(r36, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r36, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$TIOCGPGRP(r36, 0x540f, &(0x7f0000000cc0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
r37 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r37, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r38 = open(0x0, 0x0, 0x100)
getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r39=>0x0}, &(0x7f0000000140)=0xfffffffffffffcd8)
fchownat(r38, &(0x7f0000000080)='./file0\x00', 0x0, r39, 0x800)
r40 = gettid()
ptrace$setopts(0x4206, r40, 0x0, 0x0)
tkill(r40, 0x3b)
ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r40, 0x0, 0x0)
r41 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r41, 0xffffffffffff8001)
write$9p(r41, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)

[  520.041387] audit: type=1326 audit(1575336817.366:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7432 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d4ba code=0x0
01:33:37 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="c0"], 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
ftruncate(r1, 0xffffffffffff8001)
write$9p(r1, &(0x7f00000001c0)="714fe694f6c224c560246609412d999e76e31e54fe6ebccadb34a644db35a020b9d7c5af2a29ae13af873c9759c34607fa500a38f772866aa0214a39634552af414731d8809b2049b6056fd17c4f8ad63d7184db56870c48161bf8c1b70f6db925f556a42bdf9471c28f1a", 0x6b)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'batadv0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}})

[  520.094873] binder: 7439:7444 transaction failed 29189/-22, size 0-0 line 3128
[  520.104701] binder_alloc: 21369: binder_alloc_buf, no vma
[  520.128936] binder: BINDER_SET_CONTEXT_MGR already set
01:33:37 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x3, 0x123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000240)={0x0, 0x80, 0x80000000, 0x8, 0x3, "5efd3b54a110773d9b95aac88683708c141f6c", 0x2, 0x10001})
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0))
r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x24, 0x0, &(0x7f00000002c0)=[@acquire={0x40046305, 0x1}, @request_death={0x400c630e, 0xfffffffe}], 0xd89937d7e38995b1, 0x0, 0x0})
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x88200, 0x0)

[  520.150274] binder: 7439:7444 ioctl 40046207 0 returned -16
[  520.158622] binder: 7441:7447 transaction failed 29189/-3, size 0-0 line 3274
[  520.187636] binder: 7439:7454 BC_INCREFS_DONE u0000000000000000 no match
[  520.203754] binder: BINDER_SET_CONTEXT_MGR already set
[  520.221927] binder: 7441:7458 ioctl 40046207 0 returned -16
[  520.224146] binder: BINDER_SET_CONTEXT_MGR already set
[  520.249898] binder: 7441:7447 BC_INCREFS_DONE u0000000000000000 no match
[  520.254987] binder: 7439:7454 got transaction to context manager from process owning it
[  520.263824] binder_alloc: 21369: binder_alloc_buf, no vma
[  520.265485] binder: 7439:7444 ioctl 40046207 0 returned -16
[  520.282050] ==================================================================
[  520.289445] BUG: KASAN: stack-out-of-bounds in unwind_next_frame+0x169f/0x1810
[  520.296806] Read of size 8 at addr ffff8881a2887490 by task syz-executor.4/7461
[  520.304247] 
[  520.305863] CPU: 1 PID: 7461 Comm: syz-executor.4 Not tainted 4.14.157-syzkaller #0
[  520.313642] Call Trace:
[  520.316221]  dump_stack+0xe5/0x154
[  520.319746]  ? unwind_next_frame+0x169f/0x1810
