fffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0xcc) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[@ANYPTR64], 0x8) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xae15, 0x1000000d8c}) write$cgroup_pid(r2, &(0x7f0000000000), 0xfffffea6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x4}) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000180)={0x9, 0x7}) 03:49:34 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:34 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0xe607ab8181fe0fa2, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x1400000014, 0x0, &(0x7f0000000040)) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000100)={0xd, 0x8, {0xf612597e8db84b0c, 0x3, 0x0, {0x6, 0x5}, {0x0, 0x9}, @rumble={0x290, 0x200}}, {0x57, 0x5, 0xffffffffffffffbc, {0xffffffff80000000, 0x1}, {0x3, 0x8}, @cond=[{0x4, 0xd0, 0x4, 0x9, 0x1, 0xfff}, {0x7ff, 0x8, 0xbe, 0x2da, 0xfff, 0x6d2e}]}}) 03:49:34 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = accept(r0, &(0x7f0000000200), &(0x7f0000000280)=0x80) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000001c0)={@remote, 0x63, r2}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7f, &(0x7f0000000080)) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x100, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0xff, 0x100000000000001}, 0x20) [ 1660.171470] binder: BINDER_SET_CONTEXT_MGR already set [ 1660.189981] binder: 20019:20021 ioctl 40046207 0 returned -16 03:49:34 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1660.240397] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space 03:49:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = creat(&(0x7f00000000c0)='./file1/file0\x00', 0x10) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000100)={0x40, 0x479b}) creat(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x200) link(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file1/file0\x00') [ 1660.240405] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1660.240433] binder: 20019:20037 transaction failed 29201/-28, size 24-8 line 3136 03:49:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000280)=""/13, 0xd}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/114, 0x72}, {&(0x7f0000000480)=""/244, 0xf4}], 0x5, &(0x7f0000000580)=""/1, 0x1}, 0x2000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x2, 0x0, 0x8000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfec9, 0x5, 0x4d, 0x10001, 0x9, 0x7a10, 0xde, 0xbc0c, 0x0, 0x80, 0x9, 0x200, 0x7, 0x101, 0x8, 0x9, 0xffffffff, 0x0, 0x7, 0x7ff, 0xc3d3, 0x1, 0xc5, 0x4a, 0x8, 0xb8f, 0x0, 0x5, 0x5, @perf_bp={0x0}, 0x10080, 0x8, 0x0, 0x5, 0xfffffffffffffff8, 0x9d, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x8) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) [ 1660.246368] binder: 20019:20037 Release 1 refcount change on invalid ref 1 ret -22 [ 1660.312398] binder: 20019:20040 BC_ACQUIRE_DONE u0000000000000000 no match 03:49:34 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setfsuid(r1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0xbf, @multicast2, 0x4e24, 0x2, 'nq\x00', 0x1, 0xff, 0x19}, 0x2c) 03:49:34 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8004002, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) sendfile(r1, r1, &(0x7f0000000140), 0x8800000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCCBRK(r0, 0x5428) unshare(0x40000200) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000180)='/usr/sbin/ntpd\x00', 0xf, 0x4fadf3c306df9014) syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x6, 0x2000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 03:49:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:49:34 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:34 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r1, 0x6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x37) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x660200, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x5, 0x37}) sched_setparam(r2, &(0x7f0000000000)=0x8) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) 03:49:34 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f0000000640)=""/4096, &(0x7f0000000400)=0x1000) r3 = add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000280)="6b188f6835f41775f6ca13a7a0702845e9ac9a73b1c73d6292509b5e4ffe1fd784e4e1b2d4c2846585efba401d8acbc47c48a7bb0e9e1a95091718a49034c73497ac6ca3901cd0849cbb249f51ca51ac704c088a427e05c4e0d440f3f548528992f77c5eb8511608af3231", 0x6b, 0xfffffffffffffff8) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x4, 0x9, 0x1}) add_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffcd3, r3) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/241, 0xf1}], 0x1) add_key(&(0x7f0000000380)='.dead\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) writev(r2, &(0x7f0000000000), 0x0) add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r3) 03:49:35 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:35 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:35 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1661.223563] binder: BINDER_SET_CONTEXT_MGR already set [ 1661.229195] binder: 20068:20079 ioctl 40046207 0 returned -16 03:49:35 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'mangle\x00'}, &(0x7f0000000100)=0x54) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) [ 1661.266318] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1661.317656] binder: 20068:20086 Release 1 refcount change on invalid ref 1 ret -22 [ 1661.373795] binder: 20068:20089 BC_ACQUIRE_DONE u0000000000000000 no match [ 1661.410695] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1661.445521] binder: 20068:20079 transaction failed 29201/-28, size 24-8 line 3136 03:49:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000080)={'bpq0\x00', &(0x7f0000000000)=ANY=[]}) 03:49:45 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:49:45 executing program 1: r0 = socket(0x10, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0xfffffffffffffffd, &(0x7f0000000200)={'ip_vti0\x00', @ifru_data=&(0x7f0000000040)="635e9537d475cf912822b8b3532ee1cf3be4469deb510465c9eb58cbd8641d57"}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2) creat(&(0x7f0000000180)='./file0\x00', 0x4) 03:49:45 executing program 0: restart_syscall() r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00020024000100000000000000000000819765767fdf00000008000400f0000000"], 0x1c}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8000, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000180)={{0x3f, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x1, 'wrr\x00', 0x8, 0xc68, 0x3d}, {@broadcast, 0x4e21, 0x4, 0x8, 0x8, 0x5}}, 0x44) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x3ff, 0x0, 0x36, 0x7}, {0x83, 0x5, 0x3e5, 0x8001}, {0x80000001, 0x100000001, 0x1, 0x1}, {0x7ff, 0x8, 0x95e}, {0x5, 0x9, 0x0, 0xffffffff}]}, 0x10) 03:49:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x201, 0x0, 0x0, {{@in6=@ipv4={[], [], @initdev}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in=@remote}, 0x0, @in6=@local, 0x0, 0x7}]}]}, 0xfc}}, 0x0) r1 = socket(0x1b, 0x800, 0xffff) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000000)={@dev, 0x0}, &(0x7f0000000040)=0x14) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000640), 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000180)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@loopback, 0x4e24, 0x594, 0x4e20, 0x8, 0xa, 0xa0, 0x20, 0x0, r2, r3}, {0x5, 0x7, 0x7, 0x0, 0x5, 0x3, 0x8, 0x7}, {0x35, 0xd0, 0x6, 0x2}, 0x0, 0x6e6bbd, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x4, 0x0, 0xcc2e, 0x6, 0x0, 0x1000}}, 0xe8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x206000, 0x0) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000440)) getsockname(r1, &(0x7f0000000580)=@sco, &(0x7f0000000600)=0x80) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r4, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4844}, 0x20000804) 03:49:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00\x00\x00\x00\xca\xa3\xa0M\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="dbc62e4b69c68400aab184f6d660884ec78385c86b99907f7f6095075e7ab10493b8b343895f4f652e415a9f900d49c2a8c8db995fd9f0bc8c16bff77f4b66354740f07e49977f06f9bdd8fe8a1172500472e6b5"]}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000080)={'\x00', 0x6}) 03:49:45 executing program 0: r0 = gettid() clone(0x3ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x120, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1a}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xffffffff80000000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x14e623b7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x120}, 0x1, 0x0, 0x0, 0x41}, 0x4000004) wait4(0x0, 0x0, 0x0, 0x0) 03:49:45 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000001080)={0x78, 0x0, 0x8, [{0x4, 0x2, 0x7, 0xfffffffffffffff7, 'lowlan0'}, {0x3, 0x4, 0x17, 0x9, 'net/ip6_tables_matches\x00'}, {0x6, 0x9, 0x0, 0x100}]}, 0x78) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') readv(r1, &(0x7f0000002340)=[{&(0x7f0000000080)=""/4096, 0xffffff5c}], 0x100000000000012d) readv(r1, &(0x7f0000000580), 0x3c1) [ 1671.295558] audit_printk_skb: 90 callbacks suppressed 03:49:45 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1671.295570] audit: type=1400 audit(2000000985.350:7674): avc: denied { create } for pid=20252 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:49:45 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') exit(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x51, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x10, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x10000, 0x192) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x1) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) clone(0xfffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x40000004001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) [ 1671.425639] audit: type=1400 audit(2000000985.480:7675): avc: denied { map_create } for pid=20272 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 03:49:45 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000002c0)="0adc1f123c123f3188b070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x101, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000140)=r3) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f0000c5000000030000000000000200010000000000000000020000000005000500000000000a00000000000000ff1700000000000000100000000000170000000000000000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000002, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000240)={0x1}) [ 1671.429478] binder: BINDER_SET_CONTEXT_MGR already set [ 1671.429519] binder: 20253:20270 ioctl 40046207 0 returned -16 [ 1671.464799] audit: type=1400 audit(2000000985.500:7676): avc: denied { call } for pid=20253 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1671.472119] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1671.472169] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1671.472483] binder: 20253:20270 transaction failed 29201/-28, size 24-8 line 3136 [ 1671.486119] binder: 20253:20270 Release 1 refcount change on invalid ref 1 ret -22 [ 1671.552897] binder: 20253:20286 BC_ACQUIRE_DONE u0000000000000000 no match [ 1671.572375] audit: type=1400 audit(2000000985.600:7677): avc: denied { create } for pid=20253 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1671.657985] audit: type=1400 audit(2000000985.680:7678): avc: denied { write } for pid=20253 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:49:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:49:46 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40080, 0x0) write$UHID_INPUT2(r1, &(0x7f00000002c0)={0xc, 0x5a, "4ec0cbf2ec6526cd3222a5a3505f38d0e784fcb5e2bfeaa2c815fb58ea711b4cfbbe85c07978861d921c08f90ab258793ddffcc06a09a4679da95b6f2e39bedbbba12e5f77b7f0707669d8f228bbc1054ccefe6a22460f144df0"}, 0x60) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x7fffffff, @ipv4={[], [], @loopback}, 0x3}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0x80, 0xa, 0x7, 0x2, 0x8}, 0xd) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) r3 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000340)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) setsockopt(r0, 0x101, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = getpid() syz_open_procfs$namespace(r5, &(0x7f00000001c0)='ns/mnt\x00') inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x2000000) sendmsg$nl_netfilter(r4, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000301ffff0000000000000004006222e87300c3e52df4749c7fc8150000000000080008007636"], 0x2a}}, 0x0) socket$inet6(0xa, 0x3, 0x100000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) [ 1671.880712] audit: type=1400 audit(2000000985.900:7679): avc: denied { read } for pid=20253 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1672.034472] audit: type=1400 audit(2000000986.090:7680): avc: denied { create } for pid=20252 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1672.035165] audit: type=1400 audit(2000000986.090:7681): avc: denied { write } for pid=20252 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1672.257570] audit: type=1400 audit(2000000986.310:7682): avc: denied { create } for pid=20311 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 03:49:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x11) sendto$inet(r0, 0x0, 0xffffffe3, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = open(&(0x7f0000000280)='./file0\x00', 0x20440, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@ipv4={[], [], @loopback}, 0x0, 0x0, 0xff, 0x9, 0x1, 0x1}, &(0x7f0000000300)=0x20) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00'}, &(0x7f00000003c0)=0x44) sendto$inet(r0, &(0x7f0000000000)='I', 0x1, 0x4007ffd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0xded, 0x4) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000000180)="46df4811d47432d02c06cb9f1554555cd7d448292e2892deabb2975df08a90a6da1dabd026984dad4efe98b27b32e3f453797129acb838a71b141c4e55c8ca76b05d6136132d5003b3474088300835b6c351b478a42247384329257c36b3fa334302797632f1b3a076a689cbbb73e672bdb9445662353ed47c348e56ca565b5d012fd2ef4d3f0f77facfd4543f2378e9e2c43fc6bd38186c4f9efa92c39390ee13a96ff126c4c9ff9550547ee3d66603569f426a8efc1255b8cd21c5b11dac97c737e906209b15e0a4b8bb26369f921225fa28ca0e8e4ffc55a3517a9bd5f0620822536e9b8c4c73feb96de3cc", 0xed) sendto$inet(r0, &(0x7f00000000c0)="ed", 0x1, 0x44091, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000400)={0x0, @speck128}) 03:49:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @rand_addr="ffd6f1b9201348544de96b337da295b8", 0x100}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 03:49:46 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x102) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000200)="932e224f992c29618d2029758de965e787d1ba993bdeaaf6d12b3371a35a047c848db118d6af0f789ef566e7603ba60980ffbebfaa3695dca058426fb7a3033a24d310ff2d4fbd104e7aa160b5ad1a7711c79f459e124d1ffe613032b3bf0e0008160ef9064dc648dd824e6e4b4f7551d56c76df47ceb72ad4c91baf512b4c8836c36bad3f80fb3d455195e8e6817de125d11bcc41c936d9494552cd1ea51fdd2c7433c92efc5eb6e5568fec1957c825c17b5880fa5f563f7b1235ee95fb3c43325cb9e2f78a849867620f332c0315", 0xcf) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x730, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x5e}]}, 0x28}}, 0x20000000) setrlimit(0x7, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x4, 0x4, 0x7fff, 0x0, 0x0}, 0x2c) 03:49:46 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1672.465730] binder: BINDER_SET_CONTEXT_MGR already set [ 1672.471061] binder: 20316:20324 ioctl 40046207 0 returned -16 [ 1672.520213] audit: type=1400 audit(2000000986.570:7683): avc: denied { call } for pid=20316 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 03:49:46 executing program 1: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00@\x00', 0x101}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$VT_RELDISP(r1, 0x5605) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r1, 0x0, 0x1, 0x9, 0x401}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000200)) syz_open_pts(r1, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=""/35) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:49:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x3) epoll_create1(0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) getuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r2, 0x0, &(0x7f0000000180)={{r3, r4+10000000}, {r5, r6+30000000}}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 03:49:46 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000000080)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x180, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x2, 0x1, 0x1f48e040, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) 03:49:46 executing program 5: clone(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x1000004, &(0x7f0000000440)) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c004) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000100)='./file0\x00', 0x20141042, 0x1000000000000) sendfile(r1, r0, 0x0, 0x2008000fffffffe) 03:49:46 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1672.559690] binder: 20316:20338 Release 1 refcount change on invalid ref 1 ret -22 [ 1672.622795] binder: 20316:20345 BC_ACQUIRE_DONE u0000000000000000 no match [ 1672.780483] device lo entered promiscuous mode [ 1672.819481] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1672.857949] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1672.869224] device lo left promiscuous mode [ 1672.939182] binder: 20316:20324 transaction failed 29201/-28, size 24-8 line 3136 03:49:47 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="00022bbd7000fedbdf250300000028000200040004000800020001000054921801000300000008000100c581000008000200ffffffff68000100080003000000000044000400200001000a0067240000000000000000000000000000000000000001bc070000200002000a004e2200000006fe8000000000000000000000000000aa02000000100001007500400000000000000000000000000000000000e2704a02d1a26a48e6f31616261467e6da7fa66299ebc7e2f1f9239b68750b158e10ed30552422a33632cc22ea870c0e76686128e064692aabfe5b6f01b4a2f1d70dcb437a32a285a4c76965140ebc8cf37555da65c82656b8b63b3d2bc726414df48542e49aa7155d0ab8beaeb8a40a6fdce5ebafe6c80605071cb99f33ec5f56439368caf66fc28dc48a547a7570a134bef26a36defc8d692d8a0c0ece235d6d0f60a4c8b9426398df1529c6ddbb87fd9e789535d5d5c03733328153863777624d2d67b299293f7339cf5cb2cb4c7c95ebbf0c1272739b95a0"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:49:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x7ff) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184) 03:49:47 executing program 0: mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00^\xc5\x83\fW\xef\xd8\xa4:\xa0\t\xb5\x12\x04\xdc:\x00\xc2\xa4\xd8j\xd8~*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9b^\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\x01\"\xc8U0%\xa2X9\\\x92QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5B@5CZ=\xbbv\xc5}0xffffffffffffffff}) openat(r1, &(0x7f0000000440)='./file0/file0\x00', 0x60100, 0x8) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x80000000028) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000380)=""/65) getpid() ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000280)='./file0\x00', 0x8002, 0x88) getpeername$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c) ptrace$cont(0x1f, r0, 0x0, 0xb) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x440000, 0x0) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000240)={0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}]}) 03:49:47 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:49:47 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:47 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000f40)='/selinux/validatetrans\x00', 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0x4b) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000980)=""/4096, 0x1000) fchdir(r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="10072cbd7080fcdbdf25050000001c000200080004000100000008000b0002000000080006000300000054000200080002004e24000008000600560002004e20000008000400ff010000080002004e2200000800030001ff01000008000600000800000800090003000000140001000800010000000000080009002f00000028000200080003000300000014000100fe8000000000000000000000000000aa080004000500000000000000000000000000000000000000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0x1) sendfile(r0, r1, &(0x7f00000002c0), 0x1) creat(&(0x7f00000007c0)='./file0\x00', 0x0) [ 1673.315129] binder: BINDER_SET_CONTEXT_MGR already set [ 1673.342572] binder: 20375:20387 ioctl 40046207 0 returned -16 [ 1673.391336] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1673.391345] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1673.391370] binder: 20375:20393 transaction failed 29201/-28, size 24-8 line 3136 [ 1673.404149] binder: 20375:20393 Release 1 refcount change on invalid ref 1 ret -22 [ 1673.436647] device lo entered promiscuous mode [ 1673.522958] binder: 20375:20401 BC_ACQUIRE_DONE u0000000000000000 no match [ 1673.554760] device lo left promiscuous mode 03:49:47 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:auditd_etc_t:s0\x00', 0x22, 0x2) 03:49:47 executing program 5: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00') setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.redirect\x00') 03:49:47 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:47 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) exit(0x3ff) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) lseek(r0, 0x400000000000, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") 03:49:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:49:48 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:48 executing program 5: r0 = socket(0x10, 0x2, 0x0) r1 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="c26559f49e38792261dc55f01604a379b923c9608a4d07ec5370bd1046bbc8ca85429198bae4a988e0f082a3388edff0110307e363dee69d5358b2f186555e04ad3d1a2836291e2a5172fc3ff9bdc40cf483dab84ffdec1ba63db97817a656e24f5b77482e3720f6d8ed17f919d8d4ec40577a5cb6a300241b40172a8e8c9a868b9f1f093cac5020d5b0e44961117a5901929a466bee84898c1a2be96b98a232b28691d2222f953013dfc7849062a47b425f9170d0282830ee151fd28585881bb0453beae6fd3b44fe7bbe2d7c2137bd36fe33562482ca2b7a", 0xd9, 0xfffffffffffffff8) keyctl$get_keyring_id(0x0, r1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev, @in=@local}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000040)="872a6d3445120c0608605abcba31b1bbd4278913bddb4fde279c1c254ec8d16f8c3c99437be7ec6d5915ec7f2994025b01106f46255b661a3c720393b6df0e00f665b9449484a279e45ed1e09c81361db9b3f81ad29ca7fc8159210d9c4d039890ee5620b615a505b4ac752eceffa3d3bea65b117a101de3056f1deb65c78f50b660bcbc18f3d03ffd049e1a0986a894b6926b0f4ffac1c114c253b98f770e69187d7f2638be526d3131f74996b00541634b80c6d0f213044eb37ef77dbc29ed4dc1d64c3c83") ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000880)={0x80fb, 0x3}) setuid(r2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x3b0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x3, &(0x7f0000000280), {[{{@ipv6={@empty, @rand_addr="2497bba7ca56e0b6b3489d652785f748", [0x0, 0xff000000, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'ip6erspan0\x00', 'nlmon0\x00', {0xff}, {}, 0x3f, 0xdb6, 0x2, 0x12}, 0x0, 0x140, 0x188, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}, @common=@inet=@multiport={0x50, 'multiport\x00', 0x1, {0x1, 0x0, [0x4e21, 0x4e20, 0x4e23, 0x4e21, 0x4e20, 0x4e24, 0x4e24, 0x4e23, 0x4e21, 0x4e22, 0x4e22, 0x4e24, 0x4e22, 0x4e21, 0x4e21], [0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x80, 0x6, 0x0, 'pptp\x00', 0x6}}}, {{@ipv6={@local, @loopback, [0xff, 0xffffffff, 0xffffffff, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xff000000], 'rose0\x00', 'rose0\x00', {0xff}, {0xff}, 0x2f, 0x8001, 0x1, 0x41}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@limit={0x48, 'limit\x00', 0x0, {0x8001, 0x0, 0xfff, 0x2, 0x2, 0x1, 0x100}}, @common=@eui64={0x28, 'eui64\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) setgid(r3) 03:49:48 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="00022bbd7000fedbdf250300000028000200040004000800020001000054921801000300000008000100c581000008000200ffffffff68000100080003000000000044000400200001000a0067240000000000000000000000000000000000000001bc070000200002000a004e2200000006fe8000000000000000000000000000aa02000000100001007500400000000000000000000000000000000000e2704a02d1a26a48e6f31616261467e6da7fa66299ebc7e2f1f9239b68750b158e10ed30552422a33632cc22ea870c0e76686128e064692aabfe5b6f01b4a2f1d70dcb437a32a285a4c76965140ebc8cf37555da65c82656b8b63b3d2bc726414df48542e49aa7155d0ab8beaeb8a40a6fdce5ebafe6c80605071cb99f33ec5f56439368caf66fc28dc48a547a7570a134bef26a36defc8d692d8a0c0ece235d6d0f60a4c8b9426398df1529c6ddbb87fd9e789535d5d5c03733328153863777624d2d67b299293f7339cf5cb2cb4c7c95ebbf0c1272739b95a0"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:49:48 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:48 executing program 5: r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0x810, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'syz_tun\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r4, 0x400, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xd, 0xd66, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}}, 0x40000) 03:49:48 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) [ 1674.309961] binder: BINDER_SET_CONTEXT_MGR already set [ 1674.346690] binder: 20434:20446 ioctl 40046207 0 returned -16 [ 1674.389615] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1674.400812] binder: 20434:20440 Release 1 refcount change on invalid ref 1 ret -22 [ 1674.447789] binder: 20434:20446 BC_ACQUIRE_DONE u0000000000000000 no match [ 1674.566775] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) 03:49:48 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000040)=""/8, 0x1}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x0, 0xc, 0x0, 0x10001}}) 03:49:48 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000680)={'ip6gretap0\x00', 0x1000e803}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pread64(r0, &(0x7f00000000c0), 0x0, 0x0) ftruncate(r5, 0x2007fff) sendfile(r2, r5, 0x0, 0x800000000024) r6 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r7, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r8}], 0x200000000000004e, 0xffffffffffbffff8) dup2(r7, r8) fcntl$setown(r8, 0x8, r6) tkill(r6, 0x16) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r9, 0x29, 0x33, 0x0, &(0x7f0000001000)) getsockopt$inet6_opts(r9, 0x29, 0x37, &(0x7f0000000000)=""/214, &(0x7f0000000100)=0xd6) [ 1674.609203] binder: 20434:20436 transaction failed 29201/-28, size 24-8 line 3136 03:49:48 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000600000000000000000105000600200000000a00000000000001576a60e77fa48e0000001f00000000e500250000000000000200010000000000000000000000628905000500000000000a00000000731f65000000ff17ffe4000000000000000000001117000000000006"], 0x81}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5473, &(0x7f0000000240)=0x3044) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x7}, 0x248) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x140) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000200)={0x80, 0x9, 0x10000, 0x0, 0x22df}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6tnl0\x00', 0x10) sendto$inet(r2, &(0x7f0000000140)="ba622127b16e0875a53c8d3b2b85afaf41da7136d9d0b8ba187fb8f2bbd75689626fc7505fecce9a48d5624f48ca6aac61cd4bd0eaa380254bc8a5ac9622497bcc36bbfd4325c2cce57f438319e1c21f461588f5829e4466a4402522defdfffad996156c2a51c7e3b7f1a4830374a61d10abbaec7931022d8a2c5bfce04fc69c5104d1f3", 0x84, 0x4000000000, 0x0, 0x0) shutdown(r2, 0x1) 03:49:48 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) mknod(&(0x7f00000000c0)='./file0\x00', 0xc000, 0x3) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180), 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000012, 0x400000000007fffc, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00\x00\x00\x00\x00\x17\x00\x00\x00\x00\x00\x00\x00\x18', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 03:49:48 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:48 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:48 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:49:48 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:49 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x2000, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c12a41d88b070") pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000ec0)='a', 0x1}], 0x1) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x501040, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r5, 0x110, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x30}}, 0x0) splice(r1, 0x0, r3, 0x0, 0xe212, 0x0) 03:49:49 executing program 1: set_thread_area(&(0x7f0000000000)={0x0, 0x100000, 0x0, 0xfffffffffffffff9, 0x4, 0x1, 0x8, 0xfffffffffffffffc, 0x9100, 0xf0}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x80, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x8, 0xfffffffffffffffd, 0x0, 0xfff, 0x0, 0x7, 0x0, 0xe, 0x7, 0x26b4, 0xfffe000000000, 0x20, 0x1000, 0x7, 0xcc0000000, 0x7fffffff, 0xfff, 0x9, 0xff, 0x0, 0x8, 0x9, 0x4, 0x3, 0x4, 0x4, 0xffffffffffffffff, 0x3, 0xffffffff, 0x7, 0x2, 0xfff, 0xffffffff, 0x4, 0x9, 0x46f, 0x0, 0x1, 0x1, @perf_config_ext={0x80000001, 0x8}, 0x10002, 0x5, 0x200, 0x8, 0x9, 0x8, 0x3}, 0x0, 0xe, 0xffffffffffffffff, 0x8) poll(&(0x7f0000000140)=[{r0, 0x2000}, {r2, 0x1300}, {r3, 0x1000}], 0x3, 0x7f) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000180)) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/4096, 0x1000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0x88, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc040}, 0x8000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000013c0)=0x0) r6 = geteuid() getgroups(0x1, &(0x7f0000001480)=[0xee01]) mount$fuse(0x0, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='fuse\x00', 0x10418, &(0x7f00000014c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@blksize={'blksize'}}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x7fffffff}}], [{@subj_user={'subj_user', 0x3d, 'selinux'}}]}}) clock_gettime(0x0, &(0x7f0000001600)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f0000001640)={{r8, r9+10000000}}, &(0x7f0000001680)) pipe2$9p(&(0x7f00000016c0), 0x800) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000001700)) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000001740)=""/198) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000001840)={'ip6gretap0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) getpriority(0x1, r5) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000001880)=""/4096) epoll_wait(r2, &(0x7f0000002880)=[{}], 0x1, 0xfffffffffffffff9) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000028c0)={{{@in=@remote, @in=@broadcast}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000029c0)=0xe8) fsetxattr(r2, &(0x7f0000002a00)=@random={'os2.', 'fuse\x00'}, &(0x7f0000002a40)='default_permissions', 0x13, 0x2) fcntl$setstatus(r1, 0x4, 0x40000) clock_gettime(0x0, &(0x7f0000002a80)) r10 = add_key$user(&(0x7f0000002ac0)='user\x00', &(0x7f0000002b00)={'syz', 0x1}, &(0x7f0000002b40)="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", 0x1000, 0xfffffffffffffffb) r11 = request_key(&(0x7f0000003b40)='pkcs7_test\x00', &(0x7f0000003b80)={'syz', 0x0}, &(0x7f0000003bc0)='user_id', 0xfffffffffffffff8) keyctl$link(0x8, r10, r11) 03:49:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, 0x0, 0x0) 03:49:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, 0x0, 0x0) [ 1675.210954] binder: BINDER_SET_CONTEXT_MGR already set [ 1675.217028] binder: 20489:20498 ioctl 40046207 0 returned -16 [ 1675.241814] binder: 20489:20498 Release 1 refcount change on invalid ref 1 ret -22 [ 1675.334974] binder: 20489:20498 BC_ACQUIRE_DONE u0000000000000000 no match [ 1675.510809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20487 comm=syz-executor.5 [ 1675.533021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20487 comm=syz-executor.5 [ 1675.560261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20487 comm=syz-executor.5 [ 1675.586282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20487 comm=syz-executor.5 [ 1675.616468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20487 comm=syz-executor.5 [ 1675.642456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20487 comm=syz-executor.5 [ 1675.668075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20487 comm=syz-executor.5 [ 1675.693674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20487 comm=syz-executor.5 [ 1675.718024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20487 comm=syz-executor.5 [ 1675.754207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20487 comm=syz-executor.5 03:49:51 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000003500)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = dup(r0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x210000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r1, r2, 0x0, 0x1}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/sockcreate\x00') preadv(r3, &(0x7f00000017c0), 0x1fe, 0x0) 03:49:51 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 03:49:51 executing program 1: mlockall(0x3) r0 = getpgrp(0xffffffffffffffff) wait4(r0, &(0x7f0000000000), 0x80000000, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) unlinkat(r1, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') syz_genetlink_get_family_id$SEG6(&(0x7f0000000400)='SEG6\x00') r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x60000, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0)='TIPCv2\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="e8a742da", @ANYRES16=r2, @ANYBLOB="08082a050000000000000008000500fed77ba5fd1442388419ff33b93fd23a889841194459a6ffff180053afd35d8d6ce40736bd1701000c0006006e6f6e650000000000000200000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 03:49:51 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x10) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000300)=""/175) write$nbd(r1, &(0x7f0000000480)={0x67446698, 0x0, 0x2, 0x1, 0x2, "6b42c8f2f92fb05345fc7671de520c12159c434e104362a5857cfd5a357cc0f7e0207f94654fa1d0861461b6ba0100526b37eaea783b1a449ed25edb01f23f3c59cc904e53afeeee52ab1e428a120713880a427b6c15ccec1f07a5294d306631277aeaa8ab398def0c0b0a39b207124af46ef46c12d7017d6950fcfbeaedf763022aae594b80cff73a17a237d04a4025dac04e4e4e4f90e8f5519e63764990292b085e0f4895ed107a"}, 0xb9) fcntl$setstatus(r1, 0x4, 0x4c00) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, 0x0, 0x400000000000) connect(r1, &(0x7f0000000240)=@x25={0x9, @remote={[], 0x1}}, 0x80) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) socket$inet6(0xa, 0x80006, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) write$P9_RFLUSH(r4, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000600)='security.evm\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) write$P9_RSTATu(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="564de9", @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESHEX=r3, @ANYRES32=r0, @ANYBLOB="fee3252019b4c7e9ccaecd215daa0f42ded1933dab098bacce5d359951cbd39f6826c547a51023eaa834df9aa2cf3d5386800e58ec86dcbad1356e10da8f9470f2d6d12acc120e22469d7b51c988e7f5e2", @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR, @ANYRESHEX=r5, @ANYRESDEC=r5], @ANYRESDEC=r0, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYPTR, @ANYRES64=r3]], @ANYRES64=0x0, @ANYRESHEX=r5], 0x57) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2000000, 0x45010, r1, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffc1d}]) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x4000, 0x0) write$P9_RREAD(r6, &(0x7f0000000640)={0x56, 0x75, 0x2, {0x4b, "f5b5a20c8716878b93fe0a94f33767555be180c010b327a2c87ee7feb224eae2573a3ce2e5edbea01bd3148c5fcd0274af8c99fdb80bfb3413bade7aec5b1ade404664c5633a4eef91131a"}}, 0x56) 03:49:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:49:51 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, 0x0, 0x0) 03:49:52 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1678.059852] audit_printk_skb: 165 callbacks suppressed [ 1678.059912] audit: type=1400 audit(2000000992.100:7739): avc: denied { create } for pid=20522 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:49:52 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:49:52 executing program 5: symlink(&(0x7f00000001c0)='./file0/file0\x00', 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setpriority(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) write$P9_RMKNOD(r4, 0x0, 0x0) fstat(r2, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'lo\x00@\x00', 0x101}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000140)={@empty, @multicast1, 0x0}, &(0x7f0000000200)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) accept4$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'irlan0\x00', 0x0}) recvmsg(r4, &(0x7f0000000c00)={&(0x7f00000005c0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/147, 0x93}, {&(0x7f00000007c0)=""/14, 0xe}, {&(0x7f0000000800)=""/86, 0x56}, {&(0x7f0000000880)=""/234, 0xea}, {&(0x7f0000000980)=""/97, 0x61}, {&(0x7f0000000a00)=""/31, 0x1f}, {&(0x7f0000000a40)=""/64, 0x40}, {&(0x7f0000000a80)=""/175, 0xaf}], 0x9}, 0x40000001) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000f00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x248, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x22c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x1, 0xfc, 0x413, 0xbf}, {0x10000, 0x800, 0x1000, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xf06}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x248}}, 0x4000) dup(r3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00\x00\x00\x00\x00\x00\x00Jk\x00\r\x00'}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) [ 1678.100648] binder: BINDER_SET_CONTEXT_MGR already set 03:49:52 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1678.100672] binder: 20525:20530 ioctl 40046207 0 returned -16 [ 1678.190305] binder: 20525:20542 Release 1 refcount change on invalid ref 1 ret -22 [ 1678.190782] audit: type=1400 audit(2000000992.240:7741): avc: denied { create } for pid=20525 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:49:52 executing program 4: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0xffffffffffffffff) io_setup(0xfffffffffffffffc, &(0x7f0000000000)) io_setup(0x4, &(0x7f0000000080)=0x0) ioctl$TIOCNXCL(r0, 0x540d) sendfile(r1, r0, &(0x7f0000000040), 0xf62e) io_getevents(r2, 0x3c, 0x276, 0xfffffffffffffffd, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000587000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) r3 = dup3(r1, r1, 0x80000) r4 = inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x4) inotify_rm_watch(r3, r4) [ 1678.196228] audit: type=1400 audit(2000000992.240:7742): avc: denied { write } for pid=20525 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:49:52 executing program 3: r0 = socket$inet6(0xa, 0x400000000003, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'erspan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@ipv4={[], [], @multicast1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000680)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000006c0)={0x0, @empty, @local}, &(0x7f0000000700)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) getpeername$packet(r1, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) accept$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001c80)={0x0, @multicast1, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(r1, &(0x7f0000001d00)={0x11, 0x0, 0x0}, &(0x7f0000001d40)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000001d80)={@multicast2, @rand_addr, 0x0}, &(0x7f0000001dc0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001e00)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001f40)={0x0, @rand_addr, @empty}, &(0x7f0000001f80)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001fc0)={@empty, @local, 0x0}, &(0x7f0000002000)=0xc) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000002040)={@rand_addr, 0x0}, &(0x7f0000002080)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000020c0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002100)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000002200)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003600)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000003700)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003940)={{{@in6=@ipv4={[], [], @initdev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000003a40)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000005100)={@remote, 0x0}, &(0x7f0000005140)=0x14) accept4(r0, &(0x7f0000005180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005200)=0x80, 0x800) accept4$packet(r1, &(0x7f0000005240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005280)=0x14, 0x800) accept4$packet(r1, &(0x7f00000052c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005300)=0x14, 0x80800) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000005380)={@mcast1, 0x0}, &(0x7f00000053c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000005400)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000005500)={@multicast2, @broadcast, 0x0}, &(0x7f0000005540)=0xc) accept4(r0, &(0x7f0000005640)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000056c0)=0x80, 0x80000) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000006640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006600)={&(0x7f0000002240)=ANY=[@ANYBLOB="fc0e0000", @ANYRES16=r2, @ANYBLOB="01032bbd7000fddbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="3c00020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004007500000008000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="4c0202004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000800030003000000080004005adc7320a8218a8c2c1ef97d1b", @ANYRES32=r7, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000140004002000030101000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400050000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r11, @ANYBLOB="6401020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004008000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004001f00000008000100", @ANYRES32=r14, @ANYBLOB="840202003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="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", @ANYRES32=r16, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c6564000000000000000000000000000800030006000000041f0000000006002d1597355d592f3c802fe6073d21cfa938ace079a6870a9e917324e020889c213e7b0f7bdb19e3e49996bc002731de", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="0802020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040040b4000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r20, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r21, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000900000008000600fe4e8bfc1bf6198c7a33eb0267a6b8561df035ce661113ec0af630c7b12d9d26aee6c2809e177ef72b8482e979b105840c1037e2cfe8c29124c0ba965f3992ad3734d38b5c32b81e9922f589dce0c1b743817e59cb42bb6ba18000893f6fd49d2fbbd0b91616caefad386d2a2683a17f05f7000000000000000000000000000000", @ANYRES32=r22, @ANYBLOB="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", @ANYRES32=r23, @ANYBLOB="08000100", @ANYRES32=r24, @ANYBLOB="d001020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400090000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r25, @ANYBLOB="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", @ANYRES32=r26, @ANYBLOB="5c02020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004002000000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r27, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r28, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r29, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000004000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000700000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000500000008000600", @ANYRES32=r30, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400070000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r31, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400080000000800070000000000"], 0xefc}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) [ 1678.232242] audit: type=1400 audit(2000000992.210:7740): avc: denied { call } for pid=20525 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1678.244133] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1678.244186] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1678.249640] binder: 20525:20530 transaction failed 29201/-28, size 24-8 line 3136 03:49:53 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x9, 0x0, 0x1, r2}) [ 1678.279634] binder: 20525:20530 BC_ACQUIRE_DONE u0000000000000000 no match [ 1678.328058] audit: type=1400 audit(2000000992.380:7743): avc: denied { read } for pid=20525 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1678.453264] device lo entered promiscuous mode 03:49:53 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) r2 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@rand_addr=0x7fff, @in6=@loopback, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0xa0, 0xa0, 0x3f, r1, r2}, {0x9, 0x7ff, 0x6, 0x2, 0x2, 0x200, 0x0, 0x5}, {0x7, 0x0, 0x400, 0x2}, 0x2, 0x6e6bbc, 0x2, 0x0, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x1b}, 0x4d3, 0x2b}, 0x2, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3500, 0x2, 0x3, 0x10000, 0x5, 0x4, 0x4}}, 0xe8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1678.484312] audit: type=1400 audit(2000000992.500:7744): avc: denied { create } for pid=20551 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:49:53 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_1\x00', 0x400}) [ 1678.501231] audit: type=1400 audit(2000000992.540:7745): avc: denied { write } for pid=20551 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1678.534863] audit: type=1400 audit(2000000992.590:7746): avc: denied { create } for pid=20523 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1678.535476] audit: type=1400 audit(2000000992.590:7747): avc: denied { write } for pid=20523 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1678.564664] audit: type=1400 audit(2000000992.610:7748): avc: denied { read } for pid=20551 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1678.590326] device lo left promiscuous mode [ 1679.085681] binder: BINDER_SET_CONTEXT_MGR already set [ 1679.085707] binder: 20575:20580 ioctl 40046207 0 returned -16 [ 1679.135517] binder: 20575:20588 Release 1 refcount change on invalid ref 1 ret -22 [ 1679.160461] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1679.163283] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1679.166028] binder: 20575:20580 transaction failed 29201/-28, size 24-8 line 3136 [ 1679.199503] binder: 20575:20580 BC_ACQUIRE_DONE u0000000000000000 no match 03:49:54 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000680)=0x2000000000000077, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000200)={0xc6d9}, 0x8616) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socket$inet(0x2, 0x0, 0x1000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0xffffffffffffff3d) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1}, 0x100) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, 0x3) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000017c0)=""/4096) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000280)={0xfff, 0x0, 0x0, 0x1}) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) recvmmsg(r0, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004300)=""/146, 0x92}, {&(0x7f00000043c0)=""/86, 0x56}, {0x0}, {0x0}], 0x4}, 0xf2f}, {{0x0, 0x0, 0x0}, 0xff}, {{&(0x7f0000006340)=@hci, 0x80, 0x0}}], 0x4, 0x2, &(0x7f00000069c0)={0x77359400}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) prlimit64(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/46, 0x2e) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f00000002c0)=0x9, 0x4) r3 = geteuid() stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, 0x0, r3, r4, 0x400) [ 1680.343379] device lo entered promiscuous mode [ 1680.351024] device lo left promiscuous mode 03:49:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) io_setup(0x1f, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000000000006, 