0000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 2177.252571] binder: 28225:28253 ioctl 40046207 0 returned -16 [ 2177.252808] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2177.252818] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2177.252837] binder: 28225:28253 transaction failed 29201/-28, size 24-8 line 3136 [ 2177.252948] binder: 28225:28253 unknown command 262144 [ 2177.252954] binder: 28225:28253 ioctl c0306201 200002c0 returned -22 [ 2177.253508] binder: 28225:28253 Release 1 refcount change on invalid ref 1 ret -22 [ 2177.343252] binder: BINDER_SET_CONTEXT_MGR already set [ 2177.343273] binder: 28240:28248 ioctl 40046207 0 returned -16 [ 2177.355596] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2177.355617] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2177.355809] binder: 28240:28248 transaction failed 29201/-28, size 24-8 line 3136 [ 2177.358348] binder: 28240:28248 unknown command 262144 [ 2177.358369] binder: 28240:28248 ioctl c0306201 200002c0 returned -22 [ 2177.358605] binder: 28240:28248 Release 1 refcount change on invalid ref 1 ret -22 [ 2177.390579] binder: 28240:28248 BC_ACQUIRE_DONE u0000000000000000 no match 03:54:05 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e000000"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:05 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2103001fc0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x100000000, 0x3, 0xa, 0x0, 0x0, [{r2, 0x0, 0xe1}, {r1, 0x0, 0xfffffffffffff2df}, {r2, 0x0, 0x8}, {r2, 0x0, 0x8}, {r1, 0x0, 0x3fe000000000000}, {r2}, {r2, 0x0, 0x8}, {r0, 0x0, 0x100000000}, {r2, 0x0, 0xfffffffffffff001}, {r0, 0x0, 0xfff}]}) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)) 03:54:05 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0xfffffffffffffffe) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{}, 'syz0\x00'}) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="6279057ed0f45b8e329db23beb5879f0ba14827e0d9adada88e05967aa6dfb312d6c219df74c68a68394a0f2717a32a0459e71b265f6306decab86a4563407b4ce41c6714cd06fa16e2fbc7371b41d0aeb8f0f3c2e01e0e0021642b879eadf4692482a631218db0e899508ab8d18752d347a1cbf433342d5a68cf3e1b8fedee485efc016264e387494e7e0b91d94109386a62b23aa4da656e6950702a5a90afe9b348c", 0xa3, 0x0) r2 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r2, r3) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x3) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7a2}]}, 0x28}}, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x4, @mcast1, 0x1}, 0x1c) 03:54:05 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:05 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:05 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:05 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000ff0700000000000008000000000000000300000000000000000000000000000000000000000000000000000000000000010000000500000049000000000000000500000000000000070000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000"]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f00000000c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f00000002c0)={0xc, 0x7}) [ 2177.934684] EXT4-fs warning (device sda1): ext4_group_add:1605: No reserved GDT blocks, can't resize 03:54:05 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getegid() setfsgid(r1) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) 03:54:05 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e000000"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:05 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 2178.017165] binder: BINDER_SET_CONTEXT_MGR already set [ 2178.049552] binder: 28279:28289 ioctl 40046207 0 returned -16 03:54:06 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 03:54:06 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x10001) clone(0x2103001fc0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)) [ 2178.071179] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2178.071188] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2178.071207] binder: 28279:28320 transaction failed 29201/-28, size 24-8 line 3136 [ 2178.071820] binder: 28279:28320 unknown command 262144 [ 2178.071829] binder: 28279:28320 ioctl c0306201 200002c0 returned -22 [ 2178.075450] EXT4-fs warning (device sda1): ext4_group_add:1605: No reserved GDT blocks, can't resize [ 2178.075815] binder: 28279:28320 Release 