[  520.324307]  ? unwind_next_frame+0x169f/0x1810
[  520.328872]  print_address_description+0x60/0x226
[  520.333711]  ? unwind_next_frame+0x169f/0x1810
[  520.338276]  ? unwind_next_frame+0x169f/0x1810
[  520.342840]  __kasan_report.cold+0x1a/0x41
[  520.347069]  ? unwind_next_frame+0x169f/0x1810
[  520.351641]  unwind_next_frame+0x169f/0x1810
[  520.356034]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  520.362433]  ? deref_stack_reg+0xe0/0xe0
[  520.366479]  ? perf_output_begin_forward+0x6f0/0xa50
[  520.371586]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  520.377198]  perf_callchain_kernel+0x3a0/0x540
[  520.381764]  ? bad_gs+0x23/0x1614
[  520.385235]  ? arch_perf_update_userpage+0x330/0x330
[  520.390324]  ? perf_output_copy+0x1d0/0x1d0
[  520.394639]  ? __debug_object_init+0x1d2/0x7d0
[  520.399304]  ? perf_swevent_overflow+0x5a/0xf0
[  520.403959]  ? check_preemption_disabled+0x35/0x1f0
[  520.408970]  get_perf_callchain+0x2f5/0x770
[  520.413281]  ? put_callchain_buffers+0x60/0x60
[  520.417860]  ? __task_pid_nr_ns+0x1ea/0x450
[  520.422171]  perf_callchain+0x147/0x190
[  520.426130]  perf_prepare_sample+0x6a8/0x1360
[  520.430610]  ? perf_event_output_forward+0x12f/0x220
[  520.435705]  ? perf_output_sample+0x1700/0x1700
[  520.440357]  ? get_perf_callchain+0x58b/0x770
[  520.444837]  perf_event_output_forward+0xdc/0x220
[  520.449678]  ? perf_prepare_sample+0x1360/0x1360
[  520.454951]  ? lock_acquire+0x279/0x360
[  520.459306]  ? __task_pid_nr_ns+0x1ea/0x450
[  520.463615]  ? perf_callchain+0x147/0x190
[  520.467745]  ? perf_callchain+0x150/0x190
[  520.471882]  ? check_preemption_disabled+0x35/0x1f0
[  520.476903]  __perf_event_overflow+0x12d/0x340
[  520.481474]  perf_swevent_overflow+0x7a/0xf0
[  520.485862]  perf_swevent_event+0x19c/0x270
[  520.490178]  perf_tp_event+0x633/0x7f0
[  520.494053]  ? perf_swevent_put_recursion_context+0xa0/0xa0
[  520.500444]  ? HARDIRQ_verbose+0x10/0x10
[  520.504489]  ? lock_acquire+0x279/0x360
[  520.508462]  ? __free_insn_slot+0x490/0x490
[  520.512769]  ? check_preemption_disabled+0x35/0x1f0
[  520.517769]  ? __is_insn_slot_addr+0x130/0x1e0
[  520.522333]  ? kernel_text_address+0xfe/0x120
[  520.526810]  ? __kernel_text_address+0x9/0x30
[  520.532111]  ? unwind_get_return_address+0x51/0x90
[  520.537026]  ? __save_stack_trace+0x8a/0xf0
[  520.541603]  ? depot_save_stack+0x11d/0x418
[  520.545915]  ? __lock_acquire+0x5d7/0x4320
[  520.550226]  ? __kasan_kmalloc.part.0+0x53/0xc0
[  520.554887]  ? kmem_cache_alloc+0xee/0x360
[  520.561637]  ? __debug_object_init+0x5ad/0x7d0
[  520.566205]  ? perf_trace_run_bpf_submit+0x113/0x170
[  520.572707]  perf_trace_run_bpf_submit+0x113/0x170
[  520.577627]  perf_trace_lock_acquire+0x341/0x4e0
[  520.582659]  ? HARDIRQ_verbose+0x10/0x10
[  520.588230]  ? do_syscall_64+0x19b/0x520
[  520.593075]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  520.598536]  lock_acquire+0x279/0x360
[  520.602326]  ? __debug_object_init+0x1d2/0x7d0
[  520.606892]  _raw_spin_lock+0x2a/0x40
[  520.610674]  ? __debug_object_init+0x1d2/0x7d0
[  520.615236]  __debug_object_init+0x1d2/0x7d0
[  520.619634]  ? debug_object_free+0x2f0/0x2f0
[  520.624024]  ? ext4_alloc_inode+0x19/0x620
[  520.628326]  __init_work+0x3f/0x50
[  520.631847]  ext4_alloc_inode+0x443/0x620
[  520.635976]  ? ext4_sync_fs+0x7f0/0x7f0
[  520.639936]  alloc_inode+0x5f/0x180