0x7fffffff, r1, &(0x7f0000000200)="4d1437b647acc8d43cabaa64a6b05485b37b8d232eb0700ad0233727337665e4ad9c2537af2c3d43b5d7c2ab6550be2174cc8ffa1eee8a6812492e0e1b0dacf1329c11c7ae9da1a54d88a62da2cfde6a36b493b661b0829690de1c723d", 0x5d, 0xe5, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xa, 0x6, r1, &(0x7f0000000280)="a2488ae92ed30588fa38860c7932e2ff83e2810c7dfb634dc8229dee4f697906cc8a5b80f2d85826d8eaa9bed625ff760cff8b39f12e46f3e832591d1cf2c4493491fba1ca2c4df7a1cf3e6a610fcfa10ebeea45da38d2edb6d977e809e494b216c0fcd86329b49b88a97fef2998b5ac90cdfe5a61bae3dd43a2b96a9c5bccff2f907d7e1b18be878bae3a0731849a143a799167e84853708d159ce1982d28588a2256d57dffdb", 0x477, 0x1ff, 0x0, 0x0, r0}]) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000008, 0x11, r0, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/57, 0x39) 03:49:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xc) r2 = dup(r0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x39}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 03:49:55 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000200)=0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 03:49:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:49:55 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x8480, 0x0) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0', [{0x20, '['}, {0x20, 'nodevwlan0(selinux^'}, {0x20, '/dev/zero\x00'}, {0x20, 'lowlan1wlan1em1eth0-'}, {0x20, '/&'}, {0x20, '/dev/zero\x00'}, {0x20, '/dev/zero\x00'}, {0x20, '/dev/zero\x00'}, {0x20, '/dev/zero\x00'}, {0x20, '@ppp0:bdev'}], 0xa, "891a81050979548cfea79ef0e78c0fc5f45b779a53a3046bf6ff1d1a4a20101c238241829933e714cc84bd356b6538bb65d590b96f415a3d17b7b5f9991c35441735b9b527e20ca4c28d31022ab4a4312b9d70734f72cef95c3906c75ba38df08eb23b7f4cecfb1d2183a097e52c4c6423dadf"}, 0xee) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000140)=""/72) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffffffffff9}, 0xfffffec3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 03:49:55 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x402140, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sendfile(r0, r0, 0x0, 0x80000001) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 03:49:55 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{}, {{@in6=@remote}}}, &(0x7f00000001c0)=0xe8) r1 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:55 executing program 5: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x45) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x28e, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2024000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7002ffdbdf2501000000000000000b00001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) 03:49:55 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80800) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x8, 0x9e, 0x2, 0x2}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{@shortname_lower='shortname=lower'}, {@rodir='rodir'}]}) 03:49:55 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, 0x0) io_setup(0x7f, &(0x7f0000000080)=0x0) io_submit(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0xff, 0x100000000000001}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1}}, 0x0) 03:49:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000fc9180bde1c69fac3b7a7f9dc9b7d9f757c800000000000000fe05000b0055c954e1a0e04ee9"], 0x10) close(r3) socket$inet(0x2, 0x3, 0x84) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0xffffffffffffff5c) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 03:49:55 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1010, 0x0) unshare(0x40000600) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) inotify_init() 03:49:55 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = socket$inet6(0xa, 0x804, 0x373) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', r2}, 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x8000, @ipv4={[], [], @multicast2}, 0xfffffffffffffff6}, 0x1c) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) [ 1681.896141] binder: BINDER_SET_CONTEXT_MGR already set [ 1681.923350] binder: 20628:20633 ioctl 40046207 0 returned -16 [ 1681.938038] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1681.938053] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) 03:49:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x3) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) sendto$inet(r0, 0x0, 0x0, 0x24008040, &(0x7f0000000280)={0x2, 0x4e22}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x401, 0x4) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) [ 1681.938076] binder: 20628:20647 transaction failed 29201/-28, size 24-8 line 3136 03:49:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x1000}, 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0xe04e, {{0xa, 0x4e24, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x399) [ 1681.938724] binder: 20628:20647 unknown command 859701248 [ 1681.938734] binder: 20628:20647 ioctl c0306201 200002c0 returned -22 [ 1681.938829] binder: 20628:20647 Release 1 refcount change on invalid ref 1 ret -22 [ 1682.005202] binder: 20628:20647 BC_ACQUIRE_DONE u0000000000000000 no match 03:49:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:49:56 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0\x00', &(0x7f00000031c0)=ANY=[]}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_bridge\x00', &(0x7f00000000c0)=@ethtool_flash={0x33, 0x1, "f9f8bebbcb63da6f8a8dec1ec4385edb6b07d8fd8b0b30de09d784c575478d23391520939cbc76316d046fa0bf0fe431870cac4a7d2053a5eef4eb494af4373f5496c986814f60330156088d8775aa8d43fe50f6a1e397d4c40c9e304d5f1dc3a1a3cc5d6b8f191b95e32400e4864782f206c33768caac18e204a47c57713ac0"}}) r1 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x28021) write$evdev(r1, &(0x7f0000000040)=[{}, {{0x0, 0x7530}}], 0xff3e) 03:49:56 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x25}, 0x0, r1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:56 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a00)=""/242, 0xf2}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0xffffffffffffffff, r0, 0x1, 0x5, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0201fbff09000000000000000000000005000000000000000a00000000000000fe80000000000000000000ff00000000000000000300050000000000020000007f0000010000000000000000"], 0x4c}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000002c0)={'bpq0\x00', 0x3}) mlockall(0x2) fcntl$getownex(r2, 0x10, &(0x7f0000000200)) prlimit64(0x0, 0x3, 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x3) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r3, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x4003ff) write$cgroup_type(r3, 0x0, 0xff9c) unshare(0x40000000) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000000c0)=0xffffffffffffff38) openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200, 0x0) lstat(0x0, &(0x7f0000000240)) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x82) 03:49:56 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0x5) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) 03:49:56 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0xfffffffffffffffc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:56 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x8) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f00000001c0)) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)='cpuset\x00') bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_open_pts(r2, 0x50000) [ 1682.815250] binder: BINDER_SET_CONTEXT_MGR already set 03:49:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x0, {}, 'ip6_vti0\x00'}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x158, r2, 0x310, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xc7b}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffff000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x0, @local}, {0x20000000304, @link_local}, 0x3, {0x2, 0x0, @initdev}}) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xfffffc8b) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000380)=""/48, &(0x7f00000003c0)=0x30) [ 1682.840850] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1682.850781] binder: 20692:20699 ioctl 40046207 0 returned -16 03:49:57 executing program 0: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @dev, 0x0}, &(0x7f0000000040)=0xc) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6}, 0x10) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fallocate(r0, 0x10, 0x0, 0x100000005) [ 1682.893668] binder: 20692:20699 unknown command 859701248 [ 1682.893708] binder: 20692:20699 ioctl c0306201 200002c0 returned -22 03:49:57 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x42400) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x27ed, 0xffffffffffffffe8]) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0xfffffffffffffeca) [ 1682.895003] binder: 20692:20699 Release 1 refcount change on invalid ref 1 ret -22 [ 1682.953321] binder: 20692:20714 BC_ACQUIRE_DONE u0000000000000000 no match [ 1683.069618] audit_printk_skb: 114 callbacks suppressed 03:49:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0xfffffffffffffd71) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'ah\x00'}, &(0x7f00000000c0)=0x1e) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003fffffffffffff000cfb193e7ee00000000000000000000000000", 0x58}], 0x1) [ 1683.069633] audit: type=1400 audit(2000000997.120:7787): avc: denied { create } for pid=20716 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:49:57 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) accept$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) sendto$packet(r1, &(0x7f0000000100)="41a85b6218daa1c39d750164536bc513827f14f1bc3bae869630b735c5919f3134cc2d23ccd2a524d6f6bd66a7a12455a14de8bcc33cc184935de010e5699e9942c6387890a614092187d7f5bd55b20e3b60e129bb7643f62a47cfe9869e2f87c6df38fce8d9aec332e7200d6c79f928b7988b297362fc39def993408c0043d5f4cac3b0f361b2e5856f462d2867efc39b6708edcab781a0447212b60433f3e18122b0c21b0dbf8bea2eb5304538066e63fecdd7", 0xb4, 0x40000, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xfffffffffffffe00) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000200)=[@sack_perm], 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x802, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x2000, 0x8, @remote, 0x1}, 0x1a4) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1683.070186] audit: type=1400 audit(2000000997.120:7788): avc: denied { write } for pid=20716 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1683.197815] audit: type=1400 audit(2000000997.250:7790): avc: denied { read } for pid=20716 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1683.204003] audit: type=1400 audit(2000000997.260:7791): avc: denied { create } for pid=20716 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1683.204708] audit: type=1400 audit(2000000997.260:7792): avc: denied { write } for pid=20716 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1683.253031] audit: type=1400 audit(2000000997.240:7789): avc: denied { read } for pid=20692 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:49:57 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:49:57 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pwritev(r0, &(0x7f00000014c0)=[{&(0x7f00000000c0)="6c50e5c1966b76032a23abbe4dd8a05f0409f1cb13668a967c70ef2c87f764d742d3d464d17634044d5e190f3d1b671789b9b86c8e4869d66be05ee83065be7745a93b21d7130e4f4020a5ec67173a", 0x4f}, {&(0x7f0000000000)="ac50", 0x2}, {&(0x7f0000000140)="07ec12cb8926639a9e3f40a531bcbb62c811f154a9fb8f763ee40847614bdd", 0x1f}, {&(0x7f0000000180)="051e87baa91c0906adf5d3c405c30c286e7f57ceba0b58730656f738eed9f9c9907acbd354eea23e5bc3de51cbfcb16721fc2d3a32a3e63af7d5081c24390a17c50d54ae2aa11ebe8b0ca4761df53605076b93ed964371e29baa15c5833c1f4bbb92f543d0dc6e49cfb0bdf2f6e464", 0x6f}, {&(0x7f0000000200)="01de276d4b27b0f9bb0b6b7228e36ff19e833e3431cb987ca393283f63c58923c1d402ae3beba561cc75d713d26542fe4d81eb4da1c45775b7de95e59f8738ab9db21e281b0c08647396054261271a", 0x4f}, {&(0x7f0000000280)="1312257e315adcc22f9652922e1c206dc3c39e882a12d9ba1ad946c7d1c6baf6889e112e67575e5ec9e40031a7890f7f51ab6987", 0x34}, {&(0x7f00000002c0)="b9839a9ac5facb036d2e76974b5081418a0376f983e3681ac099a2b04a93ae38a8b8cf87bd1bd0313c532952859c6d46bad355e1e79448fb6c18c70058428fb7c0d3eead74822ebbb9246059178030dc76802207e10ad2e87ae7199e428954a3ddd81a5da70540440b535f2dc41256546a711afa44c3af98ac0f138a3ea31477515ce7468691b3e644adeed1f74bb848f6869642c1d6354993c3e28e753a84c91803b24cb60a7c2adde35177dbf01d5077f29f329d3884a594b368df0a102b8bcbb768048676598a57c8f8ac1cf6a738d5d7bfb9f3", 0xd5}, {&(0x7f00000003c0)="3bd3dd254310a6ffb7a9a5b9bf244708c123132fee6eeba944311d046a738f149296e8a31a20336ac5e960607120d41007e429ed3d5c2bb04bed87e8f8de09081fd446005003bd1089f3d9e1d9e2cc98807f11e85986b4854cb60810a762083748768cd45432ecfbcadadb42f4b31e6e5f06b60741fd744b72229b009fc82c2a4b306245625fe17cb9e3da920c00918c9196f1204c375c19a8a0e443cb265c0efe16abd3331b098e42436be48abe8e83ed9ab152e6028166434e0e4e6783bfed18e89429c9cd53d56c3090ae08cf2ae37435e2a01982defbe70e39b753229e69c0205434138606e2d4b312eaed302dc7757121b1aebbcd1d82b01cfa61d57838b1c513205d16b2b3a44800a329e4943e3e7005a8bdbfb33927f60d6a42e2e51b0b6f5ffed5503a61805803834668c01000e037adfa8fd71100ab89e8991cbe872e2fff35f6a1d0c1b68e4faf02299d3e1c31fac431abdf7f3f20466c10f603395c441d9a126c606ea025fccfe26e1dfec0e788ba3bac914bc5aedb0cea7dc29ec00a6f3ece20d22dce0dbd60fa6acb9959c1c7ad96e4a06c802fdc5e76741b522634473cb3fa7005d27828a15e9b5898622868316fa161c46298255379d2bafb9bb59b0a9575b9413931fb82d0963e78127941aba9f9a9ca558f3772b8dab8a5cb8dd3242a6e25bbd3026be0bc9466a9bc204e194769da7154efae56ae9cc9dad789fb6054c3331e7a69f6a38c15bcbce5a0960b6b165ea8393a8ac27a5e2e280221fe7ae24289cc3cd943c375be0dc3ff5de73aeff2a1b2541f8aa1bbca0d54c468bf42bd261ba3c969b00f5ef3a6154f27dc1c2c9ddaa699764742a4bd29d911f9563dd5d7aa9728e5d9059058fec45d6f740b08fe15a4a0bd2a67427183af94a88aa3da6e175635260f4c2cbe8dc982e9f8ac9bfad11e1a56f5b53f0472eb6e9fc217b054f42a5f5a11b641420d9cd1371ca1c26780bcbcda89cf0467d3a10feefdbc635b9d2b9e3edb19069741190152bddd0809c12b64d5329b4bfdc08aa874bea30b8b7662ae302144724a67493cbcad205c8788ce5cb845370719a365bf68f3823450f81db5bfd438153d20b77589dbe263d629766c88b85e264b02d4a57ac960d8bfebcad8c9e99291a442a35de4c118fcc03d70da769096e51328cde35391fac1f6d57566660a78d2e99283c5e61a6efe8b449e54e66411e5d72b58da63473932de507eee9a19702638fc684917a214fd8911d18e364f1ce876740934bc6e495c436096fda44171cf03828390cc558532b2801702be0ea868ea45bcf9811fee4e6bbb87ac6a05f8dfdd428e1c6864f3c390d3344ba5c622ac447c6ae1efd12f0d22d620e2b9a96b3e2165938997a93869f5a763da794ac596c935012471918bfedb36903921362c051797194c70225587abf7f6928a8f97b98e9d8d7e83f8601acd8d5a468459a4d360b1058e289a622395155ab5da124d0bcf38bb6d109470581c1763a8680b88f465c4144ee626725981894059103ca16d4a4a0d303109ec87227c117346574d2b4cbce4ee326cd8639b67296514bdb8159cc3690cc1476e3231aabe074b8af026a19411f8716eb34f90868ab9795c93cf5560ff894792845687554eaad1f9c5dbf53973661bf75e3cfdf5b4b58846fc3bdd5746eb4f0f13ac4e564a81b2cd6c9b0f0095e3d59d4b8c291255fdf4aca9b509b6538873a639cb6d27fc1925ab577aab09d9da55fbd92d23c776de0c20ecdcc1d1fa3c143a84a7804bdc89e9c577842493b7eb1c1e2c85cffa51e62fd77630780205b90e88d3a97cd65750a341d0dac72a6fc49a24bac89b8a4934cf545e0ba702c1f48be5febec1c1b39891f319e54ce8390e2aee9c7a19487c39da035686b5f06c890d8a31fdcfe437717b55aeecd49386cade5166730ff0d8c9b87e5f66cfb27c4de1b4a1295cb91ce9394dd2f5355438f3e8a4aa445ba81747bfa9b03c2975398bc1d147723b5b5f53a20cee3811f8bee34b608e4594f82fc43b68dfd803c31dc6f816b85411735b1ac00019e6ce601d2c05be0e9ef1ecaa30e5c4b244c668dbf82a0fd029dda700ef1764d3e2b272ff6b2a88a4c2dc3fb632684193ceeeb53d96489f571d8dbac41a1f7defef5f4461c7919a6d3628984e9a97922e62c9e18c390a0b6d984156a6bbeb27b65372071f6e1e024b637db021fd17c5ed1556310b5e96ca32dd9ebb6c03de3a9280713a8c589dc44ef366249b2de3568ae21b4e0dab9fb6ec78b1a9819d6f06096d1dcf3cdcab6212ddf5c677c200130e3d8962110ac23f6c330169365c235c51bf18d440a4e743d8363fb66ef7fc8758a12ef1c1498759fcc65cbf507f52489d16003ec41fb1342bc8fc7cb57090447938821f29efec37e7b1c1a66b761b89942b95e8b24f33d17a54bc3bd870d77915b5a9386ddf7374f04049aff4f5bbd6ea53d8d7604c66dd5f61b067617a4caa332843b2fb47fdafde2b182be9872c2e1d8907611c598ea6dc5412426f4d611cb9cd47a530b1d7a547bb8c73190068042d3d635ec462d7559896aa97549a6895ddc009c68f921557cdb88a7ac946a86e40991e300b61596ff856a4159a7923cb1754516c76a192216ccf3f42ad85f25adaaf75d3392ac9cc3cbb72038fb074e537816f23884a647f0b8eb34c161a03d0edd567f927ac2e7d0707bd4a9e05b08267f8c2d9c8cc89e60299f8f24f00eb156ca58a67ffeb3723d3160ed9f82a83a9ce53066dc7d1aae332fbad34ed30c53f314ecc09e9074152abf6a19a7023f47bef63dd12369303d4fbd60dd82411bdaa6e4a09e22b55831eb94ce860f7b49e6b1213c91163221ead509abc0fbb03863ae34521019547a88cf4732347ef25f00b06214d2428146f47fbedc76e5c304d7a02882d64d23670e54438a837a4ffc41a48f4a53e57ef71a77f753eab876bff3b778f320932ba1bb91aaaf740ad32883c3d2f4e5cc75400b18c85106930b9f713ba7699b233083b005894678ddd451721bda490010c443536647d1219bf7bd72b38aa888e91a64db0e2893fd5492de0f1e644067357bd76615ba6c32a4e7d404302d9334e316690d8d968be931f335676f887f497139fa1249c85bf907668318c16ec22424a7333bdc027c124f7ee44d37cbab1dd13ac47ad86ac60d7f6937f453a07381eb71ed7dc0b3a8d7cd02098164c9c3cca2bb3af7fe4160c38e04afc3c8213518d31155749764c1772804b48007366644af0827e8f3db6198ebd0bae84379c09ff745ce6ea9bb729a0df34a9632facc19b4446aa61258de89d2c5fd6af6e20cc068bbdcdd1082fdc9f25d3163264ba422e512f69f9e432d5e1c8d960a5c644906ab555fadc059fc880b791d5b0e0011bc9640aad82bce508818e454a455e20035564e499cdcd0e1566b42710b4eb41711821a6fe1b696d03091cf29c218a047412d4b12d6eb7ffbb5da4714857975445aaf0c487fca718ab6c19128e31256d5b2dc2dc6bdde00f884f41eb4d690e860faa8daff23f4c7474d73ffbbe31a9e4b4d88a422a4eb544f7fedda716e73efde000ea4004d976042ddd7cbb3605bbd6043bb563d78295f3ef046364f3cb8f8881195edbf88944248104a2458a794e3f6f4e5132d52a85de5089b1b1869ee714af40937831e1c1a9904eb19cdf18ae398eedf0c76464ad0deddf51cbcae9c338322f29a96b1e6cc53f98a3ab0ef97785bcd775f9bb5d6c077ac507b8e567c71369b97f259cf6cacd0e24b0040bd8390e66eeffd4eff2bb641cac81535f933a045f5a45d58b19430bba9cd2b36388441e4ba3d23c5f18c560aeb03ba42ed950d9613b66d562baf4c869eb179b8502cd300679b22cc4e0910ea688b231334bd5b66f6771f713cf5bf22847cb181686139615a051db5fd4c88b4abe0420eca575b0570c9501a485f5786f457b1eeb18c0724c12667a19dd4234984c10d3312e8daf6e17db578873085584656d95f00ab8b1cbcc8d9298b9b1054878f2e6190634001d83fa98df5bd7e6b6471d31f7c1a61f32665e6a543d1c4e26606f4ab32bb5ea04baa0a047497aba46ce294e084dfc15c5634580f2e26a8337bfe3ebac815fdccfad5af488f814859638d1b63c1c04d013de16660f38adf46ded595a683b84faa9ab34aa35157fa301480b5702ceb3060bea1812a7944820aadf70e8e5c743864c9cd23b36444b9b4276899c4af41ee144169161b26859bc49207cec4c6504e9fa6b8360ae80c5999034cdfc76926cd90cd34c0bc5e0de7059dc6fdbcd02c884ae374750f6c942cb9466b0a04177aaeac32cbdc36f5c85b0d513b7c375826c061c3cd6ee77c0f6eda0b15f9e04579ce8dd30f44635688290a5c551bbfeff91c75c597b7fd1e42e25dc8873b118c3eae8d8a8c624e794a0cfe494ef331936bf87201da76244ca41492ba21ba5506e02ba26ba1e7723dd3c69beaa321d1a97d67e2e243e3d0a3606ec88da056e64fbc1cf2a21df2f1f0ed6640f47ea58542430b311a6564748d0e13d421f8a3972167412e79a72980ee3226d825314d640c606e63634938330135a87b84d8b7ee15d4cff5ec2958e99a34cc5614a2f6e041108879ac33c2d577c3668e1f92588c486736bd7fa4073526ae5e14611872d8fb197cb3351a9d72409eb980d2b8fd264122013288074a768bc29f07bd00ade7a91510b262901207d6424ee9cecaf3cc643b3737fce689bce09cf9c7552e293e9da0e0c504f280716905aabd870de67411295a768ae34db549a7078e3e1a860578e7342f46ea96aa9dc0d0f1560b2da4cd9a80b998797c03f86ffd9963b754dd4dd1e71d10111a6ea2b32c0cf2c3f2328d249a14abbb6d7f7bb3c4f647bc11e7499fbde5325babe8bf6f48dac2c79e11afa4463196f11aa85641f089db16a3d64270178cc873abae1899d693baca11c233ddbcc497cb586659b9791479c393700413a1cacb8b61d86ad29e2fd33006c8b08e21c65b12a4c660570a3553b538dc348801d160ba47589d20de62a51698afb43b8a2b54c64516c6d2996787d137599a7996daffabcabebb4586c67056d54d398739521b78bb388d7216d0f18d9fca2ca2daedf032f171b93a25fd0434f592555b31adf9c5beee7f401b487474cab6a0a9644deaffe2ba4966504de9482ead80178366eb23119c62e8de223cc24285db9e0c44870760f803674a08bf6d97aa570c6fba1c648460e6dbbd88620e73e22b999a6fbc63b88bc25e119d7d82dd9e15f81d4861949a1532bc6d9219b5f9218d9816480c0d15575c6ae4aaab956baac66e12732eaff5d971ef35c146ecabbb4f9bb0af087b9bfbc6c87206b4c0a9e32c110653d8be7d52c5d11382ae78c5590bbbcf3c3bbf8721d4842b3c3e074c6a4385b68b789a4b359ac3f8f393e28a9500229eed749d09564c6f5e2e404fcf5d3e6a7f72f4588554f377ab9b696747165dc200d595de5e330be3f036735a19e82163605a81f7781810075e9715870de0abc20e76c897480f7d38d0edf171ab0bd8a1ebfc5535667e7ce87e1d5e973fc7c290c9e6070d2af7deb1d29cfd309ea6b112d5f93b10b44184fd2e9f36e89c354b37c174bcace5ed76918944864882950b860015530a290222c9ec5fa8038846755a276433083f37e603bdb39d375ab6cc0e51bec188011db74a0448620072a98cad7b3294491e988cadfc3885391f28dfe9b06c6a75fb17af9bbec9c2d6b7f372ea0638af74a73cc20eabd64a3c9a64fd51fd562d4667ed63c50e0642d1dd8eea5b128f0f244", 0x1000}, {&(0x7f00000013c0)="157b3cdb5a4be72bce726b8ccf3531fc583d7e1d3bfc360d0254afe6630f02781977edb702ff7a48f986bf83a94be8a162953ebbc365e703334d114d9500548ee79f3adae26c22c35fd633d1dae1ed2169068cf38cb35856f8ceb981fe421b3f3beee7423e4694efbf2d55eb235b869f592d41a9cfacb599bf0c62c2c827d8bbafa32c42c8ae1907cd5cb3a6b9b553d81da0db940ff233e7fc3fb1535b462688307d597d6a1185e08c112874494a220b435fa85dfbd3654c842d8b622801474f142c3a609aac9b5fc6797a718b9f5744a265e37092b3ab27a496cc012f1bd65c1293c4c9064ddfb902277dd4999e9e93fa0c59c436e1", 0xf6}], 0x9, 0x0) 03:49:57 executing program 5: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') io_setup(0x1ff, &(0x7f0000000000)=0x0) io_destroy(r0) 03:49:57 executing program 4: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) madvise(&(0x7f00002fa000/0x3000)=nil, 0x3000, 0x11) 03:49:57 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x80, 0x0) dup2(r0, r1) 03:49:57 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x80) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(0x0, 0x40a) pipe2(0x0, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000b80)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000bc0)={@empty, 0x4f, r2}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000006c0)=""/42) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000400)) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='bpf\x00', 0x0, 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') mknod$loop(0x0, 0x0, 0xffffffffffffffff) read$eventfd(r1, &(0x7f0000000080), 0xff97) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x4, &(0x7f00000000c0)) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) geteuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000840)={{{@in=@multicast1, @in=@broadcast}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000680)=0xe8) stat(&(0x7f0000000940)='./file0/../file0\x00', &(0x7f0000000980)) fstat(r1, &(0x7f0000000a00)) syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000380)='./file0/bus\x00', 0x7e000000, 0x1, &(0x7f0000000500)=[{&(0x7f0000000780)="be627af486fe832c7cc1feac0f1b5203b9d20cad368b6dab23ea8ea11faea1753b7c0fdda25082b1158bcbd833f15e091ee254dcf13387aef8a9a356b1582c73fa7ae28570e102dd6c614564b7dee4a89f17effb5af9c8ede2d10798c56b05792fb44d9b3dff739bfc0db6bb301887fa14f498318442794ddbe2202d851c2950a27cd18b4cc15bfb66ed100d4057bd9287d720313903332f3d0704a513a4d33b067bcff7d0", 0xa5, 0x400}], 0x220000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800002}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="5706f1f87000f9dbdf0000400008bc85740000401500"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x80) getdents(r3, &(0x7f00000002c0)=""/113, 0x25) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000200)={0x7, 0x4}) [ 1683.663196] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1683.672110] binder: 20692:20708 transaction failed 29201/-28, size 24-8 line 3136 03:49:57 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000540)='fuse\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) fcntl$setstatus(r0, 0x4, 0x2800) 03:49:57 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x7, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:57 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x100000000, 0x1, 0x7fff}) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f00000000c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) gettid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x40000, 0x0) shutdown(r1, 0x1) ioperm(0x4, 0xd9, 0x4) [ 1683.912031] binder: BINDER_SET_CONTEXT_MGR already set [ 1683.952391] binder: 20750:20754 ioctl 40046207 0 returned -16 03:49:58 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x400000000000007, &(0x7f0000000080)) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x600, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="48c324b2cf090c9d169a7cf1b6a79843b3887aae20c0d58147e458ce736921d7091a3d34bd83656b58ba44175ae08715f06517556f44a2899049fbbd33587b1a5a57be537ac85f85317a110dd8634967a680f5f0d9b513e13bbfcfebf8ea0f3343e786ac1613e7cd29edd9e4904fa81b9e4b3249d4c963774a3bfdb673cc0578e7bffa26be6bac794d2766e74a79cceb710a21c9bbbf72b9e45589a0dc40d554e0bdb574d79d1bf38cc8e48461eabc67e28a218eeaff5313e69d925441a63936ec6f0e64ae22797d9818313174b9447957f876fb496114598dd7dd4fe0b61d01ed6ac5520884bb11af09a79f6113f15e92657317ade80eda19") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:49:58 executing program 3: r0 = socket(0x3, 0x6, 0x401) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x50003, 0x0) r2 = dup2(r1, r1) finit_module(r1, &(0x7f0000000300)='/dev/urandom\x00', 0x1) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x80000000}) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000000)=0x54) getsockopt$sock_buf(r2, 0x1, 0x3f, &(0x7f0000000200)=""/230, &(0x7f0000000180)=0xe6) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x6) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = socket$inet6(0xa, 0x400000000001, 0x3) openat$cgroup_procs(r2, &(0x7f0000000340)='cgrds\x00', 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:49:58 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0xa0d7}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) fcntl$lock(r0, 0x27, &(0x7f0000000080)={0x1, 0x5, 0x7, 0x3fd, r1}) [ 1683.972307] audit: type=1400 audit(2000000998.020:7793): avc: denied { call } for pid=20750 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1683.972445] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1683.972452] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1683.972472] binder: 20750:20771 transaction failed 29201/-28, size 24-8 line 3136 [ 1683.973711] binder: 20750:20771 unknown command 859701248 [ 1683.973720] binder: 20750:20771 ioctl c0306201 200002c0 returned -22 [ 1683.974323] binder: 20750:20771 Release 1 refcount change on invalid ref 1 ret -22 [ 1683.975070] audit: type=1400 audit(2000000998.030:7794): avc: denied { create } for pid=20750 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1683.978125] audit: type=1400 audit(2000000998.030:7795): avc: denied { write } for pid=20750 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1684.002510] SELinux: duplicate or incompatible mount options [ 1684.064089] binder: 20750:20776 BC_ACQUIRE_DONE u0000000000000000 no match [ 1684.084481] audit: type=1400 audit(2000000998.140:7796): avc: denied { create } for pid=20749 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1684.179704] EXT4-fs warning (device sda1): verify_group_input:102: Cannot add at group 41175 (only 16 groups) [ 1684.218693] EXT4-fs warning (device sda1): verify_group_input:102: Cannot add at group 41175 (only 16 groups) 03:49:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x12, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:49:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x86) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x4010000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_group_source_req(r1, 0x29, 0x33, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x15) fcntl$setstatus(r1, 0x4, 0x4000000004a804) 03:49:58 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x200, 0x0) getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) getgroups(0x3, &(0x7f0000000580)=[0x0, 0xee01, 0x0]) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000600)={0xa0, 0x0, 0x5, {{0x5, 0x2, 0x48b, 0x1, 0x6, 0x3, {0x6, 0x9, 0x92b, 0x40, 0xf71, 0x2, 0xffffffff, 0x0, 0x3, 0x1, 0x1ff, r2, r4, 0x1, 0x7be24867}}, {0x0, 0x1}}}, 0xa0) r7 = syz_open_dev$mice(&(0x7f0000000780)='/dev/input/mice\x00', 0x0, 0xa042) fsetxattr$system_posix_acl(r7, &(0x7f00000006c0)='syst\x03\x00\x00\x00\x00\x00\x00\x89\x8fl_acWKy\x96C', &(0x7f0000000e40)=ANY=[@ANYBLOB="02000000010001000000000002000000", @ANYRES32=r2, @ANYBLOB="02000500", @ANYRES32=r2, @ANYBLOB="02000a00", @ANYRES32=r2, @ANYBLOB="2a2ffa1fd03ac0690a6ce7c1ca77b1f3e6720f160050fee141a21caaaba91843e4e4ec600600cb5bb416218a087ce560c1ecc55e4f9a85c55c60e8bafb8a091a9b4ce29d741b77df3a40034e1232c569063ee7cfd082367485904654d1c148742fab35d1b358d419a45cbf16ea015b5853e50b0cf9ed71f8fd6067a91b90d51825d61e1f4f0fddc628a62290c3b01905f07f5a26b84bccaa8df59415af8bb20d1f7c38f7d1d2b7cf3a3293dfef371d1e384047f5430390a8c82cf7b6505e342ff65574807d3f06861e5fb610a4bb1a16cf0c97f455bd937ee7df393d0ccac21aa356dca18932122b0080470070bcce30f85879c983b1123e0c59", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="040001000000000008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES64=r6, @ANYBLOB="08000400", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB="10000100000000002000020000000000ba6436606b24d88916653606d3de2521e4bb7fb907b0d16c22fb740d4640011661f74d90e07a5eddad17524d4626bd38880d41012111ba8ffffe981feda5433aaabe010694264e283fa3974fc68b9bd5bcefbe8ed26849d260f589c2ad96ed304e3d01555044da86779274786e0bcfc91892182a192c1f712b89af6e76dce3039600fdb22e6de9a7d1647b8a412b430a996487adfeaebb6dcea6713d6839bffecd48b4e42fdca96e126116b521222290d1ab86888aca36c9fb7619c265d2668d0fd1e99fb268bafb0c95b789f675612bc462abd4354ecd717b14563aaa47d7cbf6b41b07aa78c967"], 0x15, 0x1) ioctl$TIOCLINUX7(r7, 0x541c, &(0x7f00000005c0)={0x7, 0x7}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000004c0)) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) write$P9_RSETATTR(r8, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000200)={{0xffffffffffffffff, 0x0, 0x46c2, 0x0, 0x9}}) mkdir(&(0x7f00000001c0)='./file0\x00', 0xfffffffffffffffc) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000140)='./file1\x00', &(0x7f00000003c0)=""/25, 0x19) fadvise64(0xffffffffffffffff, 0x0, 0x8, 0x5) futex(&(0x7f0000000800)=0x2, 0x1, 0x0, &(0x7f0000000840)={0x0, 0x989680}, &(0x7f0000000880)=0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x9) setrlimit(0x0, &(0x7f0000000480)={0xae6, 0x60}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setregid(0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000900)=0x1ff) openat$uinput(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/uinput\x00', 0x2, 0x0) rmdir(&(0x7f0000000240)='./file0\x00') 03:49:58 executing program 4: r0 = socket(0x11, 0x803, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000040)) 03:49:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000000)=""/27, 0x1b, 0x3) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000140), 0x4000000000001fc, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0xfffffffffffffc41) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000180), &(0x7f0000000140)=0x8) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) syz_open_procfs(0x0, 0x0) 03:49:58 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="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", 0x1000, 0x4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) 03:49:58 executing program 3: r0 = socket$inet6(0xa, 0x8000002, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002240)={0x0, 0x0, 0x0}, &(0x7f0000002280)=0xc) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f00000021c0)=[{&(0x7f0000000100)="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", 0x1000, 0x76}, {&(0x7f0000001100)="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", 0x1000, 0x9}, {&(0x7f0000002100)="ae32eeab4801dcb9e6e678aee7f39f5cf101146dff8a9ad2d807d20b8e654daf73c128378f4094e67d5804a011e3d923f64b1e1d2423960ae1c9acf3ab084fa4efb5222ebdcd6d0d119da6589fe6b73fcdc0b9041649848d3dcd33e9d2e60e9e939d62fc61b26752ef780045177cc2bfaec5036a6ef57ce3767d36431fb952713fd9d671fb7ec449e94bf59dcd02ccce555faa9b4a800f15ed15fb6170c1254435aa96b0c8fd61d2dcfb59688f91df", 0xaf, 0x4}], 0x2002000, &(0x7f00000022c0)={[{@usrquota={'usrquota', 0x3d, 'eth1v8vboxnet0procposix_acl_access'}}, {@background_gc_off='background_gc=off'}, {@grpquota={'grpquota', 0x3d, 'selinuxposix_acl_access-pvboxnet1GPL[%'}}, {@jqfmt_vfsv0='jqfmt=vfsv0'}, {@discard='discard'}, {@noextent_cache='noextent_cache'}, {@noacl='noacl'}, {@resgid={'resgid', 0x3d, r1}}], [{@dont_hash='dont_hash'}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@subj_type={'subj_type'}}]}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @mcast2, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x2000000}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000023c0), &(0x7f0000002400)=0xc) 03:49:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x5, 0x400000003) mount(0x0, 0x0, 0x0, 0x20800, 0x0) io_setup(0x0, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000100050000000007000000"], 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x5, &(0x7f00000000c0)=[{0x0, 0x8001, 0x3f, 0x4}, {0x1, 0x7f, 0x10000, 0x10000}, {0x3, 0x2, 0x5, 0x200}, {0x0, 0x1, 0x7, 0x8001}, {0x8a2c, 0x6, 0x101, 0x11}]}) clock_adjtime(0x7, &(0x7f0000000200)={0x0, 0x8001, 0x0, 0x0, 0x47c, 0x0, 0x8, 0x2, 0x0, 0x4, 0x0, 0x6, 0x7, 0x100, 0xfff, 0x2, 0x4, 0x9c, 0x2, 0x5, 0x2, 0x0, 0x361, 0x2bde, 0x5, 0x2}) 03:49:59 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000000)=0x182) 03:49:59 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) syz_open_procfs(r2, &(0x7f0000000100)='attr/exec\x00') ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000140)={'bcsf0\x00', {0x2, 0x4e22, @local}}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 03:49:59 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000001c0)={@mcast2, r1}, 0x14) [ 1685.132262] binder: BINDER_SET_CONTEXT_MGR already set [ 1685.142251] binder: 20814:20820 ioctl 40046207 0 returned -16 03:49:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/177, 0x7e}, {&(0x7f0000000240)=""/237, 0xed}], 0x2, 0xfffffffffffffffd) ioctl$void(r0, 0x5450) [ 1685.181535] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1685.212910] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1685.224507] binder: 20814:20827 unknown command 859701248 [ 1685.224517] binder: 20814:20827 ioctl c0306201 200002c0 returned -22 [ 1685.224801] binder: 20814:20827 Release 1 refcount change on invalid ref 1 ret -22 [ 1685.285835] binder: 20814:20839 BC_ACQUIRE_DONE u0000000000000000 no match [ 1685.456145] binder: 20814:20820 transaction failed 29201/-28, size 24-8 line 3136 03:49:59 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x12, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="00022bbd7000fedbdf250300000028000200040004000800020001000054921801000300000008000100c581000008000200ffffffff68000100080003000000000044000400200001000a0067240000000000000000000000000000000000000001bc070000200002000a004e2200000006fe8000000000000000000000000000aa02000000100001007500400000000000000000000000000000000000e2704a02d1a26a48e6f31616261467e6da7fa66299ebc7e2f1f9239b68750b158e10ed30552422a33632cc22ea870c0e76686128e064692aabfe5b6f01b4a2f1d70dcb437a32a285a4c76965140ebc8cf37555da65c82656b8b63b3d2bc726414df48542e49aa7155d0ab8beaeb8a40a6fdce5ebafe6c80605071cb99f33ec5f56439368caf66fc28dc48a547a7570a134bef26a36defc8d692d8a0c0ece235d6d0f60a4c8b9426398df1529c6ddbb87fd9e789535d5d5c03733328153863777624d2d67b299293f7339cf5cb2cb4c7c95ebbf0c1272739b95a0"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) [ 1685.883512] binder: BINDER_SET_CONTEXT_MGR already set [ 1685.895684] binder: 20853:20855 ioctl 40046207 0 returned -16 [ 1685.927325] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1685.946500] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1685.964330] binder: 20853:20855 unknown command 859701248 [ 1685.964341] binder: 20853:20855 ioctl c0306201 200002c0 returned -22 [ 1685.964474] binder: 20853:20855 Release 1 refcount change on invalid ref 1 ret -22 [ 1686.004602] binder: 20853:20855 BC_ACQUIRE_DONE u0000000000000000 no match [ 1686.058668] binder: 20853:20854 transaction failed 29201/-28, size 24-8 line 3136 03:50:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x12, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:01 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x0, 0x20, 0x1, 0x1}, {0x0, 0xfffffffffffff000, 0x2, 0xfffffffffffffc01}]}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @rand_addr=0x1}}, 0x1c) 03:50:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000000)=""/27, 0x1b, 0x3) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000140), 0x4000000000001fc, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0xfffffffffffffc41) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000180), &(0x7f0000000140)=0x8) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) syz_open_procfs(0x0, 0x0) 03:50:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000300)=0x100, 0x4) socketpair$unix(0x1, 0x7, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000180)=0x44) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x5) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f00000000c0)=0x100000001, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x8000}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="a6bf1889c6204ad7803e9fdb3f439a48e8209bead09cf339b70649073a2809b8351e78e36b2d92c491b364022217f7890398067cfbef3df1297176221d6919b1de4d2aa715d44816780eedf4a333879ea605f7ef594416beb956f3f613a5d4cd2ec89f1954d89f6abc1640b2acad76ac9e53d24a2452ead9f0a4beb79f80b53a5c228d87a3275da89535a3c00fb9c13bf0c54c3203fd2bb8e86228f873bdb27bd38aae8250b6dea6415eb288a78af72e33b65a786a", 0xb5}, {&(0x7f0000001540)="a05824879ec0d815402a92b662de1296fca660723abb5948bc32a1b161420947fddb72b62002d2c01138b0cd3b45e368efb9e7c035aa43aedd4e559aa9282eeed43da69c8e99555ec4a2cdd8e099b7be43cbb2609057d864bd553dd6a4d7cff246a04c7aad954c2bf73a338bcea73c01daff770ae78e2e435548f31e10528c4d259826974434b2ffd2b33daf01f84d8ba24f4a94d79b0e1f9d470bed91b5b3ec8693fb2fd203ea378557c0a03a82c7c9afe0c7cd38", 0xb5}], 0x3) 03:50:01 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) clone(0x200000000000003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffece) recvfrom(r1, &(0x7f00000004c0)=""/184, 0xfffffe4c, 0x10100, 0x0, 0xfffffffffffffcec) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) rename(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000200)=""/151) 03:50:01 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x12, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:01 executing program 3: rt_sigprocmask(0x2, &(0x7f0000000000)={0xb0}, 0x0, 0x8) r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x84000, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)=0x2) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000100)={0x7, 0xfffffffffffffff8, 0x3, 0x5, 0x5}) [ 1687.897766] binder: BINDER_SET_CONTEXT_MGR already set [ 1687.934541] binder: 20865:20868 ioctl 40046207 0 returned -16 03:50:02 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e27, 0x1, @loopback}, 0x1c) [ 1687.980435] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1687.980443] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) 03:50:02 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = dup2(r0, r0) getdents64(r1, &(0x7f0000000200)=""/147, 0xfffffffffffffefd) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @dev, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x26}, 0x65, r2}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x12, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) [ 1687.980471] binder: 20865:20885 transaction failed 29201/-28, size 24-8 line 3136 [ 1687.982802] binder: 20865:20885 unknown command 859701248 [ 1687.982812] binder: 20865:20885 ioctl c0306201 200002c0 returned -22 [ 1687.983640] binder: 20865:20885 Release 1 refcount change on invalid ref 1 ret -22 03:50:02 executing program 3: close(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80, 0x800) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0xd69, {{0xa, 0x4e23, 0x1e, @empty, 0xffffffffffffffff}}}, 0x88) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x2, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) [ 1688.050909] binder: 20865:20887 BC_ACQUIRE_DONE u0000000000000000 no match [ 1688.090684] audit_printk_skb: 57 callbacks suppressed [ 1688.090695] audit: type=1400 audit(2000001002.140:7816): avc: denied { read } for pid=20865 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:02 executing program 5: keyctl$join(0x1, &(0x7f0000000000)) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/access\x00', 0x2, 0x0) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$setperm(0x5, r1, 0x1000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000006000000000000000000000000000000000000dfffffffffffffff00000000000000000000000000000000000000000000000000000000000300000003000000000001000000000000800000000000000700000000000000060000000000000000000000000000000000000000b2d50000000000000000000000070000006e0503076596000000000000de09000000000000010000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a2d5dcb3792f02a0384b0ad1fc30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) dup2(r0, r0) 03:50:02 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0xfffffffffffffff9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}, 0x1c) r1 = dup(r0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x17, 0x5e, &(0x7f00000000c0)="307fca7cadade2f207cc53378d22f11dd193da873c038bc00cb9b0aac778061791dce956f1fed06efa32b69d4428310d4451bf15ea5c3f4a7da00c0d1666d21b7c551a5808d28d548428f3edd15cb1d38dbf145b4ef6323d9813326672c0"}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x101) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000001c0)=ANY=[@ANYBLOB='broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x98) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1688.411904] audit: type=1400 audit(2000001002.440:7817): avc: denied { create } for pid=20894 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:02 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xfffffffffffffffe}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1688.441541] audit: type=1400 audit(2000001002.470:7818): avc: denied { write } for pid=20894 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1688.598244] audit: type=1400 audit(2000001002.620:7819): avc: denied { read } for pid=20894 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000000)=""/27, 0x1b, 0x3) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000140), 0x4000000000001fc, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0xfffffffffffffc41) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000180), &(0x7f0000000140)=0x8) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) syz_open_procfs(0x0, 0x0) 03:50:02 executing program 5: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0xdf, 0x0, 0xc00, 0x0) 03:50:02 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x30000000000009, 0xed, 0x81, 0x0, 0x0}, 0x2c) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x400900, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x3, 0x3, 0x6, 0x1, 0x5, 0x3ff}) 03:50:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x12, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:02 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x15, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:02 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2000000, 0x0, @remote, 0x1}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:03 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)='\x00', 0xffffffffffffffff}, 0x30) r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x6, 0x8, 0x0, 0xe7, 0x0, 0xba73, 0x20008, 0x2, 0x4, 0x8, 0x7fff, 0x4, 0x20, 0x4, 0x40, 0x3cf, 0x7fffffff, 0xa5a3, 0x5, 0x101, 0x6, 0x40, 0x6, 0x82, 0x4, 0x4, 0x2, 0xfffffffffffffd5b, 0x3, 0xb3a, 0x3, 0x80, 0xffffffff7fffff01, 0x6, 0x68e1, 0x8, 0x0, 0xe2, 0x3, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x10000, 0x0, 0x9b82, 0x4, 0x2, 0x48b, 0x100}, r0, 0xc, r1, 0x1) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x712000) [ 1688.913893] audit: type=1400 audit(2000001002.960:7820): avc: denied { map_create } for pid=20924 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 03:50:03 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xfffffffffffffffd, @remote, 0x1}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x156e2c35) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a304ea71a25ed78fec04fa1310937446f613fdd6a67030fd12614644042af61ede1"], 0x24) 03:50:03 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet(0x2, 0x3, 0x7) write$P9_RLINK(r1, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) setsockopt$inet_group_source_req(r1, 0x0, 0x30, &(0x7f0000000300)={0x200000000001, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {{0x2, 0x0, @broadcast}}}, 0xfff7) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0xe991, 0x4) [ 1689.064227] audit: type=1400 audit(2000001003.120:7821): avc: denied { create } for pid=20925 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:03 executing program 3: mlockall(0x2) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)=0x16e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="1d7d37762c3a6c6d89367e5180bae92e07c0672bb9"], 0x12, 0x2) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="ce1f793b5c6e34954a540d0198aee2895f84e68251cf79964122119d15ae1eb2d0a2f1a467029a5bb3c9232f0d72093aeb264591d5364807a891a7eb3928de5a93996877f21344b540a1716dc5a00e37554cf198d33deeb77c2fcf2c3dfdcab9070a306155c4ca6bb57afac068080866a3f842120968afbe23e57e50c937e5e15664a278d8f5d63431088f71e81804147dab563ac19a46344b08f421147d5934f31a0ee7d32e40361355f1f787ea2855193f2ec05aa073be832adbf571366697675fa1195c09008679f5", 0xca, 0x0) rt_sigaction(0x3e, &(0x7f0000000400)={&(0x7f0000000380)="0fc7fbc48111d09e0000000044333cebc4e1e56d539ac443a10e67d000f3afc4c2d8f5e9c4e3e569a900000100bec4c2c59254f11f12e6", {0x40}, 0x80000000, &(0x7f00000003c0)="c4a109e4500080cacdc401f8ae9ca300000080450f3804663df2400f58d690c4e3417978aa000f3804d08fe9788208660ffe02"}, &(0x7f00000004c0)={&(0x7f0000000440)="c44279211fc48215b85708c4627918c4c4e17de61ec4032d5fd8b3c40118585e000f9fedc402a59823c402f14753ac363666470f14c6", {}, 0x0, &(0x7f0000000480)="660f380a5f22660f382220f344a5def4c4c191d8eb8f69f097b70008804166450f57ba361c0000266746dd489b440f0321c401ec5eacad02000000"}, 0x8, &(0x7f0000000500)) r2 = geteuid() getgroups(0x3, &(0x7f0000000340)=[0xffffffffffffffff, 0x0, 0x0]) keyctl$chown(0x4, r1, r2, r3) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) 03:50:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x140012, r0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0xb265, 0x9}) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001680)={'security\x00'}, &(0x7f0000000580)=0x54) 03:50:03 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'security.', '^cpusetmime_typewlan0keyring\x00'}, &(0x7f0000000200)=""/111, 0x6f) signalfd(r0, &(0x7f0000000140)={0x13}, 0x8) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}], 0x7}}], 0x1, 0x0, 0x0) [ 1689.064763] audit: type=1400 audit(2000001003.120:7822): avc: denied { write } for pid=20925 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1689.112658] binder: BINDER_SET_CONTEXT_MGR already set [ 1689.112745] binder: 20921:20931 ioctl 40046207 0 returned -16 [ 1689.152758] audit: type=1400 audit(2000001003.200:7823): avc: denied { read } for pid=20925 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1689.184779] audit: type=1400 audit(2000001003.230:7824): avc: denied { call } for pid=20921 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1689.184904] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1689.184913] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) 03:50:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000000)=""/27, 0x1b, 0x3) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000140), 0x4000000000001fc, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0xfffffffffffffc41) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000180), &(0x7f0000000140)=0x8) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) syz_open_procfs(0x0, 0x0) 03:50:03 executing program 0: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) perf_event_open(&(0x7f0000000540)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x34, 