1 refcount change on invalid ref 1 ret -22 [ 2178.080063] binder: 28279:28320 BC_ACQUIRE_DONE u0000000000000000 no match [ 2178.085490] binder: BINDER_SET_CONTEXT_MGR already set [ 2178.085499] binder: 28288:28326 ioctl 40046207 0 returned -16 [ 2178.086963] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2178.086970] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2178.086990] binder: 28288:28326 transaction failed 29201/-28, size 24-8 line 3136 [ 2178.089226] binder: 28288:28326 unknown command 262144 [ 2178.089233] binder: 28288:28326 ioctl c0306201 200002c0 returned -22 [ 2178.089299] binder: 28288:28326 Release 1 refcount change on invalid ref 1 ret -22 [ 2178.097962] EXT4-fs warning (device sda1): ext4_group_add:1605: No reserved GDT blocks, can't resize [ 2178.158757] EXT4-fs warning (device sda1): ext4_group_add:1605: No reserved GDT blocks, can't resize 03:54:06 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e0000000400"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:06 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e000000"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:06 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x303000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001f8) clone(0x2103001fc0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0x50, &(0x7f00000000c0)}, 0x10) getcwd(&(0x7f0000000200)=""/169, 0xa9) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)) 03:54:06 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:06 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$void(r0, 0xc0045878) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) 03:54:06 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2103001fc0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)) [ 2178.778582] EXT4-fs warning (device sda1): ext4_group_add:1605: No reserved GDT blocks, can't resize 03:54:06 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) prctl$PR_GET_SECUREBITS(0x1b) 03:54:06 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e000000"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:06 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f000000dfaa)="5500000018007fbdb72d1cb2a4a280930a06000000a84308910000000900140003000500000000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) geteuid() preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r1, &(0x7f0000000480), 0x1fc, 0x300) 03:54:06 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:06 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/rfcomm\x00') r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x104, r3, 0xf02, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x44040) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) [ 2178.884998] binder: BINDER_SET_CONTEXT_MGR already set [ 2178.893888] binder: 28361:28388 ioctl 40046207 0 returned -16 [ 2178.901703] binder: BINDER_SET_CONTEXT_MGR already set [ 2178.906825] netlink: 17 bytes leftover after parsing attributes in process `syz-executor2'. [ 2178.908797] netlink: 17 bytes leftover after parsing attributes in process `syz-executor2'. [ 2178.925937] EXT4-fs warning (device sda1): ext4_group_add:1605: No reserved GDT blocks, can't resize [ 2178.966625] binder: 28361:28413 unknown command 262144 [ 2178.966633] binder: 28361:28413 ioctl c0306201 200002c0 returned -22 [ 2178.966863] binder: 28361:28413 Release 1 refcount change on invalid ref 1 ret -22 [ 2179.006105] binder: 28360:28421 unknown command 262144 [ 2179.006114] binder: 28360:28421 ioctl c0306201 200002c0 returned -22 [ 2179.006204] binder: 28360:28421 Release 1 refcount change on invalid ref 1 ret -22 [ 2179.010411] binder: 28360:28421 BC_ACQUIRE_DONE u0000000000000000 no match [ 2179.059899] binder: 28360:28364 ioctl 40046207 0 returned -16 [ 2179.060012] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2179.060020] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2179.060040] binder: 28361:28388 transaction failed 29201/-28, size 24-8 line 3136 [ 2179.060119] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2179.060127] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2179.060145] binder: 28360:28378 transaction failed 29201/-28, size 24-8 line 3136 03:54:07 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e0000000400"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:07 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:07 