[  520.643561]  new_inode_pseudo+0x14/0xe0
[  520.647513]  new_inode+0x1b/0x40
[  520.650861]  __ext4_new_inode+0x373/0x4850
[  520.655074]  ? trace_hardirqs_on_caller+0x37b/0x540
[  520.660072]  ? _raw_spin_unlock_irqrestore+0x41/0x70
[  520.665152]  ? __wake_up_common_lock+0xe0/0x170
[  520.669800]  ? ext4_free_inode+0x1270/0x1270
[  520.674204]  ? d_splice_alias+0x3f1/0xb40
[  520.678416]  ? lock_downgrade+0x630/0x630
[  520.682540]  ? lock_acquire+0x12b/0x360
[  520.686496]  ? inode_get_rsv_space.part.0+0x100/0x100
[  520.691665]  ? do_raw_spin_unlock+0x13f/0x220
[  520.696136]  ? _raw_spin_unlock+0x29/0x40
[  520.700265]  ext4_create+0x1e5/0x510
[  520.703972]  ? ext4_mknod+0x510/0x510
[  520.707765]  ? ext4_mknod+0x510/0x510
[  520.711548]  lookup_open+0xa74/0x1730
[  520.715607]  ? may_open.isra.0+0x280/0x280
[  520.719829]  path_openat+0xdd5/0x2be0
[  520.723615]  ? path_mountpoint+0x9a0/0x9a0
[  520.727842]  ? perf_trace_lock+0x11e/0x4e0
[  520.732064]  do_filp_open+0x1a1/0x280
[  520.735850]  ? may_open_dev+0xe0/0xe0
[  520.739637]  ? lock_downgrade+0x630/0x630
[  520.743764]  ? lock_acquire+0x12b/0x360
[  520.747719]  ? __alloc_fd+0x3f/0x490
[  520.751416]  ? do_raw_spin_unlock+0x13f/0x220
[  520.755890]  ? _raw_spin_unlock+0x29/0x40
[  520.760021]  ? __alloc_fd+0x1bf/0x490
[  520.763892]  do_sys_open+0x2ca/0x590
[  520.767675]  ? filp_open+0x60/0x60
[  520.771199]  ? do_clock_gettime+0xd0/0xd0
[  520.775323]  ? __fget_light+0x174/0x200
[  520.779553]  ? do_syscall_64+0x43/0x520
[  520.783512]  ? compat_SyS_openat+0x30/0x30
[  520.787729]  do_syscall_64+0x19b/0x520
[  520.791608]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  520.796791] RIP: 0033:0x45a679
[  520.799962] RSP: 002b:00007efdcb2bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  520.807652] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000045a679
[  520.815184] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000020000040
[  520.822453] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  520.831105] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efdcb2bf6d4
[  520.838396] R13: 00000000004c0f28 R14: 00000000004d4c40 R15: 00000000ffffffff
[  520.846264] 
[  520.847900] The buggy address belongs to the page:
[  520.852823] page:ffffea00068a21c0 count:0 mapcount:0 mapping:          (null) index:0x0
[  520.860943] flags: 0x4000000000000000()
[  520.865630] raw: 4000000000000000 0000000000000000 0000000000000000 00000000ffffffff
[  520.874893] raw: 0000000000000000 dead000000000200 0000000000000000 0000000000000000
[  520.883243] page dumped because: kasan: bad access detected
[  520.891915] 
[  520.893524] Memory state around the buggy address:
[  520.898454]  ffff8881a2887380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  520.905831]  ffff8881a2887400: 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 f1 f1 04
[  520.913290] >ffff8881a2887480: f2 00 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00
[  520.920639]                          ^
[  520.924608]  ffff8881a2887500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  520.932056]  ffff8881a2887580: 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 00 00 00
[  520.939490] ==================================================================
[  520.946829] Disabling lock debugging due to kernel taint
[  520.952269] Kernel panic - not syncing: panic_on_warn set ...