0x0, 0x0, 0x87a}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f00000014c0), 0x3db, 0x0) [ 1689.184949] binder: 20921:20945 transaction failed 29201/-28, size 24-8 line 3136 [ 1689.192192] binder: 20921:20931 unknown command 859701248 [ 1689.192261] binder: 20921:20931 ioctl c0306201 200002c0 returned -22 [ 1689.200006] binder: 20921:20931 Release 1 refcount change on invalid ref 1 ret -22 [ 1689.246933] binder: 20921:20945 BC_ACQUIRE_DONE u0000000000000000 no match [ 1689.256235] audit: type=1400 audit(2000001003.260:7825): avc: denied { create } for pid=20921 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:04 executing program 4: mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x1) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00') sched_setaffinity(0x0, 0x0, 0x0) symlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000700)='./file0/file0\x00') umount2(0x0, 0x0) syz_open_dev$rtc(0x0, 0x0, 0x200000) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00\x00\x00\x00\x00\x00\x00Jk\x00\r\x00'}) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000340)={0x60, 0x0, 0x2, {{0x3, 0x3f, 0x0, 0xff, 0x4, 0xfae, 0x6b5, 0xffff}}}, 0x60) accept$unix(r2, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) write$P9_RGETLOCK(r0, &(0x7f0000000140)={0x23, 0x37, 0x1, {0x3, 0x0, 0xffffffff, r4, 0x5, 'lo\x00@\x00'}}, 0x23) 03:50:04 executing program 5: mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x90, 0x404002) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f0000000280)=0x80, 0x7ff) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000180)=0x100000001, 0x4) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000002c0)={{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, {0xa, 0x4e21, 0xff, @loopback, 0x7}, 0x3, [0x2, 0x8001, 0x7, 0xfff, 0x8, 0x8, 0x7]}, 0x5c) clone(0x3000000a0160100, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x400000037) setsockopt(r1, 0x1, 0x3, &(0x7f00000001c0)="b7accd31da0d8e42e637d853e5b73edcc280e58e239dd1d0a2f7bf7ccebdebf427e545ac65d6f145663a0a3d2b6706b17ee8f71bcfb9b3621b2b81c6af4e795a4f547b06183b7ee3a2c82154055b20c42adfb33d22d74df765adbf00836f0707aa41950698f01411fbe5dee1804be921f1cefd1d899a48f94a618a326502", 0x7e) wait4(0x0, 0x0, 0x0, 0x0) ftruncate(r1, 0x9) r3 = getpid() writev(0xffffffffffffffff, 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r3}) 03:50:04 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:04 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x15, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="00022bbd7000fedbdf250300000028000200040004000800020001000054921801000300000008000100c581000008000200ffffffff68000100080003000000000044000400200001000a0067240000000000000000000000000000000000000001bc070000200002000a004e2200000006fe8000000000000000000000000000aa02000000100001007500400000000000000000000000000000000000e2704a02d1a26a48e6f31616261467e6da7fa66299ebc7e2f1f9239b68750b158e10ed30552422a33632cc22ea870c0e76686128e064692aabfe5b6f01b4a2f1d70dcb437a32a285a4c76965140ebc8cf37555da65c82656b8b63b3d2bc726414df48542e49aa7155d0ab8beaeb8a40a6fdce5ebafe6c80605071cb99f33ec5f56439368caf66fc28dc48a547a7570a134bef26a36defc8d692d8a0c0ece235d6d0f60a4c8b9426398df1529c6ddbb87fd9e789535d5d5c03733328153863777624d2d67b299293f7339cf5cb2cb4c7c95ebbf0c1272739b95a0"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:04 executing program 0: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000480)={0x18, 0x0, 0x4}, 0x18) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100000001, 0x1, 0xa000}, 0x4) fallocate(r0, 0x0, 0x0, 0x4003ff) pipe2(0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/user\x00', 0x2, 0x0) linkat(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000100)=""/127, &(0x7f0000000000)=0x7f) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) lseek(r1, 0x0, 0x4) unshare(0x8000000) 03:50:04 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast2, @in=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) [ 1690.176153] device lo entered promiscuous mode [ 1690.212448] device lo left promiscuous mode 03:50:04 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x800, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002ec0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x3e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) clock_gettime(0x0, &(0x7f00000040c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/21, 0x15}], 0x1, &(0x7f0000000300)=""/53, 0x35}, 0x1}, {{&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f00000004c0)=""/244, 0xf4}, {&(0x7f00000005c0)=""/220, 0xdc}, {&(0x7f00000006c0)=""/11, 0xb}], 0x5, &(0x7f0000000780)=""/4096, 0x1000}, 0xffffffffffff6192}, {{&(0x7f0000001780)=@ipx, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001800)=""/47, 0x2f}, {&(0x7f0000001840)=""/9, 0x9}, {&(0x7f0000001880)=""/17, 0x11}, {&(0x7f00000018c0)=""/213, 0xd5}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002a40)=""/85, 0x55}, 0x8}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/101, 0x65}, {&(0x7f0000002b40)=""/19, 0x13}, {&(0x7f0000002b80)=""/229, 0xe5}, {&(0x7f0000002c80)=""/136, 0x88}], 0x4, &(0x7f0000002d80)=""/171, 0xab}, 0x7e0}, {{&(0x7f0000002e40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002ec0)}, {&(0x7f0000002f00)=""/128, 0x80}], 0x2, &(0x7f0000002fc0)=""/23, 0x17}, 0xffff}, {{&(0x7f0000003000)=@pppol2tpv3, 0x80, &(0x7f0000003140)=[{&(0x7f0000003080)=""/156, 0x9c}], 0x1}, 0x2}, {{&(0x7f0000003180)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003200)=""/252, 0xfc}, {&(0x7f0000003300)=""/157, 0x9d}], 0x2, &(0x7f0000003400)=""/142, 0x8e}, 0x20}, {{&(0x7f00000034c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003540)=""/201, 0xc9}, {&(0x7f0000003640)=""/50, 0x32}, {&(0x7f0000003680)=""/120, 0x78}, {&(0x7f0000003700)=""/144, 0x90}, {&(0x7f00000037c0)=""/49, 0x31}, {&(0x7f0000003800)=""/114, 0x72}, {&(0x7f0000003880)=""/223, 0xdf}, {&(0x7f0000003980)=""/51, 0x33}, {&(0x7f00000039c0)=""/86, 0x56}], 0x9}, 0x10001}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003b00)=""/89, 0x59}, {&(0x7f0000003b80)=""/178, 0xb2}, {&(0x7f0000003c40)=""/83, 0x53}, {&(0x7f0000003cc0)=""/200, 0xc8}, {&(0x7f0000003dc0)=""/11, 0xb}], 0x5}, 0x8b00000000000000}], 0x9, 0x2000, &(0x7f0000004100)={r3, r4+30000000}) sendmsg$nl_route(r2, &(0x7f0000004200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x9000101}, 0xc, &(0x7f00000041c0)={&(0x7f0000004140)=@ipv4_getaddr={0x44, 0x16, 0x607, 0x70bd25, 0x25dfdbfc, {0x2, 0xbf, 0x10, 0x0, r5}, [@IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_LABEL={0x14, 0x3, 'bridge_slave_1\x00'}, @IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x61}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) getpeername(r1, &(0x7f00000000c0)=@can, &(0x7f0000000000)=0x80) mkdir(&(0x7f0000000040)='./file0\x00', 0xc0) [ 1690.235301] binder: BINDER_SET_CONTEXT_MGR already set [ 1690.240894] binder: 20975:20987 ioctl 40046207 0 returned -16 [ 1690.280495] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1690.317401] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) 03:50:04 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) io_setup(0x6, &(0x7f0000000000)=0x0) io_getevents(r1, 0x4, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000140)={0x0, 0x1c9c380}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1690.341835] binder: 20975:20999 unknown command 859701248 [ 1690.341860] binder: 20975:20999 ioctl c0306201 200002c0 returned -22 [ 1690.342553] binder: 20975:20999 Release 1 refcount change on invalid ref 1 ret -22 [ 1690.415053] binder: 20975:21003 BC_ACQUIRE_DONE u0000000000000000 no match [ 1690.530440] binder: 20975:20987 transaction failed 29201/-28, size 24-8 line 3136 03:50:04 executing program 3: r0 = socket$inet6(0xa, 0x200000000800, 0xffffffffffffff6c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:04 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0xfffffffffffffffe) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070") r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x2, 0x9) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2}, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x4f, 0x0) 03:50:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000380)=0x3, 0x4) r1 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x640, 0x4c) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000240)=0xf2eb, 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x12000, 0x0) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000440), &(0x7f0000000340)=0x251) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) syz_emit_ethernet(0x8d, &(0x7f00000000c0)={@random="69d22345bfb2", @local, [{[{0x9100, 0x8000, 0x7}], {0x8100, 0xfffffffffffffffc, 0x1ff, 0x4}}], {@generic={0x10, "dfd0d5361615ea4f25792c46b34a08647bbc0cdafd72715827a99e938790b47687e81eadf3a2441f87960bca69c08414d5f0ad0d6b1343251e0b0c08ed46871062be1331cea431e04ce47b4d91a1de5b478460e5be9a6def96c90317e18ab791b3d46c6176c19649b24650b741f57628a0adadc962e627"}}}, &(0x7f0000000000)={0x0, 0x1, [0x417, 0xa0c, 0xb0f, 0xea5]}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000400)=0xfa, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) rt_sigtimedwait(&(0x7f00000001c0)={0x6}, &(0x7f00000002c0), &(0x7f00000003c0), 0x8) [ 1691.550953] device lo entered promiscuous mode [ 1691.572004] device lo left promiscuous mode 03:50:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x15, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) [ 1691.923452] binder: BINDER_SET_CONTEXT_MGR already set [ 1691.936300] binder: 21033:21035 ioctl 40046207 0 returned -16 [ 1691.953596] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1691.973454] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1691.995934] binder: 21033:21035 transaction failed 29201/-28, size 24-8 line 3136 [ 1692.006937] binder: 21033:21036 unknown command 859701248 [ 1692.006947] binder: 21033:21036 ioctl c0306201 200002c0 returned -22 [ 1692.008013] binder: 21033:21036 Release 1 refcount change on invalid ref 1 ret -22 [ 1692.033475] binder: 21033:21036 BC_ACQUIRE_DONE u0000000000000000 no match 03:50:07 executing program 5: socketpair$unix(0x1, 0x2000000000000005, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000340), 0x4) socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x10, r1, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioperm(0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0x4}, 0x28, 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x1, 0x7) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000007c0)=0x2c0, 0x4) open(&(0x7f0000000200)='./bus\x00', 0x80000, 0x3) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141046, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, 0x0, 0x8000ffeffffe) 03:50:07 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x2, 0x0, 0x8000, 0x0, 0x5, 0x4, 0xa, 0x0, 0x0, 0xfec9, 0x5, 0x0, 0x10001, 0x0, 0x7a10, 0x0, 0xbc0c, 0xffffffffffff0001, 0x80, 0x9, 0x200, 0x0, 0x101, 0x8, 0x9, 0xffffffff, 0x0, 0x7, 0x7ff, 0xc3d3, 0x1, 0xc5, 0x4a, 0x8, 0xb8f, 0x0, 0x5, 0x5, @perf_bp={0x0}, 0x0, 0x8, 0x4, 0x5, 0xfffffffffffffff8, 0x9d, 0x3}, 0x0, 0xd, r0, 0x8) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x3ba}, 0x100) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) 03:50:07 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="07000000000000000a004e230000040000000000000000000000ffff7f000001990000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000060000000a004e20000000400000000000000000000000000000000101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000ffffe8000000000000000000000000000aa010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e2000000018fe880000000000000000000000000001ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000009000000000000000000000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000005fe880000000000000000000000000001fcffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400008000ff010000000000000000000000000001480d00000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000039871b539b6e645eb0f128d736a9455f6d4296b07cefd23dc2c6152afcb7faf6a6bfc919197ba05d5bfd6f36643a2bcd82abcb16c661"], 0x390) pipe2(&(0x7f0000000080), 0x84003) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2, 0x4}, 0xd4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x10000, @loopback}, 0x1c) r1 = open(&(0x7f0000000000)='./file0\x00', 0x96002, 0x1) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 03:50:07 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) signalfd(r0, &(0x7f0000000040)={0x7}, 0x8) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x41e, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000007000000ff7f00078d00000000000000000000000900000000000000ff0100000000000000000000000000000000000000000000000000000000000006000000030000000300000000000000020000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d4d7cd61e34c7f7a26e8ce6900df00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) 03:50:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1a0fe8ff0100ff6dacf9ffddbdd6"], 0x10}}, 0x0) 03:50:07 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x17, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a79650000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="00022bbd7000fedbdf250300000028000200040004000800020001000054921801000300000008000100c581000008000200ffffffff68000100080003000000000044000400200001000a0067240000000000000000000000000000000000000001bc070000200002000a004e2200000006fe8000000000000000000000000000aa02000000100001007500400000000000000000000000000000000000e2704a02d1a26a48e6f31616261467e6da7fa66299ebc7e2f1f9239b68750b158e10ed30552422a33632cc22ea870c0e76686128e064692aabfe5b6f01b4a2f1d70dcb437a32a285a4c76965140ebc8cf37555da65c82656b8b63b3d2bc726414df48542e49aa7155d0ab8beaeb8a40a6fdce5ebafe6c80605071cb99f33ec5f56439368caf66fc28dc48a547a7570a134bef26a36defc8d692d8a0c0ece235d6d0f60a4c8b9426398df1529c6ddbb87fd9e789535d5d5c03733328153863777624d2d67b299293f7339cf5cb2cb4c7c95ebbf0c1272739b95a0"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:07 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="1e06b8f1cfc824dbaab1a51584ba03ad153f8aa936f1e800185257483957402dd278d0a8b1f7296095db76e0bd3e4febd7b6e79a0441abfcbd3a2f34ff9b0a6fbef5b4eaa4770aaf7a72f86eaabe534f2d00601b38a6509b49191b6818317d915e01bf", 0x63, 0x4, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @loopback, 0x8}, 0x1c) 03:50:07 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f0000000840)='/dev/fuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x2f}, {0x0, 0x6, 0x9, 0x6, 0x3a5, 0x0, 0x0, 0x1}, {0x2, 0x7859, 0x0, 0x8}, 0xc28c, 0x6e6bb8, 0x0, 0x0, 0x3}, {{@in=@broadcast, 0x4d5, 0x2b}, 0xa, @in6=@remote, 0x3507, 0x4, 0x0, 0x10001, 0x0, 0xd2}}, 0xe8) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = dup(r2) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000040)) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x2cc, 0xf, 0x7, 0x200, 0x70bd28, 0x25dfdbff, {0xb}, [@generic="ac41e99240691ed1c3c3f823636a6b859d8e712843cb4905658cc0a6249d18a6f1f67303916097ba8cc11b879007f94759ef78fed44816d608fa13a1c0bc1ada60a11e0d5bcd396cc835afb015d7f83dc683c3485418aa3a44b66c1ec93e57cbc5f2bbf6674c93d7f02e20cbd7b56d0cf3a3066fa519bebe15073251fd0ec65484832cce3f79e958e10faf86d9063d195c6f2ab5825f8200ace03ecf544cafa7b5e1785d69597df8ddd192baf6c6294fe400bbafce84791b98115db65ccb0e503c", @nested={0x1ec, 0x24, [@typed={0x14, 0x31, @ipv6=@local}, @generic="26005b4fc8ed6be70a44743ea8e6d0445d3a2e814030d32cce8ba8fdb4a7a110f4d10460445a6366b82b1380971a0f7a462f2b56fc54d8918cb9a3739ff44e8391a7e0317cffd44de3a1738919bebf266effb502ce87c2bd51f4d4fb44787c8664a55a0b6577430e815358463cbaf682ecef83a3ddbc9ced9b766d4f2928b6308bc069eb9111b2427c2748d5f0d245c532a3bc0ff66aa863b8099760f58f089149919e517cbe52cc120bfc84ef1addd097a21520a65f3c14a5260c", @typed={0xc, 0x7b, @u64=0x3}, @generic="c77208117d6a3e3de2dfb3fe29f8cd01c75c334624e979971bae07f33e1294cbb9c80d03c0351de23931d46e9132e355193ab2d25fb0f1b25c9bf5d8d3b50b6dbaee9ad42228", @typed={0x8, 0x51, @pid=r1}, @generic="1194fab05f2a8ae418605f32adaf2e31335f6e1a4e48d3f7e7e6cd53ec62eaf1937cf6a58b6ddd1a0daea5b0ed7da3bcc4e0d6cc7b986bb785df159e724a3fae1be4844474e41495a73d4500ebb6277ad8622db85db7380f0678ffede2c5370a45501ea62e2e05953f13ec20d993f62bef892083db8648714d3b7d92ebe9d0bb6301edddacf518a051edb6aa9022508be6aa6c3650a05a21d28de92e7e9153bcf081487e4a6f7260782905ce65825da63045278c5cac44f002b6be7d9c34"]}, @nested={0x8, 0xf, [@typed={0x4, 0x10}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000340)={0x6, 0x8000, 0x0, 0x0, 0x1f}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=',group']) 03:50:07 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) getitimer(0x1, &(0x7f0000000140)) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0xb8) [ 1693.359382] audit_printk_skb: 57 callbacks suppressed [ 1693.359419] audit: type=1400 audit(2000001007.370:7845): avc: denied { create } for pid=21050 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:07 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400200, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100004}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xadc}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="dc02008300000000000000000000000000000023d85dbd94f4c668c88ab127a33bdb1afc967dd02696a3e4d0b61f50b705d85e840c4dc38ee8162c5cc970a2fddd6c01cb67bb", @ANYRES16=r2, @ANYBLOB="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"], 0x2dc}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1693.414984] audit: type=1400 audit(2000001007.450:7846): avc: denied { call } for pid=21042 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 03:50:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x801, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12373188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000024c0)) [ 1693.415109] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1693.415116] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1693.415137] binder: 21042:21056 transaction failed 29201/-28, size 24-8 line 3136 [ 1693.415817] binder: 21042:21056 unknown command 859701248 [ 1693.415825] binder: 21042:21056 ioctl c0306201 200002c0 returned -22 03:50:07 executing program 1: r0 = creat(&(0x7f0000000040)='\x00', 0x11) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="12494edf56f4bcba87be32c5937189cab9a720877a3311f08e079a28b032e8d1783433616fb2817327a8ef5d6d677dfad18a0cfba301ea9ed28aeac3aa2fa0c913e5ca693c0f367d5cf05dee7ab8a3f8a15d8c836c1b6e15f69aac1d3619c0ddc289a1e0355926ec483742f86a0883f51ae1d4fc83af3ff18c8b184e0a7228f77a8a2e55f4b0805f8081e6f4", 0x8c}, {&(0x7f0000000140)="b4317893bbe6cdb4484c4fedf26c40867ebd0f91d12f07947c76933e0cbd2ecfffddf7cc18e5512f5eacb0f2e141fa2846e1d19886ba2ca00f18ca0134a74a2ae878110371a7dacb43ad10f00231e4e1bc82dd20fffd37b368eec880de24b30add8cbc020eb7e2253bda5a397b60eaf81891a980baadfd966a8b55e9fc17db9de4a572a9818d0622eeeee72c4c14dc4480b29f747374dc1e02830bfd40b41e0f02df26dae44fed553d38087ebcd806d2347fb1a0ab6dee40", 0xb8}], 0x2, 0x45) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4200) [ 1693.415911] binder: 21042:21056 Release 1 refcount change on invalid ref 1 ret -22 [ 1693.416363] audit: type=1400 audit(2000001007.450:7847): avc: denied { create } for pid=21042 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1693.416826] audit: type=1400 audit(2000001007.450:7848): avc: denied { write } for pid=21042 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1693.426752] binder: BINDER_SET_CONTEXT_MGR already set [ 1693.426830] binder: 21042:21052 ioctl 40046207 0 returned -16 [ 1693.466866] binder: 21042:21052 BC_ACQUIRE_DONE u0000000000000000 no match [ 1693.485198] audit: type=1400 audit(2000001007.540:7849): avc: denied { read } for pid=21042 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1693.648811] audit: type=1400 audit(2000001007.700:7850): avc: denied { create } for pid=21075 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1693.650053] audit: type=1400 audit(2000001007.700:7851): avc: denied { write } for pid=21075 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1693.688835] audit: type=1400 audit(2000001007.740:7852): avc: denied { read } for pid=21075 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1693.691028] audit: type=1400 audit(2000001007.740:7853): avc: denied { create } for pid=21075 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1693.691498] audit: type=1400 audit(2000001007.740:7854): avc: denied { write } for pid=21075 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$keychord(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000480)='/dev/input/event#\x00', 0x0, 0x0) gettid() r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4000040000, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000001c0)={@mcast1, 0x5}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7f, &(0x7f0000000080)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000300)='/dev/loop-control\x00') getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x100000001, &(0x7f0000000200)=""/164) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000400)={{0x33, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4, 'lblc\x00', 0x2, 0x7ff, 0x46}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0x8001, 0x3, 0x67}}, 0x44) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) r7 = creat(0x0, 0x0) getsockopt$inet_mreqsrc(r6, 0x0, 0x0, &(0x7f0000000180)={@initdev, @loopback, @remote}, &(0x7f00000002c0)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0xff, 0x100000000000001}, 0x20) fcntl$setpipe(r1, 0x407, 0xfff) getsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f0000000340)={@empty, 0x0}, &(0x7f0000000380)=0x14) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000003c0)=r8) 03:50:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) socket$inet6(0xa, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = dup(r0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0xc1, &(0x7f0000000340)=ANY=[@ANYBLOB="bbfa9db86237aaaaaaaaaa088137ffff00b3101100000000000000000000000000000000ffffffffffff00046254f4b1e2275fd203c1896ab45a068e0fafd592aa5d88f3f9612828157b8fd0512773706afbf3cc76a991991b27f2fb938130f7e26ecbda03d45144fef297ecd9f8a44728362b0c635e280e5a8cec91a0dee9f39befba451b80a7363dca2fa8e379184896ba8b3ef6e25b2f20e2490ddf719d0d5d18e751873432fb0887c5a40eccb3f258fab5da63b51623fb963514901b67240653c0d66e8522e1aa0b1cdcc54a5c4f7c7f1c47ea0f3dac10c3648835790887d8a7ff2df21885d449dd731b507b69f69ff0d5fe06b575c2dca23054bb2011a3cfa3e425066511da2986ecd32d77227875031a679b33097901dd9cbc40cbcdc852ede44241b275de1c436b98e6910eaae4c97cc672e2276a10abd0d37a8a27034e70e37de98d82c0553b9b0f2a4ea24290834f3b9db59376fb643f3d2e1dc460827e22f45dbb71a49073167fc0b0547a79297e4af7a4"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x4030582a, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x7fff, 0x80000001}, 0x14) shutdown(r0, 0x0) 03:50:08 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x1000000000fe, 0x4, 0x4, 0x2d, 0xffffffffffffff9c, 0xfffffffffffffff9}, 0x2c) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x80000, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000180)={0x18, 0x0, 0x5, {0xd0}}, 0x18) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:08 executing program 1: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c173f3188b070") mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000000c0)='./control\x00', r0, &(0x7f0000000100)='./file0\x00', 0x5) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000080)=':\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='cgroupnodev(eth1(user\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='ppp0:\x00'], &(0x7f0000000380)=[&(0x7f00000002c0)='\\$+\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='&$\xe6\x00']) 03:50:08 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x17, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a79650000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:08 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x4, 0x0, 0xff, 0x100000000000001, 0xffffffffffffffff}, 0x20) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) r2 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x10000, 0x4, 0x6, 0xbd, 0x19, 0x7, 0x7fff, 0x3ff, 0x3f, 0x8, 0x4, 0x2}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.stat\x00', 0x0, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)={0x2000000c}) 03:50:08 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='c\x01\x00\x01\x00p2\x00', 0x1040000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)={0x0, @aes256}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = open(&(0x7f0000000100)='./file1\x00', 0x1000000000000, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0xfff, 0x4) fstat(r2, &(0x7f0000000180)) 03:50:08 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0xfffffffffffffe36) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) setsockopt$inet_opts(r1, 0x0, 0xa56aeb424c2c3afd, &(0x7f00000000c0)="c276c7d2e10bf8c86a460cb3f010b4dfec220d0fc353b6bde932e3cf2443de410ae73f3e4487b5", 0x27) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) 03:50:08 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x80080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40485404, &(0x7f0000000000)) 03:50:08 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r1, 0x5) setsockopt$sock_timeval(r0, 0x1, 0x114, &(0x7f0000000000)={0x0, 0x2710}, 0xffa4) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f00000000c0)) [ 1694.758070] binder: BINDER_SET_CONTEXT_MGR already set 03:50:08 executing program 3: r0 = socket$inet6(0xa, 0x800, 0x40000004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'team0\x00', @dev={[], 0x1d}}) 03:50:08 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f0000000200)='eth1eth0\x00'}, 0x30) get_robust_list(r2, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f00000002c0)={&(0x7f0000000280)}, 0x0, &(0x7f0000000340)={&(0x7f0000000300)}}, &(0x7f0000000400)=0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000440)="0034af223091a367a1df70966bf47b33c3a0665979", 0x15}], 0x1) setrlimit(0xc, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f0000000140), 0x4000000000001fc, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) listxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/152, 0x98) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'nr0\x00', 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) sched_getaffinity(r5, 0x8, &(0x7f00000001c0)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @multicast2, r4}, 0xc) getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0xffffffffffffff40}, {0x5, 0x3}]}) [ 1694.800516] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1694.809132] binder: 21106:21111 ioctl 40046207 0 returned -16 [ 1694.825405] binder: 21106:21111 unknown command 859701248 [ 1694.829777] binder: 21106:21111 ioctl c0306201 200002c0 returned -22 [ 1694.842912] binder: 21106:21111 Release 1 refcount change on invalid ref 1 ret -22 [ 1694.916889] binder: 21106:21147 BC_ACQUIRE_DONE u0000000000000000 no match [ 1695.014557] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1695.038097] binder: 21106:21120 transaction failed 29201/-28, size 24-8 line 3136 03:50:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000180)={0xfffffffffffffffe, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1}, 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet6(0x10, 0x802, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200001, 0x80) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f0000000240)=0x9, 0x4) rt_sigreturn() sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000000c0)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900170035000c00060000001900150007000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, 0x0, 0x186}, 0xffffffffffffffff) 03:50:09 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socket$inet6(0xa, 0x1000000000002, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={{0x0, 0x7530}, {0x77359400}}, 0x100) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f654e5f696406", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000080)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r4, 0x0, &(0x7f0000000600), 0x800) r5 = syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x20000) write$P9_RRENAME(r5, &(0x7f0000000440)={0x7, 0x15, 0x2}, 0x7) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x841405, 0x0) mount(0x0, 0x0, 0x0, 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 03:50:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x10001, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x1b6, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x40000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x7f, 0x1, 0xfffffffffffffffc, 0xa2b}, {0x9, 0xfff}, {0x7, 0xfffffffffffffe93, 0x10001}, {0x6, 0x0, 0x6eb93baa, 0x7}, {0x3, 0xffff, 0x100, 0x7}, {0x1000, 0x2, 0x7, 0x644b}]}, 0x10) 03:50:09 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @dev}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000000c0)) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}], {0x10, 0x2}}, 0x2c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000240)={0x4, 0x5, 0x0, 0x0, 0x0, 0x0}, 0x2c) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x100010, r0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x18) 03:50:09 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x17, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a79650000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:09 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x3, 0x6c, [], 0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/108}, &(0x7f0000000080)=0x78) setresgid(0x0, r1, 0x0) setresuid(0x0, 0xee01, 0x0) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x1000002192c04) setresuid(0x0, 0x0, 0x0) setregid(0x0, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, r2) 03:50:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="69d01dad40829c5009246fce51ecbb73802fe0000001000000"], 0x1) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2b) fcntl$setstatus(r1, 0x4, 0x42803) 03:50:09 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xffffffffffffffff, @loopback}, 0x1c) 03:50:09 executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0xffffffffffffdde, 0x0, 0xffffffffffffff5c}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) getpid() add_key$user(0x0, &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, 0x0, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000280)='syz') init_module(&(0x7f00000000c0)='syz', 0x3, &(0x7f00000001c0)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0x10) sendto$inet(r3, &(0x7f0000000540)="c68a2d055625224002cc299a52e95c869430fcaea4666690444f6f0424eed4ce443479d389606fdeab11506c6785a5a7192e22fd02a8614f368b2cb9df", 0x3d, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, 0x0, 0x0) 03:50:09 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0x4}, 0x1c) 03:50:09 executing program 5: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0, 0x2000000208972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000b14000/0x3000)=nil, 0x3000, 0x1020000000a) r0 = getpid() tkill(r0, 0x22) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2403, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x88010}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="68010000", @ANYRES16=r2, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) 03:50:09 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x200000, 0x0) write$eventfd(r1, &(0x7f00000000c0)=0x5, 0x8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xce20, 0x81, @dev={0xfe, 0x80, [], 0x1a}, 0x7fffffff}, 0x100000188) 03:50:09 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x4, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) 03:50:09 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_reqkey_keyring(0xe, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/159, 0x9f}, {&(0x7f00000000c0)=""/137, 0x89}, {&(0x7f0000000180)=""/233, 0xe9}, {&(0x7f0000000280)=""/38, 0x26}, {&(0x7f00000002c0)=""/67, 0x43}, {&(0x7f0000000340)=""/75, 0x4b}], 0x6, &(0x7f0000000440)=""/143, 0x8f}, 0x88}, {{&(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/187, 0xbb}, {&(0x7f0000000640)=""/70, 0x46}], 0x2, &(0x7f0000000700)=""/172, 0xac}, 0x9}, {{&(0x7f00000007c0)=@generic, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000840)=""/149, 0x95}, {&(0x7f0000000900)=""/18, 0x12}, {&(0x7f0000000940)=""/188, 0xbc}, {&(0x7f0000000a00)=""/135, 0x87}, {&(0x7f0000000ac0)=""/188, 0xbc}, {&(0x7f0000000b80)=""/9, 0x9}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/191, 0xbf}, {&(0x7f0000001c80)=""/158, 0x9e}], 0x9, &(0x7f0000001e00)=""/106, 0x6a}, 0x1}, {{&(0x7f0000001e80)=@can, 0x80, &(0x7f0000002240)=[{&(0x7f0000001f00)=""/181, 0xb5}, {&(0x7f0000001fc0)=""/152, 0x98}, {0xfffffffffffffffe}, {&(0x7f0000002080)=""/143, 0x8f}, {&(0x7f0000002140)=""/204, 0xcc}], 0x5, &(0x7f00000022c0)=""/4096, 0x1000}, 0x100}, {{&(0x7f00000032c0)=@ax25={{0x3, @null}, [@remote, @remote, @null, @default, @rose, @rose, @bcast, @netrom]}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003340)=""/80, 0x50}, {&(0x7f00000033c0)=""/164, 0xa4}, {&(0x7f0000003480)=""/201, 0xc9}, {&(0x7f0000003580)=""/39, 0x27}, {&(0x7f00000035c0)=""/16, 0x10}, {&(0x7f0000003600)=""/231, 0xe7}, {&(0x7f0000003700)=""/8, 0x8}, {&(0x7f0000003740)=""/83, 0x53}], 0x8, &(0x7f0000003840)=""/169, 0xa9}, 0x10001}, {{&(0x7f0000003900)=@ll, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003980)=""/176, 0xb0}, {&(0x7f0000003a40)=""/175, 0xaf}], 0x2, &(0x7f0000003b40)=""/143, 0x8f}, 0x6}, {{&(0x7f0000003c00)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000005080)=[{&(0x7f0000003c80)=""/220, 0xdc}, {&(0x7f0000003d80)=""/87, 0x57}, {&(0x7f0000003e00)=""/50, 0x32}, {&(0x7f0000003e40)=""/24, 0x18}, {&(0x7f0000003e80)=""/191, 0xbf}, {&(0x7f0000003f40)=""/57, 0x39}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/236, 0xec}], 0x8, &(0x7f0000005100)=""/4096, 0x1000}, 0x100000001}, {{&(0x7f0000006100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000006480)=[{&(0x7f0000006180)=""/3, 0x3}, {&(0x7f00000061c0)=""/135, 0x87}, {&(0x7f0000006280)=""/238, 0xee}, {&(0x7f0000006380)=""/231, 0xe7}], 0x4, &(0x7f00000064c0)=""/125, 0x7d}, 0x1}], 0x8, 0x2000, &(0x7f0000006740)={0x77359400}) [ 1695.802554] binder: BINDER_SET_CONTEXT_MGR already set [ 1695.864914] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1695.873930] binder: 21180:21185 ioctl 40046207 0 returned -16 [ 1695.891434] binder: 21180:21185 unknown command 859701248 [ 1695.891535] binder: 21180:21185 ioctl c0306201 200002c0 returned -22 [ 1695.892422] binder: 21180:21185 Release 1 refcount change on invalid ref 1 ret -22 [ 1695.946499] binder: 21180:21209 BC_ACQUIRE_DONE u0000000000000000 no match 03:50:10 executing program 0: sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) setxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r2, 0x0, 0x7fffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000140), 0x8800000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 1696.033208] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1696.043098] binder: 21180:21208 transaction failed 29201/-28, size 24-8 line 3136 03:50:10 executing program 5: ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000200)={0x0, @speck128}) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket(0x0, 0x0, 0x0) stat(&(0x7f0000000700)='./file0\x00', 0x0) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f0000000a40)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r2, r0, 0x0, 0x1, &(0x7f0000000100)='\x00', r3}, 0x30) 03:50:10 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x3}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000140)) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r3, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x95e}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc9a}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe0}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000000c0)=0x7) 03:50:10 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) [ 1696.671257] binder: BINDER_SET_CONTEXT_MGR already set [ 1696.676765] binder: 21223:21235 ioctl 40046207 0 returned -16 [ 1696.702658] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1696.728731] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1696.746510] binder: 21223:21236 unknown command 859701248 [ 1696.746520] binder: 21223:21236 ioctl c0306201 200002c0 returned -22 [ 1696.799496] binder: 21223:21236 BC_ACQUIRE_DONE u0000000000000000 no match [ 1696.826053] binder: 21223:21235 transaction failed 29201/-28, size 24-8 line 3136 03:50:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40086303}], 0x0, 0x0, 0x0}) 03:50:12 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='sessionid\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x98, 0x4, 0x3, 0x300, 0x70bd2a, 0x25dfdbff, {0xf, 0x0, 0x7}, [@nested={0x84, 0xd, [@generic="14fd730140834ade6c31a2c724178580feb382570ab46b32ed136fcaa0d9b008731e17d4ac39c71568f144ad242f41cb6fcdde43c70e8333bac29d3b561b57041b4e34f0c02169b722df86e41e364f7662ae542a987b6e087ce16245d17b14a872300c5d59ce2b026699066aefe5e234cb1f88668694", @typed={0x8, 0x76, @pid}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040080) getdents64(r1, &(0x7f0000002400)=""/4096, 0xc8b7) dup2(0xffffffffffffffff, 0xffffffffffffffff) epoll_create1(0x0) syz_genetlink_get_family_id$tipc(0x0) mount(&(0x7f0000000080)=@md0='/dev/md0\x00', &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='f2fs\x00', 0x2040000, 0x0) open(0x0, 0x0, 0x0) 03:50:12 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = dup2(r0, r0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'veth0_to_bond\x00', 0x200}) ioctl$FIONREAD(r1, 0x541b, 0x0) 03:50:12 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) io_setup(0x800, &(0x7f0000000100)=0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x354}]) 03:50:12 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:12 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@remote, @in=@empty}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:12 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) 03:50:12 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0xf0ff7f) 03:50:12 executing program 4: r0 = creat(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100), 0x1c) r3 = dup2(r2, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0x0, 0x7f}, @sack_perm], 0x90b54a3498efeee) dup2(r1, r0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 03:50:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x102f9) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_group_source_req(r1, 0x29, 0x2000000002c, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x35b) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x42803) [ 1698.540344] binder: BINDER_SET_CONTEXT_MGR already set [ 1698.573299] binder: 21243:21251 ioctl 40046207 0 returned -16 03:50:12 executing program 1: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6(0xa, 0x803, 0x5) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond0\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bond0\x00', 0x8a03}) 03:50:12 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000000c0)={{0x21, @rand_addr=0x5, 0x4e21, 0x1, 'dh\x00', 0x20, 0x1ff, 0x6f}, {@empty, 0x4e20, 0x4, 0xcbdb, 0x401, 0x5}}, 0x44) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1698.612607] audit_printk_skb: 105 callbacks suppressed [ 1698.612619] audit: type=1400 audit(2000001012.660:7890): avc: denied { call } for pid=21243 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 03:50:12 executing program 3: r0 = socket$inet6(0xa, 0x400000000005, 0x0) sendto$inet6(r0, &(0x7f0000000000)="c777a9060e6f", 0x6, 0x800, &(0x7f00000000c0)={0xa, 0x4e22, 0xb7, @mcast2, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) nanosleep(&(0x7f00000001c0)={r1, r2+30000000}, &(0x7f0000000200)) r3 = open(&(0x7f0000000040)='./file0\x00', 0x80002, 0x80) ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f0000000100)={0x6, 0x3}) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000280)="c24565e085b609b0015a00d4adbdd92eb60a902e0a16e6d305bde5e01af2f6c753ff0fed03923b5efc69b7e86eb781c9bdc534fd06718b33d2fdab97a5fa47be39958fea22e2ce22a4738bdab6c32541104ac33dbf3d0be223cc35caacbcad6da33c10c5f21ec19285072cefe65feca8dd5970ee671a4300c3430302888180aede32b81ffa", 0x85, 0x11, &(0x7f0000000340)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x20}, 0x8}, 0x1c) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000240)=0xfdc) [ 1698.612752] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1698.612759] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) 03:50:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000fc0)={'syz1\x00', {}, 0x0, [], [], [0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1698.612782] binder: 21243:21267 transaction failed 29201/-28, size 24-8 line 3136 [ 1698.615061] binder: 21243:21267 unknown command 859701248 [ 1698.615069] binder: 21243:21267 ioctl c0306201 200002c0 returned -22 [ 1698.616556] audit: type=1400 audit(2000001012.670:7891): avc: denied { create } for pid=21243 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) close(r0) [ 1698.619374] audit: type=1400 audit(2000001012.670:7892): avc: denied { write } for pid=21243 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1698.678472] binder: 21243:21273 BC_ACQUIRE_DONE u0000000000000000 no match [ 1698.744994] audit: type=1400 audit(2000001012.800:7893): avc: denied { read } for pid=21243 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1699.119602] input: syz1 as /devices/virtual/input/input39 [ 1699.166833] input: syz1 as /devices/virtual/input/input40 03:50:13 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x4}}) 03:50:13 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:13 executing program 3: r0 = socket$inet6(0xa, 0x7, 0x5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000280)={0xa0, 0x19, 0x2, {0x40, {0x749bfd1e5fe8eb06, 0x3, 0x4}, 0x20, r2, r3, 0x3, 0xfffffffffffffffe, 0x658, 0xff, 0xfffffffffffffe01, 0x8001, 0x100000000, 0x0, 0x100000000, 0xd7, 0xffffffff, 0x8, 0x4, 0xe86, 0xfd}}, 0xa0) [ 1700.074104] binder: BINDER_SET_CONTEXT_MGR already set [ 1700.079523] binder: 21328:21329 ioctl 40046207 0 returned -16 03:50:14 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) times(&(0x7f0000000180)) getsockopt(r0, 0x1000, 0x800, &(0x7f00000000c0)=""/150, &(0x7f0000000000)=0x96) [ 1700.178352] binder: 21328:21338 unknown command 859701248 [ 1700.184089] binder: 21328:21338 ioctl c0306201 200002c0 returned -22 [ 1700.206628] audit: type=1400 audit(2000001014.260:7895): avc: denied { create } for pid=21328 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 03:50:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwritev(r1, &(0x7f0000003440)=[{0x0}], 0x1, 0x40000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x40c53166, 0x291adcf1}) fallocate(r1, 0x0, 0x0, 0x7f) [ 1700.212190] audit: type=1400 audit(2000001014.240:7894): avc: denied { call } for pid=21328 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1700.224604] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1700.224651] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1700.225908] binder: 21328:21329 transaction failed 29201/-28, size 24-8 line 3136 [ 1700.343942] binder: 21328:21329 BC_ACQUIRE_DONE u0000000000000000 no match [ 1700.544224] audit: type=1400 audit(2000001014.600:7896): avc: denied { write } for pid=21328 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1700.652215] audit: type=1400 audit(2000001014.700:7897): avc: denied { read } for pid=21328 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:24 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') exit(0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/46, 0x2e}], 0x1, 0x0) 03:50:24 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x1, 0x2) 03:50:24 executing program 0: 03:50:24 executing program 4: 03:50:24 executing program 5: 03:50:24 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:24 executing program 5: 03:50:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x800000103c, 0x0) execve(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c3c4e2c9975842c4817ddda700000080425959d319c421f4577ea2") open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000180)={@mcast2}, 0x14) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, 0x0, 0x0) 03:50:24 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000005c0)=[{0x0, 0x22c}], 0x1, 0x0) 03:50:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000400)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x629cf4d0148abe4d, {0x2, 0x4e24, @broadcast}, 'syz_tun\x00'}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='hybla\x00', 0x6) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x2000003d, 0x0, 0x0) 03:50:24 executing program 0: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="4c0000001200ff09fffd956fa283b700008c0e02000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 1710.272169] binder: BINDER_SET_CONTEXT_MGR already set [ 1710.292983] binder: 21516:21519 ioctl 40046207 0 returned -16 03:50:24 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}, 0x20000000000000}, 0x1c) [ 1710.314896] audit: type=1400 audit(2000001024.370:7898): avc: denied { call } for pid=21516 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1710.315021] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1710.315030] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1710.315053] binder: 21516:21527 transaction failed 29201/-28, size 24-8 line 3136 [ 1710.316872] binder: 21516:21527 unknown command 859701248 [ 1710.316881] binder: 21516:21527 ioctl c0306201 200002c0 returned -22 [ 1710.317027] binder: 21516:21527 ioctl c0306201 0 returned -14 [ 1710.317483] audit: type=1400 audit(2000001024.370:7899): avc: denied { create } for pid=21516 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1710.318095] audit: type=1400 audit(2000001024.370:7900): avc: denied { write } for pid=21516 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:24 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) syncfs(r0) r1 = fcntl$getown(r0, 0x9) ioprio_set$pid(0xfffffffffffffffe, r1, 0x7fb) syncfs(r0) accept$unix(r0, 0x0, &(0x7f0000000100)) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x2, 0x0) 03:50:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) close(r1) 03:50:24 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="00022bbd7000fedbdf250300000028000200040004000800020001000054921801000300000008000100c581000008000200ffffffff68000100080003000000000044000400200001000a0067240000000000000000000000000000000000000001bc070000200002000a004e2200000006fe8000000000000000000000000000aa02000000100001007500400000000000000000000000000000000000e2704a02d1a26a48e6f31616261467e6da7fa66299ebc7e2f1f9239b68750b158e10ed30552422a33632cc22ea870c0e76686128e064692aabfe5b6f01b4a2f1d70dcb437a32a285a4c76965140ebc8cf37555da65c82656b8b63b3d2bc726414df48542e49aa7155d0ab8beaeb8a40a6fdce5ebafe6c80605071cb99f33ec5f56439368caf66fc28dc48a547a7570a134bef26a36defc8d692d8a0c0ece235d6d0f60a4c8b9426398df1529c6ddbb87fd9e789535d5d5c03733328153863777624d2d67b299293f7339cf5cb2cb4c7c95ebbf0c1272739b95a0"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:24 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x20) fallocate(r0, 0x0, 0x9, 0x14b8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x10000000000001a5, 0x4d) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') [ 1710.371496] binder: 21516:21545 BC_ACQUIRE_DONE u0000000000000000 no match [ 1710.400096] audit: type=1400 audit(2000001024.450:7901): avc: denied { read } for pid=21516 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:24 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:25 executing program 4: r0 = socket$inet6(0x10, 0x2, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2000000, 0x10000030) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$9p(r1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000180)) sendmsg(r0, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5500000018007fafb72d1cb2a4a280930206070000a843096c2623690400080004000c0816000b000000a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) 03:50:25 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000000240)=[0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x0, 0xee00, 0xee00, 0xee01, 0xffffffffffffffff]) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x800, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0xe0f3}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@measure='measure'}, {@dont_hash='dont_hash'}, {@fsmagic={'fsmagic', 