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2103001fc0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f00000000c0)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)) 03:54:07 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000000000000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000000c0)={0x15, 0xc5, &(0x7f0000000300)="f595fabcc8edcc9eb0f4e34cbc1ec13985e022dad72d088754ff23a24b50eeffb18df485e2c4e2ff291b8787075fe28af9eb5568a2e58477048107b6cd76fd91df4e03ece28d3d768de72acde1ec11e6b797119f64ce7423a84d4d976a376ecd29c1e839a59982426b4b88012213850a78b826ab3e7cfecc3388138e4b07f80777784414403dcd61a8dd425e321874b0e59f67ebae11eefe01a089c993d4704cf6ab368a340add48fee6d9010cb26df0cef0837ea6a6dfa512abda06f843c7a7f59134ed6f"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0x10}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x77, 0x0, 0x7, "3dea789f0bf192ea75b05e8b67069945", "a0b281528c0d03cbdf1e0ff7af162eb7abdb07a789220f2f96ce83e28d3682fce2b0275d66cb574d324df185cda85f7f3f2bb219f91a77d5d9af9d58c1ebf09acfab84d62283f445ad50b679295752b16ed34db7910aab42b0464c850c04edb80751"}, 0x77, 0x3) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r1, &(0x7f0000000480), 0x1fc, 0x300) 03:54:07 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:07 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e000000"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:07 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2103001fc0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)) write$P9_RXATTRCREATE(r1, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) 03:54:07 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) 03:54:07 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2103001fc0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)) 03:54:07 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e000000"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:07 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:07 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x9, 0x40000000000002, 0xd, 0x13, 0xb, 0x9, 0x2, 0x163, 0xffffffffffffffff}) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x1, r1, &(0x7f0000000080)="4194d3075f477614735ce1a0f7e803521a0912e64ad33cd29e6329b58660f2d13dcad62ac6b1703d3acb9cefa0ca1a61ba07683b8ad185e72b60f08470a284cdc2a1173635dbc464decd42724d846e03866c248c80", 0x55, 0x3, 0x0, 0x0, r0}, &(0x7f0000000140)) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) [ 2179.720362] binder: BINDER_SET_CONTEXT_MGR already set [ 2179.732435] binder: 28435:28474 ioctl 40046207 0 returned -16 [ 2179.736788] binder: 28433:28452 ioctl c0306201 0 returned -14 [ 2179.736964] binder: BINDER_SET_CONTEXT_MGR already set [ 2179.736991] binder: 28433:28452 ioctl 40046207 0 returned -16 [ 2179.739196] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2179.739217] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2179.741715] binder: 28433:28452 transaction failed 29201/-28, size 24-8 line 3136 [ 2179.748798] binder: 28433:28452 unknown command 262144 [ 2179.748818] binder: 28433:28452 ioctl c0306201 200002c0 returned -22 [ 2179.754139] binder: 28433:28452 Release 1 refcount change on invalid ref 1 ret -22 [ 2179.771633] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2179.771643] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2179.771663] binder: 28435:28486 transaction failed 29201/-28, size 24-8 line 3136 [ 2179.773025] binder: 28435:28486 unknown command 262144 [ 2179.773033] binder: 28435:28486 ioctl c0306201 200002c0 returned -22 [ 2179.773116] binder: 28435:28486 Release 1 refcount change on invalid ref 1 ret -22 [ 2179.803029] binder: 28433:28452 BC_ACQUIRE_DONE u0000000000000000 no match 03:54:08 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e0000000400"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:08 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x80140, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000001500)='trusted.overlay.origin\x00', &(0x7f00000015c0)='y\x00', 