[  520.952269] 
[  520.959624] CPU: 1 PID: 7461 Comm: syz-executor.4 Tainted: G    B           4.14.157-syzkaller #0
[  520.968613] Call Trace:
[  520.971191]  dump_stack+0xe5/0x154
[  520.974726]  panic+0x1f1/0x3da
[  520.977906]  ? add_taint.cold+0x16/0x16
[  520.981871]  ? lock_downgrade+0x630/0x630
[  520.986019]  ? unwind_next_frame+0x169f/0x1810
[  520.991111]  end_report+0x43/0x49
[  520.994638]  ? unwind_next_frame+0x169f/0x1810
[  520.999206]  __kasan_report.cold+0xd/0x41
[  521.003813]  ? unwind_next_frame+0x169f/0x1810
[  521.008476]  unwind_next_frame+0x169f/0x1810
[  521.012910]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  521.018271]  ? deref_stack_reg+0xe0/0xe0
[  521.022327]  ? perf_output_begin_forward+0x6f0/0xa50
[  521.027414]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  521.032761]  perf_callchain_kernel+0x3a0/0x540
[  521.037456]  ? bad_gs+0x23/0x1614
[  521.040895]  ? arch_perf_update_userpage+0x330/0x330
[  521.045990]  ? perf_output_copy+0x1d0/0x1d0
[  521.050327]  ? __debug_object_init+0x1d2/0x7d0
[  521.054908]  ? perf_swevent_overflow+0x5a/0xf0
[  521.059482]  ? check_preemption_disabled+0x35/0x1f0
[  521.064483]  get_perf_callchain+0x2f5/0x770
[  521.068795]  ? put_callchain_buffers+0x60/0x60
[  521.073574]  ? __task_pid_nr_ns+0x1ea/0x450
[  521.077879]  perf_callchain+0x147/0x190
[  521.081855]  perf_prepare_sample+0x6a8/0x1360
[  521.086340]  ? perf_event_output_forward+0x12f/0x220
[  521.091427]  ? perf_output_sample+0x1700/0x1700
[  521.096080]  ? get_perf_callchain+0x58b/0x770
[  521.100561]  perf_event_output_forward+0xdc/0x220
[  521.105397]  ? perf_prepare_sample+0x1360/0x1360
[  521.110136]  ? lock_acquire+0x279/0x360
[  521.114442]  ? __task_pid_nr_ns+0x1ea/0x450
[  521.118759]  ? perf_callchain+0x147/0x190
[  521.122891]  ? perf_callchain+0x150/0x190
[  521.127030]  ? check_preemption_disabled+0x35/0x1f0
[  521.132031]  __perf_event_overflow+0x12d/0x340
[  521.136617]  perf_swevent_overflow+0x7a/0xf0
[  521.141023]  perf_swevent_event+0x19c/0x270
[  521.145331]  perf_tp_event+0x633/0x7f0
[  521.149379]  ? perf_swevent_put_recursion_context+0xa0/0xa0
[  521.155882]  ? HARDIRQ_verbose+0x10/0x10
[  521.160038]  ? lock_acquire+0x279/0x360
[  521.164083]  ? __free_insn_slot+0x490/0x490
[  521.168386]  ? check_preemption_disabled+0x35/0x1f0
[  521.173664]  ? __is_insn_slot_addr+0x130/0x1e0
[  521.178230]  ? kernel_text_address+0xfe/0x120
[  521.182705]  ? __kernel_text_address+0x9/0x30
[  521.187184]  ? unwind_get_return_address+0x51/0x90
[  521.192112]  ? __save_stack_trace+0x8a/0xf0
[  521.196429]  ? depot_save_stack+0x11d/0x418
[  521.200743]  ? __lock_acquire+0x5d7/0x4320
[  521.204960]  ? __kasan_kmalloc.part.0+0x53/0xc0
[  521.209639]  ? kmem_cache_alloc+0xee/0x360
[  521.213857]  ? __debug_object_init+0x5ad/0x7d0
[  521.218438]  ? perf_trace_run_bpf_submit+0x113/0x170
[  521.223528]  perf_trace_run_bpf_submit+0x113/0x170
[  521.228452]  perf_trace_lock_acquire+0x341/0x4e0