0x3d, 0x5}}]}}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1710.921560] audit: type=1400 audit(2000001024.970:7902): avc: denied { create } for pid=21561 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:25 executing program 1: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r0, &(0x7f0000000080)=@ax25={{0x3, @rose}, [@rose, @null, @rose, @netrom, @remote, @remote, @remote, @netrom]}, &(0x7f0000000000)=0x80, 0x80800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2100003ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setrlimit(0x7, &(0x7f0000a9cff8)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x6, 0x4, 0x200, 0x7, 0x0, 0x0}, 0x2c) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) write$binfmt_elf64(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x200, 0x18, 0xffffffffffffffff, 0x3, 0xffffffffffff0001, 0x2, 0x6, 0x800, 0xbf, 0x40, 0x277, 0x1, 0xffffffffffffffe1, 0x38, 0x1, 0x6, 0x401, 0x3}, [{0x7, 0x4c, 0x7, 0x5, 0x100, 0x3, 0x7, 0x1}, {0x7, 0x9, 0x0, 0x7, 0x2, 0x5, 0xffffffffffffff80, 0x101}], "cbff856ad41ffabfef", [[], [], [], [], [], [], [], [], [], []]}, 0xab9) [ 1711.102228] audit: type=1400 audit(2000001025.150:7903): avc: denied { write } for pid=21561 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:25 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) [ 1711.136434] binder: BINDER_SET_CONTEXT_MGR already set 03:50:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$security_smack_transmute(r0, 0x0, 0x0, 0xffffffffffffffe0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x400000028, 0x7fff, 0x3f}, 0xe) [ 1711.136459] binder: 21569:21573 ioctl 40046207 0 returned -16 [ 1711.147234] binder: BINDER_SET_CONTEXT_MGR already set [ 1711.147277] binder: 21562:21570 ioctl 40046207 0 returned -16 [ 1711.151342] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space 03:50:25 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1711.151365] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1711.151736] binder: 21562:21570 transaction failed 29201/-28, size 24-8 line 3136 [ 1711.153010] binder: 21562:21570 unknown command 859701248 [ 1711.153111] binder: 21562:21570 ioctl c0306201 200002c0 returned -22 [ 1711.188658] binder: 21569:21586 unknown command 859701248 [ 1711.188669] binder: 21569:21586 ioctl c0306201 200002c0 returned -22 [ 1711.188837] binder: 21569:21586 ioctl c0306201 0 returned -14 03:50:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$security_smack_transmute(r0, 0x0, 0x0, 0xffffffffffffffe0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x400000028, 0x7fff, 0x3f}, 0xe) 03:50:25 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x20000000000000, 0x24, @remote, 0x1}, 0xfffffffffffffd92) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1711.189330] audit: type=1400 audit(2000001025.240:7906): avc: denied { create } for pid=21569 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:25 executing program 0: openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x140) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000400)='./bus\x00', 0x40202, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) io_setup(0x800, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) io_getevents(r3, 0x0, 0x1, &(0x7f0000000200)=[{}], &(0x7f0000000280)={r4, r5+10000000}) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) syz_open_procfs(r0, &(0x7f00000002c0)='net/ip_mr_cache\x00') ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="70000000070000e7002f754c510c3369b5a5f825725820d06772503c23fb57e6c60f1f4b457abdf331785e9ba58a23721ee96ab74d999a797f2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7"], 0x54) [ 1711.190916] audit: type=1400 audit(2000001025.240:7907): avc: denied { write } for pid=21569 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:25 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) [ 1711.197781] audit: type=1400 audit(2000001025.250:7908): avc: denied { map_create } for pid=21582 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 1711.202852] audit: type=1400 audit(2000001025.250:7909): avc: denied { map_read map_write } for pid=21582 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 1711.211462] binder: 21562:21574 BC_ACQUIRE_DONE u0000000000000000 no match [ 1711.238136] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1711.238198] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1711.245413] binder: 21569:21573 transaction failed 29201/-28, size 24-8 line 3136 [ 1711.383637] binder: 21569:21573 BC_ACQUIRE_DONE u0000000000000000 no match [ 1712.054265] binder: BINDER_SET_CONTEXT_MGR already set [ 1712.054290] binder: 21616:21617 ioctl 40046207 0 returned -16 [ 1712.099628] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1712.099651] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1712.101732] binder: 21616:21617 transaction failed 29201/-28, size 24-8 line 3136 03:50:26 executing program 5: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x2, 0x9, 0x8, 0xae, 0x1}, 0x14) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) [ 1712.107051] binder: 21616:21617 unknown command 859701248 [ 1712.107110] binder: 21616:21617 ioctl c0306201 200002c0 returned -22 [ 1712.108460] binder: 21616:21617 ioctl c0306201 0 returned -14 [ 1712.175243] binder: 21616:21623 BC_ACQUIRE_DONE u0000000000000000 no match 03:50:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:26 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffffffffffe, @remote, 0x1}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x37, &(0x7f0000000000), &(0x7f00000000c0)=0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:26 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x28041, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/igmp6\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) write$apparmor_current(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20000fff}) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x6) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000004c0)) r3 = socket$inet6(0x10, 0x0, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="5500000018007fd508fe01b2a4a280930a06000000a84308910000003900080008000a0000dc13382d0010009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 03:50:26 executing program 0: r0 = gettid() timer_create(0x40000000, &(0x7f0000000100)={0x0, 0x20000010, 0x2, @thr={&(0x7f0000000180)="1a49ccc0bb417119962becab82", &(0x7f00000001c0)="8f909e4d0e60f95c2ec8c17fa7103f21c7fd823118b7b4f0b77d5ad19fe21a0bb7bf9d7732b0bc0947bf27f63300521114b00265e07dd18643115fd95a40046c3bc85f52ef69449d1a4f709e8ac4609b216c5cd5f3abd14be5c94de6539c8d4b"}}, &(0x7f0000000040)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8ec3, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000016) 03:50:26 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x800000000000000, 0x0, @remote, 0x8000000001}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:26 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000bb000084b7ac000000000395000000000000006ca62b10c823e67e932d4ffb0efe26474c1fb9a0093ed1e870c5ae2e4455246cefd8fc88b05cb1c62616ce154250bfa077c55701c4e5c7cf27857b939f637e92fb0fbd68435e1fd9b187e59781d504879d4c4d7998347d81ac14eaa6de8cf8462cb407ca92bec0d0c075a3fdb57ed1967dd3ad658177c8730b2e41cb75506e66925d78cf0ff5361756231239ce08249b85df8c7c801c775ad59d569f6280e4f770928091f7c4d77752a17c89ed8239c02559494c77051734e28cc19f198e834ffc85b48604b31aa4a11c8e2e27d9def4bafd4450e84c7ce63479e2ed626cd285921d0d37585c97c0fc4d8ae1506a0e9a7b1c588f0f7a30a75d06dcded7c7e22838021f89fe9abe0540f3dfa5cd446d8304009a241be6fd04cb5cf488a808d981051a1456afd4ba57dafa2e30c90196c16bc642f39a224ae17f63747cd0fa3f099f9a4a678a03f538f2dc47d3382c5faf67f08f0222c6873188c229e1c050a7e08e74c41aa231d8fec9673c31bb65b74ef5f0d33ae83a45053155"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) 03:50:26 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f00000000c0)) 03:50:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) write$P9_RGETLOCK(r1, &(0x7f0000000140)={0x25, 0x37, 0x2, {0x1, 0x49f8, 0xffffffffffff8000, r2, 0x7, 'ip6tnl\x00'}}, 0x25) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0x10, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf}]]}}}]}, 0x3c}}, 0x0) 03:50:26 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:26 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x29}, 0x1}, 0xfffffffffffffe5a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$getregset(0x4204, r1, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=""/159, 0x9f}) 03:50:26 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) recvmsg(r1, &(0x7f0000001c00)={&(0x7f0000000740)=@ethernet, 0x80, &(0x7f0000001b40)=[{&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000880)=""/227, 0xe3}, {&(0x7f0000000980)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001a80)=""/178, 0xb2}], 0x5, &(0x7f0000001bc0)=""/45, 0x2d}, 0x10162) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001c40), 0x0) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x2, 0x0) rt_sigaction(0x3b, &(0x7f0000000480)={&(0x7f0000000440)="420f6863d86566470f3828963934b566c4c27d2a36f3430f0f119666410f381e6900650f38f028c4a1b1e863b9660fc045e56667dbf5c09e1058000068", {0xfffffffffffffffb}, 0x1, 0x0}, &(0x7f00000006c0)={&(0x7f0000000580)="c402d9a98c04e7a21cb1676566450f38154a61c4c1ae5e21c482014736f0478068ef36c421fd511e4081e1ce0000004481cfd4000000f04220b5293a0000c4c37961a41000000000f5", {}, 0x0, &(0x7f0000000680)="0f01d5440f16ed460f76dcdbeb0fa147f78e25a90000feffffff67438d3fc4a14d7c170fb0b16556666647e900100000"}, 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000001c0)=""/141) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 03:50:26 executing program 5: symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x2b0, 0x30, 0x2, 0x70bd27, 0x25dfdbfb, {}, [{0xd4, 0x1, @m_tunnel_key={0xd0, 0x9, {{0x10, 0x1, 'tunnel_key\x00'}, {0x50, 0x2, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x8}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x28}}, @TCA_TUNNEL_KEY_NO_CSUM={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x8, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}]}, {0x68, 0x6, "4beed51258ff89de8050642401b411cc387cf32790ce4c80852ce52d3e009a82c30f3bcfef38f7aa2048baff2e51cb5aaeaa75eeb54a6fe541d29100fbca3015560fd2cae887910ad5867ac4edf8e27b8564374192db60009c06f53a0fb4829822"}}}}, {0xec, 0x1, @m_ipt={0xe8, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x40, 0x2, [@TCA_IPT_INDEX={0x8, 0x3, 0x646}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x7}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x14, 0x1, 'filter\x00'}]}, {0x98, 0x6, "87e1575323604f66cead32a1ad8deb7abea12cc03ede8849c9acaef1fd3641695115e24c2ea9d21131b393b151729dae3938b3e1d8e56c32eb358c2e7661d7c4de5df1fa7cee1486c285f0acc0431978b1e1b36ed5bf336b34e625532082d2b53c5e7f4911f2063cba1430c65f8991056724fe3bd19768d742d33b170ef07e765b897da121483c5ff4a96a9879fc6cbcb4"}}}}, {0xdc, 0x1, @m_connmark={0xd8, 0x3, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0xfffffffffffffff7, 0x3, 0x2, 0x6}, 0x7ff}}}, {0xa0, 0x6, "099c4773b09ec61aa903a3b11a70242979bc42e8e5d0b4aa8eef8fa3e64ca62bdbb5264280ff7b720b09f48c37bd20810f18a52ab4c4eb8720874bb05bd9d3e930c706b8531ffc22966a28f442d790ea77dbfcdd97dd5b134dec98a64813348a4e09f238d302d5d0d4d1496e3b5f74a63f7cd7e963877154b9be1990b267a6cafbb0c2ec5af30f9d16d8b1d9d2219749e504a3e07e4a28e85c"}}}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x40}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 03:50:26 executing program 3: r0 = socket$inet6(0xa, 0x2000400000000001, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@v2={0x0, 0x1, 0x8, 0x400, 0x1000, "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"}, 0x100a, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x8000, @local, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000001180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1713.024494] binder: BINDER_SET_CONTEXT_MGR already set 03:50:27 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x82, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000000c0)={{0xff, @empty, 0x4e20, 0x0, 'fo\x00', 0x10, 0x401, 0x2c}, {@rand_addr=0x200, 0x4e21, 0x1, 0x3f, 0x0, 0x100000001}}, 0x44) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1713.052276] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1713.061904] binder: 21663:21665 ioctl 40046207 0 returned -16 [ 1713.088554] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1713.099577] binder: 21663:21665 unknown command 859701248 [ 1713.099660] binder: 21663:21665 ioctl c0306201 200002c0 returned -22 [ 1713.159827] binder: 21663:21684 BC_ACQUIRE_DONE u0000000000000000 no match [ 1713.276969] binder: 21663:21670 transaction failed 29201/-28, size 24-8 line 3136 03:50:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x34) pipe(0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000240), 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r1 = syz_open_procfs(0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz'}, &(0x7f0000000540), 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000400)='id_legacy\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)="a4548d481ef025cd528caaac714456205461da49f6e5b95fea1052e830cd6aeb4d1a00955068683e3c1a830d11238a0c", 0x30, 0x0) add_key(&(0x7f00000006c0)='id_resolver\x00', &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740)="64de722a130235e7464ba99c7cb8b48ff9b2ca0feb609a0d2859b3b9f1", 0x1d, 0xfffffffffffffff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) rt_sigprocmask(0x2, &(0x7f0000000040)={0x5}, &(0x7f0000000080), 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in=@local}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, 0x0) creat(0x0, 0x0) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:50:29 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) close(r0) 03:50:29 executing program 3: r0 = socket$inet6(0xa, 0x10006, 0x10000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz1\x00', {0x3, 0x1000}, 0x48, [0x7, 0x9, 0x3, 0x9, 0x7, 0x0, 0x40, 0x9, 0xffff, 0x2, 0x3, 0x6, 0xffffffffffff51c7, 0x9, 0x7, 0xfffffffffffffffb, 0x6, 0x7, 0x7f, 0xdba, 0x4b9, 0x1, 0x0, 0x4, 0x80, 0x1, 0xce, 0xea, 0x4, 0x0, 0x6, 0x5, 0x8, 0x2, 0x680, 0x4, 0x7, 0x800100, 0x5, 0xfff, 0x9, 0x242e, 0x9, 0x7, 0x800000000, 0x3, 0x3ff, 0x7fffffff, 0x2, 0x1, 0x2, 0x2, 0xfff, 0x1, 0x80000000, 0x7f6, 0x8, 0xe2d1, 0x0, 0xf7fd, 0x0, 0x7, 0x4, 0x80000000], [0x400, 0xffffffff, 0x1, 0x3ff, 0x4, 0x0, 0x5, 0x9, 0x1, 0x3, 0x7f, 0xce, 0xffffffffffffff60, 0x4, 0x3f, 0x3ff, 0xe9fc, 0xfc0000000, 0x400, 0x3, 0x800, 0xe48, 0xa2, 0x3, 0x4, 0x8, 0x56c7, 0x3, 0x6, 0x6, 0x8, 0x2, 0x1, 0x6, 0x2, 0x4, 0x5, 0x8001, 0x0, 0x8001, 0x6, 0x1, 0x10000, 0x8, 0x800, 0x9, 0x9, 0x10000, 0x7fffffff, 0x5, 0x8b2, 0x1, 0x1, 0x5, 0x1, 0xffffffffffffff0a, 0x9, 0x2, 0x3, 0x2, 0x9, 0x1000, 0x1168, 0x4], [0xd0, 0x2, 0x3, 0x8, 0x3b, 0x356400, 0x74e2, 0x7, 0x7, 0x9, 0x8, 0xf56, 0xffffffffffffffff, 0xe7, 0x8, 0x7fff, 0x8, 0x800, 0x2, 0xd29, 0x1, 0x0, 0xe350, 0x10001, 0x23dcde0b, 0x8000, 0x1, 0x100000000, 0x25, 0x800, 0x3f, 0xb991, 0x1, 0x7, 0x3, 0xacfc, 0x3c3, 0x6, 0x3ac, 0x27400000000, 0x3f, 0x1000, 0xe3, 0x6, 0x0, 0x3f, 0x9, 0xfffffffffffffffc, 0x9, 0x9, 0x1, 0x100000001, 0xd0de, 0x9, 0x4, 0xa, 0x7fff, 0x0, 0x68, 0x1, 0x9, 0x1, 0x5], [0x1ff, 0x7, 0x3, 0x4, 0x4, 0x9e77, 0x8, 0x0, 0x4, 0xf4b, 0x1, 0x0, 0x5, 0x26, 0xffffffffffffffff, 0xc98e, 0xfff, 0x0, 0x100000001, 0x20, 0x2, 0x100000001, 0x401, 0x1d, 0x3, 0x7, 0x7ff, 0x6, 0x6, 0x8000, 0x8f2e, 0x4, 0x100, 0x10000, 0x0, 0x8, 0xd1a, 0x401, 0x2, 0x9, 0x4, 0x8000, 0x7, 0x0, 0x1ff, 0x2, 0x4, 0x6, 0xdb, 0x4, 0x1b7, 0x800, 0x5, 0x100, 0x80000000, 0x4, 0x6, 0x4, 0x8, 0x7, 0x8, 0x101, 0x3, 0xfffffffffffffff8]}, 0x45c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) 03:50:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="00022bbd7000fedbdf250300000028000200040004000800020001000054921801000300000008000100c581000008000200ffffffff68000100080003000000000044000400200001000a0067240000000000000000000000000000000000000001bc070000200002000a004e2200000006fe8000000000000000000000000000aa02000000100001007500400000000000000000000000000000000000e2704a02d1a26a48e6f31616261467e6da7fa66299ebc7e2f1f9239b68750b158e10ed30552422a33632cc22ea870c0e76686128e064692aabfe5b6f01b4a2f1d70dcb437a32a285a4c76965140ebc8cf37555da65c82656b8b63b3d2bc726414df48542e49aa7155d0ab8beaeb8a40a6fdce5ebafe6c80605071cb99f33ec5f56439368caf66fc28dc48a547a7570a134bef26a36defc8d692d8a0c0ece235d6d0f60a4c8b9426398df1529c6ddbb87fd9e789535d5d5c03733328153863777624d2d67b299293f7339cf5cb2cb4c7c95ebbf0c1272739b95a0"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x82, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000000c0)={{0xff, @empty, 0x4e20, 0x0, 'fo\x00', 0x10, 0x401, 0x2c}, {@rand_addr=0x200, 0x4e21, 0x1, 0x3f, 0x0, 0x100000001}}, 0x44) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:29 executing program 1: pipe2(&(0x7f00008df000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000cf7fe0)=[{0x0, 0xd0}], 0x120, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)={{0x1cf, 0xe78a, 0x1ff, 0x20d, 0xe3, 0x75, 0x1d7, 0x1737b91f}, "af2acf738777880b819a03f0b1bb09e739997797f2e13a8e59d9204a6647a9ad92d7edc4bb53dba344ed91367122c9c804e6aed3fb77e04f712549daa1cd02a9314864079398211c99a24968af5e96fe74411061cd2581ff17ad8faa56094170fb8dc8ad50b13a2401368a0696e3bc2434672312fd44c868e072a0f0c499143b5fd3b41aa1df7c1a553519a1d957aaf3ce7a54b1bfcebf4ffa1f5b9d371ddf3c"}, 0xc0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x3, 0xde, [], 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=""/222}, &(0x7f0000000300)=0x78) 03:50:29 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x10400, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000340)={0x5, 0x33, 0x2}, 0x5) socket$unix(0x1, 0x1, 0x0) sched_setaffinity(0x0, 0xffffffffffffff79, &(0x7f0000000140)=0x8000009) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000006c0)) getpid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000840)=0xc) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0xffffffffffffffff, r1, 0x0, 0x13, &(0x7f0000000880)='keyring*security,{\x00'}, 0x30) r5 = getpgrp(r4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) capget(&(0x7f00000001c0)={0x20080522}, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='syzkaller1\x00', 0x10) ptrace$setregset(0x4205, r5, 0x3, 0x0) io_setup(0x1d, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x88, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000400)='./bus\x00', 0x141046, 0x0) ftruncate(r8, 0x2007fff) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x4004001) sendfile(r7, r8, &(0x7f0000d83ff8), 0x8000fffffffe) [ 1715.488074] audit_printk_skb: 87 callbacks suppressed 03:50:29 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="3615000000000000c20400000004fe89473bc6c47f8c19aedf2394c47b6c4833a71d5b45da9084b356378b8d17a5d800d4428b1c538431592f9ccf594ca95f88a6f78ccb280272b6a70b3a3b21f584653fa8f3ce7f622db64a7ce91450d2491999f2f2f0de286f5f8fc70a5604b314910a5fd2cd2b96c60b990d86880140ca21a8c14a99dabe574d544ae223140107000000000000000401c0040101010600000000001f000000000000000000000000"], 0xb0) [ 1715.488087] audit: type=1400 audit(2000001029.540:7937): avc: denied { create } for pid=21706 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:29 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x800) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0xffffffffffffff87) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setflags(r0, 0x2, 0x0) 03:50:29 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 03:50:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x24, 0x9, 0xad11) dup2(r1, r0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0xf6, 0x7, 0x1ff, "529f04cc9e99bb9c831c562fad5abc86", "d431a1d674c935b6f73cb37600738081072ffb79d7b5f69881cd919722d5556782406d9b1f5e2d8e7949cce1ff24e9556c7a9e1434ee8ceff5413ce6b20a787fcc3b75547ab992bb6d36bc6edbf6d1a1350ac8415ce4b55f5e3adbc2154c4f8740bfbdef570a435b2024a46a79f4beddc361e990da84f435eee147c1462657eb82c1a0c100f2e454b08a42a9419bb33980d5dbd9f9e67ac96b67dff3051e0b2c1fbea42424671c3d98222ff3dd35bf6d16549ee2e1d10e858cfbe37844977189a1b6c79bd319f3132c7f9134543efd6e6e4fa52858ae2f166f3fd388b0000647a5"}, 0xf6, 0x3) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f0000000100)='./bus\x00', r2}, 0x10) readahead(r2, 0x0, 0x0) [ 1715.580605] audit: type=1400 audit(2000001029.630:7938): avc: denied { create } for pid=21700 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1715.581077] audit: type=1400 audit(2000001029.630:7939): avc: denied { write } for pid=21700 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1715.592798] binder: BINDER_SET_CONTEXT_MGR already set [ 1715.592808] binder: 21698:21717 ioctl 40046207 0 returned -16 [ 1715.600981] audit: type=1400 audit(2000001029.650:7940): avc: denied { call } for pid=21698 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1715.601108] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1715.601116] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1715.601138] binder: 21698:21717 transaction failed 29201/-28, size 24-8 line 3136 [ 1715.610899] binder: 21698:21717 unknown command 859701248 [ 1715.610909] binder: 21698:21717 ioctl c0306201 200002c0 returned -22 [ 1715.614949] audit: type=1400 audit(2000001029.670:7941): avc: denied { create } for pid=21698 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1715.615426] audit: type=1400 audit(2000001029.670:7942): avc: denied { write } for pid=21698 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1715.623614] audit: type=1400 audit(2000001029.680:7943): avc: denied { read } for pid=21700 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1715.661695] audit: type=1400 audit(2000001029.710:7944): avc: denied { create } for pid=21706 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1715.715019] audit: type=1400 audit(2000001029.770:7946): avc: denied { read } for pid=21698 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1715.719479] audit: type=1400 audit(2000001029.750:7945): avc: denied { write } for pid=21706 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1715.750855] binder: 21698:21704 BC_ACQUIRE_DONE u0000000000000000 no match 03:50:30 executing program 0: perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)=':\x01\x00\x00\x00\x01\x00', 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x20c, r2, 0x220, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14e6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8dec}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1ff}]}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb63}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffff419}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xac, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff8000}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) fsetxattr(r0, &(0x7f00000000c0)=@known='security.selinux\x00', &(0x7f0000000100)=':\x01\x00\x00\x00\x01\x00\x00\x00', 0xff12, 0x0) 03:50:30 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x4b) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ffe91ccd0922bb9fe7f05e2ffad14a94"}, 0x1c) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000040)={0x8000000000}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x80) write$FUSE_INTERRUPT(r2, &(0x7f0000000100)={0x10, 0xfffffffffffffffe, 0x7}, 0x10) r3 = accept(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 03:50:30 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:30 executing program 4: mkdir(&(0x7f0000000080)='./control\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000000)='./control\x00', 0x8) inotify_rm_watch(r0, r1) readv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/115, 0x73}], 0x1) 03:50:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:30 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000040ffffffff090000000000000800000000000000", @ANYRES32=r0, @ANYBLOB="00000000ffff00000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000ffffff7f0000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="00000000040000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000030000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000020000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="00000000ca0000000000000000000000000000000000000000000000"]) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0x80000001}, 0x40d62eb1fa36d3f) 03:50:30 executing program 5: perf_event_open$cgroup(0x0, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x80) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x20008005, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc00000003000600000000190200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0xfffffffffffffffd) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000000)=ANY=[], 0x0, 0x0) unshare(0x8000020020603) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'lo\x00@\x00'}) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x3) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x4e22}, {0x2, 0x4e1d, @remote}, {0x2, 0x4e25, @loopback}, 0x45, 0x8, 0x5, 0x46a}) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rtc0\x00', 0x50000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000a40)) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x1) 03:50:30 executing program 4: mkdir(&(0x7f0000000080)='./control\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000000)='./control\x00', 0x8) inotify_rm_watch(r0, r1) readv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/115, 0x73}], 0x1) 03:50:30 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x2, &(0x7f00000000c0)) [ 1716.641955] SELinux: Context : is not valid (left unmapped). [ 1716.662942] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space 03:50:30 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f00000000c0)=0xc) 03:50:30 executing program 4: r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) r1 = dup2(r0, r0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000200)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140)={0x1}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc00000003000600000000190200ee00e0000054d81458186fe8b900020001000000000000000236a45436ede40200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x15, 0x1, 0x0, "9ec543894b6a114ec34481d93a03351e"}, 0x15, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) unshare(0x8000020020603) ioctl$TIOCSCTTY(r1, 0x540e, 0x5d) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$P9_RMKNOD(r3, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'lo\x00@\x00', 0x101}) [ 1716.713458] binder: 21753:21777 unknown command 859701248 [ 1716.713469] binder: 21753:21777 ioctl c0306201 200002c0 returned -22 03:50:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fadvise64(r0, 0x0, 0x3ff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000012c0)={0x0, 0x27f, &(0x7f0000001280)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000a91228fffffffffffff3de8220b759932b366780a7df57a307a90e68a260f9b88f7e796ca7ffa69e9214a0071226f8459349392c1053db9107dff369bc99f65ba37dd561a6b5c538521ea45c6548e01e85ebecf28c29aa548c6de71e6a702b869298d374", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120009000100736974000c00020008000f0000000000"], 0x38}}, 0x0) fallocate(r0, 0x40, 0x400, 0x8000) [ 1716.806749] binder: 21753:21779 BC_ACQUIRE_DONE u0000000000000000 no match [ 1716.894566] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) 03:50:31 executing program 3: unlink(&(0x7f0000000000)='./file0\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1716.947657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1716.977424] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1717.063867] binder: 21753:21772 transaction failed 29201/-28, size 24-8 line 3136 03:50:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup2(r0, r0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x20010, r1, 0x0) rt_sigtimedwait(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) sendmsg$key(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc00000003000600000000190200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="2ad4fae8fb2934e6df39d0df3238b0d15da5da68c4588713511f7d2d8001754fa0067cf9b38db69cbadfbed03d39b837c488dca65384a430f94411de5e4a0264d301ef91db8f88783bdee37f37b986d7443958099048bcc6c1d920089ac9ff1f11f3b554a47ef7445d09a29b34c40120cdba5be05e6a1a7feb", 0x79, 0xfffffffffffffffb) exit(0x7) sendmmsg(r2, 0x0, 0x0, 0xfffffffffffffffd) 03:50:31 executing program 0: r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/member\x00', 0x2, 0x0) write$selinux_access(r0, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x80200, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) write$selinux_access(r0, 0x0, 0x0) 03:50:31 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)={0x0, 0x0, 0x10001}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f00000000c0)={&(0x7f0000000140)=""/161, 0xa1}) 03:50:31 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x208440, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4000, 0x80) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000140)={@multicast1, @rand_addr, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, [], r2, 0x5edfb77e4e29b36c}, 0x48) write$P9_RLCREATE(r1, 0x0, 0x321) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000180)=""/13) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000580)={0xfe68}, 0x0, &(0x7f0000000600)={0x0, 0x989680}, 0x8) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x4, 0x40, 0x0, 0x80000000012, 0x800, 0x4, "9288f4ab2db49dd9b2dd2f0d7900a2961d2a03f6c2b9363c0c45a870ca38698ca159c4a795cb5c4c566f5fde7b8e3348bacc95640924ff7a2746cf9838d62df8", "675779e8a19c897d457e750eb5052d823b7a3473f7a64f06000000ed0f5ba59b4002f51d043f4986cccb8314a96e3b7cd300", "72046fdca95b6740bb95d1c7e60f727ffe40e580e5c5b9794414585c703ea895", [0x800000003]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mprotect(&(0x7f000062b000/0x4000)=nil, 0x4000, 0x3000004) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, 0x0, 0x800) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0xff, 0x7f, 0x81, 0x10001, 0x0, 0x73d1, 0x400, 0x4, 0x7, 0x3f, 0x10001, 0x3, 0xfffffffffffffff8, 0x3, 0x26, 0x100, 0x5, 0x4, 0x1, 0x0, 0x0, 0xfffffffffffffff7, 0xfffffffffffffffb, 0x4, 0x3, 0x6, 0x7ff, 0x7ff, 0x5, 0x9, 0x6, 0x4, 0x4, 0x3, 0xfffffffffffffffb, 0x69, 0x0, 0xb58d, 0x4, @perf_config_ext={0x7ff, 0x1}, 0x8100, 0x3f, 0x2, 0x2, 0x6}, 0x0, 0xe, r4, 0x0) io_setup(0x9, &(0x7f0000000000)) clone(0x70024100, &(0x7f0000000a00), 0x0, 0x0, 0x0) flistxattr(r3, &(0x7f0000000040)=""/44, 0x2c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f0000000080)=0x3f8, 0x3d2) ioctl$TIOCSBRK(r4, 0x5427) 03:50:31 executing program 3: r0 = socket$inet6(0xa, 0x7, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="00022bbd7000fedbdf250300000028000200040004000800020001000054921801000300000008000100c581000008000200ffffffff68000100080003000000000044000400200001000a0067240000000000000000000000000000000000000001bc070000200002000a004e2200000006fe8000000000000000000000000000aa02000000100001007500400000000000000000000000000000000000e2704a02d1a26a48e6f31616261467e6da7fa66299ebc7e2f1f9239b68750b158e10ed30552422a33632cc22ea870c0e76686128e064692aabfe5b6f01b4a2f1d70dcb437a32a285a4c76965140ebc8cf37555da65c82656b8b63b3d2bc726414df48542e49aa7155d0ab8beaeb8a40a6fdce5ebafe6c80605071cb99f33ec5f56439368caf66fc28dc48a547a7570a134bef26a36defc8d692d8a0c0ece235d6d0f60a4c8b9426398df1529c6ddbb87fd9e789535d5d5c03733328153863777624d2d67b299293f7339cf5cb2cb4c7c95ebbf0c1272739b95a0"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000009740)=[{{0x0, 0x0, &(0x7f0000008fc0)=[{0x0}, {&(0x7f0000008cc0)=""/245, 0xf5}], 0x2}}], 0x1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="000000000000bf22a4000000000000ddff0000000000000090a222b2fa9df5739fdcc7889ec9c65f14385a00800000553334fb4edb18c3cdca10fc1e4c4c4d7184bea6", 0x43, 0x8000, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000100)='\x80self\x00'}, 0x30) ptrace$setregs(0xd, r2, 0x3, &(0x7f0000000180)="16d3b8db0548fdb3c83d47534db801f147dade362c6789a6463387a20e74a120f42832a5a1e5f6fcedb725f558eb4981f4ee63e40e2005588b42c6522fb9fa3c3b7418239ac15efb85dcafa7465f8c422e39c39adef123e245cf1675e31b2e96adf889bada9dcb50de090cc2f42574") [ 1717.516350] binder: BINDER_SET_CONTEXT_MGR already set [ 1717.560788] binder: 21807:21810 ioctl 40046207 0 returned -16 03:50:31 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r2 = request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='\x88mime_type\\)[\x00', 0xfffffffffffffff9) open(&(0x7f0000000240)='./file0\x00', 0x400000, 0x40) keyctl$search(0xa, r1, &(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={'syz', 0x2}, r2) [ 1717.591058] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1717.591068] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1717.591091] binder: 21807:21829 transaction failed 29201/-28, size 24-8 line 3136 03:50:31 executing program 3: r0 = socket$inet6(0xa, 0x1000a, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:31 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @mcast1, 0xffffffffffffff7f}, 0xffffffffffffffba) sendmmsg(r1, &(0x7f0000000480), 0x40000000000031e, 0xffd8) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000000c0)={0x6, 0x8, 0x9}) [ 1717.593369] binder: 21807:21829 unknown command 859701248 [ 1717.593378] binder: 21807:21829 ioctl c0306201 200002c0 returned -22 [ 1717.649374] binder: 21807:21837 BC_ACQUIRE_DONE u0000000000000000 no match 03:50:32 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802123001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/load\x00', 0x2, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000d40)={0x7, 0x10, 0x8000000000008}) fcntl$dupfd(r2, 0x406, r1) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) getpid() lstat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000680)) stat(&(0x7f0000002040)='./bus\x00', &(0x7f0000002080)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1000}, 0xc, &(0x7f00000004c0)=[{&(0x7f0000000e00)={0x10, 0x37, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x10}], 0x1}, 0x20000000) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x100) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x48d) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000900)=0x9) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000280)=""/239) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 03:50:32 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @mcast2, 0x3}, 0xffffffffffffff00) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:32 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x1a, 0x3b, 0x5, 0x11, 0x2, 0x1, 0x0, 0x74}}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$RTC_UIE_OFF(r1, 0x7003) 03:50:32 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) fcntl$addseals(r0, 0x409, 0x8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:32 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, &(0x7f00000002c0)) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="1c1bb6f5c691ac2a63118b5d223e5404b5684e25a5d419c3f83ab264f0837c29039bc23849f4b65f9fbbc71fda7336f92736ab6f652cba72a58bb79b728c10ba06c3c6726ec319d9ece1fa5ad1c889349fac488be47e0414a1797109e6d16412a2490c2f681e0a8054c665af0a8e3fc93de5845700000000000000"], &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="7c20bf9bc9291d2a8b14a5a1f6416cc4d218fe60dbafcab310ffb5e3caea635126871776cb211c9e5baa7b000000000231000000000000307f8251b37af476dfce7070bbc88e33171b4195780b0628b1435abf136acb712112b71d7988cc1d885f368c2a580ed2f58742f74e8427b2a50b314b7c5450229692870fc62eb9a62c4689a366339652901e82b761860001507726939b14bfa5065568467dca375a9ab104aeda9acd908b993c41a99f6bd1257b125de651ffc9fa90789aef283d1b36b3f2cba119bc30389bd24f6bb03b49ef78e3a22965d7f3a0fb5bf38578a08f548c6b0edca883a56e503bcf40bbbe5f93461fceeb358b6e1d68a269f65974299c625a5912e96e19c2d94d324c65ffdc2b24c90000000000000000"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000000)="fb", 0x1}], 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @rand_addr=0x100000001}, {0x2, 0x4e20, @rand_addr=0x10001}, 0x40, 0x0, 0x0, 0x0, 0x64, &(0x7f0000000040)='batadv0\x00', 0x5, 0x1, 0x3}) io_setup(0x200000000000104, &(0x7f0000000440)=0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000587000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f000096f000)="0000bc4ffe7f00009d", 0x9}]) 03:50:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="00022bbd7000fedbdf250300000028000200040004000800020001000054921801000300000008000100c581000008000200ffffffff68000100080003000000000044000400200001000a0067240000000000000000000000000000000000000001bc070000200002000a004e2200000006fe8000000000000000000000000000aa02000000100001007500400000000000000000000000000000000000e2704a02d1a26a48e6f31616261467e6da7fa66299ebc7e2f1f9239b68750b158e10ed30552422a33632cc22ea870c0e76686128e064692aabfe5b6f01b4a2f1d70dcb437a32a285a4c76965140ebc8cf37555da65c82656b8b63b3d2bc726414df48542e49aa7155d0ab8beaeb8a40a6fdce5ebafe6c80605071cb99f33ec5f56439368caf66fc28dc48a547a7570a134bef26a36defc8d692d8a0c0ece235d6d0f60a4c8b9426398df1529c6ddbb87fd9e789535d5d5c03733328153863777624d2d67b299293f7339cf5cb2cb4c7c95ebbf0c1272739b95a0"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) [ 1718.419259] binder: BINDER_SET_CONTEXT_MGR already set [ 1718.428354] binder: 21879:21883 ioctl 40046207 0 returned -16 03:50:32 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00') renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x4) getdents(r0, &(0x7f0000000180)=""/116, 0x74) getdents(r0, &(0x7f0000000200)=""/4096, 0x1000) 03:50:32 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) ptrace$peekuser(0x3, r1, 0xb5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prlimit64(r1, 0x2, &(0x7f0000000100)={0x4}, &(0x7f0000000140)) 03:50:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) flock(r0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000080)=@ethtool_pauseparam}) 03:50:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x3ff, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(r1, r0, 0x80000) write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x7fffffff, 0x6, 0x100, 0x6, 0x4, 0x100000000, 0x100, 0x3, 0x800, 0xff, 0x8, 0x7fff}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000040)=0x400) 03:50:32 executing program 5: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000200)='mime_type{$-ppp1(}\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000140)=@req3={0x80, 0x3, 0x1, 0x2, 0x9, 0xd40, 0x4}, 0xfffffffffffffec5) sync_file_range(r1, 0x8001, 0x2, 0x1) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x7, &(0x7f0000000040)={0x0, 0x2c, 0x1, @tid=r0}, &(0x7f0000000080)) close(r1) [ 1718.469557] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1718.512586] binder: 21879:21893 unknown command 859701248 03:50:32 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40000311002, 0x0) fcntl$setlease(r0, 0x400, 0x19a542fa2d3cf156) r1 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:32 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000300)=0x1e) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) ioperm(0x8000, 0xfffffffffffffff7, 0x21b) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x10, 0x80002, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000014c0), 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r2, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) write$FUSE_ENTRY(r0, &(0x7f0000000480)={0x90, 0x0, 0x3, {0x4, 0x8000, 0x9843, 0x47, 0x9, 0x7, {0x1, 0x4676, 0x1e3, 0x1ff, 0x400, 0x7, 0x4d, 0x8, 0x401, 0x3, 0x8, r3, r4, 0x1ff, 0xfffffffffffffff9}}}, 0x90) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000195f9639b0c5b95d30000000a0c05000008f40000f000000208b693c233532969bc69000000000000000000000000761e6c593859a3f2af6364f6906a17b8a043f966306444fffc6cb5367bee21722f7ea2b2f8da49590b9b954d3df8c7306ad198fa75f0a8f234fbcaca1ce18a4bcbac3c927a00000000000000000000000000"], 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r0, r0, &(0x7f0000000100), 0x8fff) ptrace$setregs(0xf, r1, 0x20000000000000, &(0x7f0000000380)="c55fab395d8d81291e287a77551674977ad13c9bfe1de616ae408e9da239e4ffe2dd8d658923e4da4a202f7f32a5e4f465d03b5789dfee020b77e77392271a8975c9c87bfb8745ba1d2a3a86b7a86858cb2d1409808d5e43f3a55dff7eea4e35d4dc8b5ba3ccc5892d6e2210d59c8a70056bdd68072309b749de1828b25b5fbc574ef541aa339dd9b0579c722be5c5c453913bd6edbc485ad35722e8559e8b779327147992d6e27790821c294b45a8836ba14d00afad55c425fbb499441c3ee4b8fcc28ef0b27d") [ 1718.512597] binder: 21879:21893 ioctl c0306201 200002c0 returned -22 [ 1718.581413] binder: 21879:21902 BC_ACQUIRE_DONE u0000000000000000 no match [ 1718.685293] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) 03:50:32 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000006180)=[{{&(0x7f0000000040)=@isdn, 0x80, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000100)=""/70, 0x46}, {&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000240)=""/232, 0xe8}, {&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/124, 0x7c}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/120, 0x78}], 0x9, &(0x7f0000001680)=""/73, 0x49}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/29, 0x1d}, {&(0x7f0000001740)=""/171, 0xab}, {&(0x7f0000001800)=""/119, 0x77}, {&(0x7f0000001880)=""/12, 0xc}], 0x4, &(0x7f0000001900)=""/177, 0xb1}, 0xffffffff}, {{&(0x7f00000019c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/181, 0xb5}, {&(0x7f0000002b00)=""/106, 0x6a}, {&(0x7f0000002b80)=""/25, 0x19}, {&(0x7f0000002bc0)=""/223, 0xdf}], 0x5, &(0x7f0000002d40)=""/6, 0x6}, 0xffff}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000002d80)=""/38, 0x26}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/40, 0x28}, {&(0x7f0000003e00)=""/141, 0x8d}, {&(0x7f0000003ec0)=""/186, 0xba}], 0x5, &(0x7f0000004000)=""/196, 0xc4}, 0x91}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000004100)=""/31, 0x1f}, {&(0x7f0000004140)=""/187, 0xbb}], 0x2, &(0x7f0000004240)=""/63, 0x3f}, 0xffffffffffffff86}, {{&(0x7f0000004280)=@sco, 0x80, &(0x7f0000005440)=[{&(0x7f0000004300)=""/54, 0x36}, {&(0x7f0000004340)=""/107, 0x6b}, {&(0x7f00000043c0)=""/67, 0x43}, {&(0x7f0000004440)=""/4096, 0x1000}], 0x4, &(0x7f0000005480)=""/153, 0x99}, 0x7}, {{&(0x7f0000005540)=@x25, 0x80, &(0x7f0000005b80)=[{&(0x7f00000055c0)=""/149, 0x95}, {&(0x7f0000005680)=""/239, 0xef}, {&(0x7f0000005780)=""/251, 0xfb}, {&(0x7f0000005880)=""/222, 0xde}, {&(0x7f0000005980)=""/233, 0xe9}, {&(0x7f0000005a80)=""/29, 0x1d}, {&(0x7f0000005ac0)}, {&(0x7f0000005b00)=""/128, 0x80}], 0x8, &(0x7f0000005c00)=""/75, 0x4b}, 0xfffffffffffffffe}, {{&(0x7f0000005c80)=@nfc_llcp, 0x80, &(0x7f0000006100)=[{&(0x7f0000005d00)=""/166, 0xa6}, {&(0x7f0000005dc0)=""/28, 0x1c}, {&(0x7f0000005e00)=""/90, 0x5a}, {&(0x7f0000005e80)=""/231, 0xe7}, {&(0x7f0000005f80)=""/143, 0x8f}, {&(0x7f0000006040)=""/167, 0xa7}], 0x6}, 0x7}], 0x8, 0x40000000, 0x0) getsockname$netlink(r0, &(0x7f0000006380), &(0x7f00000063c0)=0xc) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000006400)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000006440)={@remote, 0x0}, &(0x7f0000006480)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000064c0)={@mcast1, @mcast1, @remote, 0x7fff, 0x1, 0x8, 0x500, 0x7fff, 0x10, r3}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000006540)='/dev/null\x00', 0x4000, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000065c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000066c0)={&(0x7f0000006580)={0x10, 0x0, 0x0, 0x40000804}, 0xc, &(0x7f0000006680)={&(0x7f0000006600)={0x4c, r5, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x1ff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x5, 0xeeb5, 0x1000, 0x1]}, @SEG6_ATTR_SECRETLEN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000006700)=0x100000000, 0x4) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000006740)={@mcast1, 0x19, r3}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000006780)) flock(r4, 0x4) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000067c0), &(0x7f0000006800)=0x14) getsockname(r0, &(0x7f0000006840)=@alg, &(0x7f00000068c0)=0x80) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000006900), &(0x7f0000006940)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000006a80)={r2, 0x10, &(0x7f0000006a40)={&(0x7f0000006980)=""/156, 0x9c, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000006ac0)=r6, 0x4) finit_module(r7, &(0x7f0000006b00)='/selinux/status\x00', 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000006b40)=0x100) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000006bc0)={0x1, &(0x7f0000006b80)=[{0x22f0, 0xa838, 0xffffffff, 0x1e}]}) write$P9_RRENAMEAT(r0, &(0x7f0000006c00)={0x7, 0x4b, 0x1}, 0x7) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000006c40)=""/4096) write$P9_RREMOVE(r2, &(0x7f0000007c40)={0x7, 0x7b, 0x2}, 0x7) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000007c80)=0x2) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007d00)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000007e80)={&(0x7f0000007cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000007e40)={&(0x7f0000007d40)={0xc4, r8, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6000000000000000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfff}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffffffffff7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x48000}, 0x4000005) write$P9_RREMOVE(r2, &(0x7f0000007ec0)={0x7, 0x7b, 0x1}, 0x7) write$P9_RMKNOD(r4, &(0x7f0000007f00)={0x14, 0x13, 0x1, {0x1, 0x2, 0x4}}, 0x14) 03:50:32 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000000c0)={r2, r3/1000+30000}, 0x10) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x40) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000300)={0x9, 0x1, 0xc9, &(0x7f0000000200)="f538a080fbbbe6cb9ee9eed8d85cecbd71b93280749b4632711b2209032b3cea7b4dba6295cdf0ec95858124e3e7c20e9f09943ed3c20a3f69d6f2365d6770b4e85c6517ccb590861c18639536c64a04337e779939415a9734319e983be4d7bfa85682cb9f51ffde3421294a21192d16bf31aadbdf8b1042a3b428415a126e20688994bc9889f579cba40067ef9caa8a53c32bce8ccee7bc89df525a0459c61e5729b61861ab0a32a5630505f10a73d76d85b3ca94b678926b46b5d8ba8c41b0d023f5b3246338f8ca"}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r1}, 0x14) [ 1718.780453] binder: 21879:21883 transaction failed 29201/-28, size 24-8 line 3136 03:50:33 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:33 executing program 1: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000040)={'system_u:object_r:etc_t:s0', 0x20, 'uqer_u\x00'}, 0x22) 03:50:33 executing program 1: r0 = open(&(0x7f0000001900)='./file0\x00', 0x802, 0x1) getsockname$packet(0xffffffffffffff9c, &(0x7f0000001980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000019c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001a00)={@local, @local, @rand_addr="87b17e9f8e8024ab35d83568bd2d8226", 0x7, 0x8, 0x100000000, 0x100, 0x2af, 0x80000100, r1}) r2 = socket(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1\x00', r4}) sendmsg(r2, &(0x7f00000018c0)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x1, @multicast1}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000300)="45db3f86f5e3e438d6c39a4a8ddd64649872dc7e41a25d7bd80e6cbfe52e8fb34b37b8a0", 0x24}, {&(0x7f0000000340)="299c2c92e6f94e51e281116e231d59977e9a8a91aa4e26e2a0f89acc75b236a98704986580c6aadf4c3f54c153c7b010ef4f46eff9373219a79eb4003e6e23a46fec3809960d136fb2f6a687af8fafcb30f0f1e06844b47827561edc48221b871adf875240854e23656237a129d67f68", 0x70}, {&(0x7f00000003c0)='\x00q\bb', 0x4}, {&(0x7f0000000400)="0540fa89dfa9", 0x6}, {&(0x7f0000000440)="473c15094e58a961a5efec169cd52a92da3b51960315714b538ea2bf8cd7634af81bbb0ef8f9377cd96e8741d76ab8e0b562e7a6058775a51d6a4111ea2f626f479204d7bc182ab57438dd9a0572a4", 0x4f}, {&(0x7f00000004c0)="fb4e5157874c7497d179ac1623bb9da43a9e34910579d703e7dddcb4a9bf34590bdf9706d0ebc7fcd00a4ad706ba34", 0x2f}, {&(0x7f0000000500)="3b56e409e3a07fac09d12f26f2d1ea7fe82a1a1dfd977a2cea51f6d924ba37d9dbb9e323813f5a8822bf8409e565", 0x2e}, {&(0x7f0000000540)="ad34c960ae46f55d39a14594a22caf015926ee7f516f4e5baad8e26506c26b92c91ba15e39ce264d80e799a3ef96a6524e87a7ad0e674449da680c5c3b59f56aefa3a9f8289aae44cfcd237d122a81bcd9abd1cedc0d59d499d5835fe6a9d426f2e07c0bc0399034a74b923ac3980424b2d473f40d234d2ab76a605a136f0b5e56f32a4a73a2423334b6164925642569557e7cdd34a40f967a7838432d", 