0x110, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2103001fc0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001280)=0x0) getresuid(&(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)=0x0) getresgid(&(0x7f0000001380), &(0x7f00000013c0)=0x0, &(0x7f0000001400)) sendmsg$unix(r1, &(0x7f00000014c0)={&(0x7f00000000c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000180)="5c9c3ee102bd9f4af53c231c4501c96896a1a653ccaa9722351421583268d2074986e2bc6530208f213e799d72d787730bea49e136fcae2eb8ff1440e26697705e0289792ff18445d559e393db23583dd9b06d2be4b81f9d13773a2953f8c4e2f4dbd7318101b0d9e413d031570822286b70491dc449d2a429ffcd567b124656e25863ea963ebd4642db022ba9038bcd4d095b0452", 0x95}, {&(0x7f0000000240)="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", 0x1000}], 0x2, &(0x7f0000001440)=[@rights={0x20, 0x1, 0x1, [r1, r3, r2, r3]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x18, 0x1, 0x1, [r2]}], 0x58, 0x4}, 0x4000004) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)) 03:54:08 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:08 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:08 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e000000"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:08 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f0000000000)=""/51, 0x33) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) 03:54:08 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)) 03:54:08 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000000000000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000000c0)={0x15, 0xc5, &(0x7f0000000300)="f595fabcc8edcc9eb0f4e34cbc1ec13985e022dad72d088754ff23a24b50eeffb18df485e2c4e2ff291b8787075fe28af9eb5568a2e58477048107b6cd76fd91df4e03ece28d3d768de72acde1ec11e6b797119f64ce7423a84d4d976a376ecd29c1e839a59982426b4b88012213850a78b826ab3e7cfecc3388138e4b07f80777784414403dcd61a8dd425e321874b0e59f67ebae11eefe01a089c993d4704cf6ab368a340add48fee6d9010cb26df0cef0837ea6a6dfa512abda06f843c7a7f59134ed6f"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0x10}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x77, 0x0, 0x7, "3dea789f0bf192ea75b05e8b67069945", "a0b281528c0d03cbdf1e0ff7af162eb7abdb07a789220f2f96ce83e28d3682fce2b0275d66cb574d324df185cda85f7f3f2bb219f91a77d5d9af9d58c1ebf09acfab84d62283f445ad50b679295752b16ed34db7910aab42b0464c850c04edb80751"}, 0x77, 0x3) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r1, &(0x7f0000000480), 0x1fc, 0x300) 03:54:08 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x2002}, {r0, 0x40}, {r0, 0x20}, {r0}, {r0, 0x20}, {r0, 0x2001}, {r0, 0x4000}, {r0, 0xa030}, {r0, 0x400}], 0x9, 0xffffffff80000001) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r1, &(0x7f0000001340), 0x0, 0x300) 03:54:08 executing program 0: r0 = gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000080)=""/95) ptrace$getsig(0x4202, r0, 0xcd, &(0x7f0000000100)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) gettid() ioprio_get$pid(0x1, r0) [ 2180.536229] binder: 28508:28517 ioctl c0306201 0 returned -14 [ 2180.569417] binder: BINDER_SET_CONTEXT_MGR already set 03:54:08 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2103001fc0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 03:54:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1fc, 0x300) [ 2180.569425] binder: 28515:28542 ioctl 40046207 0 returned -16 [ 2180.569658] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2180.569667] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2180.569687] binder: 28515:28542 transaction failed 29201/-28, size 24-8 line 3136 [ 2180.569792] binder: 28515:28542 unknown command 262144 [ 2180.569798] binder: 28515:28542 ioctl c0306201 200002c0 returned -22 [ 2180.569861] binder: 28515:28542 Release 1 refcount change on invalid ref 1 ret -22 [ 2180.587268] binder: BINDER_SET_CONTEXT_MGR already set [ 2180.587277] binder: 28508:28545 ioctl 40046207 0 returned -16 [ 2180.587499] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2180.587508] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2180.587528] binder: 28508:28545 transaction failed 29201/-28, size 24-8 line 3136 [ 2180.587713] binder: 28508:28545 unknown command 262144 [ 2180.587720] binder: 28508:28545 ioctl c0306201 200002c0 returned -22 [ 2180.587787] binder: 28508:28545 Release 1 refcount change on invalid ref 1 ret -22 [ 2180.589304] binder: 28508:28545 BC_ACQUIRE_DONE u0000000000000000 no match 03:54:09 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e000000040001"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:09 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000000000000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000000c0)={0x15, 