[  521.233194]  ? HARDIRQ_verbose+0x10/0x10
[  521.237585]  ? do_syscall_64+0x19b/0x520
[  521.241635]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  521.246996]  lock_acquire+0x279/0x360
[  521.250870]  ? __debug_object_init+0x1d2/0x7d0
[  521.255438]  _raw_spin_lock+0x2a/0x40
[  521.259235]  ? __debug_object_init+0x1d2/0x7d0
[  521.263810]  __debug_object_init+0x1d2/0x7d0
[  521.268204]  ? debug_object_free+0x2f0/0x2f0
[  521.272595]  ? ext4_alloc_inode+0x19/0x620
[  521.276826]  __init_work+0x3f/0x50
[  521.280445]  ext4_alloc_inode+0x443/0x620
[  521.284575]  ? ext4_sync_fs+0x7f0/0x7f0
[  521.288542]  alloc_inode+0x5f/0x180
[  521.292153]  new_inode_pseudo+0x14/0xe0
[  521.296123]  new_inode+0x1b/0x40
[  521.299477]  __ext4_new_inode+0x373/0x4850
[  521.303812]  ? trace_hardirqs_on_caller+0x37b/0x540
[  521.308815]  ? _raw_spin_unlock_irqrestore+0x41/0x70
[  521.313913]  ? __wake_up_common_lock+0xe0/0x170
[  521.318569]  ? ext4_free_inode+0x1270/0x1270
[  521.322970]  ? d_splice_alias+0x3f1/0xb40
[  521.327121]  ? lock_downgrade+0x630/0x630
[  521.331254]  ? lock_acquire+0x12b/0x360
[  521.335220]  ? inode_get_rsv_space.part.0+0x100/0x100
[  521.340401]  ? do_raw_spin_unlock+0x13f/0x220
[  521.345402]  ? _raw_spin_unlock+0x29/0x40
[  521.349555]  ext4_create+0x1e5/0x510
[  521.353973]  ? ext4_mknod+0x510/0x510
[  521.357761]  ? ext4_mknod+0x510/0x510
[  521.361602]  lookup_open+0xa74/0x1730
[  521.365401]  ? may_open.isra.0+0x280/0x280
[  521.369626]  path_openat+0xdd5/0x2be0
[  521.373411]  ? path_mountpoint+0x9a0/0x9a0
[  521.377657]  ? perf_trace_lock+0x11e/0x4e0
[  521.382069]  do_filp_open+0x1a1/0x280
[  521.385878]  ? may_open_dev+0xe0/0xe0
[  521.389661]  ? lock_downgrade+0x630/0x630
[  521.393800]  ? lock_acquire+0x12b/0x360
[  521.397758]  ? __alloc_fd+0x3f/0x490
[  521.401454]  ? do_raw_spin_unlock+0x13f/0x220
[  521.405937]  ? _raw_spin_unlock+0x29/0x40
[  521.410513]  ? __alloc_fd+0x1bf/0x490
[  521.414300]  do_sys_open+0x2ca/0x590
[  521.418008]  ? filp_open+0x60/0x60
[  521.421544]  ? do_clock_gettime+0xd0/0xd0
[  521.425675]  ? __fget_light+0x174/0x200
[  521.429643]  ? do_syscall_64+0x43/0x520
[  521.433604]  ? compat_SyS_openat+0x30/0x30
[  521.437823]  do_syscall_64+0x19b/0x520
[  521.441702]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  521.446881] RIP: 0033:0x45a679
[  521.450057] RSP: 002b:00007efdcb2bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  521.457850] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000045a679
[  521.465105] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000020000040
[  521.472377] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  521.479627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efdcb2bf6d4
[  521.486882] R13: 00000000004c0f28 R14: 00000000004d4c40 R15: 00000000ffffffff
[  521.494817] Kernel Offset: 0x10400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[  521.505730] Rebooting in 86400 seconds..