0x9d}, {&(0x7f0000000600)="125eb0bd3d08761527280ae78cd7d66324ebc556a7565fe24bc7ec17ed1aca6c5b0c1c28a7b5bebd2b3f41c2209ee20acbceda7e5cf17f96064b2e16d34005ca2d5f58ef9db900ec19cd72a20cad18e3ab58e7535d5c585f56aee720a0cfb1fe219523aa77223ec0f8831f547243bd9c36201048a251a37035470d0579d1bb634c91df8fcefde078f7d66bc95f55144e14db8ac47c9265a5e80b7943f11679464ae9531d604511cc4d72cd8d23e53841aa4465fcbfd9aa9d9416bd1cb44544285b8dab0f3cffb1c8c1d1df1a6cfa19871d99682c9a6f05c024992bfb7e78112b7ad0b1bb1628aa68093ebda1df619370c18d955421f20bebe539b7885187f06d705bbf7667144ee0dfcac07459373fbb0d7404a0a953a44b40ba03453822daecd5703e54f966e2374696bf07d3fc13c4a3d7e68ab0e98d29760cf5a4aac6a36a7f71ec45c06edbaef97592c11aabfd1df5e2d491cc38bf739184aba29d5aff6f6af7cd7e25d7086e82124c8c5b3f0443039a6c269154fff369b8b7785f51dbc46d21e70c18ac9c7b76ef7b42b9a70c114755747f0f7b07b1a71ec93db3df3d3f6832d9213fa87db79bc130347bcbf2332a6e6a9377e868d050575833e65b82e67573a41343b437e43edaaa5f4864469d4f490dfd7f8a5a5ca1a437e5ddd78de2a2bff7a2fac1bd85a8be3c1b9125cb5fb2227ec0235b7284d0159bf8fad5cc82146b86beeecf37dab809b6cab2d344ca1841299b84c0e9e7b66329a71e2d5d329c897fc4d93a874c97d2f4c7de3d468cc148654b7746909aa2a7f0d377de5b69b8ce22592df31cc2e08d551a08cf30f9e9fb4e21ead004562731b9c0b27d0f0f7ca5a01299424ee79c9c6b377974be235a304e74d585b953356f2939a726ab5f4f20c314dc50122b33ab7ad717425ca69348a044fd9743a2c6a5054f83be7239719f4412391068217f1ac0d5eaccc2e9974f85367d9807d36683e2d1032dc913c84d18e1b5b6a960546facca77a4f8b90685bb4665e7256c2c4ce0233004c7932e2ed9dcfb600251320c6d973bf225a2bd2d8473346066a59121022e310b6c1648063fde053428c0f79da3bfde331676c679684598986dcbf075266b0ff7fc9f58c451659b3589aab8957d96a237b57bcb04b51933dffaace6c2ce7340ef68c05d72037b7422af99d85f48d0350b4f1cf74d22434b38de01fb9815a6a2f93da054a972b63538b1e320e7a512f8f1381c8380454a653e8e8ea1a0e2a45a53609393998447dab8bc00e9f577fd35baea4f3636aa73fd6a7a88372850259ebbacdb177f8e60b3d9463c18596620fa80dc671c4631114af883f9a62abc5d30ea3b2de164ceaa0d85078ae5b20f3e100770ccae3574aa36b5aa13180be80b1c526865daee92d4f302629c5ca88f99cb3d150fe8a2aee8580312aa70fc49217679318ed4974ec41cb1180267c1567dfa243e9685b299b7c76d0578184fd1891a60198cea6b8dabfacf7daca59bd56ecf56944be965c2d1f0f5912b4eef7b5b6d2f1a583ac3a6b0daf164a36a23de5f980c4e1ae3db3226d7e6a67faf745843a6018e63877d0c10138213960bb262c879e7c356e27d45f7771e2067474a8fc4405624d4a602441f84ed8a25619667c0e1a0df21dbf8e4fb8d6b525ea8dac8eedc9023a21d598fd866192c5a158c4359f5ceb496d766a07931b7306d6dd21a189d0a90580cbd58ca5398df1f96126235d2ee0d965d2fd8a330c7d93cfa0fecb664bc67c0ec724950fb48e0ddbf93e3004d78f9fcae7a33906c36a4294162f712583e7786af2db4e7f8c02491c530d134ed3962c8dd5acdcc5c24847e85499259aac43806e39d944f6d70ce59e8c41a482e131a1f12a6b1f292203ca9f985be067397e9c37ac242be31f347c437bb86b74d93d2d885be37db104196f6c56c52106a0422962122ba385bffa79e1d52333676bc7855dcefc3a5a9814e040c311e72bf75861b1b34e3e02c01c8d8fdc5e031fcf5d1efd95c1c78fe7f9a71e82f09a8af4a613c94de74591d3c042bbef0abfefa2bad1af03f9cda11451b27f32b32e652326f083f491dd6b1e29b505413e4120ad52713d85207be08e22781bf78b7bc883381a12fe276b35cecc8c332710c21714e0c9ef697e547bb75d117060fb881bbfa53117b3cdbe669b273bd83a882f29234a594cce03effe07cbacabc818e021e2966432dab04db5263ae69309588a3611b90e63c5748ca041884e764d0d0369b9779f40ea47aa4f4f5bc9851891f8a4388a6d26628ab9ac1439eb7c181dcfd307e21a66fd382538d2843feb71bea4c34a99aa749bad982a66078c0edeedc4e978f4962c0699bbe74262ef39fe2a0edc854c17081dd05d3d6be2c17c879204e61164d0bb3800cf76963220594c78fa2b5fe654418c7054c40c4bcb49f163351ff888f3597fd50b05d24dc26da55f3accd16895186844094f5d149e29ae4d825682eaacd161d728bac930888172739985c68555d9a14de041eae4b709dfb60e8b294f12af785704c60e7d0e6a44968ae4f6f902a771cb50c9d991fe08f9dc11ffc228cb25124aa9297c09c50dc1eb660f02bbfc473064f34a32ba0a8791d4cec60c8db7d5985a84312e5f5437a48d11dae9493276f4134e7db991ffdfa499b77c8bb0f55ff1b10a45be5d463e892b5ca369247ff003da0df7811a7c9474a7495106caf7e45dd0a47f275b9608408370a61b1af5b09725c2edeb0cf27795ee81385b2183b33c49c36c71d8363d24f306de133efd3caea5c1d380059e772e6d7f9a6d7958667d3ff604ce762d907d24caa0e78dd6c255aa2f931ab29e857f8c7b3225332a48669646d95bdaa47a87b15d41b391e84293396700a4604f1b721d0e8e3bea5e93c0f6dfc4123da096148f95a1460aee16a936081917c0fc312d72fbbe0bf78cf7494f267ef39ea74f474afcbf52336650558e3b275be415cc993da3f9472cdeea6e9b9ac216ceed21a853fbd3b6c66d2153fcd63b9e3fcfb5233c98c1802a50f644a289e994e56a2a57c3b2eab6e4fdc363e1bf12115b091e47794d3f39dd674ab0519f242267bd85ed0edd6b1a153ecd68ea70e5f775c1e31553ed2a2dba5bd00831750249a4920b098e92c9b2b847e64de5f5d7965d544e4af4c60ec03da5ea64d3ee9457bfe11025c330ca2417fde414055a6c1c4a750c8e320e33957db9dd6c118161f609fc9caf7e69008e3c4b4828b3d3a2cc1d572c0c8c977eb6945d105362a00d42d4b98b946c385e74803bdb0415badc0fdd7791f959af9e3a39646deba44bea66da2e9180583fcd26a11ff54b529e839381b8558cc9918faa0f14d8277e48f457d475983022c37a7e9cf670284edd85b6cdc8cce7b6ef2522c965d58858b2d4b89caa145bbe119fca82d1d2b1a57c538b82fe63f669c37513821a101e0d0b3b1bd668daf9bd785ffb261497bfa3abc1ee2cff4f5abbc4d9e8c1fac727ed1baf354bad6660273ed67350214ff346af2ea439843694c10b2e7aa81849a7483ba434ec9bed79a7a83f33303da9c472cb6fbec45465b77f2437852c0c5bc4b88481b7a242c5800ee8294e8b3e40f32eff6c7ee871827b20a6b42201ff7781ec10558b025a8c2f036ababda3c10bc615362002e14be7f90406a5d7cce6a91b0a2a79523d7df4c6c3fa871c00fbba180b37669cf56fae2e0b9a650040e9769b823bea5e480c4006ea1b45118241b8019e7efd5496fff7a54eb0ff64cd30b766f802ffc35763ed5c8d58252010e00f1b8061daa5a4cdc787477c2d87578a2b21e8246ff222c245bef32925b889e26fae4934672f31930218ada6cf8cda0083335a65b280db5ea7a3468f7ba055f34eb3fe28a9ef0500d0a308e8bef0c45675f27d3044141e53dc0a57abc203787b7c2b565a4d0f3dfad356c6e6d20c9a8aee0b53a6fdd77c4a316494da3e5cc3f9653645ae7bf7799568197d3915d3aa6b36826831391100f38b110dfa697c79f83d5d77c3b6a2ef509580e5022ae8539e35dfa4a99deff3f171ab29ce3acdd5b10abe657646b3d74a0c26d4f78004c5ee57cba97d2d6099821f2c971c18914b89122a6f3507f7b57408cc9e58c1e97ea2951ab19bc1c21e228453dd9d358f90a844dd21d412cd4ae95d36fc1b926e847ecba3676ac8b4d4465e2fc70492ce974cc57db06bb7f1ba885f1f4072c324cd5209edf73d8c3b94c9d334dc28255c735a38d210d01c8059a8465e826bb235163b7ba776d2d14699295c9eb498b341d2a7082b7ed0bbd712725a45cddccf442d888979368176137808f490df26e20821323a91a725851ad6bba4fd396ec300478b115251e4e3c7a4e0058f5843ac6604fa5e8d3196d5629547985c1c2c751184b39f85992bf8a33eccca4d2924356b260d52a89b0458623459b8f0df515366ca2175c332f72df9069cda0b1efe461b3316e186cb15ec15e22c0d4fd35b3e1a90b31b0e4ac4b00a4231930c27590675aa7a68ba50e19ea31df61b986a8374f27649b34f079b26504b3fb011218337a36a4e96d6eace07ce24726459ba2c14e3b80dd857b9aaca0ffdfa9f392a959455768563a85ce492233b8c7f11f5db8ce28d3ab120d500a363e436f4c3b6b79bc3151556fc195178760460a0940ae2200acbfdc8f04feec2ee9968215d7ee38549269d36c2ad9da0a7b67a1192379ea3bc18a46594f769a660797e6eeb8ca51f28f3964f0f7b0bd3f8d875831e78074470bc7aecdbbd75baf3c67141eff7de3fed8d00eef5efd62b36ae121391240b20dfe60408b64f88ebc4ac75ce4ddb0dbe17502f67cb61beeea78e7eb6473424d1e076799959b7f426fd196d3d0b3a4cc7a802de1082c20167af6ae7b2781e52416a03d04a0d53eec192949fa14566a5414ab370f818c54e5efd9a47668518a187fd91c21a3054182e915033af0b65c2cd506cda38478cb1927f7406b73d91fc7f13081b9015341eb6a055cfe04cbf2b6b1d8ac207e304f7ddee5d316df0ef49161041e0c8be66e2164cbc529067a89db0b747916b896c07e07d66e87771d04218529b307b2df039d9356189befdba6ceb27064176766513ea0008bfcce1573eea25647f4db5d25c427d12251447a73b591717c4a66bac794ccd6620c71fccc7226d76068a157755f9a33f92a2e2b8060352022095bfdbd4a3b2805162f7bcae1df5a26171c9b05586939793fe1e9ae09ad6dad4f6caf09d66bc34a1c95937af5e5c6ba253a9aecab4a66c3534dbac43bd67776688e511bc4105ec4d8070a6ba0c0b7c39443b1ff337659a745285735eccbb047348d546402e10bd5d737256a3ed5e0377d8830c4ccbe4b10702ee869872198d60c5f0f6d2c1d4a671585ad0242dd1574e110f8e2b48191e0d529f7416ec806ed8c7b38c7eb03acf20bc4a83cd7178c52fe925243607ee680621a21764a79ed80ed8d802826d04c1e0aba4d9374f7851c7725b871887de470d8383a8e2f20f3abb7b57075ad256ddb2c91f39d7361504e0c4e64a6f57e625977e35f3420058faacd937b327fda02d5134ea716bb22c0677b59d2982452d20ef3cefaccbc7019be170fcd5844e5f192aa27615df515751c7a0b440ab813d2d7691c127778cdb6d4aa8338fd9f152c87fc658e6dd23936b801cc87e0d80fd8bba8b6b8e54d16c2ae3f4a5fa0eaab5d450cb96aa454f3324addd00d96d3d378dfa68bdbf2e5bf02c240aaa8473ec26dc638f1130c80275f9d77e29dfc865566447b6bef0117ed1525f56d64ded18e26084826b40fc147e42790", 0x1000}, {&(0x7f0000001600)="b00006e6e2c221d511dee430d7775d6c6b57be52f33b3ae9687afaa78141cf6c932b2d4b22d5ad03454da4a69aa775354f6e51fb4fe62ccbf0333f00379d2492d979eb96e2a71bcea9e8db6706a20fe2aeccedead195e781ba4ab8965cac9618c6d6f39dc5eff576c82c86d8cfe2aa103824decfdd0942e86e12b70d9a7535927f150742d7259a16ef6692bf8334d2d8d78f76de4865e8859d502e1e7602f99797d30f56b628e6eea2f35c4013fe8ad21b0014eeea248099c4a73c", 0xbb}], 0xa, &(0x7f0000001780)=[{0xb8, 0x19c, 0x0, "82b68cd9e302971e94743a05d1d8ab7a28fcdb965391a585c014f2b64ee2f79ec72cc9fd610ce41a3f4c85d790c1ceb0a969a66d97542a366b30a05ca0db728f18b4e4f5be9cbcd5de1d082d60abf21662b8073c292bb6672e80dba5c10b0050070691aefb89dd9342d0d0d8efe15bc186b693892ab6e14f262447279b93f620cb7b6f640f95856cf75b8be3f3e6363adaf959e56f60944c4f04f20b32faa8caa6"}, {0x58, 0x18f, 0x64, "fefd8753338d1d95b6071797710962be6ec20beae2b7edf134d3cac20e783fb49e0ee7dbc75639e9edc2a89a088a2dfafbb1f134787299a822a55e3ea110625ad79ae596af24ee0f"}], 0x110}, 0x8000) ioctl$sock_proto_private(r0, 0x89ea, &(0x7f0000001a80)="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") sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000014000b0900000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200fe80000000000000000000000000000014000100ff01000000000000000000000000000108000800000400000932be8e699fb1c85b4f768fcd267b17afd0b1d7e04e8a9803ec44d72a33c80a9395f5ae8cbb73275c9f0b519cf109"], 0x48}}, 0x0) 03:50:33 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000140)={0x2, 0x0, @local}, &(0x7f0000000180)=0x10) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000240)=0x54) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x1}, 0xfffffffffffffe1a) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0x0, 0xffffffffffffff9c, 0x0, 0x12, &(0x7f0000000680)='ppp0self]\x01[.}-em1\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000780)='/selinux/create\x00', 0xffffffffffffffff}, 0x30) fcntl$getownex(r1, 0x10, &(0x7f0000000800)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={r4, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000380)='\x00', r3}, 0x30) wait4(r5, &(0x7f0000000340), 0x20000001, &(0x7f0000000400)) recvfrom$inet6(r0, &(0x7f0000000540)=""/202, 0xca, 0x2000, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @initdev, @local}, &(0x7f00000002c0)=0xc) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={r6, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2}, 0xc) r7 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) write$P9_RLOPEN(r7, &(0x7f0000000100)={0x18, 0xd, 0x2, {{0x0, 0x4, 0x1}, 0x401}}, 0x18) syz_execute_func(&(0x7f00000004c0)="426fc481e1e06b53447200f30f5d7f08c482f19354e6bef2400f1afa673edf02dcfd6426440f381da96cc20000420f407100") ioctl$TUNGETVNETHDRSZ(r7, 0x800454d7, &(0x7f0000000500)) [ 1719.378841] binder: BINDER_SET_CONTEXT_MGR already set [ 1719.390656] binder: BINDER_SET_CONTEXT_MGR already set [ 1719.398183] binder: 21934:21944 ioctl 40046207 0 returned -16 03:50:33 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto(r0, &(0x7f00000000c0)="a549a8fdababdea11f6a44d3903fdb4dea74b6717cb36ca2b5b43f63abddb6bf22e9a2c72b7498bdd0da25f33c1bc360f49be759943571cbe6f2fdc594515c7a581faf3e1b5d", 0x46, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 1719.404389] binder: 21935:21940 ioctl 40046207 0 returned -16 [ 1719.466296] binder: 21935:21956 unknown command 859701248 [ 1719.466307] binder: 21935:21956 ioctl c0306201 200002c0 returned -22 [ 1719.497714] binder: 21934:21957 unknown command 859701248 [ 1719.497727] binder: 21934:21957 ioctl c0306201 200002c0 returned -22 [ 1719.509631] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1719.509670] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1719.509850] binder: 21934:21938 transaction failed 29201/-28, size 24-8 line 3136 [ 1719.548849] binder: 21935:21961 BC_ACQUIRE_DONE u0000000000000000 no match [ 1719.579027] binder: 21934:21938 BC_ACQUIRE_DONE u0000000000000000 no match [ 1719.646392] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1719.646401] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1719.646708] binder: 21935:21940 transaction failed 29201/-28, size 24-8 line 3136 03:50:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0xfffffffffffffde1) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000080)={0x2, 0x200000004e23, @loopback}, 0x10) sendto(r0, &(0x7f00000009c0)="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", 0x5b1, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @remote}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x24e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000280)='/dev/keychord\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpid() fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) prctl$PR_SET_ENDIAN(0x14, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x200, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x402000, 0x0) splice(r5, 0x0, r4, 0x0, 0x1000100000000003, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 03:50:33 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) write(r0, &(0x7f0000000000)="e83c2eea29945c9795bda5ab5c294d35ffea9f3de55c0c3d73c23affe15a8bb077709c0ade8d10346cfcc07462fccb", 0x2f) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3, 0x828a, 0x6788000000000, 0x9, 0x0, 0x200, 0x80, 0x5, 0x6, 0x4, 0x485f0, 0x8, 0x800, 0x80000000, 0x7, 0x1, 0x0, 0x6, 0xfffffffffffffffe, 0x80000000, 0x0, 0x100, 0x8, 0x1, 0x4, 0xffffffffffff8001, 0xfffffffffffffff9, 0x6, 0xa6c, 0x1, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0x101}, 0x801, 0x7, 0x2, 0x0, 0x8, 0x2c7ba37, 0x9}, r1, 0xe, 0xffffffffffffff9c, 0x2) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40000, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000001c0)='\xb9keyring\x8c&\xff\xfd\xcc\xdb\x00') [ 1720.318650] selinux_nlmsg_perm: 6 callbacks suppressed [ 1720.318661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=21912 comm=syz-executor.4 [ 1721.043596] audit_printk_skb: 174 callbacks suppressed [ 1721.043609] audit: type=1400 audit(2000001035.090:8005): avc: denied { create } for pid=21911 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 1721.620557] audit: type=1400 audit(2000001035.670:8006): avc: denied { write } for pid=21911 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 03:50:38 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000fc3000)=0x1) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x20000815) dup2(r0, r1) 03:50:38 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_int(r1, &(0x7f0000000000)=0x4, 0x12) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:38 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x20ab40, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1cc, r1, 0x608, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1e}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x150, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff800}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c32}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xadcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x754a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3316cb9c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb2ac}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000800) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000002180), 0x4) 03:50:38 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="00022bbd7000fedbdf250300000028000200040004000800020001000054921801000300000008000100c581000008000200ffffffff68000100080003000000000044000400200001000a0067240000000000000000000000000000000000000001bc070000200002000a004e2200000006fe8000000000000000000000000000aa02000000100001007500400000000000000000000000000000000000e2704a02d1a26a48e6f31616261467e6da7fa66299ebc7e2f1f9239b68750b158e10ed30552422a33632cc22ea870c0e76686128e064692aabfe5b6f01b4a2f1d70dcb437a32a285a4c76965140ebc8cf37555da65c82656b8b63b3d2bc726414df48542e49aa7155d0ab8beaeb8a40a6fdce5ebafe6c80605071cb99f33ec5f56439368caf66fc28dc48a547a7570a134bef26a36defc8d692d8a0c0ece235d6d0f60a4c8b9426398df1529c6ddbb87fd9e789535d5d5c03733328153863777624d2d67b299293f7339cf5cb2cb4c7c95ebbf0c1272739b95a0"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0xfffffffffffffde1) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000080)={0x2, 0x200000004e23, @loopback}, 0x10) sendto(r0, &(0x7f00000009c0)="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", 0x5b1, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @remote}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x24e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000280)='/dev/keychord\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpid() fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="00fbf40602bae525ee60e6ebac53f5024e159e27a9aa9a5fd2ffadac7f7dee89df72c3162adffc057f05ba23a2815dcd1ec3d31142c7956c266cdc0749c194b15fa50fc43cdefb047676a0e811b261218851c5db583489fa8715eac318fc4a6a229d56bb599386f75cf554262fd0b853a6d9b9c22bc713210700000000000044f6abd854a1cac5f1d238713bac3c72690fa081a83b9d40ecdcad8d543a98068e2a2b1d8b609036e245962094670277fc31e71dbf02f0bb3fe623e58e447f3acd04d46289b704f90a8e3c27d335ae39fd0b2f1e36b3c977d80000000000008f7db091bf17cd8bbf8bd01297e4722571fb1e68c81b000000000000000000"], 0x1, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) prctl$PR_SET_ENDIAN(0x14, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x200, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x402000, 0x0) splice(r5, 0x0, r4, 0x0, 0x1000100000000003, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 03:50:38 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0xfffffffffffffffe, 0x0, @ipv4={[], [], @remote}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1724.184528] audit: type=1400 audit(2000001038.220:8007): avc: denied { create } for pid=21986 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:38 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r1, 0x0, 0xf, &(0x7f0000000040)='/dev/snd/timer\x00'}, 0x30) r4 = gettid() sendmsg$netlink(r2, &(0x7f0000000100)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x4008}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000540)={0x220, 0x16, 0x300, 0x70bd25, 0x25dfdbfd, "", [@nested={0x208, 0x6d, [@generic="8ae4c684271d91e7c34b7492e05f251da28b5569bb1331c47c", @generic="26a5060481ae91d91af1c207e687bdd72a98cde349e3c7aae7d92e42540da1741db5d44e2bed630c5b71600bfe516cbab2ebd1154a5579f35003a29029c4c0bf477252dbdebb8a51f9d5e02fe7e4822ebd61b78a9e13e2621a306806749ab7666c171c9037a08fd23847143b0798c16c4b80238f378f2914377407fa4aae5162617353a263df1a8b4b2c564e129287a297a4253a1cdc528ba5a7af220f098bcbc323736cde5b873ba46a2b443aa8c905a16489847966a1b7cfb4dfc4238c98262aae8b9563f208a7de39013a2115644ba9743173", @generic="0506bc0d2bba9826c55ec8df29644c75ad493c4c9a9001b4f409e1d31780fa004bbdc3ea5d2749e484772af1c0132e46e5535ee62833f50b6e240f17bb636b33", @typed={0x8, 0x49, @pid=r3}, @generic="0e92f61c680264d40617af96e6529e5cd7ee6332bd51bdcb67a22ac4301d1483d019b7ea328f9ffdded4c81b8c998087e9ec38e34c90d3b21f003cfb1de90b91ea07eb6bfcb7fcb598dc307a8890459cb806f6b66488de4f95c6d2e282cd832675af5aad28d4df8f6c56a4ee7466ca60d7a2560ad456e8a4aebe378b9719b59c558421edf7879b40e99ba7dc365dbb2d1a6b678597a9427e1b126bf6a36106249500ff9059dfa30660ef146a3359ec1d1d", @generic="9ee0bce6d537b87fc5ddc503356a68a44223dc63d0fd80e7d9c29e45dc"]}, @typed={0x8, 0x7c, @pid=r4}]}, 0x220}], 0x1, 0x0, 0x0, 0x4000000}, 0x48000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)) 03:50:38 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) 03:50:38 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10020006007, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f6465762f6e756c6c623000b2"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ext4\x00', 0x0, 0x0) [ 1724.335330] binder: BINDER_SET_CONTEXT_MGR already set 03:50:38 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r1, &(0x7f0000000280)=""/135, 0x74f) r2 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000004c0)) sendmsg(0xffffffffffffffff, 0x0, 0x0) pread64(r1, &(0x7f0000002200)=""/178, 0xb2, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr(r2, &(0x7f00000003c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xb, 0x2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f00000000c0)=0x8) close(r3) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000380)={0x7, 0x6d, 0x1}, 0x7) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000340)) readv(r4, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0xfffffe19}], 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) [ 1724.335341] binder: 21985:21997 ioctl 40046207 0 returned -16 03:50:38 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) rt_sigaction(0x2e, &(0x7f0000000180)={&(0x7f0000000000)="0fad09c4c129c61e00c422b5ae4e0a66410f69cbc443315de90dc4422506f9440f05c482b537687e420fdb06460fb18851000000", {0x9}, 0x5, &(0x7f0000000100)="8f89c8902164400f2c0ff269cd70789e73666666410f6734d1c4c1b25d01672e66400f3a0f1b4e6642d9f98f4848a3a08a9c90e34dc4226d3f7725c482edaa8700000000"}, 0x0, 0x8, &(0x7f00000001c0)) restart_syscall() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000200)=ANY=[@ANYBLOB="a88b0000b9000000aa443ffe38e26753f602b7000cd3070000000000000045414891d9b78dfaf196384b248e20abcfe94e65ee443c272ae97ed34ef738725089681dbd870928260445af29f125694c6dd8d8351ee22a4929fac152c9c9647f7627069a86cf1ac017f473defca3b23f0fce964e2e0b67d60dc0c20691fdc2da897087cc82fc342d0729ba0e46d3bee296a91924b141c4f993aa82271cf2330c4fbcfbc3da4f08e0b60e12042c22d36a9b5d105c64b46c575a13c63ebb201e69f1d6ee08720abe6abc"]) arch_prctl$ARCH_SET_GS(0x1001, 0x80000001) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1724.337740] audit: type=1400 audit(2000001038.390:8008): avc: denied { call } for pid=21985 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 03:50:38 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000240)='hwsim\t\x00') [ 1724.337870] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1724.337878] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1724.337902] binder: 21985:21997 transaction failed 29201/-28, size 24-8 line 3136 03:50:38 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @loopback}, 0x1) [ 1724.341218] binder: 21985:21997 unknown command 859701248 [ 1724.341227] binder: 21985:21997 ioctl c0306201 200002c0 returned -22 [ 1724.342900] audit: type=1400 audit(2000001038.390:8009): avc: denied { create } for pid=21985 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1724.343722] audit: type=1400 audit(2000001038.390:8010): avc: denied { write } for pid=21985 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1724.351050] audit: type=1400 audit(2000001038.400:8011): avc: denied { call } for pid=21988 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1724.353253] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1724.353262] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1724.353288] binder: 21988:22004 transaction failed 29201/-28, size 24-8 line 3136 [ 1724.356947] binder: 21988:22004 unknown command 859701248 [ 1724.356957] binder: 21988:22004 ioctl c0306201 200002c0 returned -22 [ 1724.358207] audit: type=1400 audit(2000001038.410:8012): avc: denied { create } for pid=21988 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1724.358818] audit: type=1400 audit(2000001038.410:8013): avc: denied { write } for pid=21988 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1724.411056] binder: 21985:22011 BC_ACQUIRE_DONE u0000000000000000 no match [ 1724.434558] binder: 21988:22012 BC_ACQUIRE_DONE u0000000000000000 no match [ 1724.436725] audit: type=1400 audit(2000001038.490:8014): avc: denied { read } for pid=21985 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:39 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @mcast1, 0x5fa}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0xffffffffffffff83) 03:50:39 executing program 0: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) syz_open_procfs$namespace(r2, &(0x7f0000000400)='ns/ipc\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r4 = socket$inet6(0xa, 0x3, 0x3c) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="7b454c460000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb687ce2b21b84075) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) pipe(&(0x7f0000000440)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000480)) 03:50:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0xfffffffffffffde1) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000080)={0x2, 0x200000004e23, @loopback}, 0x10) sendto(r0, &(0x7f00000009c0)="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", 0x5b1, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @remote}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x24e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000280)='/dev/keychord\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpid() fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) prctl$PR_SET_ENDIAN(0x14, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x200, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x402000, 0x0) splice(r5, 0x0, r4, 0x0, 0x1000100000000003, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 03:50:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:41 executing program 3: r0 = socket$inet6(0xa, 0x3fffffffffff, 0x200000000003) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:50:41 executing program 4: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) ioctl$KDSETMODE(r2, 0x4b3a, 0x8) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 03:50:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:41 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x188, r3, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_BEARER={0xd8, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x374, @rand_addr="4ef9212ebc200695ce14e6f117ed2044", 0x9}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3115f161}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @mcast1, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x50}, 0x4004000) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/create\x00', 0x2, 0x0) readlinkat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/128, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000fb5000/0x3000)=nil, &(0x7f0000c78000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ed7000/0x4000)=nil, &(0x7f0000d22000/0x2000)=nil, &(0x7f0000d41000/0x1000)=nil, &(0x7f0000cad000/0x3000)=nil, &(0x7f0000de1000/0x3000)=nil, &(0x7f00000003c0)="736e846f533483eaf39eb867ca40c70b897d650bd0d15909a250920f78e3cbaed768ae0feed7d7889a0d158d9472a0e4077d88a6998a3d649b4b2ee0a11e255cdfd0084c185ac3b8fc11d97ef85bdf2172", 0x51, r0}, 0x68) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) getpeername$inet6(r0, &(0x7f0000000700)={0xa, 0x0, 0x0, @local}, &(0x7f0000000740)=0x1c) r4 = request_key(&(0x7f0000000580)='asymmetric\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000600)='\x00', 0x0) r5 = request_key(&(0x7f0000000640)='rxrpc_s\x00', &(0x7f0000000680)={'syz', 0x2}, &(0x7f00000006c0)='--\x00', 0xfffffffffffffffc) keyctl$unlink(0x9, r4, r5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1727.332558] audit_printk_skb: 18 callbacks suppressed [ 1727.332573] audit: type=1400 audit(2000001041.380:8021): avc: denied { create } for pid=22061 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1727.364427] binder: BINDER_SET_CONTEXT_MGR already set [ 1727.364438] binder: 22057:22078 ioctl 40046207 0 returned -16 03:50:41 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0xfffffffffffffffd}, 0x1c) [ 1727.366663] audit: type=1400 audit(2000001041.420:8022): avc: denied { call } for pid=22057 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1727.366801] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1727.366809] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) 03:50:41 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x8001, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) futex(&(0x7f00000002c0)=0x1, 0x8c, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x1, 0x1) r3 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x3, 0x3, 0x0, 0x1, r3}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept$inet6(r0, &(0x7f0000000040), &(0x7f0000000100)=0x1c) [ 1727.366832] binder: 22057:22078 transaction failed 29201/-28, size 24-8 line 3136 [ 1727.369292] binder: 22057:22078 unknown command 859701248 [ 1727.369301] binder: 22057:22078 ioctl c0306201 200002c0 returned -22 [ 1727.370106] binder: 22057:22078 Release 1 refcount change on invalid ref 0 ret -22 [ 1727.370743] audit: type=1400 audit(2000001041.420:8023): avc: denied { create } for pid=22057 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', r3}) r5 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0x20000000}) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}}, 0x1c}}, 0x0) [ 1727.374845] audit: type=1400 audit(2000001041.430:8024): avc: denied { write } for pid=22057 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:42 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="00022bbd7000fedbdf250300000028000200040004000800020001000054921801000300000008000100c581000008000200ffffffff68000100080003000000000044000400200001000a0067240000000000000000000000000000000000000001bc070000200002000a004e2200000006fe8000000000000000000000000000aa02000000100001007500400000000000000000000000000000000000e2704a02d1a26a48e6f31616261467e6da7fa66299ebc7e2f1f9239b68750b158e10ed30552422a33632cc22ea870c0e76686128e064692aabfe5b6f01b4a2f1d70dcb437a32a285a4c76965140ebc8cf37555da65c82656b8b63b3d2bc726414df48542e49aa7155d0ab8beaeb8a40a6fdce5ebafe6c80605071cb99f33ec5f56439368caf66fc28dc48a547a7570a134bef26a36defc8d692d8a0c0ece235d6d0f60a4c8b9426398df1529c6ddbb87fd9e789535d5d5c03733328153863777624d2d67b299293f7339cf5cb2cb4c7c95ebbf0c1272739b95a0"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:42 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x6, 0xdf4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) accept4$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x10e, 0x4) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000200)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, r3}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r0, 0x0, 0x10, &(0x7f0000000100)='/dev/input/mice\x00', 0xffffffffffffffff}, 0x30) fcntl$setownex(r1, 0xf, &(0x7f0000000240)={0x1, r4}) [ 1727.461250] binder: 22057:22066 BC_ACQUIRE_DONE u0000000000000000 no match [ 1727.479103] audit: type=1400 audit(2000001041.530:8025): avc: denied { read } for pid=22075 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1727.492899] audit: type=1400 audit(2000001041.540:8026): avc: denied { call } for pid=22058 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1727.493032] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1727.493040] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1727.493063] binder: 22058:22076 transaction failed 29201/-28, size 24-8 line 3136 [ 1727.494336] binder: BINDER_SET_CONTEXT_MGR already set [ 1727.494389] binder: 22058:22067 ioctl 40046207 0 returned -16 [ 1727.503432] audit: type=1400 audit(2000001041.550:8027): avc: denied { create } for pid=22075 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1727.508434] audit: type=1400 audit(2000001041.560:8028): avc: denied { write } for pid=22075 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1727.509920] binder: 22058:22067 unknown command 859701248 [ 1727.510030] binder: 22058:22067 ioctl c0306201 200002c0 returned -22 [ 1727.514243] binder: 22058:22067 Release 1 refcount change on invalid ref 0 ret -22 [ 1727.520895] audit: type=1400 audit(2000001041.570:8029): avc: denied { read } for pid=22057 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1727.564919] binder: 22058:22076 BC_ACQUIRE_DONE u0000000000000000 no match [ 1727.598254] audit: type=1400 audit(2000001041.610:8030): avc: denied { create } for pid=22058 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1728.182652] PF_BRIDGE: RTM_NEWNEIGH with invalid address [ 1728.219741] PF_BRIDGE: RTM_NEWNEIGH with invalid address [ 1728.284349] binder: BINDER_SET_CONTEXT_MGR already set [ 1728.284376] binder: 22104:22107 ioctl 40046207 0 returned -16 [ 1728.326388] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1728.326426] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1728.326567] binder: 22104:22107 transaction failed 29201/-28, size 24-8 line 3136 [ 1728.354061] binder: 22104:22107 unknown command 859701248 [ 1728.354150] binder: 22104:22107 ioctl c0306201 200002c0 returned -22 [ 1728.355682] binder: 22104:22107 Release 1 refcount change on invalid ref 0 ret -22 [ 1728.407121] binder: 22104:22116 BC_ACQUIRE_DONE u0000000000000000 no match 03:50:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0xfffffffffffffde1) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000080)={0x2, 0x200000004e23, @loopback}, 0x10) sendto(r0, &(0x7f00000009c0)="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", 0x5b1, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @remote}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x24e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000280)='/dev/keychord\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpid() fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) prctl$PR_SET_ENDIAN(0x14, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x200, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x402000, 0x0) splice(r5, 0x0, r4, 0x0, 0x1000100000000003, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 03:50:44 executing program 4: syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0), 0x3) 03:50:44 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x80000802, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'netdevsim0\x00'}) 03:50:44 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0xe}}, 0xfffffe63) 03:50:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0xffffffe3, 0xfffffffffffffffd) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r1, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000480)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="a247d75b2b10206e4ea802f1e5707550", 0x10) [ 1730.415184] device lo entered promiscuous mode [ 1730.491423] binder: BINDER_SET_CONTEXT_MGR already set 03:50:44 executing program 4: syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r0 = openat$keychord(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x20000) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={@mcast1, 0x5}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7c, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffe) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0xf96d) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x4001ff) syncfs(r4) [ 1730.518084] binder: 22123:22126 ioctl 40046207 0 returned -16 [ 1730.536964] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1730.536974] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1730.536996] binder: 22123:22132 transaction failed 29201/-28, size 24-8 line 3136 [ 1730.537938] binder: 22123:22132 unknown command 859701248 [ 1730.537946] binder: 22123:22132 ioctl c0306201 200002c0 returned -22 [ 1730.538040] binder: 22123:22132 Release 1 refcount change on invalid ref 1 ret -22 [ 1730.619191] binder: 22123:22152 BC_ACQUIRE_DONE u0000000000000000 no match 03:50:45 executing program 1: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002abd7000ffdbdf25010000000c006b000a00000000000000080001f6000000000c0002000100000000000000080001000000000008000100000000000c00040007000000000000000c00050001000000000000000c0003001f00000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20044045}, 0x1) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0xffffffffffffffff) 03:50:45 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000340)="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") mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0x7fffffff, 0x2}) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000042db00570000000000ffff0044dba544511a91f7a20c718f4cd7c033b7332a155e7eca5bc016065e25a13150e8d5e7fb2549ffffffff11"], 0x3b) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000140), 0x7fff) 03:50:45 executing program 4: pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) getsockopt(r1, 0x1, 0x9, &(0x7f0000000340)=""/183, &(0x7f00000001c0)=0xb7) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x10000000}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:50:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) [ 1731.324278] binder: BINDER_SET_CONTEXT_MGR already set [ 1731.329604] binder: 22175:22178 ioctl 40046207 0 returned -16 [ 1731.394384] binder: 22175:22178 unknown command 859701248 [ 1731.399984] binder: 22175:22178 ioctl c0306201 200002c0 returned -22 [ 1731.426430] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1731.426470] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1731.427030] binder: 22175:22177 transaction failed 29201/-28, size 24-8 line 3136 [ 1731.442280] binder: 22175:22177 Release 1 refcount change on invalid ref 1 ret -22 [ 1731.504302] binder: 22175:22181 BC_ACQUIRE_DONE u0000000000000000 no match 03:50:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x5, 0x200200) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x80, 0x8, 0xfffffffffffffffb, 0x80000001, 0x0, 0x10000, 0x18, 0x4, 0x3ff, 0x400, 0x0, 0x2, 0x1, 0x9, 0x0, 0x6, 0x9044, 0xb9, 0x5, 0x4, 0x8001, 0xe061, 0xf99c, 0x0, 0x8001, 0x7f, 0x0, 0x3, 0x1, 0x100000000, 0x80000000, 0x1f, 0x81, 0x80000001, 0x5, 0x37, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x200, 0xbc, 0x1, 0x7, 0x1000, 0x5, 0x8}, r2, 0x2, r1, 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x206000, 0x0) 03:50:47 executing program 3: unshare(0x40000000) clone(0x800000, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@remote}, 0x14) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x800, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xd, 0x800, 0x7fffffffb, &(0x7f0000000840)={0xffffffffffffffff}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, 0x0) write$cgroup_int(r3, 0x0, 0x481) openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') socketpair(0x0, 0x80003, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8)=0x2000000000, 0x800100000000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) chmod(&(0x7f0000000340)='./bus\x00', 0x0) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000380)=""/39) sendmsg$IPVS_CMD_FLUSH(r2, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) setxattr$security_selinux(&(0x7f0000000140)='./bus\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:dhcp_etc_t:s0\x00', 0x20, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) syslog(0x0, 0x0, 0x219) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) syz_open_procfs(r0, &(0x7f00000003c0)='net/arp\x00') 03:50:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) getsockopt$inet6_buf(r0, 0x6, 0xb, &(0x7f0000c86000), &(0x7f0000000000)=0xffffffffffffff72) ftruncate(r0, 0x7) 03:50:47 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) epoll_wait(r0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000540)="352a4c23aa9308a2911c5f340ca4d09107d5bea6b2be66cd8f537436301d7cbdf9185133d51a7efb6dd65e5b620bbdf3b4f0a7ddb56377bb90a40ffe8615eaa4ccbcdfc1a8cc6fa65b793cf2ce1ccb635cdc7736e02f6d3254d627eed21731197fa64a7937506bb29a1b1694d260583d90445edab62ac9e0f1b43e29492f020aa70da9e00d12bd582df80951167517fbd4f5", 0x0}, 0x18) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="000028bd7000fbdbdf2511000000100004000c00010073797a3100000000640001000c0002000800010000000000080003000200000038000400200001000a00000000000fff00000000000000000000ffffac1414aa66e300001400020002004e20ac1e010100000000000000001400020008000100000000000800030001000080100007000c00040004000000000000003400070008000200000000000c00040006000000000000000c0003000000000000000000080001000800000008000100080000002c000900090002000100010008000200000800000800010007000000080002003e0d000008000100ff0700004400090008000100020000000800010002000000080002000000000008000200fffbffff0800020006000000080001004003000008000100400000000800020000000000640004000c00010073797a31000000000c00010073797a3100000000240007000800030024778921080001000f0000000800040003000000080004000180000024000700080003000000000008000300fcffffff0800020000000000080001001c000000180005000c00020008000400030000000800010069620000cc00010034000200080001001a000000080001001d000000080001001a0000000800040001000000080003000500000008000200080000000800030006000000240002000800040009000000080002003f000000080001000000000008000300080000000800030008000000180001006574683a76657468305f746f5f7465616d00000008000300040000000800030000100000380004001400010002004e22ac1414280000000000000000200002000a00000000000006000000000000000000000000000000010900"], 0x1}}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff8f, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x2161) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) 03:50:47 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="00022bbd7000fedbdf250300000028000200040004000800020001000054921801000300000008000100c581000008000200ffffffff68000100080003000000000044000400200001000a0067240000000000000000000000000000000000000001bc070000200002000a004e2200000006fe8000000000000000000000000000aa02000000100001007500400000000000000000000000000000000000e2704a02d1a26a48e6f31616261467e6da7fa66299ebc7e2f1f9239b68750b158e10ed30552422a33632cc22ea870c0e76686128e064692aabfe5b6f01b4a2f1d70dcb437a32a285a4c76965140ebc8cf37555da65c82656b8b63b3d2bc726414df48542e49aa7155d0ab8beaeb8a40a6fdce5ebafe6c80605071cb99f33ec5f56439368caf66fc28dc48a547a7570a134bef26a36defc8d692d8a0c0ece235d6d0f60a4c8b9426398df1529c6ddbb87fd9e789535d5d5c03733328153863777624d2d67b299293f7339cf5cb2cb4c7c95ebbf0c1272739b95a0"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) rt_sigaction(0x37, &(0x7f0000000180)={&(0x7f0000000000)="c4e34d02c254c4c17b2c3fc462459da506a10000450fa55f3a0fe8e945f58fe810a6befc0900000ff3450f113d9a000000c4c22d05e78f8978809756f94c78", {0xffffffff}, 0x8000000, &(0x7f0000000100)="2e3e448004126e65670f76697b6cc4c27d0ffd6466440f3a60e0ea43dad2f74fb400080000c40189eedf8f4804a2e90bc4817d51c3"}, &(0x7f00000002c0)={&(0x7f0000000200)="3665f245a53ef3426ff32665dcf4c48269b88e00000100660f38353a26f3410f1b092e2e420fd9afc92980ee672e0a11d2eb47de242c", {}, 0x0, &(0x7f0000000240)="c4617b2d808d000000460f313644dbe966430f73f296f043830d000000002926660fec524366400fe5b42b00000020c4036d4a770023c403857e5fc038f6a6ab3cff22"}, 0x8, &(0x7f0000000300)) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x40000, 0xfff) write$FUSE_DIRENT(r1, &(0x7f00000001c0)={0x10}, 0x10) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x23, 0x3f, 0x110000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x6, 0x8, 0x80000001}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) [ 1733.500013] audit_printk_skb: 93 callbacks suppressed 03:50:47 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffff9c, 0x50, &(0x7f0000000180)={0x0, 0x0}}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000280)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x18000, 0x0) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r4, r3, 0x0, 0x19, &(0x7f0000000300)='K \xa8\xe5\xb1j\xcf\xdc 8\xc8\xdb\x1b+T&r\x00\x00\x00\x00\x00\x00\x00\x00', r2}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r5, 0x4) [ 1733.500027] audit: type=1400 audit(2000001047.550:8062): avc: denied { create } for pid=22193 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xfc, r1, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x21}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="729055eab01d525caec1f422f1689d0c"}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x973}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfdd6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbd}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x832d67c9b4ed8949) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r2) setfsgid(r2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@broute={'broute\x00', 0x20, 0x6, 0x668, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000380], 0x0, &(0x7f0000000180), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x0, 0x8, 0x6016, 'nr0\x00', 'irlan0\x00', 'bpq0\x00', 'syzkaller1\x00', @local, [0xff, 0x0, 0xff, 0xe388ef4ba001054b], @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff], 0xd0, 0x138, 0x168, [@m802_3={'802_3\x00', 0x8, {{0x42, 0x7, 0x3, 0x4}}}, @connlabel={'connlabel\x00', 0x8, {{0x0, 0x2}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}, {{{0x9, 0x1, 0xef5f, 'gretap0\x00', 'rose0\x00', 'rose0\x00', 'eql\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @random="2b8fdd0873db", [0xff, 0xff, 0x0, 0x0, 0xff], 0x70, 0x108, 0x158}, [@common=@ERROR={'ERROR\x00', 0x20, {"2fa6a47486ffb0fe577aaf49339d508c4c61316f72846a50bb0a67fdf630"}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x7, 0xfffffffffffffff7}}}]}, @common=@log={'log\x00', 0x28, {{0x5, "51e818d2ea933876236edc6334997886840255eff68a0f2715dc8d6b0eab", 0x2}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x7, 0x20, 0x18, 'syz_tun\x00', 'hwsim0\x00', 'veth0_to_hsr\x00', 'veth1_to_hsr\x00', @remote, [0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0xff, 0xff, 0xff], 0x70, 0x70, 0xa0}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x5}}}}, {{{0x9, 0x4, 0x0, 'bond_slave_1\x00', '\x00', 'veth0_to_hsr\x00', 'veth0_to_team\x00', @dev={[], 0x11}, [0xff, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0xa0, 0xd0}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x1, [{{{0x19, 0x4, 0x10, 'veth1_to_bridge\x00', 'yam0\x00', 'ip6gre0\x00', 'hwsim0\x00', @local, [0x0, 0xff, 0xff, 0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0xa8, 0xa8, 0xd8, [@mac={'mac\x00', 0x10, {{@broadcast, 0x1}}}]}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x5, 0xffffffffffffffff, 0x1, [{{{0x13, 0x50, 0x2, 'ip6tnl0\x00', 'vlan0\x00', 'bpq0\x00', 'bond_slave_1\x00', @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff], @broadcast, [0xff], 0x70, 0x70, 0xa0}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x8}}}}]}]}, 0x6e0) setxattr$trusted_overlay_nlink(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='trusted.overlay.nlink\x00', &(0x7f0000000b00)={'U+', 0x20}, 0x28, 0x1) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000b40)={0x1ff, 0x4}) [ 1733.571424] binder: BINDER_SET_CONTEXT_MGR already set [ 1733.571449] binder: 22195:22199 ioctl 40046207 0 returned -16 03:50:47 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f00000001c0)={0xf97cff8c, 0x8, 'SE Linux', "188e28cf33c8ad1a81a134c96968a7d3fc9d10a12799e14e6e22ca9c419d067f3f67d2c8b7151210c695b2228cc7f3f6fd029fc8324e102def96326e6af4702701ddf2dd9bac5742efd84a9f4dc365c02f14078ebb5f245bfcafc7ba484a048a6e3a6513487c704985e4a95d2e0adc053689c7698d73707e31a0229fbb936da1650ff406cf320cddbb2097a2543eef2862eda70dbdb73a27f087c7b72895e473ef5598cf7f1d7eccfc2bedde971b47b0bbe5c2b4ad954e7001651c650bc1997df6407dc92521b88bc4246b54c8a1cc2375595e70e8b394c0b5b07aedce00000000000000000000000000000000"}, 0xfd) ioctl(r2, 0x3, &(0x7f0000000080)="543641558804021c57c2cc46b9804d2395fc1f9d") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f0000000380)='memo\xae\xfa\x01\x00\x00\x00\x00\x00\x00\x00\xc6\xec9\x85by/ev\xeaA \x7f\x93r\x00\x00\x00\x00\x00\x00~\x18\x8b\xeb\x1f\x9f\x18\x92B\x10g\x9b\x98\x94\x941\xa0\xdaY\xd7\xee@\x99\x1dT\x9a\x92\x10\xe45\xc6\xb0\x96\xbd\xff-\xbc\xbc$\x1f\x16\xbcS\xb2?{\xb6\x9e\x87`\xbb\xf0k\xb3y\x83\bK$\xafy\x13M\x90\x82\xa6\xd5m3\x8cs\x00)s\x0e\xc9\t.T\xbeo\x02\x99\x85\x88^G=?\xe4o\xd56\x9b\v\x88\x11WV\xa0\x99U\xe1i&\x96\xe61V\r\xa1\xae\x89\xe7P\x12\xdbV\x97.A\xb4\xb1\x8c\xa7\x9cK\xc5c\x8976\xce\xe0\xfe\'\xe1\x16\xaa\xd26Zv\x87\xe7\xda\x10;\xa3\x99d\xae\xe4J\x8f\xd8K\x1b$hN3C%\x99\xbf\xab\x01\xbco\x1cm\xf40R\xb4Y\xc4\xef<0Q\x89z\xa2\x1dC\x1a\x1c\xf7*\xbb\xda\x84\xf7\xcb\x16B+\xf4\xd73\x86\xab\xaf\xee3\xbb\vg\xdf\x00\a\xa6,A-\xf0q', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="25516a9ac3d46a3209e4942263a57bf837aeb25213c8713d9f5d44ee4e321097d716e43901f70710efc30e47ba8017f260673690b104f2a2897c2c01b0c27612fb13541ff9ad7d5552565fa640a279e6037bfa98c7f96eb0dabad5fc1381897d1a2118b2644632ae80238ec7b6861a55091f213f34c4594a3faf84844b7939ebfed61e4553ced19a981e210b77f6f02fdf76f275ab1611bb81819d5e6600b3880249f33fb1512582cf1d051074486f"], 0x1) write$cgroup_int(r5, &(0x7f0000000200), 0x44000) dup2(r1, r0) [ 1733.652142] binder: 22195:22217 unknown command 859701248 [ 1733.652152] binder: 22195:22217 ioctl c0306201 200002c0 returned -22 03:50:47 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f00000001c0)={0x0, 0x80, 0x16, 0xbfb1, 0x0, 0x9, 0x7}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000180)='user\x00', 0x0, &(0x7f0000000540)="fcace6e61d5f1b1ee32a5ba8e06f9adfcba9eee035cb2cf9b38a122497c3227ff7063c395abfd1295fa49efddcf83dfe1927602c140f44c7ac319344cef67d0dbfdf63b9e2e9ae34b2d8ba47a19dfbb6747d46d8668cc4b7370d7ecd2ae139a7462f29069aeb18804aa683ae1a392fe2b30de7da39f9e0a006d09a2c95f2810f3fba23352b22de7b84ad82609abcb45a812c4f7327730c9b2e4da74a4d9de84f79eca5d96a5234cdf4105d", 0xab, 0xfffffffffffffffe) keyctl$assume_authority(0x10, 0x0) munlock(&(0x7f0000006000/0x3000)=nil, 0x3000) tee(0xffffffffffffffff, r1, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000340)='\xd1?