0xc5, &(0x7f0000000300)="f595fabcc8edcc9eb0f4e34cbc1ec13985e022dad72d088754ff23a24b50eeffb18df485e2c4e2ff291b8787075fe28af9eb5568a2e58477048107b6cd76fd91df4e03ece28d3d768de72acde1ec11e6b797119f64ce7423a84d4d976a376ecd29c1e839a59982426b4b88012213850a78b826ab3e7cfecc3388138e4b07f80777784414403dcd61a8dd425e321874b0e59f67ebae11eefe01a089c993d4704cf6ab368a340add48fee6d9010cb26df0cef0837ea6a6dfa512abda06f843c7a7f59134ed6f"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0x10}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x77, 0x0, 0x7, "3dea789f0bf192ea75b05e8b67069945", "a0b281528c0d03cbdf1e0ff7af162eb7abdb07a789220f2f96ce83e28d3682fce2b0275d66cb574d324df185cda85f7f3f2bb219f91a77d5d9af9d58c1ebf09acfab84d62283f445ad50b679295752b16ed34db7910aab42b0464c850c04edb80751"}, 0x77, 0x3) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r1, &(0x7f0000000480), 0x1fc, 0x300) 03:54:09 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[]}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:09 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2103001fc0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)) stat(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() write$P9_RGETATTR(r1, &(0x7f0000000180)={0xa0, 0x19, 0x2, {0x80, {0x4, 0x4, 0x7}, 0x100, r2, r3, 0x3f, 0x8, 0x6, 0x1, 0x9, 0x6, 0x46, 0x9e, 0x58, 0x7, 0x3, 0x100000001, 0x1, 0x9, 0x80000000}}, 0xa0) 03:54:09 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x1) preadv(r1, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x84, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) 03:54:09 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:09 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000000000000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000000c0)={0x15, 0xc5, &(0x7f0000000300)="f595fabcc8edcc9eb0f4e34cbc1ec13985e022dad72d088754ff23a24b50eeffb18df485e2c4e2ff291b8787075fe28af9eb5568a2e58477048107b6cd76fd91df4e03ece28d3d768de72acde1ec11e6b797119f64ce7423a84d4d976a376ecd29c1e839a59982426b4b88012213850a78b826ab3e7cfecc3388138e4b07f80777784414403dcd61a8dd425e321874b0e59f67ebae11eefe01a089c993d4704cf6ab368a340add48fee6d9010cb26df0cef0837ea6a6dfa512abda06f843c7a7f59134ed6f"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0x10}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x77, 0x0, 0x7, "3dea789f0bf192ea75b05e8b67069945", "a0b281528c0d03cbdf1e0ff7af162eb7abdb07a789220f2f96ce83e28d3682fce2b0275d66cb574d324df185cda85f7f3f2bb219f91a77d5d9af9d58c1ebf09acfab84d62283f445ad50b679295752b16ed34db7910aab42b0464c850c04edb80751"}, 0x77, 0x3) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r1, &(0x7f0000000480), 0x1fc, 0x300) 03:54:09 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[]}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:09 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/139, 0x8b}], 0x2, &(0x7f0000000300)=""/88, 0x58}, 0x1) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) 03:54:09 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:09 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[]}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) [ 2181.380522] binder: 28575:28583 ioctl c0306201 0 returned -14 [ 2181.402509] binder: BINDER_SET_CONTEXT_MGR already set [ 2181.412472] binder: 28575:28583 ioctl 40046207 0 returned -16 03:54:09 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x80000000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) [ 2181.423280] binder: BINDER_SET_CONTEXT_MGR already set [ 2181.423288] binder: 28570:28612 ioctl 40046207 0 returned -16 [ 2181.424428] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2181.424436] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2181.424457] binder: 28570:28612 transaction failed 29201/-28, size 24-8 line 3136 [ 2181.424584] binder: 28570:28612 unknown command 262144 [ 2181.424591] binder: 28570:28612 ioctl c0306201 200002c0 returned -22 [ 2181.424658] binder: 28570:28612 Release 1 refcount change on invalid ref 1 ret -22 [ 2181.452275] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2181.452283] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2181.452302] binder: 28575:28620 transaction failed 29201/-28, size 24-8 line 3136 [ 2181.453745] binder: 28575:28620 unknown command 262144 [ 2181.453754] binder: 28575:28620 ioctl c0306201 200002c0 returned -22 [ 