\xf3\xd7v') ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000200), 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000840)) getegid() setgroups(0x0, &(0x7f0000000280)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) request_key(&(0x7f0000000440)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000480)='user\x00', 0x0) [ 1733.652322] binder: 22195:22217 Release 1 refcount change on invalid ref 1 ret -22 [ 1733.654242] audit: type=1400 audit(2000001047.710:8064): avc: denied { create } for pid=22195 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:48 executing program 5: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x102, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x40800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x134}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 1733.655039] audit: type=1400 audit(2000001047.710:8065): avc: denied { write } for pid=22195 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:48 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00') perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x9, 0x0, 0x3ff, 0x204, 0x0, 0x7f, 0x2, 0x8, 0x5, 0x3, 0x74, 0x7, 0x7, 0x5, 0x80, 0x12f7a714, 0xfffffffffffffffa, 0x3, 0x3, 0x5, 0xffffffff, 0x5, 0x7f, 0x0, 0x9, 0x1, 0x3, 0x1000, 0x100, 0x7ff, 0x401, 0x80, 0x930, 0x2, 0x5e5, 0x1, 0x0, 0x6c4, 0xf4e02860b6548b77, @perf_bp={&(0x7f0000000040), 0x8}, 0x20000, 0x4, 0x8e9e, 0x7, 0x5, 0x0, 0x5}, 0x0, 0xb, r0, 0x8) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/194, 0xc2) exit(0x0) execveat(r0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) [ 1733.681905] audit: type=1400 audit(2000001047.660:8063): avc: denied { call } for pid=22195 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1733.684906] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1733.684945] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1733.685109] binder: 22195:22199 transaction failed 29201/-28, size 24-8 line 3136 [ 1733.739106] binder: 22195:22199 BC_ACQUIRE_DONE u0000000000000000 no match [ 1733.753362] audit: type=1400 audit(2000001047.800:8066): avc: denied { create } for pid=22220 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1733.758881] audit: type=1400 audit(2000001047.810:8067): avc: denied { write } for pid=22220 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1733.774393] audit: type=1400 audit(2000001047.830:8068): avc: denied { read } for pid=22195 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1733.834074] audit: type=1400 audit(2000001047.890:8069): avc: denied { read } for pid=22220 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1733.837335] audit: type=1400 audit(2000001047.890:8070): avc: denied { create } for pid=22220 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1733.837857] audit: type=1400 audit(2000001047.890:8071): avc: denied { write } for pid=22220 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1736.409151] Y­4`Ò˜: renamed from lo [ 1738.057617] Y­4`Ò˜: renamed from lo 03:50:52 executing program 3: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000000c0)=0x1, 0x4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000180)=@abs, 0x6e, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x4000000000002c5, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x17, 0x3, 0x9) ioctl(r0, 0x2000001400008912, &(0x7f00000001c0)="0adc1f123c123f3188b070") 03:50:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:52 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x30}]}, &(0x7f0000007dc0)='GPL\x00'}, 0x48) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x50002, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)=r3) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa200020}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1f8, r2, 0x31, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x10000}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x52}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffff20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d6d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb076}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8a4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb463}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x386}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x14c7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x1f8}}, 0x8000) 03:50:52 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f00000002c0)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="02120001000000000005000000000000"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:50:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) poll(&(0x7f0000001380)=[{r0, 0x200}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040), 0x0) 03:50:52 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000140)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x1) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x88000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000300)={0x0, 0x7, 0x8001, 0x1ae4}) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000004c0)=0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x3c7}}, 0x0) getpeername$netlink(r1, &(0x7f00000000c0), &(0x7f0000000200)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000048c0)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in6=@remote}}}, &(0x7f00000049c0)=0xe8) unshare(0x60000000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x20) recvmmsg(r6, 0x0, 0x0, 0x0, &(0x7f0000001080)) sched_setaffinity(0x0, 0xffffffffffffffbc, &(0x7f0000000500)=0x6) sched_rr_get_interval(r5, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'veth0\x00', 0x2}, 0x18) [ 1738.879856] audit_printk_skb: 15 callbacks suppressed 03:50:53 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x246082) dup(r0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@getlink={0x30, 0x12, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) [ 1738.879871] audit: type=1400 audit(2000001052.930:8077): avc: denied { prog_load } for pid=22265 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 03:50:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80003, 0x0) 03:50:53 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x5, 0x3, 0x5}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5405, 0x71dffb) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x4, 0x8}) 03:50:53 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="b700000000000000bd00ffff00000000950000000000000034d1073a76835501ec962b9442c33e2fa7c8b4fd2aaabce5b6f16fc6de683100dc557bb5bbab335a7b535e847bd7213969bc1c05debdb8e1b678b35f4c4c6b23c85f6fd6aabeb1efe7e0a2d0cb1c65ea6a6c2ca9799b"], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80000, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0x1, 0xfff, 0x4, 0x82, 0x0, 0x3ff, 0x80000, 0x2, 0x10001, 0x0, 0x0, 0x6, 0x1, 0x5, 0x9, 0x1ff, 0x1, 0x7fff, 0x4, 0x6, 0x100080000, 0x1, 0x0, 0x101, 0x2, 0x9, 0x9ab, 0x8000, 0x7fff, 0xc0, 0x2000080000001, 0x1, 0x200, 0x2, 0x800, 0x5, 0x0, 0x1, 0x1, @perf_config_ext={0x4, 0x20}, 0x8, 0x4, 0x5, 0xf, 0x80, 0x0, 0x6}, r1, 0xe, r0, 0x1) write$tun(r0, &(0x7f00000000c0)={@void, @val={0x0, 0x83, 0x6, 0x2, 0x2c0, 0x3f}, @ipv4={{0x2a, 0x4, 0x2, 0x40, 0x137, 0x64, 0x9, 0x5, 0xbe, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x46, 0x6, [{0x1, 0xd, "3f00ea427cf76b960812f4"}, {0x5, 0x5, "b8ca0c"}, {0x0, 0x11, "769e1c65ce857589ddcb23452394bf"}, {0x0, 0xf, "7ca822dfe381123eb797f986e8"}, {0x5, 0xe, "ca44fd7b4e47eb708f9a3173"}]}, @ssrr={0x89, 0x7, 0x1f, [@loopback]}, @timestamp={0x44, 0x1c, 0x3, 0x0, 0x78e, [{[@local], 0x5}, {[@local], 0xe780}, {[@remote], 0x10000}]}, @cipso={0x86, 0x29, 0x5, [{0x5, 0x4, "82b1"}, {0x6, 0xd, "2f7767672b4df3a462775a"}, {0x0, 0x12, "d9d10b514c69aae28d720dd1031efbcf"}]}, @end]}}, @dccp={{0x4e21, 0x4e20, 0x4, 0x1, 0x5, 0x0, 0x0, 0x5, 0x2, "ff5e15", 0x1, "c2ba65"}, "a56bef87ca14fe4bdda445373faf383c401b40b616018fdff3dc4d18591583bd46dc8322eeff23d29e561093be8bd4167c2bf6a93e9a42e68af6c9a7c74a4035b5af8168de7da21dbcf77fdc4a63a312c5e249ea06d573898f09a99417dc5ad033e0d3e27558f76df110b22233b75f91867c4a663c75f321df6d2a038aadce"}}}, 0x141) write$P9_RCLUNK(r0, &(0x7f0000000300)={0x7, 0x79, 0x1}, 0x7) [ 1738.965997] audit: type=1400 audit(2000001053.020:8078): avc: denied { create } for pid=22265 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:53 executing program 3: r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000200)=0x7) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) getresgid(0x0, 0x0, 0x0) r2 = dup2(r1, r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x701, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x7f}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x8040) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000001c0)={0x0, 0x100000001}) 03:50:53 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(0x0, 0x0, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e22, 0xfffffffffffffff9, @loopback, 0x7f}, {0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8000}, 0x7ff, [0x2, 0xfffffffffffffffe, 0x3, 0x1, 0x70, 0x0, 0x1, 0x2]}, 0x5c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063f1f00a3dd82a98070e98e0adf14040"], 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 03:50:53 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syslog(0x3, &(0x7f0000000200)=""/147, 0xfe48) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfdc30) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0xff4f}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x3cd) write$binfmt_elf64(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="7f454c4600250000050000000000000003003e00060000002c010000000000004000000000000000e1000000000000000500000087003800020002000700ea000200007001000000ea0a000000000000f7ffffffffffffff00000000ffffffff00000000000000000100000001000400010000000000000001000070040000000500000000000000000000000000000005000000000000000100000001000000ff0f00000000000000fcfffffffffffff423273d395b5dfe49a633eb0eb0263328129db30c89d614ca312379424593d1149401363a977a2b10bc8394762bab422771360aa38dc889b26829f721e3098b0f80c2f4ee55bcf0df04911af0a6a16e0ab5b5bb1e2227df0cb7b403be567ea3b9adef738dd4b7efbd9e56dfc0dc488a064d4ad246d477bc8fedb6c1fbcd09469e544a6ac9afa9987b94c8d1209a41a79416931a8f43bd761418a2c47221a2a4d6bee2592cd6eab8fa3ac582965b48d68fb1dde708c9901874b0f1628c0adf0dc15872d102a327edf073a52942892de4cc87c25e76cde841dd1e09db3f59955450018b682981af9bf3133a11fbf7915b41105bd663e6f7116777b3cb43f260d25a06d22119ca7674f7d9eeb496cccae5ea73758600072b6f0c2a040000002001cb0000fbc132be60c8b0bf6ac0a892b355685d62cb7077a1e889c359d7bfc544111c6ca232e6c6593a0b8f085567b065536d649fea6d4e202255fc1a0dedba780af208b0457ed33958cfd97c0155f59b06d997423bb3b6f3d5e01c8b74030434cacb0e508ef261aff03a72021b6011f6ff05f6070f0bcb7d75cbf1668562cd6599dcf1eac792c47370ac83b2730215d9955f6fa81f59d3209fbaf52f41f8c413432d976fe6eb3ae98661de6250e09bcf7b82d0492b349ca022abe346a443d41aa83ba7d2ed5193dda7e9c78769b1430e5a171e12e0fa1d057e1aef4b856ab0f2dabc8b207f09d78e1f83461ccac0b2558732ea70d369973971d2c6d94081f33308b1e4b27a2ce6f45838809407045aa63b07372728d2aabbb752eb506219d82564c7323f73bfc2260fd95e5e8eeca550b29adcca477de69469764858d7aa3ab8afd99e883c43dacae12ac88e7fea5a99df90755e5caf59185794ed6419a22fe36d9070ed6558b090cb871914491e2a135047b729107896b784bf87c941f7b993033898b993c83b8bcec93aed20e900921e8c8e65939b23a0f84c837a71633aad5664665e7f89839258d1477a2e8fceaa9280b9c9dc53b5ed4bd907c3948f04ac1eff961bf3040ae0faed3985bccc355506dfcd52907750828fc988e60aec5b577af9769cebc8d6e87a826826f8362c84fe7ec9e6d3cc39c1b6b6b9005eaaf0d9037fa576757018d3f60fbab576284cd734f48b0e4b3e70a4b8143dc67e94c1090b7376eec330f5995c4b3a119646b4a953cf0669d6e52264827bbbae2c7565529a68f46f5e1a23137059867d0192caf6b22e2d74f8fbe12a139bc90a0d12b6acc0a106ba4fc2baf87c254bb54083ffffff7f63dbc82581cec688136c617847b1a3b6c0c331af00086cae971610587c4683d5f1b0dd68b8a419f581f0387cc9d1a435e329a0595d73a4489b1ea23c331ca752bfd46de13f0ee26e7e2e9b11dd7151883ac8112c0ba049070bcf00881cc0a37395f1a102cddda4b0b903b0233461e70254e6a75b9c29c02fce51b630d5cd58867e5f8e5b47fdb2fb53e0b9485f1079ddb39d7b3ef5d8d37be9a08714575e454274581a8ad758ba53da32d2c893e8a40de0febf31f84016558a9db7c53dec27895d69fa1a34e4b5b856f4d0974a9dd4031e28632a245b921a576f1a19f47d7ba08e9ca94a7ae46c89b379d90e0dfdcffb790586d920ea79f94af735aa51695dfe0c9c73a44b277e877b473b43f5c3a960d7c5e22678ab3f7cf46bdf23cbbd31df613827f8e23f7b2c71be25eab7dbd56f7b426b78f8e5afe72366ffcd05c29b92ad591e35a19df805a2b8819b87a13109c19ea941e9b9f6ee1c47708870abfda2debce7eae0f356bc896a5a207f6bc3ed4186117e1ae9b861d3a9a94520a6df99fd700c6fc3b82467a1257c2040dd34b2fb30c032224e6b864900f93168e387edaeeedaebf8b7b40d4caaa97c85229e63770ced3382013fd11010d0ee46333666aaec98aacc511c92be9e55eee400c74ab4614552624ad88f5d63b6f87e85826ee7cf6f15418f9712c6d07f36a54f097d9bc48b3035ae569af4753e7831dc520fe4726d0c96d0cb7b45e5ca5002884d38ed8e8ead8d4a7da76f9bcfda48fd27345bec7dd4356ef7b11a0cd3113bd9c581e7e647eddd060553fd6e9194bc07ffc5ca9eb6e9ce36aa545ac0f6e242e381282522481668f05909a69db9c8f417ce2406fb727c11fa8ed3ec6f097fed51414f32860700000000000000060d97539c1215ad15f4f24e9921c3fc46c8e566a6aa0fe836f4fb616d5b871cbdc9cb27e00245bb2291f767d4c581387a63022c727026043c0180a848edd1c3fffff21c3fe0b11c65caca8941959536882277e3dc9e61da52527a24e2d79a367a80b33b24f1ca184d56ad13194867d7a0a424977b5f256a4643460a03007ccf2abb042c6a8f357ee967298f4ee68fa10d82aeec9c63884f43927692db04bfa6651a630ff1e945d5c2ceb1552d0cd69830f257e5d2b500e4447f03edc78938d82871b7075be875dee546cd23ae617356f51fe8f1fb11417e63a436d7ca0ecd22fab3719ab5b4a4fa0ac2b6a44002fdddb61f7d6fe2beac291455b144cff1da4cb487c430a42cd6dee20000000001000000abf2a393823dddf4567d7a6ac785662eb272ea9ea223e0d63a2d027fc3bfa6da9c1537a5c207c9f2495bd45ee28be938ad3dbdadee778875ba641ceb20f3fb23d57269a4e40e0baea56d0b4247f12ebb7cf6ee0e64b0d521c8636ca845287f752adfde004e37bee0451540bcabf455b43233e287e4ce36ebbf2cf0aa8325b72b90c40cc5bdf77f66b07bf5423a80409e1e95424e2d63c09e621354d87d29d28758c290f29746e00e72e1f6ee9fc93841a7a4ec7420c1d78c09f9355b41c5b6a2e94d0a218428a4e4e40bcab84f0cdc9a230101146a11e1f36367b4b5f21e76b5e58c31aec27a47e7ce6c22d29c553f03d0515199b541750e92718c53542cb8c0e4202c89b5bc2a4e3cd4fd1e33ba846b2d2d1c94d2e73327b1d327fe80ff1113634e2e94769b97a1088c2f00001fd26ffbf3b4b82036e960a01efd1eecb0e4cff79c5943cb7f3390757f2ebaa20ac131cddf19065dad03237cca7406b5c30228494fe25d9d26631795f3b0a17ac6c8c27e37a75bce127c592beed29fe6137efe5ac28a2a89597db794c570055e318e92f17f36e3fcbc68c8233d2f0c433f9e11b2819ade8026682c9c966d13605ba9cfa66d91f8203260ed06d8c53912b2c25be01165ebda24e3b70c4fa4a99c56470ee400000092272d6ba4a0906d5b8df7039b82bf83378b78ce124aca8b7944fffdd65bfca51e33614282fb1738dd43c6b95f2bc5e9b24605ff3fb5a06ece40c2c4a86b93acdde534777d1ac562abddbdcce0d91247c5196e7ef7d65ff45606324b402aa6b81afa463f63f96bc442cd25a033b7b6feed08de0f00bccb16c439813c6c4b1d1733bb55a6245a9180ec71a7f31631613c60af161f5ef64493b859a6c4baa9e3811250984db538169178a4f4cb4141f74e366a28b4fdeef59bb22f6f525c493912a044bd99a3b4b86b2834a40437d58d4292a22a730b6a2e5ec7bf358c2016326fff4889d5d5e1beec898a3888d0f4a450d86548a1a9b1cc1bee45e6a4e2c4e0bcd69a51d46190755bd42c1e53d4a1f80010da651d6c500a066afa9c98755acf643ff381af66742c6e091746c77e0f14f2583d6d70339ed50e9da34a0aa8820359872132179f087f16cdaf3636688927e39a857a99f911d08406b6addefa9f895f3b29812234eaf4d5a93b9363fa02a4ee9fe8676811004fabc8121f7639e9f92c0d7f796a6355e984d7a85aadc638b3b17d74fa96eb571516eb1a9fc487e918956411823e1edef555a61ba7d45931457b221bdcc8aaad58e8007497a8846278e0aed68926d3ea9fd96a89ccc89627c86da315c3eb5445bf799df613befe958390660f6c9f7ac02e3187100f18eb3bfacf9662601fc9868329b3524cb8c07850726355bd748f7c51b32e6c4341676cef6af55351e599d196d38d63bf0cd20b85f4bc79a2895b9c5d4d46090b4e1a10394f8ba7201d45d3878dc9b3e7ec3510073424b92a7448f9d8d9c15fff2a1c0e6dde7e6ad83f6243b21c6c14bd1b36e834b9cdc2b09022c0ddad8b5cdedb4ade2e81d79456e11360da181cfce8588814cfefa8bda9ccfa29e896c167c82002848e6bce80"], 0xc33) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, r1, 0x80, 0x1ff, 0xefee, 0x499cc791}) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r2, r2, &(0x7f0000000180)=0x74000000, 0x5) [ 1738.966465] audit: type=1400 audit(2000001053.020:8079): avc: denied { write } for pid=22265 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1739.002855] binder: BINDER_SET_CONTEXT_MGR already set [ 1739.002937] binder: 22263:22269 ioctl 40046207 0 returned -16 [ 1739.027886] audit: type=1400 audit(2000001053.060:8080): avc: denied { call } for pid=22263 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 03:50:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="00473b509aa766a0dbb20300000000000025466f28f9000100c910000000000000000000000000000000010401073f25c383cda9098bf51e7324df5094f1f6696b60a0ab31a192a99afa8a6bbbd065f4a1237ca4a7e214d63b984c509efa9f8addfb914db74cc103f3902c6016d01dae96d53e4fa284783d2d5cf4d984daffd6"], 0x20) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003cc0)='/proc/self/net/pfkey\x00', 0xa000, 0x0) bind$inet(r1, &(0x7f0000003d00)={0x2, 0x4e20, @multicast1}, 0x10) [ 1739.040376] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1739.040398] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1739.040600] binder: 22263:22269 transaction failed 29201/-28, size 24-8 line 3136 [ 1739.051837] binder: 22263:22269 unknown command 859701248 [ 1739.051847] binder: 22263:22269 ioctl c0306201 200002c0 returned -22 [ 1739.062822] binder: 22263:22269 Release 1 refcount change on invalid ref 1 ret -22 [ 1739.073547] audit: type=1400 audit(2000001053.120:8081): avc: denied { read } for pid=22265 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1739.120639] audit: type=1400 audit(2000001053.130:8082): avc: denied { create } for pid=22263 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1739.141313] audit: type=1400 audit(2000001053.180:8083): avc: denied { write } for pid=22263 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1739.165347] binder: 22263:22290 BC_ACQUIRE_DONE u0000000000000000 no match [ 1739.271235] audit: type=1400 audit(2000001053.300:8084): avc: denied { read } for pid=22263 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1739.319653] audit: type=1400 audit(2000001053.360:8085): avc: denied { prog_load } for pid=22298 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 1739.328244] audit: type=1400 audit(2000001053.380:8086): avc: denied { prog_load } for pid=22298 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 03:50:54 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f0000000140), 0x4000000000001fc, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getpid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0xffffffffffffff40, 0x7c}]}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0xf91) 03:50:54 executing program 3: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x82005, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = socket$inet(0x2, 0x800, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:50:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) [ 1740.517632] binder: BINDER_SET_CONTEXT_MGR already set [ 1740.523146] binder: 22328:22338 ioctl 40046207 0 returned -16 [ 1740.592433] binder: 22328:22338 unknown command 859701248 [ 1740.598344] binder: 22328:22338 ioctl c0306201 200002c0 returned -22 [ 1740.602202] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1740.602243] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1740.602524] binder: 22328:22333 transaction failed 29201/-28, size 24-8 line 3136 [ 1740.639770] binder: 22328:22333 Release 1 refcount change on invalid ref 1 ret -22 [ 1740.699583] binder: 22328:22343 BC_ACQUIRE_DONE u0000000000000000 no match 03:50:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:55 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syslog(0x3, &(0x7f0000000200)=""/147, 0xfe48) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfdc30) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0xff4f}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x3cd) write$binfmt_elf64(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0xc33) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, r1, 0x80, 0x1ff, 0xefee, 0x499cc791}) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r2, r2, &(0x7f0000000180)=0x74000000, 0x5) 03:50:55 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e61b) 03:50:55 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x8000000004) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) memfd_create(&(0x7f0000000000)='/dy\xbdv/autofs\x00', 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x11, r1, 0x0) unshare(0x40000000) clone(0x2a04402, 0x0, 0xfffffffffffffffe, &(0x7f0000000500), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x8, &(0x7f00000000c0)=0x2000000000000000) open$dir(&(0x7f0000000040)='./file0\x00', 0x80004, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xd, 0x0, 0x7fffffffe, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(r3, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00\x00\x05\x00', 0x1}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, 0x0, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000300)='lo\x15\x98xJG\xb8\xe0\xf5\xc8J,\x00\xd2\x97\x04\x03\xdc\r') close(r0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') socketpair(0x1, 0x80003, 0x1, &(0x7f0000000480)) ioctl$sock_proto_private(r3, 0x89e5, 0x0) write$P9_RRENAME(r5, &(0x7f0000000140)={0x7, 0x15, 0x1}, 0x7) r7 = socket$inet6(0xa, 0x40000008, 0x67c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) lookup_dcookie(0x8, &(0x7f0000000640)=""/218, 0xda) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000b00)=""/4096) connect$inet6(r7, &(0x7f0000000080), 0x1c) 03:50:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) [ 1741.379928] binder: BINDER_SET_CONTEXT_MGR already set [ 1741.402558] binder: 22351:22357 ioctl 40046207 0 returned -16 [ 1741.439643] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space 03:50:55 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x8) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={[], 0x2, 0x0, 0x0, 0x23, 0xc4}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) rt_sigprocmask(0x2, &(0x7f0000000080)={0xff}, &(0x7f0000000140), 0x8) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x6) ptrace$cont(0x20, r0, 0x0, 0x0) [ 1741.439652] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) 03:50:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) [ 1741.439676] binder: 22351:22364 transaction failed 29201/-28, size 24-8 line 3136 [ 1741.442045] binder: 22351:22364 unknown command 859701248 [ 1741.442054] binder: 22351:22364 ioctl c0306201 200002c0 returned -22 [ 1741.443263] binder: 22351:22364 Release 1 refcount change on invalid ref 1 ret -22 03:50:55 executing program 0: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, &(0x7f0000000180)) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81806) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x3000000a0160100, 0x0, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x1d4, 0x11, 0xa, 0x220, 0x70bd2b, 0x25dfdbfd, {0xb}, [@generic="79691d1080365674ef262608c8a8331ad2e48e250c5829502bfcbaac20a842693777f7a30695ec6b09d558bcf5cb4067aa96d53afe7ca16ecc0bbc1fc50a449d75ca398a23dff71732d27035629e6b6b88ff81da3cc07c189513293cfd9e031b92fb9d4cb82ac668327fe302", @nested={0x154, 0x56, [@typed={0x14, 0x20, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}}, @generic="699a75e05670fbe171f6d76678cb53a5c7b4b7befb694aff579d6ed8521ba07da710d59b5d1032ad2a1770f2eb55f95e1e9f9ebec9f0031dc3592fdee0937755a0cf0a0f", @typed={0xf0, 0x41, @binary="e4a40fd63326413b315f79f1e1015ed744a6127248e14595ebfc021afaf85abcadec640447e618618a36a33b88b262f5ac7c5ebb4e2ed469beb5de95dbc77802237f0c34490bfe8e8cc366e70ecd535c82005e33710dfa388d213a37ef627a15a2d9bc0e6e0a8b611672dfd8af31a3ec4c5fecfcb28a11cf0fc4effaa42a3a3298dea2f4ef2bc8b6562ac3c3550213cc99b885fdabdea33a2b28e3415c77ac5d0c84ef1d5f8b082db70cf915f3ab83f9373fb50b438a91d8e6f92db8a0eff2fc69ef1eb01d6bb88cd504178ab0327bf835ff917c0332dc22e6831ec87f55e62ab050ec2b6566028db70dce"}, @generic="38bdd9c57bfbe249"]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x5}, 0x40000) dup(r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) [ 1741.543036] binder: 22351:22364 BC_ACQUIRE_DONE u0000000000000000 no match 03:50:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x81, 0x4, 0x92, 0x3f, 0x1}, 0x14) shutdown(r1, 0x4) [ 1741.934323] Y­4`Ò˜: renamed from lo 03:50:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f00000083c0)=[{{&(0x7f0000000040)=@rc, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000000100)=""/205, 0xcd}, {&(0x7f0000000200)=""/97, 0x61}, {&(0x7f0000000340)=""/76, 0x4c}, {&(0x7f00000003c0)=""/74, 0x4a}, {&(0x7f0000000440)=""/204, 0xcc}], 0x6, &(0x7f00000005c0)=""/155, 0x9b}, 0xb9}, {{&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000700)=""/153, 0x99}, {&(0x7f00000007c0)=""/100, 0x64}], 0x2, &(0x7f0000000840)=""/245, 0xf5}, 0x5}, {{&(0x7f0000000940)=@xdp, 0x80, &(0x7f0000002000)=[{&(0x7f00000009c0)=""/240, 0xf0}, {&(0x7f0000000ac0)=""/96, 0x60}, {&(0x7f0000000b40)=""/3, 0x3}, {&(0x7f0000000b80)=""/5, 0x5}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/208, 0xd0}, {&(0x7f0000001cc0)}, {&(0x7f0000001d00)=""/239, 0xef}, {&(0x7f0000001e00)=""/245, 0xf5}, {&(0x7f0000001f00)=""/232, 0xe8}], 0xa, &(0x7f00000020c0)=""/96, 0x60}, 0xf5}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002140)=""/225, 0xe1}, {&(0x7f0000002240)=""/6, 0x6}, {&(0x7f0000002280)=""/105, 0x69}], 0x3}, 0x8}, {{&(0x7f0000002340)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000023c0)=""/37, 0x25}, {&(0x7f0000002400)=""/12, 0xc}, {&(0x7f0000002440)=""/104, 0x68}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x4, &(0x7f0000003500)=""/156, 0x9c}, 0x8000}, {{&(0x7f00000035c0)=@rc, 0x80, &(0x7f0000005640)=[{&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/4096, 0x1000}], 0x2, &(0x7f0000005680)=""/53, 0x35}, 0xfffffffffffffffc}, {{&(0x7f00000056c0)=@ax25={{}, [@netrom, @bcast, @netrom, @rose, @bcast, @remote, @bcast, @default]}, 0x80, &(0x7f0000007980)=[{&(0x7f0000005740)=""/118, 0x76}, {&(0x7f00000057c0)=""/216, 0xd8}, {&(0x7f00000058c0)=""/133, 0x85}, {&(0x7f0000005980)=""/4096, 0x1000}, {&(0x7f0000006980)=""/4096, 0x1000}], 0x5, &(0x7f0000007a00)=""/238, 0xee}, 0x7}, {{&(0x7f0000007b00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b80)=""/212, 0xd4}, {&(0x7f0000007c80)=""/252, 0xfc}], 0x2, &(0x7f0000007dc0)=""/6, 0x6}, 0xa1}, {{&(0x7f0000007e00)=@can={0x1d, 0x0}, 0x80, &(0x7f0000008000)=[{&(0x7f0000007e80)=""/25, 0x19}, {&(0x7f0000007ec0)=""/237, 0xed}, {&(0x7f0000007fc0)=""/21, 0x15}], 0x3, &(0x7f0000008040)=""/5, 0x5}, 0x7fffffff}, {{&(0x7f0000008080)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000008340)=[{&(0x7f0000008100)=""/9, 0x9}, {&(0x7f0000008140)=""/24, 0x18}, {&(0x7f0000008180)=""/216, 0xd8}, {&(0x7f0000008280)=""/151, 0x97}], 0x4, &(0x7f0000008380)=""/26, 0x1a}, 0x7f}], 0xa, 0x20, &(0x7f0000008640)) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000008680)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth0_to_hsr\x00', r4}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @random="dead4b95626a"}, 0x10) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000001cc0)='/selinux/context\x00', 0x2, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r3, 0x3, 0xff, @random="a30197b4f20a"}, 0x10) close(r0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000086c0)=0xdde) 03:50:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:56 executing program 3: r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000040)={'system_u:object_r:autofs_device_t:s0', 0x20, 'system_u:object_r:default_t:s0', 0x20, 0x966, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x77) r1 = dup2(r0, r0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000400)=""/60) recvmmsg(0xffffffffffffffff, &(0x7f0000002800)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000180)=""/172, 0xac}, {&(0x7f0000000240)=""/101, 0x65}, {&(0x7f00000002c0)=""/61, 0x3d}], 0x4, &(0x7f0000000340)=""/62, 0x3e}, 0x2}, {{&(0x7f0000000380)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)}, {&(0x7f0000000440)=""/36, 0x24}, {&(0x7f0000000480)=""/163, 0xa3}, {&(0x7f0000000540)=""/81, 0x51}], 0x4}, 0xfffffffffffffffc}, {{&(0x7f0000000600)=@ipx, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/252, 0xfc}, {&(0x7f0000000780)=""/94, 0x5e}, {&(0x7f0000000800)=""/118, 0x76}], 0x3, &(0x7f00000008c0)=""/73, 0x49}, 0x6d}, {{&(0x7f0000000940)=@pppol2tp, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/25, 0x19}, {&(0x7f0000000a00)=""/170, 0xaa}, {&(0x7f0000000ac0)=""/149, 0x95}, {&(0x7f0000000b80)=""/118, 0x76}], 0x4, &(0x7f0000000c40)=""/83, 0x53}, 0xffffffff80000000}, {{&(0x7f0000000cc0)=@hci, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000d40)=""/133, 0x85}, {&(0x7f0000000e00)=""/104, 0x68}, {&(0x7f0000000e80)=""/172, 0xac}], 0x3, &(0x7f0000000f80)=""/24, 0x18}, 0xe7}, {{&(0x7f0000000fc0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001040)=""/92, 0x5c}, {&(0x7f00000010c0)=""/221, 0xdd}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/143, 0x8f}, {&(0x7f0000002280)=""/198, 0xc6}, {&(0x7f0000002380)=""/109, 0x6d}, {&(0x7f0000002400)=""/165, 0xa5}], 0x7}, 0x5}, {{&(0x7f0000002540)=@caif=@dgm, 0x80, &(0x7f00000026c0)=[{&(0x7f00000025c0)=""/106, 0x6a}, {&(0x7f0000002640)=""/121, 0x79}], 0x2, &(0x7f0000002700)=""/214, 0xd6}, 0x8}], 0x7, 0x40000000, &(0x7f00000029c0)) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000002a00)={{0x3f, @local, 0x4e22, 0x0, 'lblc\x00', 0x12, 0x6, 0x6d}, {@broadcast, 0x4e24, 0x10004, 0x2, 0x6, 0x6}}, 0x44) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000002a80)=0x7, 0x4) 03:50:56 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:50:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:56 executing program 3: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ftruncate(r0, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xef, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140), 0x10) sendmmsg(r1, &(0x7f0000003040), 0x253b03d5cf168c, 0x0) close(r2) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f00000000c0)) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1742.350604] binder: BINDER_SET_CONTEXT_MGR already set [ 1742.414153] binder: 22397:22406 ioctl 40046207 0 returned -16 [ 1742.414791] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1742.414799] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1742.414819] binder: 22397:22421 transaction failed 29201/-28, size 24-8 line 3136 [ 1742.421016] binder: 22397:22421 unknown command 859701248 [ 1742.421030] binder: 22397:22421 ioctl c0306201 200002c0 returned -22 [ 1742.421358] binder: 22397:22421 Release 1 refcount change on invalid ref 1 ret -22 [ 1742.486927] binder: 22397:22427 BC_ACQUIRE_DONE u0000000000000000 no match 03:50:57 executing program 4: setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@sha1={0x1, "794be90b3efde6a516c05ff5c6821fe0c6a29dc9"}, 0x15, 0x2) request_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0) 03:50:57 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r1, 0x2) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000840)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r5, &(0x7f0000000340)="c99b8adb13d2274097bc08718f53cbf142d17e2b0b047904e33fbe35851563eabb0afd1fad71c07cd89e97f7f9a72e41be6a4dd894ccdd390aa47a6b5f4e1fcf5c3e677e890c63900d50f9a8dd418eb3c5ce7ed033079dc7191285736ac0eff7e653c96d32ee99c0cedb28e1cccc36641fb062aee5b4358509f94bdd011d1f1720249aa77f", 0x85) r6 = getgid() write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x2, {0xa0, 0x0, 0x1}, 0x1, r4, r6, 0xff, 0x1c5216c6, 0x2, 0x5, 0x9, 0x3, 0x8, 0x3ff, 0x2, 0xfff, 0x7, 0x6, 0x1000, 0x20, 0x5}}, 0xa0) connect(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) 03:50:57 executing program 0: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) truncate(&(0x7f0000000240)='./file0/file0\x00', 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x10000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$eventfd(r0, &(0x7f0000000200)=0xfffffffffffffffc, 0x8) r2 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x4, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4011) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r4, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000400)='./file0/file0\x00', &(0x7f00000006c0)='./file0\x00') setfsgid(r5) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000280)=0x8) 03:50:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x18040, 0x4) getsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 03:50:57 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000240)='o\xc04\xb2Y]\x92\xf1\xc5\b\x15\xc9&!3a\xf6\x9f:3\xbclq', 0x0) write$eventfd(r1, &(0x7f0000000080)=0x5, 0x8) sendfile(r1, r1, &(0x7f00000000c0), 0xfeff) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000280)=""/218, &(0x7f0000000180)=0xda) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, &(0x7f0000000140)) 03:50:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'syz_tun\x00'}}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_CLR_FD(r0, 0x4c01) 03:50:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r0, &(0x7f00000000c0)=@nl=@unspec, 0x80) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/131) 03:50:57 executing program 4: r0 = socket$inet6(0xa, 0x400000003, 0x42) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x377, 0x0}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="b10b938e", 0x4}], 0x1}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xe2b, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1743.830338] binder: BINDER_SET_CONTEXT_MGR already set [ 1743.839274] binder: 22450:22459 ioctl 40046207 0 returned -16 03:50:57 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) [ 1743.910828] audit_printk_skb: 141 callbacks suppressed [ 1743.910842] audit: type=1400 audit(2000001057.960:8134): avc: denied { call } for pid=22450 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 03:50:58 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000280), 0x3c, 0x0) [ 1743.910978] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space 03:50:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0xff, 0x100000000000001}, 0x20) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x5) setresuid(0x0, 0xee01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0xff00000000000000, 0xa6610900, 0x4d}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r0) [ 1743.910986] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1743.911009] binder: 22450:22477 transaction failed 29201/-28, size 24-8 line 3136 03:50:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') getsockopt$inet_int(r1, 0x0, 0x14, &(0x7f00006ed000), &(0x7f0000000080)=0xfe22) [ 1743.912165] binder: 22450:22477 unknown command 859701248 [ 1743.912174] binder: 22450:22477 ioctl c0306201 200002c0 returned -22 [ 1743.912299] binder: 22450:22477 Release 1 refcount change on invalid ref 1 ret -22 [ 1743.912742] audit: type=1400 audit(2000001057.960:8135): avc: denied { create } for pid=22450 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:50:58 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) write$P9_RVERSION(r0, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x101, 0x8, '9P2000.L'}, 0x15) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() r3 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004a00)={0x0, 0x0}, &(0x7f0000004a40)=0xc) r5 = gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000004a80)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005040)={0xffffffffffffffff, r0, 0x0, 0x2, &(0x7f0000005000)='&\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005080)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000005180)=0xe8) r9 = getgid() sendmsg$netlink(r0, &(0x7f0000005200)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc, &(0x7f0000004f80)=[{&(0x7f0000000140)={0x2a0, 0x22, 0x300, 0x70bd25, 0x25dfdbfd, "", [@nested={0x210, 0x44, [@generic="6db72d57a2a5342b4582ea8e9d84e6db327e680cef6a3a60346efb9d4c52919618382e17f68f17ac32f28a1a02dac24c5801b922c9277c070128862fec7994aa8ed750cd974d2ef71585116c83e6fa321143c952df0a1f93b302644afc1baa0b692585f53dab9b1c7579949837657b7444ec215acf6c6c78ff61e3e4827138d45b76447213d0b1eae59c1c49989a9017b76cedb0f8f9e27c0bc9da2b7bdd3c0906da3832e48d5f", @generic="9c6c0f33443e0cba09efad13679f6e6472100fe676fd7da36af7a235efcc989a04107f5deb95b37ce6c8122cc1c9caa395913db850700738db410b3aa2f5e38c6e0cf3158785abfc58e11cdd2c5d01a7aa8efb0e29d3373703dfa5a6b4785cd0ef04061e067a99baa34ef0043acdb375b73a0cd9d06e3e3e27ad06c135b6be", @typed={0x4, 0x87}, @generic="5ea89ad8ae81d409cee7187b52861928ccb675d3ce6021fa87a2511c6778656d124fd57532f1c8dd2c823de8ca3a73c99637b59a193c07d34d160d77e22a426e580e41130ab0279187a9d394944735f387bc5bf96d7b019f6d8525f34e9a3336540b8e4e4111337cc3f1886b02a08ec550c8ac656f2b0ce73cfd418d41520321303292c1d97ebf88cfcefe7520e37ba9f776a9c21498d7abf8d858a991dc0930ef3404efa349e7aef2c0249353a469b655558d572899e3deee0bbc73f62ec93a10c441a7bc80c6a914040887f5ac4c7320be8bc326366a081dac13674a78e2"]}, @generic="7411a605581d2b928c78f41326635e5ce79b14af54b1cf616b977a66048bf1f4dd262f7889a7466c7b29aafd785981aefb105fce2c019a73ae9cb52fe9ad6296c712d6d2b1c8673fcfa8bf0dac90b3953a6313b7d7a30fabeb4ad73474d3fd043252e66bcd9deb8544256e7242eea14b985c15e47373ea8863f65dbbc33cf5b0"]}, 0x2a0}, {&(0x7f0000000400)={0x28, 0x34, 0x400, 0x70bd29, 0x25dfdbfb, "", [@generic="50618337caecee2097aac62af83efa33cdbcef58458d4f"]}, 0x28}, {&(0x7f0000000500)={0x1230, 0x29, 0x8, 0x70bd2c, 0x25dfdbff, "", [@nested={0x214, 0x80, [@generic="57838dd33b9061aeb7f0c404b6cf0ef7350913ebe285319cd20cac6785c0170a0a8068aefdc084849004f0eed1a879558b21d5ef2d01f179d9cc00c5b9073dada3b408fa6e7d63ea1a44ff0e5243c55c468829d55b29598a0c6df70039d2778d415ce462093386cb18f5d92c6221e21d99c3477a44294c7470ec8745e14ed29850996a2b91d96f38fb2f87e8e1592e58874a51a1973b2447ddeaed415b0204b57c76e390f36a8310ec08e1984e7f613e6cf009db79214f50eb990539e8ccee8514bdd556592eed46336a5d232d5ed965620d5b472ed8bdd1da1fd082dca15083a07a80d7b00452c70a46253e312c62", @typed={0x10, 0x4d, @str='vboxnet1\x00'}, @generic="ae6e849fe4deed12ea265685415ba5be06cd513b2d767994d3b4442edbb0b20b618c474634aab8a43fdd6aa8e614b058e302af27ce78b2e3aef53bccf9f5d82a44bb591a13bdaaeed0767b33dc6cef19beb025206ae0ee14135acabb0992fb4a94e7ec7fc0767514ad4c39c10623c10ae37e442cd0701205bfef9ad731bf27a6d62cc46024c59e56a74de64dff54245b206fff9eb084d6cd545c83d856ffa3d350934c83150aec88b40a9eb9e566234626ba7c5ae39dd149d71d28204b1981bc71b3856207c23d14e4d316c5ba8991d35a8b80d3b10107", @typed={0xc, 0xf, @u64=0x2}, @typed={0x8, 0x35, @uid=r1}, @typed={0x4, 0xb}, @generic="49a3acc815bc353c8b2bdb65e729baf63e746e5e20712f7b3c68cdf8497a27a946"]}, @typed={0x8, 0xf5, @u32=0x7}, @nested={0x1004, 0x20, [@generic="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"]}]}, 0x1230}, {&(0x7f0000001740)={0x3234, 0x25, 0x306, 0x70bd2b, 0x0, "", [@nested={0x10c8, 0x31, [@generic="e82ad06cea755d91553b61a5827bbd35178f443db22d0ffe4d7f0f2ae2802c6737eb922995d2626672127520616869730d0ef4cccfffd2af87fe10e643af47c67b58b347a51c79e569734b0ac631f8aa50edf29108abf3c2879841cfb79fdb2cf30e2647e1598ddacf18f713043031fd38e0da8ad8f3525b4fb6a1cdbb6a1e8d29816dce709fdf3e590abf86fecfadc7acc441b2f69bb2b75c8b", @typed={0x8, 0xd, @uid=r2}, @typed={0x14, 0x21, @ipv6=@dev={0xfe, 0x80, [], 0x18}}, @typed={0xc, 0x4e, @u64=0x9}, @generic="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"]}, @generic="af9bf37f48ba8547bb2df4a0576e3a3e14a961e4dc4b8fac90ca1232d231362b67cb427b628e317adff98bc0d181c67cb76257eb23bd142af57123c0edd40b3e69039d3fb00234302dcdc5ce87023e2b6a86", @generic="9d1d1cf3ea705abe4ee8b4152eba3b8c7f8012f95afc65432a3259a25e31592dd7d9a5fe77111edf2e08d50d960b7c0702fca041325aa5dfe065e56549fafe3488049712ccc2ca0d62f95d89c46a", @nested={0x201c, 0x2a, [@generic="a1dd2c28fb5292ddfae0109fc56aaf2c6df632a5af26471c145fa3a9665fd1c147cf2fc533e7f6e559eb559beea3d036b4ca7c707d7c7ba816ee7695d6d9a40ef2c67bfd5ef2cf1bab78551ef2ac8ebab816ae4fcac26b329b28dbc735e68506a59edadfa3e1bc190ff700c711229e9bb22e890ae8a5f361f8a9d187fa7b8cb2de2c33b00091ad662adb8c5158113ec34827cbab3fa06da0334dcb1a3a622920fc1aa1c9da22317d70e4879ff479756fb5fb8e98531e41506714bb7cba8149c2276967403a69eabe7bc3d565a9e0cb5204a93c430d8db40e8450d4443f299664b7bb36fa01b6dffefcdc424965d40fa3b08393c792c368c605fd7a913e32a9f56f7329baeb9b3096a088ef3627d9f4297b916ac869c3833f5f3b8a90b93f72a725d3989c55fdde44c23a2bfb181fb7de8c6f2afed01751258682f9c1866b87c12928b3e4ad9457107c7ed1adf91cbb9e1d70b6ea409795b59f8159505105ab26036d89bf40369e657ef99413a63b174f90d67a393717e61884384fc62fd6117f43a66d76188e7229eebcebc4e7910b7bf175ab5f9402f9604b93681d2c74ce394434d94dc583869b11152784a767b4d8bcef9aea84606aecaa6584df0e2fb8891817df6ae3e2cbd21b7a468eadf1acb18d6ae4c9cf6ce4c9b80783a7e7705c83b45c95600122b7aa80a710c2184a68ff6855fae6fc35e70cccc1aac94ba4ff792a8872e264afdf5bb1765738df26e6be2429afb63a6bae2af09ded326059339787acea989f436881b671596abec2157f3d3150a09e519d20771de00bdc7d041d28866e5e86d5af64f2494c07247fc91186945d4064e884484b204b89c264845d7c4999b13cd3758f96af211fba0131191d361238e68752b3c522a3fa7277fd5f1ebf9cae202efc3f03d9d33e6aff0cc649bf16eaf2943688186552c19d8b9ffd416c720a52631da5d8a0b25acabb2e8650f284a40f31b522c3ecdd5c6a2d6e5a7797ce3ecc417a79e4ab2c9501adca6ab8a221c710d743c37bec01410939a38bddc01ae45b7cd20ea44459dcb82533a5aa7f08d5016ec3eaf84cc24b24426b641a0a1fd5092eb357f053609f42c113b575b821c500a6ff476f6cf212ba29e80e288b6ae91f242a2aedc60296132cab3840c4f0f8255452edd18bb598935526cd3b742b51577e4f99fcb96645dfeb21b5a0bb4e0021ef9bb5626cda8a3acd753984af4e49dc947e25d03a577263b68dffeee7110374bf12d4cb2040db5e2da857ecb5d26736c4cc15edf11ebb1a2a568ace48be6dc6725483c1fd9b59aaf1c136eefda3c47f4aa5b307ea124cde5829bc6ef856b3a1e819bc2732f0035f76e232f3dab1c4daae96341c57008398827cfe31f2d10655b359feb134725b6c122c0e1025183a558200328067b1e9d214b594018820aee754dd1ea20c628650865f77d984cdcd588809d4001fd069b2d91b2753b4f5a335731a5dbc75336fcefb4a2ccc542304a8cc791bc2b6fb9f0467da76780c55395603ede331706de90770af6095d625f11bddfed294e24dcee3fb548e22365b28873e8a1c5aa783b2e9df654c3d139db3b0014b4c2cb9a5b9b1208c9963336589b58bbf6fc2be6db7cc974e15acd97fb146dd41c945248bff9d74ade6883c5671b9d3e54432cefcfb391e487f113da7444276d746cc0e05bfd9740247ca4c3e08ac0492f0d45273d5b062b5a60508a992871678af6c4851ab04918fff680513974b2d615c57bf5273fa95e19bbecda0f23452f25dd88473dd5b79d875cd26100bce8c0a1898d3284e747112f7017493731204fab6be54672d417e0daf695e28ddfe0eaacdc1dd7b3a96203392bf22f2c1e5afecfe09e80a341c996502cfee1c33dbec8ff408c3f705d9a8f3b83693f1b0b6281292288a4d260e3a1559df9dab265fdec8f61f562d71104e5f6e98410c64563b967b6fbb47c673fd94da055fd99e5ab049bbb91fcc60e39a2fb425cd1d85ade0b5ac36c55581e478cf8fda9cd1a50699ca1254fbbd1f54c341e85bb48eaeef096de1fe9913dce65bd3e93a5f3ec933dd2b39b3a7993f8d4ead87f619961a9c2b29632b2bc5d78c3e62a38d170b1e5299eb43d0ac23b0d8ade97bb53b6d495c18424f4d767b6c9e511fb0e47c3a666588d6b45b73de1dce1cafc77271eb8f5673401202ab1f06a79e2e81ef5728355b2cc021e8af58c6a424b1018a1b22038b9543c624c16113bc131f6485902848743fae9e337c44764748a77628e72871b6dc1f105bb9adca1a8e3df4415742d9059446b49f8a109dad6eb1efdead6a04ae69b3c916efc0e04a2b76b3238de541d8719952f0a32a16c1bd2a612f2863816ad3cb0b71b4bfd0c7bd10a8c17a0773899bc3e71da4af5cf193d86465008eed83046b5ff5a1caa11ba852631fb7dd16ec7a25c789814bfdbb4ca711fcd812efcb7e2a58f358604a6019e810bb5ba24ba55b9bec2198e3926eda540e7d0cc952fc936231685babc124869471b80bac261c415c751d4971b48be6d030ed8bc07cdc3dcfa2c36133b791d1637a14b0799793e86414657680cf695d44338999eaaf4cd3db2d6a395b5d58332319069db26e30ecf19a8677355ca99eaedd3125835d9a679c8623a6599ff020bd759d38f3f7fec1f4b7e38408213c2c853e69d4cb55ddff4a050806b8521cbb1d1b4d068a6912593674a7912a56017dbe35d5164fcaf1c570a23bfbd746af27c0f94f4b5c3f6dfac7d3cf69b99879ba76473bb32abe9c9b2eeb726acabe9607edb8021127eecc4bfb8bb52312dbef7b17eba42b1b345182f59583d047befb5027ad70d6776d9f1439e377c0b844e490cd0dded9e1502b5b08d1b17619c70b3e692eab4eb1cfebc6a6b72d257b0085656eef2647b99b2f8a235b0e312558105ed00b902c55f45a0876824a5ca1c0063e585a94aacb16c2bd4c8f3f2a4e0c0ecb01d24b95b83c493717abd98ee9340a41afd85474e60e86733c3e1101e3d3adc84e925a6b8ce8e6701cf8fa01c327bba0e730e788c8496a3ed3f762028bafbf6aae7595910926819e2132b560cd5c76cdbca836700a16fe551f5b3608a5e76921e243c6fe5ec30aa063a31f7f721e8e579ee9e178bd121c8c0b238c7c34d427b6afb79e7e8c2f52e34fcd768308782c48f7cb666d15d6587f15117a76035d07662e3b798a6df4a6ead5e638aee6097c25b256d6d457e2406b20ab9836908002f4388f87e54d6aebee42257560d20b5ae3a3cf2e3a3c35d457269b58f8c796a8d8c98ea6045da6155551acdc5a2fe1a5b870cde4a21b207384606adbaaa701d9ee4f14b636f571725ea96d2822bdbde762da7edf14e7b4cfac697f07854f0eba9fb368e4019b0350e3e9598882b66eba7ef93b1e1be86925b613df592eb955f91f1afbe160205c32ce53386ee2d2f40d049e370e7f4155fa5ccb8c6b11be26909ae7c345e9de3a03f0f0a6d36b644e8518fe13694a5cf82ba6278749781e623e4ccd3b21d46fbcd31143eea7949d7000adf4188c6ad36a2f9ce958d32ed624334a6344d2f1d6282f8ff3bca3a5cd05dbc69b0451c9555fb9168d10e10ff496303d1e01a13214c4dd073fef1452ce0a3a783b7442b2a4e90519dab590401e6912489ca5e156280881cfe2dcbf6bd3b612c0c36eb9c238af290bead57d23182a32cc65e0a35c10ba35ac67d82a94ef8b92a7fc2ded978621cc7a2f5ae441e9c8fb519186cd91e3d27b766396a58385d573298edaaf9e9ccb8d733ef78baddbc6cd8a8a8967730f42719c385d3bfaeebf945179aea6ac77e3197e5e9262bcefe0c00ed6e9ccc6bc8a8d1108a51a5545c86740733c372cf865ae3f2f02a7b63f1217d3ab597ff6324369479f22890da0da02267cb4c4ea1edafaa608a5f033445ddbaf228aaa9591540851cf9fb9a18b4df2eff29ab5dc07d57e4fea29c5498d3726bd0a6202af8c5fff1dbaac90532e83eece26ff7a5f453051e82bcb6b4826f6c0e930daf2cfe2f6cc55e7503898b94bb10a140212f62c808896e15c52c2c9da1c41fb3df826b6de99fff12283642c954fe4223bb5fa3e50265557000ebb14f180ca3684123a0172100fa0a5bbb64d44ab9e20c0c009c6b729a111bc8e6c1a2ead3db735de0c45b220df201b52ba8f807e3d576e2c829482c6d2061308e2fcc8aee3662fe59c1de941c2ec86b51f79d7439b8cb5feb47b8c37f691102a6a63ff671ba8573dd32f48489799b7855d25f990100fc974685f58f97c26f850426299fa1c225d15e44650a94ddf7788c32851627ae73009ebeb8bb0d4dd3ab077c71be7dab2378393170ac66ff5be952a98124f25d173ac5fa7b70627a50324afb56dd0bb0a48d4e91b194195d6d36009b927a3b402bc45c5391293b6aeba7f0ebdec95154fe6f3e91f5b0f7b5385021fc8a4a1b8454c064d8570f5260fd23278fb5dd26ee5c46ec9bf1c5865446c52ddc54f69bc3e7936b723078beac430e6da20608d48440116e91247870b7dd12762232cef71ab70f716bc6ebd0bb49e3f6ae5c14ce31efbca3c3dca2f2eaa31a8f76e8e6faa1053c76bbdea64701dd0c89fe87528d4225a46e186f6029a8d3693b03fd728f6f557f6da9ebdbc878f24646024f3841b99773d83abd1f432da62f33e02f7eb73cbc80a8cc760cf07e0423378a4e9603963b4f7c675789db97af890f5402e5b5a17ea647cf8c64af5719d75d43cafe6fa7e516adfa211ffa5492e11c489b8934d70ce33f2c416c04a3ac706a56794d6c53eac52d61942636255675c0a5bb0dc87af04c3fbbf9dabfaa519ce8f56ee62ab1b47fc93ac858eafd3a02561fce92cf96e6023b4fa10048331b0b578d385389997314819adf05d723afdc89f25d16aa14b56f842699add6868cf94f13d3f6debaea497aef5556dae2e38036b0034a56f1fd4f5098c631f872eb9ecbce8ee59a62e238dc8decdf90516d98715e393134995e3630d99b09814571ca3addeed14e02bd3643b8cbf9ddda2e1dff4e1a230dc89c5fad20671a3fb46e244f007b0da51a3b16427760922bc8d9562ad4fe784ecee62687252ad6f2fc9a563f3f4a84a03b255bd94c5415ee3acf6fb9acecdc0f6c4f2b9c9379c8d259e9971735e84d5b5ab85b379436d649fc2c38b2ef7c90ebdf648973d62ca17419d05df2326438a8fbf3397db05850ca0b83b4366a2a614331fc8a7a44bb3ac33b3f74fdbcecca5364242493ecd3ca5db5692ba6fa0763a3a56dcf6812b41a70b2dba0c868cbae6b9883f40179e791631ee6aef5c95def8b237b4f21d1feb7c7d8060b0fec9d3a38a338d9eb425e4c864f48196b10b52ab981f64dab1d06ab8be35fdb3a77571dc584babcc765420bb16e57f7ec6d9ce5ec05023ea20a949ca527ce14cc4b52e864fd75402379c35a04e2ceedab37e775aeba46a1c2211db7a408c55344a2277bca6463544ef695547fc655c55a3ca1d9f3f5ba82f5b5182c8ed0811571f8d53e95a6d0276649a2cce678791d8746b49f7a07eb5127bd9137544e1f63b2f1757027271ee0f0db6008391392dfa2052819da27923b090a24f7a7e3e2d10801688a0928589a749b54a58f662c4bcd9936119150575350e558d87e0a35c372104763c79e6a8b210c48ea3fc738ac46836694296bd4c3affb54973bc4abcfa454bf78914fa34489fa2ae9a4f1ea6c1ace7f5cd11ea564198c52a68f914a9fa693744ec42c9687e88a22dddf2bbfe9dd978df1227ae43ee3511328924e57970bb0647b90c65e8d2e07617f8f88a7f4d4df95a9da523cd", @generic="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", @typed={0xc, 0x38, @u64=0x57}, @typed={0x8, 0x43, @pid=r3}, @typed={0x4, 0x5a}]}, @generic="399debba9858c17e0000de714e93d18b0ff46716a23f29e4b1a37a32e47cac9ffd0a1fb4dadea6754d6cd96c2e7be6d7d460e8fcd16e0c8d2da464e92940b326bf23a374bd379c7c4bcce5ee271f51c9f1b26b6ca8c938323e4ee12f74e9c4cee898a0418645f73b71a4235151a11bb0ca6aeedb3a4d3906d9d817cd52ff2e3fba9d7fdba6c253be76bfa2b92bb507b005a0475de6752d3e", @typed={0x8, 0x6a, @ipv4=@remote}]}, 0x3234}, {&(0x7f0000004980)={0x5c, 0x1a, 0xd04, 0x70bd27, 0x25dfdbff, "", [@typed={0x14, 0x2d, @ipv6=@rand_addr="ff984b814ecd1d52227e88c8408dbf2a"}, @generic="da5d469cc59e7478d565e17fbc", @typed={0x14, 0x73, @ipv6=@rand_addr="2ade85362676f7c1453d31054b90732e"}, @typed={0x14, 0x37, @ipv6=@rand_addr="1e86b172955407a8d7ce86a0faacdbe5"}]}, 0x5c}, {&(0x7f0000004ac0)={0x484, 0x21, 0x120, 0x70bd2d, 0x25dfdbfd, "", [@generic="1e47264e5c2850f2bbfb68538398a96771ff2552e70f1ee14ebe9f25d0252bf6d72127d03cd178b3e0531fadfaf37862095d6e340a0f17004945e167eec2ce2691890c1c026e6ac298cf7182b67c11c5341f92f54165ea24032936fc372c83bb61fb59b8df47ecf6b81a1b55d8d1ed1aae1a35a6272458926b894f4145ae5104262d9857cfecdb4bb680ae8ab1762411c69a9417576548d25cb2c00eb8df18794bb84a3c0db7a44d36d4c115560caff50747961fd8a39afc308eded62ec0bd607ed027bdda6fd0ff964b9aeabab833b11dec977d0baa06822af0f34ac54362ea9317d09e7f6a79e806c4dbbf4b", @generic="f2b203a8b18b0fb2e1c9db0d6c2e65f29fb42ae4143986c96fb2938069c5bffdcb9095ba1fe8384459d29da87d67494de1a4e3a2ff870d280103987dcb467397cf4450a2b613a5d89cdd248dba88201cc7f287aee731ce3aa4bd0218046b0d9b0c7fb12b6ecc5f1d2e05773bbae9ba5fa763947cb90f4d82c445b07bf3739d28dfb24dfb", @nested={0x20, 0x48, [@typed={0x8, 0x50, @fd=r0}, @typed={0x14, 0x83, @str='mime_typeself\x00'}]}, @generic="1c5cfe648310758204295333ffe4fc527c32a48d04b1051405420b484d78a0adb13264ec8db8e2680311bbdc24304c342605ecd699b6d33174da616417ebe2c299a9b0b53819cbd9c758a4a878bc8a52038c3e5325abfcc6073f877b3db0242d39be551008dbec754970d87dad35eba9594478d5daa1dbd67ec3fa74fe23f49755f03502aab6cd08447e7513f02459f0fd9e54897bb2289f81b903e60f96deef8213aec8db544d2134ce4352b849f9b89fbeafa6d628fa13b5c735cc6549d701582be332ce0d54bebe1b189659fbd364502c5fcdb57b8bd7f19b40646a81a01e697549068389cc4c43f2aa04414f5c", @generic="23a0b07743ec68283bf3ae1ed4642ab69ab2fc5bbcca418a4b05961d9fc9b5507c9159c47560a708538a2f3711800ddd2dfd46e3f8f20bbd5d279d254a8dc75f4c9992b5dd3afb6e9b0b1e6adf9e384d32852e68a3af7c2a5a0fefc86107d35f4345cc8f7e14ac230a65b6309ca2cb4e45898f3263a0143e14489194bcd3224006ec30e17f87727affb654dcf5a809d7149f93b510abd6150f945fb8db274972ddcc7fb660d38a6e6e695db668bcdb90b52528fb", @nested={0x80, 0x32, [@generic="75c5b1708ddf5cd415981f6025775eaa3e72d98aea6180dc2579c84dcf0f97ff23bc79eceef68c0318edb63ed6631db231d0436fb4039800f39ed9e136c714b539b999a93a9c7225dfcfcf92fbd77d2408a7ab4e98a912270de63d0cb28ae1ff36354bde6b281ce7708fc34051065a295cb410", @typed={0x8, 0x26, @fd=r0}]}, @nested={0x1c, 0x29, [@typed={0x8, 0xe, @uid=r4}, @typed={0x8, 0x7f, @u32=0x7}, @typed={0x8, 0x11, @str='\\\x00'}]}, @nested={0xa4, 0x59, [@typed={0x8c, 0x64, @binary="61c132416d05862c93a4124a82992e5624e7a0101cadf6aeae5567e68485377a267f427b75d0f92715e64b8f282c2f17e726e7086b4819e4dad124c124e10f04bb8fca88899ec986ce8d5d0329cdac9345544bced0a322144d7a65c1e044d69a78ec416764873426662fbaf63b0b782bdeda98c760bb07ba4cf59754845204d9ae70c0254a27"}, @typed={0x8, 0x72, @pid=r5}, @typed={0x4, 0x6f}, @typed={0x8, 0x1d, @pid=r6}]}]}, 0x484}], 0x6, &(0x7f00000051c0)=[@cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x20, 0x20000000}, 0x4000) [ 1743.913435] audit: type=1400 audit(2000001057.960:8136): avc: denied { write } for pid=22450 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1743.920675] audit: type=1400 audit(2000001057.970:8137): avc: denied { read } for pid=22449 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1743.991016] audit: type=1400 audit(2000001058.040:8138): avc: denied { create } for pid=22478 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1743.991907] audit: type=1400 audit(2000001058.040:8139): avc: denied { write } for pid=22478 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1743.995810] binder: 22450:22482 BC_ACQUIRE_DONE u0000000000000000 no match [ 1743.999111] audit: type=1400 audit(2000001058.050:8140): avc: denied { read } for pid=22450 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1744.077319] audit: type=1400 audit(2000001058.130:8141): avc: denied { read } for pid=22478 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1744.290044] audit: type=1400 audit(2000001058.340:8142): avc: denied { prog_load } for pid=22490 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 1744.290714] audit: type=1400 audit(2000001058.340:8143): avc: denied { prog_run } for pid=22490 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 03:50:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffff9c) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00') ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) mkdir(0x0, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mknod(&(0x7f0000000080)='./file0/file0\x00', 0x7090, 0x4) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x5890, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x5890, 0x0) 03:50:59 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x20000000000a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f0000000080)=@raw={'\x05\x00\x00\x00\x02\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x02\x00\x00\x03\x03\x00\x00\x00\xff?\x00', 0x9, 0x3, 0x2c8, 0x0, 0x180, 0x0, 0x180, 0x0, 0x2c8, 0x2c8, 0x2c8, 0x2c8, 0x2c8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c14000e57af108cc6c74028119fb719d84b855ae79c03bcd889e253bc457"}}, {{@ipv6={@mcast1, @mcast1, [], [], 'bridge_slave_0\x00', 'vcan0\x00'}, 0x0, 0xc8, 0xf0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e21, 0x8, @empty, 0x4}, {0xa, 0x4e20, 0x40, @dev={0xfe, 0x80, [], 0x25}, 0x8}, 0x8, [0x6, 0x89, 0x7, 0x8, 0x9, 0x8, 0x4, 0x1ff]}, 0x5c) 03:50:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f00000000c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) socket$inet(0x2, 0x0, 0x4) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 03:50:59 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:50:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x8, 0x1, 0xff, 0x6}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x3f, 0x8, 0x81}) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="eee1494fd4143ff4a5655f3c4c3694cd18c28ad4ba8ea3730d35c4d662f55896504b9dabc9a5b5b6af0de476a3cd63e7214af3d8a8b8c1a7028b1097f5536af931c869b0d76500a61c908d81aa7ae288944354a2f1712ce2471239dd0dd0e37f0ac0a099bfed157123", 0x69}, {&(0x7f0000000180)="e6d98891ad8fea5eb5aeac386936ca88845326271b967ab207c95c56f250bf2cff24b645bf2131688857cc991f8f31eb", 0x30}], 0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000200)) ioctl$TIOCSBRK(r0, 0x5427) write$FUSE_OPEN(r1, &(0x7f0000000240)={0x20, 0x0, 0x7, {0x0, 0x1}}, 0x20) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) r3 = getuid() setreuid(r2, r3) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000300)="2d9aca82f171315f8e8625d99490a9eb0bdd7d867e673da13ed04278f3d6518c011303a80aee26663f7d52a7005828fbcaee28966c4e6aff8d4174eea27a10a65ead2197db9536b7e89d3ca441df819bdb5f4496d7df09559da8f5e8571ac891b9a332f6395ac8f9907ea4f9f14a883266a1cf5666170ee91096ce6f79ea3cac3d39aafe7be7f2acb9b9b0c16108709cae9dbcd54cfe0609371bed118c724a93493f6345bba3ce27f620dc791fdddd7c608d81cafc279e2a160e5e1ecc126883fb02e62d2f8c10e88bcaa52a0291dd8682ed6f43a4c231741484ef93ab6e721497e25a4e747a") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000480)=0x2, 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000004c0), &(0x7f0000000540)=0x68) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) write$cgroup_pid(r1, &(0x7f0000000640)=r4, 0x12) write$FUSE_INIT(r1, &(0x7f0000000680)={0x50, 0x0, 0x3, {0x7, 0x1c, 0x8, 0x20000, 0x4, 0x816, 0x8, 0x88}}, 0x50) unlinkat(r1, &(0x7f0000000700)='./file0\x00', 0x200) pread64(r1, &(0x7f0000000740)=""/185, 0xb9, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000800)='/dev/loop#\x00', 0x40, 0x40000) fchown(r7, r5, r6) ioctl$EVIOCGPHYS(0xffffffffffffff9c, 0x80404507, &(0x7f0000000840)=""/17) epoll_create(0x100000000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000880), &(0x7f00000008c0)=0x4) unlinkat(r0, &(0x7f0000000900)='./file1\x00', 0x200) recvmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000940)=@l2, 0x80, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/12, 0xc}, {&(0x7f0000000a00)=""/24, 0x18}, {&(0x7f0000000a40)=""/209, 0xd1}], 0x3, &(0x7f0000000b80)=""/231, 0xe7}, 0x5}], 0x1, 0x100, &(0x7f0000000cc0)={0x0, 0x1c9c380}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000d00)) setfsuid(r3) 03:50:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)='m\x815\x1e9\xcf\xc2(\xa4\xc6r\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101802, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x5, 0x38f2, 0x1, 0x9}, {0x80000001, 0xff, 0x81, 0x6}, {0xad, 0x4, 0x5, 0x6}, {0x4, 0x7, 0x2f, 0x100}, {0x73, 0x7, 0x5, 0x3}, {0x5, 0x800, 0xfffffffffffffff8, 0x9}]}) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@md5={0x1, "667d99c09cd0dc898433866fb1985b53"}, 0x11, 0x0) 03:51:00 executing program 4: clone(0x20003102001fed, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x420a, r0, 0x0, 0x3) tkill(r0, 0x21) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x8000, 0x0, 0x0, 0x81}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4400, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:51:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB='commit=0']) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/pid_for_children\x00') 03:51:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x20002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = dup2(r1, r1) r3 = gettid() setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000002c0)={0xffffffffffffffff, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev}}}, 0x108) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) fcntl$setstatus(r1, 0x4, 0x40400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 03:51:00 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x13) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000)="a0", 0x0}, 0x18) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) sched_setattr(r1, &(0x7f0000000100)={0x30, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x13cc}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x10) [ 1746.088697] binder: BINDER_SET_CONTEXT_MGR already set 03:51:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) accept(r0, &(0x7f0000000180)=@hci={0x1f, 0x0}, &(0x7f0000000200)=0x80) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@newneigh={0x44, 0x1c, 0x301, 0x70bd26, 0x25dfdbfe, {0x1e, 0x0, 0x0, r1, 0x1, 0x4, 0xf}, [@NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, [], 0x27}}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4008090) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040026bd7000fcdbdf2507000000100007000c00030000000000000000002000070600000400060000000000000008000200010000800872c0e015753456c700070008000200a80000000800010001000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0020a74ff061f610b3dc0c633db9310ded6ed743be118101ff50a814f07da20ba26871a8423f712cd15638380e0bf2a79c57a92b32941741631a6aba353714f3571563521fee005a0218bf561c1f474eeba760a393713c0678fb94e651a80090d61f9f2e0d5fa5747fba756416803edf92c3440112d2e9c7e652fe911340a9f3bf73575678268e51ef90de6226e9a82d614d173caee2f3d5d60c149c1d", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x30}}, 0x0) [ 1746.153552] binder: 22517:22522 ioctl 40046207 0 returned -16 [ 1746.155888] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space 03:51:00 executing program 0: getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) mknod(&(0x7f00000002c0)='\x00', 0x0, 0x0) add_key(&(0x7f0000001880)='pkcs7_test\x00', &(0x7f00000018c0)={'syz', 0x0}, &(0x7f0000001900)="eaaeb59db03270e3988ee565ceb59237126c412cee4a8a1089a10fa7c3c8b12ecd1518d33bc4466e8406e71e80f2dac20528fef2840996985cc108f22f4328eae0fb2d4daf57d442850c6bfb95fdb309d9f7543fa971526f08db822bc8c883f3fd1602dad4a1ca92f92e3add361ca175a3c2ed054d1f0998b3e0753883cd3ad06140512a2f7992121c78a2c4ce1f00d48ccc2efc8c8ce6408d4cfcc669c71774ea061c4d92ae84776d81c414366c1957c9181d0a2d86637b72b628a6", 0xbc, 0xfffffffffffffffa) r0 = request_key(&(0x7f00000019c0)='logon\x00', &(0x7f0000001a00)={'syz', 0x2}, &(0x7f0000001a40)='syz', 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000001840)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000001780)={'syz', 0x3}, &(0x7f00000017c0)="846c632137eec7ad19a4af63fa53627e79c7190fa251c5bfa0d3a9769efec76649cfb75db9c79e4904b76a055baaa1280be694b2cd79ceb9e752a2b3aeb45f1c243039f7704b27a5009f3d437a4058428e6bb7262bd509cd736bb766ca3f90e83c6c52e194e15c78d87427df98cca9572fd8", 0x72, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r1, &(0x7f00000016c0)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000080)="9f05cfa3ccc24ad241bb381e37c583ca44443eb195a144c1173cd6d7b7cbb2272f1d12b5749c82e3f563d9b0d860226993053f8766fa6a883178ae1743dbb09fb81166c449c7939647ca47497c3793a7a859dd3345c22134be175a847f1cf0274e1a1a930b1e527f7298db75e309514001ba1a2d403ca2cd4dcf3cfbf90727fd96fbf6a54614504da707f414bd337d6daf42f5e9f3368f1d1ba85456748aebe36fcb2b0aa5b682be3b0ec0267c919960e40a022654b55ae0019c78615a2239d881fdc2b27fea98f6", 0xc8}, {&(0x7f0000000180)="b09e7cf3e4af", 0x6}, {&(0x7f00000001c0)="f408374e6bc2a9cf3bd92298e47b339296cdf7a9b70bb2eee40b3ff56b0081ae6ef2d17c8726bdc317e5164cc3a21d7ec8cce526c69dfc7de27ae2df9da513e31cdc1618280f4f2b8dde0ac161aa9dffa9bdd4765caad71917548c4f6a7a7c8cfed0", 0x62}, {&(0x7f0000000240)="afc60fb076b30f11198d2ddb97a5d8e492fdafc7fc75042cfdd05f1878f42f6e229397f721f77f95377b4a5deec3bbba853c45ac2461001a29f4408ec1853811d23edb1965e57f186da9df52b7090dd29091329cfab27448011af7324f8124749b4ad6aefca11582cbcfa80377b2f6f8e26460f96d2cb3919511d4", 0x7b}, {&(0x7f0000000300)="ece1d6b22ba37cd76962df6af46ea168d0d03a7c7292eb16bdd82fbe71fdc22811577434f2192a2a9cc50ee879f863c90c5b526f0e212bcdcd77", 0x3a}, {&(0x7f0000001480)="f6a9bdf671f0cf354641f4f50dc6b483fe5baa7cc7d93394c236a0e67ffe714c72d771e5fea782811456e1169c1ee886fee5ad856e3a6f62de63c77c5c41ff04fa21c577f95fbb5c43d54172daeb020c09eb77d5d6f4ee6f4090b97f3926540bf92133426e04316f539ac4150afba09c21634b36eba741ca5c7aec3cc3d3e910eca1b0dbf8915df4115e4b911d2cde68dc10a57a9ceb83173b3bcf788458f410dabd3f3a8580a7d40d4c996b85aec664bec5e5c9efbbe5c70d41a34a6f5ffe156b25ac710e5266e37cea947acdab291cf32819ac84bd", 0xd6}, {&(0x7f0000000340)="f4bcd8247d0caa31106eb6a00d36757ab9e9adb8ced504854d0fd0194b89f2259797d9dfbbf7dcb08881e5b4afa8e4990c0e3d98", 0x34}, {&(0x7f0000001580)="8d7967f90432164bc7dfa1d8ff10ec0838583bab183f3a8db7fc0f22e342b1f1360acdbc04045721fd083b9155ca81dd8e363319471709aa3b00fcacf88fd396d2f2cb7c82ab4e9f6783caad725c9a71ffdb68fffb93b8065557dd7c2156a41cd8df47fa", 0x64}, {&(0x7f0000001600)="13e9357962ba1ddfbc79377b73463ad2cea8663c4de661d393cdc0180c86d0aa74489daeb50c9ab9dc3959f6212a63fa338def4be0921286d0a77f9624cd83306fd18351c568560edfddb3f554ec8253dce805c13982eaa95c032ee066f74a971207deeaaea4c2ecb7de78612b7fc39866fb1974d545cd5c5e613a1d4146313fd2", 0x81}], 0xa, r2) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[]) r3 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000000)) syslog(0x2, &(0x7f00000003c0)=""/170, 0xaa) 03:51:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x5) fcntl$setstatus(r2, 0x4, 0x42803) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000040)) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) [ 1746.155895] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1746.155915] binder: 22517:22544 transaction failed 29201/-28, size 24-8 line 3136 [ 1746.158677] binder: 22517:22544 unknown command 859701248 [ 1746.158684] binder: 22517:22544 ioctl c0306201 200002c0 returned -22 [ 1746.159588] binder: 22517:22544 Release 1 refcount change on invalid ref 1 ret -22 [ 1746.186553] binder: 22517:22544 BC_ACQUIRE_DONE u0000000000000000 no match [ 1746.327998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pig=22559 comm=syz-executor.4 [ 1746.363923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25072 sclass=netlink_route_socket pig=22556 comm=syz-executor.4 03:51:00 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x8000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb]}, 0x45c) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x80, 0x4) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x1, &(0x7f00000000c0)={0x800}, 0x8) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) 03:51:00 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="00022bbd7000fedbdf250300000028000200040004000800020001000054921801000300000008000100c581000008000200ffffffff68000100080003000000000044000400200001000a0067240000000000000000000000000000000000000001bc070000200002000a004e2200000006fe8000000000000000000000000000aa02000000100001007500400000000000000000000000000000000000e2704a02d1a26a48e6f31616261467e6da7fa66299ebc7e2f1f9239b68750b158e10ed30552422a33632cc22ea870c0e76686128e064692aabfe5b6f01b4a2f1d70dcb437a32a285a4c76965140ebc8cf37555da65c82656b8b63b3d2bc726414df48542e49aa7155d0ab8beaeb8a40a6fdce5ebafe6c80605071cb99f33ec5f56439368caf66fc28dc48a547a7570a134bef26a36defc8d692d8a0c0ece235d6d0f60a4c8b9426398df1529c6ddbb87fd9e789535d5d5c03733328153863777624d2d67b299293f7339cf5cb2cb4c7c95ebbf0c1272739b95a0"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:51:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f00000000c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) socket$inet(0x2, 0x0, 0x4) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 03:51:00 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) setpgid(r0, r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x80000001) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000040)=[{r4}], 0x1, 0x0, 0x0, 0x0) r5 = dup2(r3, r4) ioctl$int_in(r5, 0x5452, &(0x7f0000e35ff8)=0x45) r6 = getpgrp(0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f00000005c0)=""/4096, &(0x7f0000000080)=0x1000) fcntl$setown(r5, 0x8, r6) fcntl$setsig(r4, 0xa, 0x15) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f00000000c0)={0x401, 0x3, 0x2}, 0xc) gettid() setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000140)={{0xf7, @multicast1, 0x4e21, 0x4, 'sh\x00', 0x4, 0x9, 0x25}, {@broadcast, 0x4e23, 0x10000, 0x9b1, 0x3, 0x5}}, 0x44) tkill(r6, 0x102080000000015) [ 1746.903455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pig=22559 comm=syz-executor.4 03:51:01 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000001}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40400, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg(r3, &(0x7f00000001c0)={&(0x7f0000000140)=@xdp={0x2c, 0x5b2d0d2cc47d30af, r4, 0x36}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="ae3272b10d2a34fd5f78b7ee401a76666d68cd900afc1e983e20a38aeb314385e877bfd80002b8fc7b07d95e20160db356da8071677b007d28d52659f5887324133e1b88f719153f18e62e1c8b01a50f84f36876a07ffffc3511d089edc4c16aacf5d27547f8efb06e2b0e08340cda43d4c686d016d6f599323094f775f25febeabe2c09b1f72529f410e32b580f4e679a29a3e9936a8dd6fd687356f12d5e71b312c96291f9178083c94da2bf57e81c1a28e5b7bbae836f6251962cfeab48c4452561d60ddbdec454a565cf9d1668bea739f19e6ba756e3ba47edca6f8a45e02004a7787c7551923dd328aa044691305c83d455128a846e3469", 0xfa}, {&(0x7f0000000380)="b26a012949da90e40bf1f758c67aed88555edf9b72c24c5d12209337341a279952f630e865bb4730cf698657db51be59e72759190aa0a6b8ffcb0e133b968300e99e54d35e562306c6e0223ccef3876a2bf03711be64273c029ecbf2de29550fe8d8758153f47365f59536bfc4cfb41d1bd7f7a4778ada9746c0ecb1d5f6e66c751045ba69abd608cb7bd8c275244297f73b0a0d447b67e8d46d96b44eadde83488aa91c2f53e965c366ce4546040de8e2464227afb7fd8222676e01bfce5df075456e149e42f5438ec93e1953aa3bf93b118f82cd1243c5cab697dd68e16af17e4d15efdba4b5", 0xe7}], 0x2}, 0x85) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000240)={0x4}) [ 1747.058669] binder: BINDER_SET_CONTEXT_MGR already set [ 1747.067496] binder: 22578:22582 ioctl 40046207 0 returned -16 [ 1747.107441] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space 03:51:01 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x0) [ 1747.107450] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) 03:51:01 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="45000000180007070001020009000700020000120000ff0000000000000000e6ba815e02bd2f3f7ab7921923f8c7a14a8bcc39f4deba28c567dea34faa938c620c17fe2f57", 0x45) [ 1747.107474] binder: 22578:22585 transaction failed 29201/-28, size 24-8 line 3136 [ 1747.108455] binder: 22578:22585 unknown command 859701248 [ 1747.108463] binder: 22578:22585 ioctl c0306201 200002c0 returned -22 [ 1747.108601] binder: 22578:22585 Release 1 refcount change on invalid ref 1 ret -22 [ 1747.169367] binder: 22578:22585 BC_ACQUIRE_DONE u0000000000000000 no match 03:51:03 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000200007041dfffd946f6105000a0000001f000002000008000800040004f00000", 0x24}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000080)={{0x3c, @broadcast, 0x4e20, 0x4, 'fo\x00', 0xfd9f135d14cd5376, 0x1, 0x41}, {@broadcast, 0x4e24, 0x7, 0xcb80000000000000, 0xf7, 0x1c00}}, 0x44) 03:51:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_SECCOMP(0x15) ioctl$int_out(r1, 0x5462, &(0x7f0000000000)) getsockname$unix(r1, &(0x7f00000000c0), &(0x7f0000000180)=0x6e) fallocate(r0, 0x0, 0xfffffffffffffffe, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000001c0)="e88fe5234f1ac49226fa860deded5f5747bbeeb5117f1b96c1102cd0cd83720438335ed166bc66b637aa9a9614ced90be5afa820a7a10db9b9cb0e0a088aa75e55768a0e34009bcdfcc6765ee2d9322c8472a1703945bb422e0ead50087520c90663a6387a22b79fda6292f80be9fd9b7f5fafcbed0ca9a0f26ac2d3bc45b75e85ab90f633797b0f7383e07177244711ea7193f1e2176a63353fc917bf98a880a8f8559f188305ea0217927b2bfb864d6225fca2df5262ad72be20ebabb4e9227b78749333b4812a1935df8af855e0a6c8fc48e919", 0xd5) 03:51:03 executing program 4: symlink(0x0, &(0x7f00000000c0)='./file0\x00') r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) stat(0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x68, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xdf3, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x800) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) fgetxattr(r2, &(0x7f0000000280)=@known='trusted.overlay.upper\x00', &(0x7f00000002c0)=""/128, 0x80) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r4, r5) writev(r2, &(0x7f00000023c0), 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) 03:51:03 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:51:03 executing program 3: clone(0x200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x14000000000014, &(0x7f00000000c0)) ptrace(0x10, r0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) wait4(r0, &(0x7f0000000040), 0x40000000, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x36, @rand_addr=0x8, 0x4e24, 0x4, 'lblc\x00', 0x20, 0x1, 0x51}, 0x2c) tkill(r0, 0x12) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 03:51:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000240), 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r3 = syz_open_procfs(0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) poll(&(0x7f0000000000), 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, r5) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000780)) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20030900000001000068a2526a289070e3f3e4000000000000000000943e302c6202e9b0ef", @ANYRES32=r6, @ANYBLOB="3c0002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=0x0], 0x58}, 0x1, 0x0, 0x0, 0x48040}, 0x1) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, 0x8}, 0x10) creat(&(0x7f0000000140)='./file0\x00', 0x0) dup(r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1749.150446] audit_printk_skb: 90 callbacks suppressed 03:51:03 executing program 5: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000080)) getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0x1d, 0x5}) [ 1749.150458] audit: type=1400 audit(2000001063.200:8175): avc: denied { create } for pid=22619 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:51:03 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000380)={0xf09, {{0x2, 0x4e22, @empty}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast2}}]}, 0x110) chdir(&(0x7f0000000100)='./file0\x00') mknod(&(0x7f00000000c0)='./file0\x00', 0x1200, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000240)='%+.ppp1\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)=r1, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x10) 03:51:03 executing program 4: symlink(0x0, &(0x7f00000000c0)='./file0\x00') r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) stat(0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x68, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xdf3, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x800) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) fgetxattr(r2, &(0x7f0000000280)=@known='trusted.overlay.upper\x00', &(0x7f00000002c0)=""/128, 0x80) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r4, r5) writev(r2, &(0x7f00000023c0), 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) [ 1749.154444] audit: type=1400 audit(2000001063.200:8174): avc: denied { create } for pid=22621 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:51:03 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) getsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000040)={0x1, 0xbc91, 0x3, 0x200, 0x2, 0x5, 0x7, 0x7, 0x3, 0x1e7f}) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x80020) [ 1749.162773] audit: type=1400 audit(2000001063.210:8176): avc: denied { write } for pid=22621 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:51:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0x18}, 0x0) close(0xffffffffffffffff) close(r1) 03:51:03 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x664a) close(r0) 03:51:03 executing program 5: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x80000000, 0x2000) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0x80000001, 0x3f, 0x1, 0x0, 0x144}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 1749.268069] audit: type=1400 audit(2000001063.320:8177): avc: denied { read } for pid=22621 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:51:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000140)) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r2, 0xbb1) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xfffffffffffff781}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x6b0}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x24044801}, 0x40) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x6, 0x7}) 03:51:03 executing program 5: socketpair$unix(0x1, 0x80005, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80000, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080)=0x5, 0x4) getsockopt$packet_buf(r1, 0x107, 0x8, &(0x7f0000651000)=""/240, &(0x7f0000000e40)=0xf0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000000c0)=""/79, 0x1d0) [ 1749.308302] audit: type=1400 audit(2000001063.360:8178): avc: denied { create } for pid=22621 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:51:04 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) [ 1749.308848] audit: type=1400 audit(2000001063.360:8179): avc: denied { write } for pid=22621 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:51:04 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000580)=0xb2) setresuid(0x0, r2, 0x0) link(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000040)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000440)=0x9, 0x4) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000005c0)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./bus\x00', 0x6, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000500)={@mcast2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x21}}, @remote, 0x8, 0x4, 0x534, 0x500, 0x10000, 0x80800008, r3}) execveat(r0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000100)='\xdc\x00', &(0x7f0000000140)='}!-securitybdevwlan0selinuxsecurity\x15nodev![\x00', &(0x7f0000000180)='{user\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='{}vmnet0#\x00', &(0x7f0000000240)='\x00'], &(0x7f00000003c0)=[&(0x7f0000000300)='vboxnet1vboxnet1posix_acl_accessem0ppp0nodevselinux\x00', &(0x7f0000000340)='cgroup#procvmnet0\x00', &(0x7f0000000380)='/GPL\x00'], 0x800) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000480)={0x35, 0x11, 0x13, 0x1f, 0x9, 0x5, 0x2, 0xa7, 0x1}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000400)) [ 1749.395041] audit: type=1400 audit(2000001063.440:8180): avc: denied { create } for pid=22619 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1749.411421] audit: type=1400 audit(2000001063.460:8181): avc: denied { write } for pid=22619 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1749.421457] audit: type=1400 audit(2000001063.470:8182): avc: denied { create } for pid=22647 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1749.427933] audit: type=1400 audit(2000001063.480:8183): avc: denied { write } for pid=22647 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1749.487796] binder: BINDER_SET_CONTEXT_MGR already set [ 1749.487807] binder: 22620:22636 ioctl 40046207 0 returned -16 [ 1749.488705] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1749.488713] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1749.488737] binder: 22620:22636 transaction failed 29201/-28, size 24-8 line 3136 [ 1749.489247] binder: 22620:22636 unknown command 859701248 [ 1749.489256] binder: 22620:22636 ioctl c0306201 200002c0 returned -22 [ 1749.489350] binder: 22620:22636 Release 1 refcount change on invalid ref 1 ret -22 [ 1749.536674] binder: 22620:22638 BC_ACQUIRE_DONE u0000000000000000 no match [ 1750.305207] binder: BINDER_SET_CONTEXT_MGR already set [ 1750.305218] binder: 22692:22704 ioctl 40046207 0 returned -16 [ 1750.311331] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1750.311348] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) [ 1750.311385] binder: 22692:22704 transaction failed 29201/-28, size 24-8 line 3136 [ 1750.311940] binder: 22692:22704 unknown command 859701248 03:51:04 executing program 1: syz_genetlink_get_family_id$tipc(0x0) clone(0x210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000038f4cec614a13c440000000000b700000000b37c00"], &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x48) [ 1750.311948] binder: 22692:22704 ioctl c0306201 200002c0 returned -22 [ 1750.312025] binder: 22692:22704 Release 1 refcount change on invalid ref 1 ret -22 [ 1750.374830] binder: 22692:22696 BC_ACQUIRE_DONE u0000000000000000 no match 03:51:04 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000d40)={0x7, 0x8, 0x8000000000008}) r4 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f0000000140)='\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@remote, @in=@local}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000680)=0xe8) getresgid(&(0x7f00000006c0), &(0x7f00000001c0), &(0x7f0000000740)) write$binfmt_elf64(r0, &(0x7f0000000900)=ANY=[], 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400), 0x0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x23a}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') 03:51:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000015c0)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000000a000)={0x0, 0x0, &(0x7f0000012000)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000081000000ad5e0c3c000000000000000000000079761e0db03010a8007003000000ba4cb00c87f25110dfa7f3aca1e22fae5ef3c3816deb", @ANYRES32=r1, @ANYBLOB="000000000000000010001200080001007369740004000200"], 0x30}}, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 03:51:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x433, r1) umount2(&(0x7f0000000080)='./file0\x00', 0xa) 03:51:04 executing program 3: r0 = dup(0xffffffffffffff9c) open$dir(0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x0, 0x0, 0x0, 0x1e86679d, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a396e51, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x4f702a54, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000, 0x0, 0x9}, 0x0, 0x7, r0, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000005500000000000000000000000000000005000900df0000000a00000000000000fe8000000000000000000000000000ff000000000000000002000100000000000000050d0000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x7c8, 0x2, 0x4d5, 0x80000001, 0x9, 0x200, 0x7, 0x8, 0xfffffffffffffff8, 0x86d5, 0x101, 0x7ff}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) open$dir(0x0, 0x0, 0x142) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) [ 1750.779526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33024 sclass=netlink_route_socket pig=22715 comm=syz-executor.0 03:51:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000000)=@routing, 0x8) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace$setregset(0x4205, r4, 0x200, &(0x7f0000000040)={&(0x7f00000002c0)="11972832acfb2888a7a7b7b7d731a0530007055868fd4c14a960a0b1754ff88f7dc44620c499d4768ef56a8ee7347a9bb3c3058bc7eb722bbfd882cb38328d7279047af224a326dc22d23c3f4d524f823083e0993c2d8dad23a534b9026e8648492fff1fb85f10c8ab7125b608d4e6ce72d7284b1474da73bdd55dcdc197fc3401b658efb00984f756690d6725f070ef5caf7c9d13146f66d8418b9b81aa4af01666cf9d93594a860512883a2e13aa568f10ba8e29d2a996a5d5c6783b041055e77cd54dcc032bb6fb049dc36a", 0xcd}) tkill(r4, 0x3b) fcntl$setstatus(r3, 0x4, 0x42803) r5 = memfd_create(&(0x7f00000003c0)='-]\x00', 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x17) [ 1750.848988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33024 sclass=netlink_route_socket pig=22724 comm=syz-executor.0 03:51:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x600400, 0x0) pipe2(&(0x7f0000000080), 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x5) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x30000000) 03:51:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:51:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) syz_read_part_table(0x9, 0xa, &(0x7f00000007c0)=[{&(0x7f0000000200)="4ca2147eae526c8297cd0fb6a8a718bf5b5f419a5d819c03560bbf0766351e62c3d6586add69dc1f14a78e7a9da9a50c41ccf5adf25e60437af3773062c85aaf14b1b886b292a4c3deb136e0b6761980c870e22c3c81dd44e4fb1e2a92bfa73f9f64997b0d6a4d8173f1780ee11f40261c5d9d42684da968297f81d57b4d77441eef", 0x82, 0x5}, {&(0x7f00000002c0)="863ea55237c58b2590fef8e273a55c3de812a7b1d3a8b78ae9cf6c498daef28d41776431c8f5d71c37868e8523ab8413774fd9ffd23359dfc282637d0a51570662e6feeebeae3ec1400e6c15baa3f5ffee313cd9314c304737cd472f91f3420d145a184298c8c21b63743a3301d11c5fb49c4bd562370ae9618bccdf11ef512eee7be3cc8a2bec1d3931e83a9d31ebd6d75915a3603064bc1f66165142577d9ad6c25a1366bbdb5f331426656e48ce87daa5dbf31778fdd883951d4d3f5a2c706a5f", 0xc2, 0xceab}, {&(0x7f00000008c0)="c3b56cdf22335fdfbcabe958e8b41f1e2f47f632a88839e97af4f0acec8ccd1e4af5741f935b3d8f7e33e99eca89013b8e572417b33b83d959b3dddb9ca21cf61e583a0462522ddaf54c70b64d20265b6994d1c788678d1db6c89aa7718f29d5cd26", 0x62, 0xffffffffffffff7f}, {&(0x7f0000000440)="b562a4fc6a139b85bd5d872c318b247d8443d69ab55490c1b20731ffb843b56bbf5b15d0193aa5f92d45c4a61081179105e2818eea8038472cec2f8fbdab6803209b9dcefb2959d935e6eb9f8e2b", 0x4e, 0x6}, {&(0x7f00000004c0)="e6fe385f0535b31f098bda2a85659c0e2b16f4d2d4be6e1213d56f24e1bbdbd159dc3860ea07460111d1d5793b83462476dbb333c921f39d3443041da501dc416777b9f18c3bb797931c660cd52a00e45a827b95cada789e180a2af34535bb228552b5390fbd584c3dcb4816c9f5a93d5e9c039a3104e39bbf00df4cbce8617e084b9b471503dd896e6496624e34c1bafc0971e518c8465bbdbc52e3", 0x9c, 0x1000}, {&(0x7f0000000580)="27355d562d33227ff977564017689a9032050c898bcb901daf4e64", 0x1b, 0x400}, {&(0x7f00000005c0)="7b989beefd9f5577dbce67053ef78aded4b464a2cfbb2d5722b7a1de186d5d9a6ae7fd4e6f2f8178c1afab5db42567dae2ee91a6be49520ea0a9b234b81ef86dedf9e5028ba7d0a249e5364ec3e3f1", 0x4f, 0x200000000000}, {&(0x7f0000000640)="194730ac060a9f5a4aa3b75473ae", 0xe, 0x1}, {&(0x7f0000000680)="d0081d74450fac3c5563832a78fe092c59fe8796cfd1fcb6f02d6f56f29cbe1767a3b5cd4d4f46725bebbb32db91392b0bdc5a37714144878d38bc5c140f4c767934ab70e06e7c383e78c43942de8d487ce1744296fd99fb428dee73aa6d252a4a57dbfc8c6ef6b0f77626dc2ba444f785f14416a40602a8d24b968038772b05a22a4e", 0x83, 0x100000000}, {&(0x7f0000000740)="aac3d81fb039f628565591593ea688ac4758de1204b14e2b173ab8e51cf78f7c3d2094e03444fb9521d58bfe394ffe1eab1f2ffccf36f741dc7627243c56710371c2704322539528985036a2285ded945e063a61eaa91deb723dbb9c40fb60", 0x5f, 0x900}]) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1a}) close(r1) 03:51:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "755fa74b1f4a729cdd6a2357c1a25e8f"}, 0x11, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='.\x02', 0x0) [ 1751.282173] binder: BINDER_SET_CONTEXT_MGR already set [ 1751.304934] binder: 22740:22745 ioctl 40046207 0 returned -16 [ 1751.326751] binder_alloc: 3085: binder_alloc_buf size 32 failed, no address space [ 1751.326761] binder_alloc: allocated: 12272 (num: 391 largest: 32), free: 16 (num: 2 largest: 8) 03:51:05 executing program 3: r0 = creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create(0x0) pipe(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x6b87fcf18c65e030) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, 0x0) sendmsg$netlink(r0, &(0x7f0000001240)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x8050001}, 0xc, &(0x7f0000000100)=[{&(0x7f00000001c0)={0x1018, 0x13, 0x501, 0x70bd28, 0x25dfdbfb, "", [@generic="9b55dc15a666360461cb023c0c24d44b082bbe2c3206e20c56aa3f1145e703cd9e5c03a2b7be5373edfc97a8b7121fa85b90f5520f20eb199a19c9529a79162c6eda97bcec011569ac209a43a5070399743b1963b7a96e9b14bac164dc83b6d98096b470d67af02de0437b1f1e3a7c04f04eeb749c7e2a624045a545a7aebed7e53611ca7022efb4e866b3f7bed13098a9aab06a827cce3323dbff6892c2a10db6114661e9e27be5b4abf41b732f2673e9183cddbcfb0f47b09ac35ea99c3602649207c7f77a5f18f8886280d362bca7b08963ccf432106ec66c995118c21f4a7109b008eaf34d4875c75313e8108be3fb53c34393481612749cbf3a0306ae29320aa67bb3fc5a1be0c52040a9095b7462bba44e52f548f4896460353753ed74db02435392714f9cad7fed946047ae3aab10f5288636e6e636fab6a6a1c0b00b961bf59833d5c578efe0fa349745ed03ea109f4e2205211a1416c6c244977a35739cdcbd41585cde7f22dce44eecc89addda75cbb63b2db3e14c1829a1acf3e5a7a04dde3f6ff498a1172f3b2bcc9ebce393df9c54baa51fda601fe24de66c02c0c910c12d893a5447094c71688ee0095a12fd84dd792c75bbd8054a9ea563aa0e0eb8c87fb595c5594352e33aef6522f59524fc90b1ed575606ec7be9fc9eb203ff52b11cc86342d1664be75a6d637df9c3f0648ff6ae1a6cbcd64670b1e87a55a243cd6ab0d8a2f75cad2340168f5da89b0eaebc19d5d76b2e8aa3faebd681c52c4655b8ee20b1b3a6a610e10618b5bc724d5d7a84dcba9eb54a62d5d13553099ddfa680fb7fff090d86429691162bf2e315bd7d2e5917c2f295b5e214d48959c62645b5590982e51652d2e619e2826031c80fc32364b288bf3422cc51b966f6e07c2c8a0aae1aaf78f5cf3bc0554f759cf25cff2a888eb16a69c9b441f80d977a50cc9e6923513f74a4c5ea517fe13dda2cc86b9c244f0f096d29f51e68619f0e83d3fecea70db937f724841aaa54f9fa825546aa17d60aff89f992f9c64b590760941f8065d5be0afeaa4c1995485cb369d42debfb861dd1cfdea9fb7b198f4025da470bdb62c660d74a759624d293917fffc97af8883cbbba56bf7619f4efb06206291b32ce5fceaf5d05b693860a28f83a87c95de61e4df8bed300508abf6d7b3851c7cc5181f2c9337361b531a6cde172ef960ef49cc848894844bb4835985ec9b9d74939dce3323ebe3e893644fe14783bfe4d93e7454c8926d38ebe84a4845b8012bf1232765494697a8c6577ec08036370f1e414651f968feccceb6a6a352631c4a3786fab9e010fa145e31e36c973d1bf8338680636e95c6486f37e1a976e20c77ba472ecedbc15bdb9453b15da3a0e2b81885ad26099d078ff51f446d8c1c43b43b9ee3a3ab4c630b6a9df38a3b44ec4a03f36ddec4b90b91b55116d74975e683f42906942376c8a04d52c8cc402537381973accab76f0d94032e04b5affb45e3f51cc8e9ef54625990f8a13adf3b7167388d44b49985aa46996865cda1502eb0b2e4d6934522b367e494db0d10a2effe2390e583839e45cdb0ad3e99a4c23c73806504aec88a0d8a163e444471be38faeb56866862d2a94c04e638a53cd675cb0013a8d562e8f3e894b30d201ffdf5dcc5ec87cd929669fcd9502569289fee270fbf29aa7b528a617bece8027b2548adb656a05618116e32b9faa447c7eccdb42684fbbd81d023fe7e62446295b91857a0464a60eba0ecf24af26b7416445bd4530004fa29c5925c775eee7a2d7ec4dcaf5235803eff6bf3e4d242f04411d7216e0b3daa3d69c109a59303e36e03482b84f4cfe923856d5eba4e4af60c3d0fa813acf32f02f909a2d3a2d63a1a0aacc354a50568831ef0c70f216eaa7cc731cec3192d2f695b2efecc649f0310700fd7128ff1c47de4ea7500d8a728a18160a62a999e6a3add0082e6f9b52e963c61b4f75c10ba0abfebacd9114464a7037155d0e8417c48be4be1bca775cc4db97c442ce4e324c2a2ee0c849b8ab0a53c6acaf4e5091b04c8a1cd07463e4c9811f0dd70cc33a24f0f9e3ef4d572d49e18a9ec4b8489d441fbfa01a6f9dbfbdb87d1a6e29ae9b45fef191fd6c8aa9a1aa6e5197ac7ab83b78349a349c9c2fbba4d536a25a961fe63288261031df240dd49c8fc639a1c25a13913ca25c84eea3d500a0ab7ee6eac3003a22031873c8ac56a7af272a3b3abaa8f60f1b26b9bfea6fef5282db0c30cbc0a790ec2180052566dced8523848b0b4e61a5b64f2aba9ff690145c220f7f1e874ecd45fd33be878f70404002924254b468537c7c9a4f75de8c97a19c75455c9386113b0fbbf6529ec2066d1c046001e7d197c957a5c1390186aa9e3259cdaf1e304d54a2275171c6c6a2f38f3883857860ad2a16fa89b63853a8e5bda788cb94a86626a35efd30ec4958132856b0c2c5c89a47d3919e492c7039542c1fcfca6eb47fef7df9f08c24142d1ba8b605c9d53d7bdc2d3e8ca881073baf5f2954e1a218023037f22eb8ba87463294f53ed40ed8a0e5dfb207d6625f78f5313f024370f7bcdb4ca1006d70b04209fa39be08c63f2209285f9d233ddb22b38bd14af4c8771abf41defb242f2c3482832bafcc25e66f05db0923dc12b3a6e2a97c887b010da0f2db7f2ffbbd69a7f410fdb355bb98e927753c699ebb12288f8c00247aaa8a53f7612cfa1246d80dd170cf6674ec2eb44b68725c96fc6af850be728c91f0f4418adf424d8ead1e72db31055063620e1d149d92595971c438cbf2ac8061d31fb1bbb48885a2cc42b5517fa34a369b9cd7d5c2f64761f60799cdd534f75bc17f962b5b19db0e8042cd47d843e35baf2cd04a67d9becc23e856fc6adb032ff8b506c494d949e06f2db689fff1d9a16cbee976931bbbb0d8c75e53f6cf1a2ecdf2c7ed3c0dfce8610023303ece83210311112b780b5eb8ea8a1f6cb8967fbdf9573c8e94d20048928f73ce2e430dc22963abb75b70999ff966ce8f18a311e1554bf6a1e4ff16f878a179e0836bd69b0d3db0fd76c92205fc5e1425dafbc0b390dd9b029b3ee8c0466b3952cbc6bbcd70baa57ab121166901985be8dea09a261c7c1ad6cb6e98c273e9f01cd44a7ddbf395aa91b599e1431fc17b94ebb023d7b130531b475c1ae9cab1043a5d350035c9269c2d5503fd632e64e451c7c400debdacd8e690b848e524fc74b5d23535df2c5948edd01d53dd952ae0ffa1a5f3028bfd817272b84b8592c6dbe634ed607b90a5df1cbe1e9081331712743188bc6d4ad2e58dd5914ba8fa31da87aaa691dff768399b7edb5629599a554f4f0d99f2d683008f25699882cc17a6c823bd5f54fb74336acc207a814fcd3ed2f78225afdb2b93e2a98a29532640986384577820b9f630d653ecd67957f097ab1f85af4693ca19fc9e773692b63f670f5f990387f3b2e7c4613862269c681ec52415bb83448b79e659ac454695361adf148e6dc00c8b82f5dfef4aaa7519cb9a985dc57fe894888610e4959fadc6b58b929e06de6f9b57c957b1fbd6fbf241913b82afabbf1d1efd5a4f15433c3c3655212d39ed0c71f84159ec4f45501d4d32285fc726d36ee328301dac00fb07061204f1095510a8111f04cc12bc49cb92ce93b54e339a416093a544c05dc4e86991187cbe580a21a8a7831df342af93ffb0bba101535f8d9495b55aead66b26e22d933368481fa6ce6769e335bc6b231310a326ed58090139c8441500e9af06573ec4d123916ec4a227fe653b021b85938e339f85461281e36de350d5377a7a21d579a2a7b358a5f59108fd2f211dd6ab20a5de57fcdf2f407b966281f4b50f374c0831d8e4e6ef42d457f34c3fac64c53382256fc30c032c66f4f6e7c34ceff94f056ef9d3bd9891ff5033e992fdc2ec8f86525196bc0b9df2073f72414135450d58f64f1f656597cf1f71b817dc982515f6bc54556a2648c3aff1afc22e4139227ca63abbbc7eff98c21261cbc1769cf1c228c8bb8563c3597b1eb5dc6e4e06f00394eb1859366fb696a2a7efc1a93a3056185a7b05e2083960cc02183f2449d1e6f0802eaca87b65b308377f014c2683d38735f445a0184120b468c882460a48fe04a17dfee81df8e6d4973401c17b88c6813e6d64535177b84a0d3533f60c3d34c47e7dae4c1c624839792ed2cfca71e312947d3759341bfba180fc38c39ecfde05325271129a0d9c11e4d1c2f3e22fcf2ee1b40f7ad2ec5f8147737f45c84a8afb4628b93dd98053ca6f3eb4e39a19d4b5b58c9dd695307687c6a0d264d24c2989da4448a4d0ff2b69650eaa5ffa6a23137a94aadf4cf17c64b84e4df67739a3637c60e0ec1b27b3fa9c25dbfadbd27f4225234f4404107d58b10f9277022e8fc8073856dd2c1b0b77f4b1cfb0df4172b23faa357734c905ace6e32bf8fe5b5d8f0666edfd246125af1153358d577130ad17539d8fd0ab835f083387075e2b75dcdd469d57bf1c0d3271b29315159dfd4d373bbe5e7bc23ca6325c1c6a53930485d9498f0dfbd594ab8dbdc932a6c7df3618dd0a43e1d1bc330fe455b4fc5ea44b5bb32305c09eff305deb204cd442f5cb5d3c53aadbde239dfb93d71932a600f2bf4f78b2a1d0529a8362f813d4fbea104158aa9caabcd02802e9b9d6b914bb7c690d3193689e2da5a8e3767e85772b8086b974891f6661ac5e1a1ee1ac039bfcf86183edb3a3e4c9a365b3132afa5e122788640d53101e9abde814d549e1407815e3bce143544366eaaed17e078881e15fc343f4cf345a7db835e615bd3738c2d2a510cc47533bbec3c27c500df417b1e5708d35c1d353d57140946eafd3176b69d3d29c2893bee52acaaa24f921543d9763a961b03b3bc20fe00099051832e86591722e151265e396f305569baaac5f01df2c97465ba197c3cce112048cb86065c48586a894daf4b210317b38d0e5da40a1543b47e15367f9e0322a94d34696495b2470a2c1b3bbd2fd5552a2f9283f6024a3c92a5a1b60cfb658055108c0688df0a4c6fff3f54956d4b984479c2750f9a06666ae633faea2e1a7154d637d5ed2f7cc0e96bc78457d200e00107b317cb008dc56d912252b3c23aa7b5eb5f5a53be0c53d8da6db8ed972ccafee1d96f604b2ba5111b9db0a07bd13a4ca30125b26a86713f3fa9dbf8c6295e17fe14bb3567c845cbdc4b7f30d11b9f389b0589412c65ca95c74cdf0fa4d3a6f412f163d8eb917d6ada5eb6ff4bd41ac5389ea5b76ee40d67cbbb22f73de91dfdb78cb72939a09a6f71abf4cc7c1eb04b2f939b2c5eedc50f96b0ab3eaf9593884343acfb4025456312bf3e227391890a7adadc320def814585414c4198cf547c892207ed208baa033de68e517ee68a8e6a77e0188f0319f9fbe05a81d99e9fecd303fd84698338598bb26052eab89b6e3ebe882031ca62704ad949c99c22d7c57422fdb9a25a1a7edb95a74d9553940a7106ef1cc28ba7d272bada88e35367e7748c537fde57d70fa5dcedd77934885c4aa99ff04364522ef3f5f84ed7d3b981bf5b098159a31877a54a6fbdaaa4442e41add4314da693800a28e5b58c025e3eee8c37f1d76d3b0b97b0f8bd90f23835081a72c214a9a5b2bf00cd61dc63b4835d46a4a1eb9e20f0bd6396b655af34f16133a9d17a36751f933d9820e4312f9f8caab1e2253239d244d417cf37f68090c9ba0a3a3869f7ce9ef101eadd25e11b2fbeb4526c93fa84f931623a51926fa60fa7b85104436cfb298c2fed91d45035292067fe0b58777fa4056", @typed={0x8, 0x6d, @fd=r0}]}, 0x1018}, {&(0x7f00000000c0)={0x10, 0x14, 0xe, 0x70bd25, 0x25dfdbfb}, 0x10}], 0x2, &(0x7f0000001200), 0x0, 0x1}, 0x4000040) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000140), 0xffffff35) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) perf_event_open(&(0x7f000001d000)={0x1, 0x262, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1751.326785] binder: 22740:22755 transaction failed 29201/-28, size 24-8 line 3136 [ 1751.328056] binder: 22740:22755 unknown command 859701248 [ 1751.328065] binder: 22740:22755 ioctl c0306201 200002c0 returned -22 [ 1751.328972] binder: 22740:22755 Release 1 refcount change on invalid ref 1 ret -22 [ 1751.371353] binder: 22740:22755 BC_ACQUIRE_DONE u0000000000000000 no match 03:51:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x20000000000000b, 0x3, 0x209e1e, 0x7, 0x1005, 0xffffffffffffffff, 0x7}, 0xfffffffffffffe20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000a40)="5fa1406824082fb559f13614212dfce9b7ad487695f036999b45bab1de5018a1273c8ed952600eed0e2931afa6033e03b4ec0cbec6b4d7c7a9c7db97f2633314b4e525faca83c64cebdf8b0bd1b77cfcb1a29491689df169b4d71367ef9457ce3ba22ddd1ea0a116f5224e4d84dd6be764884de231721c2a0fefa9f0d3", 0x0, 0x3}, 0x20) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8020011, r4, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x50050, r3, 0x20000000) r5 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={r5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00003e33aa8ca3af93177dfd2809307a7965000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="00022bbd7000fedbdf250300000028000200040004000800020001000054921801000300000008000100c581000008000200ffffffff68000100080003000000000044000400200001000a0067240000000000000000000000000000000000000001bc070000200002000a004e2200000006fe8000000000000000000000000000aa02000000100001007500400000000000000000000000000000000000e2704a02d1a26a48e6f31616261467e6da7fa66299ebc7e2f1f9239b68750b158e10ed30552422a33632cc22ea870c0e76686128e064692aabfe5b6f01b4a2f1d70dcb437a32a285a4c76965140ebc8cf37555da65c82656b8b63b3d2bc726414df48542e49aa7155d0ab8beaeb8a40a6fdce5ebafe6c80605071cb99f33ec5f56439368caf66fc28dc48a547a7570a134bef26a36defc8d692d8a0c0ece235d6d0f60a4c8b9426398df1529c6ddbb87fd9e789535d5d5c03733328153863777624d2d67b299293f7339cf5cb2cb4c7c95ebbf0c1272739b95a0"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000580)={0x100, 0x4, 0x8412, 0x3ff, 0x8ef4}) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffffc8) 03:51:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x721, 0x0, 0x0, {{@in, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, {@in=@broadcast, 0x0, 