2181.453839] binder: 28575:28620 Release 1 refcount change on invalid ref 1 ret -22 [ 2181.457781] binder: 28575:28620 BC_ACQUIRE_DONE u0000000000000000 no match 03:54:10 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e000000040001"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:10 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x7271884c, 0x7ff}) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) 03:54:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x8, 0x100, 0x6, 0x20, 0x1, 0x6, 0x0, 0x1000}, &(0x7f0000000040)={0x400, 0xe4c, 0x40, 0xfff, 0x3ff, 0x0, 0xbc, 0xe5}, &(0x7f0000000080)={0x4, 0x5, 0xc27, 0x761, 0x4, 0x100000000, 0xffff, 0x4}, &(0x7f0000000240)={r1, r2+30000000}, &(0x7f0000000300)={&(0x7f0000000280)={0xfffffffffffffffa}, 0x8}) ptrace$cont(0x1f, r0, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r3, &(0x7f0000000480), 0x1fc, 0x0) 03:54:10 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[]}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:10 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:10 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:10 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x6, 0x8]) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x29, 0x70bd28, 0x3, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) 03:54:10 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r1, 0x20, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0xd1f9, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) getpeername$unix(r0, &(0x7f00000000c0), &(0x7f0000000180)=0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2103001fc0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, &(0x7f0000000300)="1dadcc603c080e8b82931e6344ddc2ba9f5f5667ed3d366c940995d3dfbca87e95d2dbb6f8db79e078c3c7634d5f2962d0", &(0x7f0000000340)=""/79}, 0x18) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)) 03:54:10 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)=""/148, 0x28}], 0x1, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40840) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) 03:54:10 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 2182.236593] binder: BINDER_SET_CONTEXT_MGR already set [ 2182.242061] binder: 28644:28663 ioctl 40046207 0 returned -16 [ 2182.242646] EXT4-fs warning: 14 callbacks suppressed 03:54:10 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)=""/148, 0x28}], 0x1, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40840) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) [ 2182.242652] EXT4-fs warning (device sda1): ext4_group_add:1605: No reserved GDT blocks, can't resize [ 2182.260656] binder: BINDER_SET_CONTEXT_MGR already set [ 2182.260678] binder: 28647:28668 ioctl 40046207 0 returned -16 03:54:10 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x800, 0x8, 0x101, 0x1000, 0x0, 0x44c, 0xbc73e9f3b63db40e, 0xa, 0x8, 0x1, 0x2a4, 0x9, 0x690, 0x1000, 0x8, 0x9, 0xf3a3, 0x37f5a9fc, 0xfffffffffffff735, 0x3, 0x6, 0x3, 0x3, 0x9, 0x9, 0x9, 0x80000000, 0x2, 0x505, 0x7, 0xffb, 0x7fff, 0x0, 0x100, 0x3, 0x4, 0x0, 0x0, 0x4, @perf_config_ext={0x401, 0xda}, 0x80, 0x2, 0x401, 0x1, 0x0, 0x1000, 0x127}, 0x0, 0x7, r1, 0xfe2ead1737352be2) [ 2182.262711] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2182.262733] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2182.263006] binder: 28647:28668 transaction failed 29201/-28, size 24-8 line 3136 [ 2182.266072] binder: 28647:28668 unknown command 262144 [ 2182.266091] binder: 28647:28668 ioctl c0306201 200002c0 returned -22 [ 2182.266275] binder: 28647:28668 Release 1 refcount change on invalid ref 1 ret -22 [ 2182.291109] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2182.291117] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2182.291136] binder: 28644:28678 transaction failed 29201/-28, size 24-8 line 3136 [ 2182.292386] binder: 28644:28678 unknown command 262144 [ 2182.292393] binder: 28644:28678 ioctl c0306201 200002c0 returned -22 [ 2182.292473] binder: 28644:28678 Release 1 refcount change on invalid ref 1 ret -22 [ 2182.303115] binder: 28644:28678 BC_ACQUIRE_DONE u0000000000000000 no match 03:54:10 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e000000040001"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:10 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)=""/148, 0x28}], 