0x833}, @in6=@empty={[0xa]}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xa0}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x101800, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000540)="e7845ecdb4ebc497c121768a816854b845407fe8ef7188b84fb9e1723580004fcd8e7c3c2db5b639a3bfaaadacab7f9b712f97e07126ce53a21b344bb752af896488b4a2", 0x44) r6 = openat$keychord(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/keychord\x00', 0x44100, 0x0) r7 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0x464001, 0x0) r8 = socket(0x1d, 0x0, 0x4) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r10 = dup3(r0, r0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb0, r2, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) 03:51:06 executing program 3: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8911, &(0x7f0000000100)={'syzkaller1\x00', @ifru_addrs=@rc={0x1f, {0x8, 0x7fff, 0x3, 0x8, 0x7, 0xfffffffffffffffa}, 0x8}}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x400, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0x7, 0x100, 0xffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) ioctl$FITRIM(r2, 0xc0185879, 0x0) 03:51:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffebd, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0)=0x1da9, 0x4) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xac, r2, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004840}, 0x80) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 03:51:06 executing program 1: r0 = socket(0x0, 0x3, 0x0) r1 = dup(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={r1, &(0x7f0000000440)="0cde25f4b797414fa39f972ef4c668c7afbe7b5d4ef159b89094cee1efd70faf952f8b2a75415cd9c921bdcbaca42eaa3690e8520d2beca5707162990412909877428ec130b4899b37b8c41efcb97f00e362ffca0028720a16a7a6eed3d484edd860ea8830c3c52e103f18eb0369c4701cc9becc573010bf2ad41c05", &(0x7f00000004c0)=""/56}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) chdir(&(0x7f0000000340)='./file0\x00') r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) getresuid(&(0x7f0000000200), &(0x7f00000002c0), &(0x7f00000003c0)) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x3) fsetxattr$security_evm(r3, &(0x7f0000000280)='security.evm\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="07030000fffffffc0031fb006d88e1ca9f1fe5233fc7ffffffff00000000db2e2d5ace95f44f090e416654e9d88d93536775bb14f340a0c265fe3d"], 0x3b, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c3330c6c5ee1a8525b6a495e6ca23091daeea9dc1841dbd8644f6ffa8e6f804c05bfc9e8ac2b344c30f146fb5ea285638aac93269cd3f14cd9f8970d3383fc74c473078ed1facbe6e7f81e7c7d464259644a4d52ad79d6b"], 0x8) ioctl$TIOCNOTTY(r1, 0x5422) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x9, 0x2, 0x3, 0x35, 0x20, r3, 0x8}, 0x2c) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$smack_current(r1, &(0x7f0000000040)='\x00', 0x1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) 03:51:06 executing program 1: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='#'], 0x1) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r1, &(0x7f0000000580)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 03:51:08 executing program 4: socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 03:51:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000f6ffffff1f00000000000025000000000000755d084ce74853e6002000020000627c05000500000000000a00000000010000ff1700d5f7c294eb31848b0f0f8926de3b00000000000000b7c23d027fcee4f859a241054fee6f12a4b455e26fbdecd2d3c5ef2a639ec90ba3cb5ff9d6059f66826a5f84ab8656a1b209892d7afa815475c35935227de1054a11ae2bda143ab674d88ed48a67198587d459399d33c202"], 0x80}}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x2, 0x40) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000980), 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @broadcast}, 0x4, 0x0, 0x2}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000300)="5e1a8be4dd53aebe2472817c452b83bc3ae77ce324fe8ceb758be891ceca86fc2ae0462b230d482ab0a47170123d208d0da5db6c84d500c7a40d7fa6baab25846dd07c34b82fb6fb217c174aeeb0402ae04ffb79f716883d2eab7ccb1737b48505e6751a1675ab939d6e28e5f5851015adca84b3876be461c3f4f3ced2bd1ac2a8ab671f915b29cf2482e7c02ad845cbc268f9cc466d0d40182c02aa7140a2ca5979b2af46c5bc445941c248416c74b0d0f52df0b7c11263e5d05eaa60dd29208938b28d47be09d2f9a760a8c2", 0xcd}, {&(0x7f0000000400)="496bacc50a3642b8e8630c35f7fd6ec44132915609349cf9b6a94853b3556189a4a5abac3f74f236f6cbd9a121316222b4fb1cd3a9ea469bfa762d423b3e09eb7fb2412d9159b79f664925b294d54d6eb7ce87e7801885bbd977f17e2456c61f50ad6f27d4ec523bc5d4c0591b66fb36249af0cc9dc82125956f8c83e33e4409126c305fe91a864b040a7abc090051", 0x8f}, {&(0x7f00000004c0)="2ed616a42b8f38423fae361db0fcb696d8fbe8ec7f5429633c232168b571db3ee521b3ac819688a989bb056e676b216590e61c126d1b0d604d15afd31168a5f1c5b428928fe29f1d08f12922db3f21baac18500229be07e343f94242dea11ddf1547dae5ac83476f9023cc58dab66555a66f93c9a20fc63a6a2fe1f15835e58f129de85b3e500dc0763b25c56c", 0x8d}, {&(0x7f0000000000)="39aec3ba76b916e5c4b96769aad1a64f269c0c0997c3bc83e7b378b0b41bf38dbb63e23a8d23", 0x26}, {&(0x7f0000000580)="762844f6d0fb779d9c55d79242953b1961998f5057dcb67ecf7921baa087603c84900e21f2933e56a0b06a6df1a3384e16826ecb273d8851f63af6371af3f16f4205970ca3239e510db297d9aabe8586c0e78cbd8c0e1f7052d5a290a01a20d30d78bc1adadcfcc1fc0930172ff99bd34f6141f6c317b7aa69f6b37325a3085044672bf3d53b9d9a4916d20d8e", 0x8d}], 0x5, &(0x7f0000000640)=[{0xd0, 0x1, 0x4, "cab1d0be8e1ce91f29dda8e02596d5c38dfc95c72d30c9397e52588b6ba1929cb2bf476f783b3d62e1e61b8261cc7538cabd98c792aefb950726bd1b9ddf5b580bf69b567c106ae77cc78fc51b02d680737ffed0fad92e0525dc1a7ac7d440dd5e1e6c7c931a2e4891a2d03e53a51b0222ec0d87cae64c4fad99d4403ba83ca8d3978f7aa5a170105e0754918a6e0d8703151b714acfb4efd9f297c6973eeb9515a2a164bd7cda6f47e5918023595bfae0809131912034ab810e838b55"}, {0x10, 0x118, 0xffffffff00000000}, {0xb0, 0x11b, 0xe94, "f7643edb6b884b2496e85c6bdc04baf4efb65c781b5e0783483118d90995308b3483ac3406416bfc83639c1e129812e1b43c1717a17ee6778161f6400800ceca1f3ddad95e76fe92beaf0d51bf2a6954eaa234c434ca50c346493456cf1902f743d149513ce8f2b3914a37d8a627dfc4ab69198e620d639384eb9bd83a748402930a5706b080c71b26829c3e06b33ed27048047d3859dd1b1ac20aa2b4eb24"}, {0xe8, 0x119, 0x945, "c135152d4006ceb9cf4e46250312e79d3b1cdd96d5caa9a4b8c31cd0417acf32560e891b5983c43e16bedbf79fac665de8a4305220fc00840edfbd3e356ea417d51e975df077de7f02f30221baf9accc7a0d45d1aae68bd72bd9657f1225fbe5ca558f2f0686316ea9deecd401564d0e1452d0775e8184b5a3affdbe3e6932ccfa057390cc8f5058a49279af1b3c47dc981ed3c841f9a426c0ee394c24f1975b29d3db42db57b4b65b38fb9ceec63d4a5afeb9b52c98f7dbeb74bab9fabc5af9d86a465e6fc41e8dd9823bc96458c671cad21a8a"}, {0x68, 0x29, 0xf58f, "5da42b70b2382c47568aa92318646b367d7750c3a08fe8d9ec79ceda097a1af029871fe1bcefb9020932df6c648b8d83bcca1d53fe216c982aa6521b9f6864aea504595e6590c4a78f43904f404aca0b8513aff773fd8b"}, {0x50, 0x1ff, 0x81, "542a29e1df2a43f56ffe216d44f6c4b81a283f9cd6b84974526eeb1ea4d9fe771646386069952e9645b47e4569219e4cc9ad95740177a2bb0a8b"}], 0x330}, 0x800}], 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000280)={'veth1_to_bond\x00', 0x8000000000000}) 03:51:08 executing program 1: timer_create(0xb, 0x0, &(0x7f0000000380)=0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x101000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x3f) clock_gettime(0x0, &(0x7f0000000000)) flistxattr(r1, &(0x7f0000000340)=""/39, 0x27) timer_create(0x453d4c44ed553135, &(0x7f0000001c00)={0x0, 0xc, 0x0, @thr={&(0x7f0000000b00)="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", &(0x7f0000001b00)="901099bc9b3863003d02d3afd4e4e1bd58c54d73edfb94d83b14d2d2579227a2ca8051ed4f1409e6629d1c86363a59eac010504c5d39e3feb2f18bd3f7a52e11b270c3c20d28781ad2f90643cc7f056e7879876ce4128e7b1459980f056cca858c309e92c0a9fcf13973e73bcc0b4947823a62ef6d43d7ad45d6699deea9adf4a864715b8ff3f7c2eefc8a0715d67b1f08d891665f95f67999b8a40d1524b56c0cea7f234b915bc4362408a6f351850cd51fdc3930026978fdba804ffbe1deb72d3dd1cfca563772d3d07c6d"}}, &(0x7f0000001c40)) r2 = gettid() ptrace$setopts(0xffffffffffffffff, r2, 0x5, 0x48) write$selinux_context(r1, &(0x7f0000000ac0)='system_u:object_r:locale_t:s0\x00', 0x1e) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0xfffffffffffffffb, &(0x7f0000000180)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000140)) vmsplice(r1, &(0x7f0000000a00)=[{&(0x7f0000000200)="23857ae551bd830eaa1f2611538671a590313a7f4fb1f07b062ddd2943b967509b8080048949908268a2ea9481b35b4c36babb73f98151736e2e48520faf28859fcb1190c79650e1afa53d6a5a1454b7a15f51ea0323ad423bda0c50a099b540c0db2edbf4c86909457bb54c26bcce70a68f334b9ce17df238d08348ba74e74f9cf77c00bc801a97353153379ee68d3398190ff6d6657102467235f7d7cd9d70b35751c3e7b9a68a5bf81d4a34bb5530f27caab7fcea00c330ab121d19e7f0f5a06cced15794a2db2e633769bab69e1e7b638e5b9669f2f42f", 0xd9}, {&(0x7f00000003c0)="4b345a9ab808e894abf6d826d16267d23898522838ab388a129afdfa2728384c5bbed8a4fb8bd98749c3e5015e11f436da9499f4828c0287c477b23aa5eb6fc9b0ebb4666bf9f9ea3ecb0e3e6d60e66dbe119b5628ab2f1533147305c3c57cb4b53e7f07f16565f104e1d45f9f5ad4b8c472482c97306488d356588096384174221e3250712060354c02edae6aaee423f84787891444c9063cde5099cd0ba9c68c3ea7d1da6bff4f145badd523498fae1cd679fcbcd5116de1efae8ca3d9c6", 0xbf}, {&(0x7f0000000480)="6236e0ec3668810f849d23f952498f5b0634a88fa33334ec3ec64209941765609ed54ece63e80c98eb267d46fbb9c654b628e82f5516ad287d8cffed14ff4a30df38ad8a711f69731a20855077d0bf51bddbb9d25148f772f032398d818b1c4e3331cbe0f191febbb58718685a7d6a5794ace1ea457dfeed4fcbe4e5c37bfe2f01cf536223834813255f0a0b205c978d3feecf7b8ca96ae46e95e4729fd8eb04a8e0af85c3470ae44b2ea1cd370c454ca92f1b96f6550f1a28f420b60b11ea564b6cb21115b546566402a0bc4a95fa", 0xcf}, {&(0x7f0000000580)="82aba0b0e63c7ef4db48d728dd5f9722099448524fcc61b93cb89f2b79e78ade8c95dff9d166ce1b036b9c9f5d455c19c8ce66d80431d15e32e043208dc687039631d6398b2e51bf78304af3e2449bc710d76a97fb9ef68341f855bad333d145648219ffc98a8b24f6008fb62dada4532065301196c8bfb3be5225b2e5d7637752bd804785da756192ba474e9d5cc271330b9538029dfc4c2b56d8b547717e25ae7698ed7cfe7fe5322a8573655b4d3518b0bc9d11a1c97e2e1c4e7e319d4d7d32e2", 0xc2}, {&(0x7f0000000680)="3a075429e5cb6c90f228f7f6b80f37a0420a3ff84c44d8713d2ce08be710d6e207de7256da1a92ca1df1a5baf41e4018f51b860615ede5a6844acef8b499da2cf89109ee1086fb80affb2fbc7b95de7bf47aeb54c2b5963a78b6c0ce38aa7c67c3d1257fb86c556af9ee7c43f287e3dba5c56e76d8236011a671f3492c56392f5db267977355663ec016f823f666223b79ddbc6e5d53423a6acdb00bd9dea6764c38c48eebbee1f87b04abb064d12e5a765fae6d85aeab8da7aa612831d311014555638c85cc9682470e4363882502570978995be404d6aaa4916b00d63eca2440643f55bf6d3d16e546cdf311", 0xed}, {&(0x7f0000000780)="6724fc2c2ee44cc81c8436646ec669c68f2dc86b431b98ae11d6fb08a402272e075a8ca5a0b68bbd4dcde1ca470007aa907443cc79d76126a46ff8c17c790f91978ff7dab15884ea5fcad38f00721d2e68c0006bc990eb14a7549e301c38e1ed52589b150f6c1d89bf9dcbaa482400c3ea8a5f5ef49ba19ae25865469280b461b3f273f2b6c4", 0x86}, {&(0x7f0000000300)="2809123a4796fd039ae62482e90eb75d1324055f", 0x14}, {&(0x7f0000000840)="94605224e10850fa028398a4c4a74c5fba6db904468530a1d28dd645542c2e72d705747d2e1638c9835990418f5da394299263190a240cf0e9c0722f8e0ad743d3a48744d0a55a5c094ba5753ac1b130a9c9f0caa5d8e61b456ba1426a6e3a691bc4a537ab7a4170e72aab4f0d112730118b1bfcbbe412f96c6fa49b947f5d318542ec1b90f60170118828b889ec8701", 0x90}, {&(0x7f0000000900)="46edef53e880be00ed5f7f03a4a6dd9f9aa52e1fd2a4ca1e6e5a69f50d107dc1226025bde03794e3834b9d84bef7e6ee1cba47c28862258680eed7251bf4a78181e17bfc10b1b79483ba80c442ce2982aba3cc0cdfc7c3e44d566862bc4025494d0c498fcf93b9e3fe317a5f8b1989a0fc11678f93012b0cd99e390e95219e4e62aadd89fff5313f143aa32241d9a6c27bbadcc0a958925b0fefd194f244fc842ce9838131b7009d82c87239485a98093c3d6a36b262dc0a9e85c83a35f53b3bfa9937e41a73026f9bdb5dfd2a0e65374d1de81250e9f6777b2010e486a1df5391f58d72bc7592db10213b6c9e", 0xed}], 0x9, 0xa) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/mnt\x00') syz_open_procfs(r2, &(0x7f0000000080)='net/ipv6_route\x00') [ 1811.971537] binder: send failed reply for transaction 37, target dead [ 1811.993621] binder: send failed reply for transaction 40, target dead [ 1812.000246] binder: send failed reply for transaction 43, target dead [ 1812.023792] binder: send failed reply for transaction 46, target dead [ 1812.030433] binder: send failed reply for transaction 49, target dead [ 1812.043240] binder: send failed reply for transaction 52, target dead [ 1812.049870] binder: send failed reply for transaction 55, target dead [ 1812.073287] binder: send failed reply for transaction 58, target dead [ 1812.079934] binder: send failed reply for transaction 61, target dead [ 1812.103240] binder: send failed reply for transaction 64, target dead [ 1812.109877] binder: send failed reply for transaction 67, target dead [ 1812.123231] binder: send failed reply for transaction 70, target dead [ 1812.129865] binder: send failed reply for transaction 73, target dead [ 1812.152230] binder: send failed reply for transaction 76, target dead [ 1812.173273] binder: send failed reply for transaction 79, target dead [ 1812.179900] binder: send failed reply for transaction 82, target dead [ 1812.193270] binder: send failed reply for transaction 85, target dead [ 1812.199901] binder: send failed reply for transaction 88, target dead [ 1812.223214] binder: send failed reply for transaction 91, target dead [ 1812.229834] binder: send failed reply for transaction 94, target dead [ 1812.524433] binder: send failed reply for transaction 97, target dead [ 1812.564613] binder: send failed reply for transaction 100, target dead [ 1812.571348] binder: send failed reply for transaction 103, target dead [ 1812.656624] binder: send failed reply for transaction 106, target dead [ 1812.697592] binder: send failed reply for transaction 109, target dead [ 1812.733212] binder: send failed reply for transaction 112, target dead [ 1812.739932] binder: send failed reply for transaction 115, target dead [ 1812.833262] binder: send failed reply for transaction 118, target dead [ 1812.839981] binder: send failed reply for transaction 121, target dead [ 1812.886321] binder: send failed reply for transaction 124, target dead [ 1812.903293] binder: send failed reply for transaction 127, target dead [ 1812.911638] binder: send failed reply for transaction 130, target dead [ 1812.963230] binder: send failed reply for transaction 133, target dead [ 1812.970215] binder: send failed reply for transaction 138, target dead [ 1812.993201] binder: send failed reply for transaction 136, target dead [ 1812.999898] binder: send failed reply for transaction 142, target dead [ 1813.023236] binder: send failed reply for transaction 145, target dead [ 1813.029934] binder: send failed reply for transaction 149, target dead [ 1813.063263] binder: send failed reply for transaction 148, target dead [ 1813.069981] binder: send failed reply for transaction 154, target dead [ 1813.103239] binder: send failed reply for transaction 157, target dead [ 1813.109943] binder: send failed reply for transaction 160, target dead [ 1813.123227] binder: send failed reply for transaction 163, target dead [ 1813.132488] binder: send failed reply for transaction 166, target dead [ 1813.153208] binder: send failed reply for transaction 169, target dead [ 1813.160117] binder: send failed reply for transaction 172, target dead [ 1813.173398] binder: send failed reply for transaction 175, target dead [ 1813.180109] binder: send failed reply for transaction 178, target dead [ 1813.203215] binder: send failed reply for transaction 181, target dead [ 1813.209911] binder: send failed reply for transaction 184, target dead [ 1813.233212] binder: send failed reply for transaction 187, target dead [ 1813.239897] binder: send failed reply for transaction 190, target dead [ 1813.263189] binder: send failed reply for transaction 193, target dead [ 1813.269867] binder: send failed reply for transaction 196, target dead [ 1813.283195] binder: send failed reply for transaction 199, target dead [ 1813.289881] binder: send failed reply for transaction 201, target dead [ 1813.313192] binder: send failed reply for transaction 205, target dead [ 1813.319878] binder: send failed reply for transaction 208, target dead [ 1813.326928] binder: send failed reply for transaction 211, target dead [ 1813.333830] binder: send failed reply for transaction 214, target dead [ 1813.340512] binder: send failed reply for transaction 217, target dead [ 1813.347411] binder: send failed reply for transaction 220, target dead [ 1813.354288] binder: send failed reply for transaction 223, target dead [ 1813.360951] binder: send failed reply for transaction 228, target dead [ 1813.367899] binder: send failed reply for transaction 226, target dead [ 1813.383198] binder: send failed reply for transaction 232, target dead [ 1813.389874] binder: send failed reply for transaction 235, target dead [ 1813.413193] binder: send failed reply for transaction 238, target dead [ 1813.419869] binder: send failed reply for transaction 241, target dead [ 1813.443195] binder: send failed reply for transaction 244, target dead [ 1813.449880] binder: send failed reply for transaction 247, target dead [ 1813.457030] binder: send failed reply for transaction 250, target dead [ 1813.463905] binder: send failed reply for transaction 255, target dead [ 1813.470564] binder: send failed reply for transaction 253, target dead [ 1813.477566] binder: send failed reply for transaction 259, target dead [ 1813.484437] binder: send failed reply for transaction 262, target dead [ 1813.491198] binder: send failed reply for transaction 265, target dead [ 1813.499281] binder: send failed reply for transaction 268, target dead [ 1813.506172] binder: send failed reply for transaction 271, target dead [ 1813.512935] binder: send failed reply for transaction 273, target dead [ 1813.519846] binder: send failed reply for transaction 277, target dead [ 1813.526738] binder: send failed reply for transaction 280, target dead [ 1813.533621] binder: send failed reply for transaction 283, target dead [ 1813.540287] binder: send failed reply for transaction 288, target dead [ 1813.547192] binder: send failed reply for transaction 287, target dead [ 1813.554067] binder: send failed reply for transaction 286, target dead [ 1813.560731] binder: send failed reply for transaction 295, target dead [ 1813.567749] binder: send failed reply for transaction 298, target dead [ 1813.583208] binder: send failed reply for transaction 301, target dead [ 1813.589982] binder: send failed reply for transaction 304, target dead [ 1813.603198] binder: send failed reply for transaction 309, target dead [ 1813.609900] binder: send failed reply for transaction 306, target dead [ 1813.633228] binder: send failed reply for transaction 315, target dead [ 1813.639918] binder: send failed reply for transaction 313, target dead [ 1813.663189] binder: send failed reply for transaction 319, target dead [ 1813.669867] binder: send failed reply for transaction 322, target dead [ 1813.693194] binder: send failed reply for transaction 325, target dead [ 1813.699885] binder: send failed reply for transaction 328, target dead [ 1813.713195] binder: send failed reply for transaction 331, target dead [ 1813.719878] binder: send failed reply for transaction 334, target dead [ 1813.743193] binder: send failed reply for transaction 337, target dead [ 1813.750000] binder: send failed reply for transaction 340, target dead [ 1813.773198] binder: send failed reply for transaction 343, target dead [ 1813.779878] binder: send failed reply for transaction 346, target dead [ 1813.803195] binder: send failed reply for transaction 349, target dead [ 1813.809897] binder: send failed reply for transaction 352, target dead [ 1813.833192] binder: send failed reply for transaction 355, target dead [ 1813.839880] binder: send failed reply for transaction 358, target dead [ 1813.863198] binder: send failed reply for transaction 362, target dead [ 1813.869891] binder: send failed reply for transaction 361, target dead [ 1813.883203] binder: send failed reply for transaction 367, target dead [ 1813.890334] binder: send failed reply for transaction 370, target dead [ 1813.913207] binder: send failed reply for transaction 373, target dead [ 1813.920454] binder: send failed reply for transaction 376, target dead [ 1813.943207] binder: send failed reply for transaction 379, target dead [ 1813.949920] binder: send failed reply for transaction 382, target dead [ 1813.973193] binder: send failed reply for transaction 385, target dead [ 1813.979875] binder: send failed reply for transaction 388, target dead [ 1813.993191] binder: send failed reply for transaction 391, target dead [ 1814.000121] binder: send failed reply for transaction 394, target dead [ 1814.023214] binder: send failed reply for transaction 397, target dead [ 1814.029899] binder: send failed reply for transaction 399, target dead [ 1814.053196] binder: send failed reply for transaction 403, target dead [ 1814.060051] binder: send failed reply for transaction 406, target dead [ 1814.083195] binder: send failed reply for transaction 409, target dead [ 1814.089882] binder: send failed reply for transaction 412, target dead [ 1814.103191] binder: send failed reply for transaction 415, target dead [ 1814.109860] binder: send failed reply for transaction 418, target dead [ 1814.133188] binder: send failed reply for transaction 421, target dead [ 1814.139865] binder: send failed reply for transaction 424, target dead [ 1814.163206] binder: send failed reply for transaction 427, target dead [ 1814.169930] binder: send failed reply for transaction 430, target dead [ 1814.183190] binder: send failed reply for transaction 433, target dead [ 1814.189868] binder: send failed reply for transaction 436, target dead [ 1814.213193] binder: send failed reply for transaction 439, target dead [ 1814.219895] binder: send failed reply for transaction 442, target dead [ 1814.243191] binder: send failed reply for transaction 445, target dead [ 1814.251672] binder: send failed reply for transaction 448, target dead [ 1814.273199] binder: send failed reply for transaction 451, target dead [ 1814.280063] binder: send failed reply for transaction 452, target dead [ 1814.303191] binder: send failed reply for transaction 453, target dead [ 1814.309877] binder: send failed reply for transaction 460, target dead [ 1814.323190] binder: send failed reply for transaction 463, target dead [ 1814.329882] binder: send failed reply for transaction 466, target dead [ 1814.353191] binder: send failed reply for transaction 470, target dead [ 1814.359873] binder: send failed reply for transaction 471, target dead [ 1814.383192] binder: send failed reply for transaction 469, target dead [ 1814.389875] binder: send failed reply for transaction 478, target dead [ 1814.403194] binder: send failed reply for transaction 481, target dead [ 1814.409864] binder: send failed reply for transaction 484, target dead [ 1814.433194] binder: send failed reply for transaction 487, target dead [ 1814.439881] binder: send failed reply for transaction 488, target dead [ 1814.463205] binder: send failed reply for transaction 493, target dead [ 1814.469887] binder: send failed reply for transaction 496, target dead [ 1814.483193] binder: send failed reply for transaction 499, target dead [ 1814.489888] binder: send failed reply for transaction 502, target dead [ 1814.513194] binder: send failed reply for transaction 505, target dead [ 1814.519905] binder: send failed reply for transaction 508, target dead [ 1814.543210] binder: send failed reply for transaction 511, target dead [ 1814.549898] binder: send failed reply for transaction 514, target dead [ 1814.563192] binder: send failed reply for transaction 517, target dead [ 1814.569884] binder: send failed reply for transaction 520, target dead [ 1814.593192] binder: send failed reply for transaction 524, target dead [ 1814.599898] binder: send failed reply for transaction 530, target dead [ 1814.606848] binder: send failed reply for transaction 534, target dead [ 1814.613732] binder: send failed reply for transaction 542, target dead [ 1814.620392] binder: send failed reply for transaction 541, target dead [ 1814.627308] binder: send failed reply for transaction 545, target dead [ 1814.634200] binder: send failed reply for transaction 546, target dead [ 1814.640862] binder: send failed reply for transaction 549, target dead [ 1814.647798] binder: send failed reply for transaction 550, target dead [ 1814.654673] binder: send failed reply for transaction 551, target dead [ 1814.661336] binder: send failed reply for transaction 554, target dead [ 1814.668326] binder: send failed reply for transaction 555, target dead [ 1814.675256] binder: send failed reply for transaction 558, target dead [ 1814.681926] binder: send failed reply for transaction 559, target dead [ 1814.703213] binder: send failed reply for transaction 562, target dead [ 1814.709907] binder: send failed reply for transaction 565, target dead [ 1814.733210] binder: send failed reply for transaction 568, target dead [ 1814.739983] binder: send failed reply for transaction 571, target dead [ 1814.763205] binder: send failed reply for transaction 574, target dead [ 1814.769892] binder: send failed reply for transaction 579, target dead [ 1814.793214] binder: send failed reply for transaction 577, target dead [ 1814.799907] binder: send failed reply for transaction 585, target dead [ 1814.813199] binder: send failed reply for transaction 588, target dead [ 1814.819894] binder: send failed reply for transaction 593, target dead [ 1814.843193] binder: send failed reply for transaction 597, target dead [ 1814.849965] binder: send failed reply for transaction 601, target dead [ 1814.873227] binder: send failed reply for transaction 604, target dead [ 1814.880669] binder: send failed reply for transaction 609, target dead [ 1814.903208] binder: send failed reply for transaction 607, target dead [ 1814.910424] binder: send failed reply for transaction 616, target dead [ 1814.933205] binder: send failed reply for transaction 619, target dead [ 1814.939904] binder: send failed reply for transaction 623, target dead [ 1814.946834] binder: send failed reply for transaction 626, target dead [ 1814.953739] binder: send failed reply for transaction 630, target dead [ 1814.960422] binder: send failed reply for transaction 633, target dead [ 1814.967417] binder: send failed reply for transaction 637, target dead [ 1814.974278] binder: send failed reply for transaction 640, target dead [ 1814.981023] binder: send failed reply for transaction 643, target dead [ 1814.988035] binder: send failed reply for transaction 646, target dead [ 1814.994914] binder: send failed reply for transaction 652, target dead [ 1815.001664] binder: send failed reply for transaction 655, target dead [ 1815.008590] binder: send failed reply for transaction 658, target dead [ 1815.023189] binder: send failed reply for transaction 661, target dead [ 1815.029884] binder: send failed reply for transaction 669, target dead [ 1815.053194] binder: send failed reply for transaction 673, target dead [ 1815.059888] binder: send failed reply for transaction 677, target dead [ 1815.083195] binder: send failed reply for transaction 680, target dead [ 1815.089871] binder: send failed reply for transaction 683, target dead [ 1815.103189] binder: send failed reply for transaction 686, target dead [ 1815.109947] binder: send failed reply for transaction 689, target dead [ 1815.133187] binder: send failed reply for transaction 692, target dead [ 1815.139864] binder: send failed reply for transaction 695, target dead [ 1815.163205] binder: send failed reply for transaction 698, target dead [ 1815.169900] binder: send failed reply for transaction 701, target dead [ 1815.183194] binder: send failed reply for transaction 704, target dead [ 1815.189875] binder: send failed reply for transaction 707, target dead [ 1815.213195] binder: send failed reply for transaction 710, target dead [ 1815.219906] binder: send failed reply for transaction 713, target dead [ 1815.243199] binder: send failed reply for transaction 716, target dead [ 1815.249883] binder: send failed reply for transaction 719, target dead [ 1815.263194] binder: send failed reply for transaction 722, target dead [ 1815.269872] binder: send failed reply for transaction 725, target dead [ 1815.293196] binder: send failed reply for transaction 729, target dead [ 1815.299887] binder: send failed reply for transaction 732, target dead [ 1815.323196] binder: send failed reply for transaction 735, target dead [ 1815.329880] binder: send failed reply for transaction 738, target dead [ 1815.343268] binder: send failed reply for transaction 741, target dead [ 1815.350036] binder: send failed reply for transaction 744, target dead [ 1815.357000] binder: send failed reply for transaction 747, target dead [ 1815.363961] binder: send failed reply for transaction 750, target dead [ 1815.370621] binder: send failed reply for transaction 755, target dead [ 1815.377534] binder: send failed reply for transaction 760, target dead [ 1815.384594] binder: send failed reply for transaction 763, target dead [ 1815.391259] binder: send failed reply for transaction 766, target dead [ 1815.398160] binder: send failed reply for transaction 769, target dead [ 1815.405333] binder: send failed reply for transaction 774, target dead [ 1815.412005] binder: send failed reply for transaction 778, target dead [ 1815.418955] binder: send failed reply for transaction 781, target dead [ 1815.425826] binder: send failed reply for transaction 784, target dead [ 1815.432496] binder: send failed reply for transaction 787, target dead [ 1815.439396] binder: send failed reply for transaction 790, target dead [ 1815.446257] binder: send failed reply for transaction 791, target dead [ 1815.452932] binder: send failed reply for transaction 796, target dead [ 1815.459820] binder: send failed reply for transaction 799, target dead [ 1815.473189] binder: send failed reply for transaction 802, target dead [ 1815.479857] binder: send failed reply for transaction 805, target dead [ 1815.503189] binder: send failed reply for transaction 808, target dead [ 1815.509865] binder: send failed reply for transaction 811, target dead [ 1815.523187] binder: send failed reply for transaction 814, target dead [ 1815.529860] binder: send failed reply for transaction 817, target dead [ 1815.553190] binder: send failed reply for transaction 820, target dead [ 1815.559871] binder: send failed reply for transaction 823, target dead [ 1815.583189] binder: send failed reply for transaction 827, target dead [ 1815.589864] binder: send failed reply for transaction 826, target dead [ 1815.613190] binder: send failed reply for transaction 833, target dead [ 1815.619870] binder: send failed reply for transaction 836, target dead [ 1815.633214] binder: send failed reply for transaction 839, target dead [ 1815.639905] binder: send failed reply for transaction 842, target dead [ 1815.663203] binder: send failed reply for transaction 845, target dead [ 1815.669906] binder: send failed reply for transaction 848, target dead [ 1815.676867] binder: send failed reply for transaction 852, target dead [ 1815.683733] binder: send failed reply for transaction 856, target dead [ 1815.690392] binder: send failed reply for transaction 851, target dead [ 1815.697279] binder: send failed reply for transaction 860, target dead [ 1815.704230] binder: send failed reply for transaction 863, target dead [ 1815.711582] binder: send failed reply for transaction 867, target dead [ 1815.718492] binder: send failed reply for transaction 874, target dead [ 1815.725349] binder: send failed reply for transaction 877, target dead [ 1815.732017] binder: send failed reply for transaction 880, target dead [ 1815.738928] binder: send failed reply for transaction 883, target dead [ 1815.745807] binder: send failed reply for transaction 886, target dead [ 1815.752594] binder: send failed reply for transaction 889, target dead [ 1815.759528] binder: send failed reply for transaction 892, target dead [ 1815.766513] binder: send failed reply for transaction 895, target dead [ 1815.773410] binder: send failed reply for transaction 898, target dead [ 1815.780946] binder: send failed reply for transaction 901, target dead [ 1815.788998] binder: send failed reply for transaction 904, target dead [ 1815.813192] binder: send failed reply for transaction 907, target dead [ 1815.819892] binder: send failed reply for transaction 910, target dead [ 1815.826906] binder: send failed reply for transaction 914, target dead [ 1815.843199] binder: send failed reply for transaction 918, target dead [ 1815.849872] binder: send failed reply for transaction 921, target dead [ 1815.873201] binder: send failed reply for transaction 924, target dead [ 1815.879918] binder: send failed reply for transaction 927, target dead [ 1815.903225] binder: send failed reply for transaction 930, target dead [ 1815.912200] binder: send failed reply for transaction 933, target dead [ 1815.933210] binder: send failed reply for transaction 937, target dead [ 1815.939907] binder: send failed reply for transaction 936, target dead [ 1815.963221] binder: send failed reply for transaction 942, target dead [ 1815.970031] binder: send failed reply for transaction 945, target dead [ 1815.993215] binder: send failed reply for transaction 949, target dead [ 1815.999911] binder: send failed reply for transaction 955, target dead [ 1816.023195] binder: send failed reply for transaction 958, target dead [ 1816.030407] binder: send failed reply for transaction 961, target dead [ 1816.053193] binder: send failed reply for transaction 964, target dead [ 1816.059877] binder: send failed reply for transaction 967, target dead [ 1816.073190] binder: send failed reply for transaction 970, target dead [ 1816.079877] binder: send failed reply for transaction 973, target dead [ 1816.103190] binder: send failed reply for transaction 980, target dead [ 1816.109866] binder: send failed reply for transaction 983, target dead [ 1816.123213] binder: send failed reply for transaction 988, target dead [ 1816.129900] binder: send failed reply for transaction 991, target dead [ 1816.153195] binder: send failed reply for transaction 994, target dead [ 1816.159880] binder: send failed reply for transaction 997, target dead [ 1816.183199] binder: send failed reply for transaction 1000, target dead [ 1816.190361] binder: send failed reply for transaction 1003, target dead [ 1816.213197] binder: send failed reply for transaction 1006, target dead [ 1816.219981] binder: send failed reply for transaction 1009, target dead [ 1816.233197] binder: send failed reply for transaction 1012, target dead [ 1816.239961] binder: send failed reply for transaction 1015, target dead [ 1816.263192] binder: send failed reply for transaction 1018, target dead [ 1816.269978] binder: send failed reply for transaction 1021, target dead [ 1816.293190] binder: send failed reply for transaction 1024, target dead [ 1816.299967] binder: send failed reply for transaction 1027, target dead [ 1816.323189] binder: send failed reply for transaction 1030, target dead [ 1816.329960] binder: send failed reply for transaction 1033, target dead [ 1816.343193] binder: send failed reply for transaction 1036, target dead [ 1816.349952] binder: send failed reply for transaction 1039, target dead [ 1816.373192] binder: send failed reply for transaction 1042, target dead [ 1816.379970] binder: send failed reply for transaction 1045, target dead [ 1816.403189] binder: send failed reply for transaction 1048, target dead [ 1816.410219] binder: send failed reply for transaction 1052, target dead [ 1816.423195] binder: send failed reply for transaction 1055, target dead [ 1816.429953] binder: send failed reply for transaction 1060, target dead [ 1816.453193] binder: send failed reply for transaction 1063, target dead [ 1816.459982] binder: send failed reply for transaction 1069, target dead [ 1816.483194] binder: send failed reply for transaction 1074, target dead [ 1816.490055] binder: send failed reply for transaction 1079, target dead [ 1816.513211] binder: send failed reply for transaction 1083, target dead [ 1816.519979] binder: send failed reply for transaction 1087, target dead [ 1816.533193] binder: send failed reply for transaction 1091, target dead [ 1816.540041] binder: send failed reply for transaction 1095, target dead [ 1816.563194] binder: send failed reply for transaction 1098, target dead [ 1816.569958] binder: send failed reply for transaction 1099, target dead [ 1816.593191] binder: send failed reply for transaction 1102, target dead [ 1816.599955] binder: send failed reply for transaction 1103, target dead [ 1816.613271] binder: send failed reply for transaction 1105, target dead [ 1816.620035] binder: send failed reply for transaction 1106, target dead [ 1816.627328] binder: send failed reply for transaction 1104, target dead [ 1816.634646] binder: send failed reply for transaction 1109, target dead [ 1816.641407] binder: send failed reply for transaction 1110, target dead [ 1816.648419] binder: send failed reply for transaction 1111, target dead [ 1816.663193] binder: send failed reply for transaction 1112, target dead [ 1816.669952] binder: send failed reply for transaction 1115, target dead [ 1816.693188] binder: send failed reply for transaction 1116, target dead [ 1816.699947] binder: send failed reply for transaction 1120, target dead [ 1816.713212] binder: send failed reply for transaction 1123, target dead [ 1816.720067] binder: send failed reply for transaction 1131, target dead [ 1816.743199] binder: send failed reply for transaction 1133, target dead [ 1816.751467] binder: send failed reply for transaction 1140, target dead [ 1816.773190] binder: send failed reply for transaction 1143, target dead [ 1816.779951] binder: send failed reply for transaction 1150, target dead [ 1816.803187] binder: send failed reply for transaction 1153, target dead [ 1816.809952] binder: send failed reply for transaction 1163, target dead [ 1816.816960] binder: send failed reply for transaction 1166, target dead [ 1816.823913] binder: send failed reply for transaction 1170, target dead [ 1816.830660] binder: send failed reply for transaction 1177, target dead [ 1816.837616] binder: send failed reply for transaction 1175, target dead [ 1816.844601] binder: send failed reply for transaction 1182, target dead [ 1816.851371] binder: send failed reply for transaction 1185, target dead [ 1816.873198] binder: send failed reply for transaction 1189, target dead [ 1816.880493] binder: send failed reply for transaction 1193, target dead [ 1816.903222] binder: send failed reply for transaction 1196, target dead [ 1816.912207] binder: send failed reply for transaction 1205, target dead [ 1816.933212] binder: send failed reply for transaction 1208, target dead [ 1816.939988] binder: send failed reply for transaction 1217, target dead [ 1816.963196] binder: send failed reply for transaction 1223, target dead [ 1816.970081] binder: send failed reply for transaction 1226, target dead [ 1816.993195] binder: send failed reply for transaction 1231, target dead [ 1816.999958] binder: send failed reply for transaction 1235, target dead [ 1817.023194] binder: send failed reply for transaction 1238, target dead [ 1817.030062] binder: send failed reply for transaction 1244, target dead [ 1817.037572] binder: send failed reply for transaction 1247, target dead [ 1817.044577] binder: send failed reply for transaction 1257, target dead [ 1817.051488] binder: send failed reply for transaction 1263, target dead [ 1817.073196] binder: send failed reply for transaction 1262, target dead [ 1817.079974] binder: send failed reply for transaction 1271, target dead [ 1817.093190] binder: send failed reply for transaction 1277, target dead [ 1817.100035] binder: send failed reply for transaction 1282, target dead [ 1817.123193] binder: send failed reply for transaction 1287, target dead [ 1817.130250] binder: send failed reply for transaction 1291, target dead [ 1817.153196] binder: send failed reply for transaction 1296, target dead [ 1817.159987] binder: send failed reply for transaction 1304, target dead [ 1817.183195] binder: send failed reply for transaction 1301, target dead [ 1817.190047] binder: send failed reply for transaction 1311, target dead [ 1817.203197] binder: send failed reply for transaction 1314, target dead [ 1817.209982] binder: send failed reply for transaction 1319, target dead [ 1817.233190] binder: send failed reply for transaction 1322, target dead [ 1817.239958] binder: send failed reply for transaction 1328, target dead [ 1817.704944] binder: undelivered TRANSACTION_ERROR: 29201 INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes [ 2006.243427] INFO: task syz-executor.0:22396 blocked for more than 140 seconds. [ 2006.263189] Not tainted 4.9.155+ #27 [ 2006.267456] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2006.284127] syz-executor.0 D28264 22396 21356 0x80000002 [ 2006.289926] ffff8801a5f40000 ffff8801d2805280 ffff8801db721000 ffff8801c9c1df00 [ 2006.306890] ffff8801db721018 ffff8801b20e77f8 ffffffff82806806 65603b66d5033e0c [ 2006.333521] 0000000000000000 ffff8801a5f408b0 0000000000000006 ffff8801db7218f0 [ 2006.353194] Call Trace: [ 2006.355804] [] ? __schedule+0x656/0x1b50 [ 2006.361508] [] schedule+0x92/0x1c0 [ 2006.373197] [] schedule_preempt_disabled+0x13/0x20 [ 2006.379782] [] mutex_lock_nested+0x38d/0x920 [ 2006.403189] [] ? blkdev_put+0x2b/0x560 [ 2006.408753] [] ? mutex_trylock+0x3f0/0x3f0 [ 2006.423203] [] ? locks_remove_file+0x32f/0x430 [ 2006.429538] [] ? blkdev_put+0x560/0x560 [ 2006.453195] [] blkdev_put+0x2b/0x560 [ 2006.458750] [] ? blkdev_put+0x560/0x560 [ 2006.473197] [] blkdev_close+0x8b/0xb0 [ 2006.478744] [] __fput+0x274/0x720 [ 2006.484236] [] ____fput+0x16/0x20 [ 2006.489341] [] task_work_run+0x108/0x180 [ 2006.495299] [] do_exit+0x78b/0x2aa0 [ 2006.500582] [] ? perf_trace_lock_acquire+0x530/0x530 [ 2006.523193] [] ? HARDIRQ_verbose+0x10/0x10 [ 2006.529104] [] ? release_task+0x14a0/0x14a0 [ 2006.544114] [] ? get_signal+0x568/0x14d0 [ 2006.549840] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 2006.573194] [] ? dequeue_signal+0xc8/0x550 [ 2006.579113] [] ? check_preemption_disabled+0x3c/0x200 [ 2006.593195] [] ? check_preemption_disabled+0x3c/0x200 [ 2006.600471] [] do_group_exit+0x111/0x300 [ 2006.623191] [] get_signal+0x4fd/0x14d0 [ 2006.628829] [] do_signal+0x9c/0x1920 [ 2006.643196] [] ? perf_trace_lock_acquire+0x530/0x530 [ 2006.649960] [] ? setup_sigcontext+0x7d0/0x7d0 [ 2006.674118] [] ? __might_fault+0x114/0x1d0 [ 2006.680021] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 2006.703195] [] ? SyS_futex+0x25f/0x360 [ 2006.708751] [] ? do_futex+0x1a70/0x1a70 [ 2006.723201] [] ? exit_to_usermode_loop+0xcc/0x160 [ 2006.729814] [] exit_to_usermode_loop+0x11c/0x160 [ 2006.753205] [] do_syscall_64+0x3f7/0x570 [ 2006.759147] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 2006.766439] [ 2006.766439] Showing all locks held in the system: [ 2006.772846] 2 locks held by khungtaskd/24: [ 2006.777188] #0: (rcu_read_lock){......}, at: [] watchdog+0x11b/0xa40 [ 2006.787075] #1: (tasklist_lock){.+.?..}, at: [] debug_show_all_locks+0x7f/0x21f [ 2006.796857] 2 locks held by getty/2037: [ 2006.800927] #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x33/0x40 [ 2006.810864] #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x1fe/0x1820 [ 2006.820952] 1 lock held by syz-executor.0/22396: [ 2006.825716] #0: (&bdev->bd_mutex){+.+.+.}, at: [] blkdev_put+0x2b/0x560 [ 2006.834771] 2 locks held by syz-executor.0/22749: [ 2006.839775] #0: (loop_ctl_mutex/1){+.+.+.}, at: [] lo_ioctl+0x85/0x1a10 [ 2006.848965] #1: (&bdev->bd_mutex){+.+.+.}, at: [] blkdev_reread_part+0x1f/0x40 [ 2006.859003] 1 lock held by syz-executor.0/22767: [ 2006.863773] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10e/0xeb0 [ 2006.873828] 2 locks held by blkid/22748: [ 2006.877897] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_put+0xbb/0x840 [ 2006.888235] #1: (loop_ctl_mutex){+.+.+.}, at: [] lo_release+0x1e/0x190 [ 2006.899421] [ 2006.901038] ============================================= [ 2006.901038] [ 2006.910110] NMI backtrace for cpu 0 [ 2006.913776] CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.155+ #27 [ 2006.920347] ffff8801d9907cd0 ffffffff81b47871 0000000000000000 0000000000000000 [ 2006.928574] 0000000000000000 ffffffff81097301 00000000003ffea3 ffff8801d9907d08 [ 2006.938301] ffffffff81b52afc 0000000000000000 0000000000000000 0000000000000000 [ 2006.946812] Call Trace: [ 2006.949407] [] dump_stack+0xc1/0x120 [ 2006.955012] [] ? irq_force_complete_move+0x281/0x300 [ 2006.962027] [] nmi_cpu_backtrace.cold+0x47/0x87 [ 2006.968341] [] ? irq_force_complete_move+0x300/0x300 [ 2006.975093] [] nmi_trigger_cpumask_backtrace+0x124/0x155 [ 2006.982194] [] arch_trigger_cpumask_backtrace+0x14/0x20 [ 2006.989394] [] watchdog+0x5f7/0xa40 [ 2006.994709] [] ? watchdog+0x11b/0xa40 [ 2007.000151] [] ? reset_hung_task_detector+0x20/0x20 [ 2007.006812] [] kthread+0x278/0x310 [ 2007.011997] [] ? kthread_park+0xa0/0xa0 [ 2007.017621] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 2007.024367] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 2007.030697] [] ? finish_task_switch+0x1e5/0x660 [ 2007.037011] [] ? finish_task_switch+0x1b7/0x660 [ 2007.043495] [] ? __switch_to_asm+0x34/0x70 [ 2007.049369] [] ? __switch_to_asm+0x40/0x70 [ 2007.055247] [] ? __switch_to_asm+0x34/0x70 [ 2007.061147] [] ? kthread_park+0xa0/0xa0 [ 2007.066768] [] ? kthread_park+0xa0/0xa0 [ 2007.072386] [] ret_from_fork+0x5c/0x70 [ 2007.078242] Sending NMI from CPU 0 to CPUs 1: [ 2007.082816] NMI backtrace for cpu 1 [ 2007.086968] CPU: 1 PID: 19813 Comm: syz-executor.4 Not tainted 4.9.155+ #27 [ 2007.094397] task: ffff8801b2fa5f00 task.stack: ffff8801a3990000 [ 2007.100430] RIP: 0033:[<0000000000401594>] c [<0000000000401594>] 0x401594 [ 2007.108327] RSP: 002b:00007feb22ef2690 EFLAGS: 00000282 [ 2007.113842] RAX: 00000000a46d870b RBX: 000000000000000b RCX: 0000000000458079 [ 2007.121183] RDX: a24821001dbc0001 RSI: 00007feb22ef26c0 RDI: 000000000000000b [ 2007.129645] RBP: 0000000000000000 R08: 000000e8f67ef819 R09: 0000000000000000 [ 2007.139412] R10: 028fcd0000000100 R11: 0000000000000246 R12: 0000000000000000 [ 2007.146947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000400000003 [ 2007.154903] FS: 00007feb22ef3700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 [ 2007.163108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2007.169314] CR2: 00007f4f98d6f000 CR3: 00000001a83ae000 CR4: 00000000001606b0 [ 2007.176910] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2007.184340] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2007.194020] Kernel panic - not syncing: hung_task: blocked tasks [ 2007.200184] CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.155+ #27 [ 2007.206666] ffff8801d9907c68 ffffffff81b47871 ffff8801a5f40000 ffffffff82a79d00 [ 2007.214747] 00000000ffffffff 0000000000000000 00000000003ffea3 ffff8801d9907d48 [ 2007.222827] ffffffff813f746a 0000000041b58ab3 ffffffff82e35b4a ffffffff813f7291 [ 2007.231083] Call Trace: [ 2007.233670] [] dump_stack+0xc1/0x120 [ 2007.239028] [] panic+0x1d9/0x3bd [ 2007.244034] [] ? add_taint.cold+0x16/0x16 [ 2007.249932] [] ? irq_force_complete_move+0x300/0x300 [ 2007.256766] [] ? ___preempt_schedule+0x16/0x18 [ 2007.262993] [] ? nmi_trigger_cpumask_backtrace+0x135/0x155 [ 2007.270261] [] ? nmi_trigger_cpumask_backtrace+0x13f/0x155 [ 2007.277543] [] watchdog+0x608/0xa40 [ 2007.282842] [] ? watchdog+0x11b/0xa40 [ 2007.288283] [] ? reset_hung_task_detector+0x20/0x20 [ 2007.294947] [] kthread+0x278/0x310 [ 2007.300125] [] ? kthread_park+0xa0/0xa0 [ 2007.305755] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 2007.312506] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 2007.318819] [] ? finish_task_switch+0x1e5/0x660 [ 2007.325130] [] ? finish_task_switch+0x1b7/0x660 [ 2007.331439] [] ? __switch_to_asm+0x34/0x70 [ 2007.337336] [] ? __switch_to_asm+0x40/0x70 [ 2007.343210] [] ? __switch_to_asm+0x34/0x70 [ 2007.349187] [] ? kthread_park+0xa0/0xa0 [ 2007.354805] [] ? kthread_park+0xa0/0xa0 [ 2007.360418] [] ret_from_fork+0x5c/0x70 [ 2007.366355] Kernel Offset: disabled [ 2007.369977] Rebooting in 86400 seconds..