0x1, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40840) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) [ 2182.992523] binder: BINDER_SET_CONTEXT_MGR already set [ 2182.997850] binder: 28700:28705 ioctl 40046207 0 returned -16 [ 2183.004441] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2183.012141] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2183.020918] binder: 28700:28705 transaction failed 29201/-28, size 24-8 line 3136 [ 2183.029323] binder: 28700:28705 unknown command 262144 [ 2183.034625] binder: 28700:28705 ioctl c0306201 200002c0 returned -22 [ 2183.041741] binder: 28700:28705 Release 1 refcount change on invalid ref 1 ret -22 03:54:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x8, 0x100, 0x6, 0x20, 0x1, 0x6, 0x0, 0x1000}, &(0x7f0000000040)={0x400, 0xe4c, 0x40, 0xfff, 0x3ff, 0x0, 0xbc, 0xe5}, &(0x7f0000000080)={0x4, 0x5, 0xc27, 0x761, 0x4, 0x100000000, 0xffff, 0x4}, &(0x7f0000000240)={r1, r2+30000000}, &(0x7f0000000300)={&(0x7f0000000280)={0xfffffffffffffffa}, 0x8}) ptrace$cont(0x1f, r0, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r3, &(0x7f0000000480), 0x1fc, 0x0) 03:54:13 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:13 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/23, 0x17}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) 03:54:13 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:13 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) r2 = signalfd(r0, &(0x7f0000000040)={0x1}, 0x8) ppoll(&(0x7f0000000080)=[{r0}, {r1, 0x20}, {r0, 0x8000}, {r0, 0x400}, {r0, 0x80}, {r0, 0x6000}, {r2}, {r0, 0x60}, {r1, 0x100}], 0x9, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140)={0xd4}, 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x18, 0x4) 03:54:13 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0x0) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:13 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000000)=""/186, &(0x7f00000000c0)=0xba) write$apparmor_exec(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="65948fc3edb5a67a97c30abb2d38844fde9bd1fc3d698dfe0ec6aff132392261a3765969bc52a2e5a2729cd1e6c9e79477c580876e11a4262500ac2e5d3ad93c72b3601b3e00f52974329362c9acddaba9e2d3e6f14869f9e644ef08a74a06000000564dad2e4a665e8b68a3c999b2ee8415e507277ffbb0c2600d3e1bdf"], 0x3b3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) 03:54:13 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000000)=""/186, &(0x7f00000000c0)=0xba) write$apparmor_exec(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="65948fc3edb5a67a97c30abb2d38844fde9bd1fc3d698dfe0ec6aff132392261a3765969bc52a2e5a2729cd1e6c9e79477c580876e11a4262500ac2e5d3ad93c72b3601b3e00f52974329362c9acddaba9e2d3e6f14869f9e644ef08a74a06000000564dad2e4a665e8b68a3c999b2ee8415e507277ffbb0c2600d3e1bdf"], 0x3b3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) 03:54:13 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x3, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, r0, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0x6, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x5, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x3731, 0x8001, 0xe, 0x7, 0x3, 0x9, 0x4, 0x4, 0x8d5, 0x5c9, 0x6, 0x2, 0x7fffffff, 0x5, 0x495, 0x7, 0x0, 0x2, 0x6, 0x1f, 0x7fff, 0xffffffffffffff7f, 0x1, 0x1, 0xffffffffffffd8d6, 0xb99a, 0x3e6d, 0x5, 0x7, 0x7, 0x8001, 0x0, 0xffffffff00000000, 0x2, @perf_config_ext={0x7d1ea76, 0x10001}, 0x100, 0x8, 0x0, 0x0, 0x400, 0x8000, 0x4}, r1, 0x8, r0, 0x8) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000080)) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) 03:54:13 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:13 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x1, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) read(r1, &(0x7f0000000040)=""/143, 0x8f) 03:54:13 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000000)=""/186, &(0x7f00000000c0)=0xba) write$apparmor_exec(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="65948fc3edb5a67a97c30abb2d38844fde9bd1fc3d698dfe0ec6aff132392261a3765969bc52a2e5a2729cd1e6c9e79477c580876e11a4262500ac2e5d3ad93c72b3601b3e00f52974329362c9acddaba9e2d3e6f14869f9e644ef08a74a06000000564dad2e4a665e8b68a3c999b2ee8415e507277ffbb0c2600d3e1bdf"], 0x3b3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) [ 2185.254919] binder: BINDER_SET_CONTEXT_MGR already set [ 2185.261600] binder: BINDER_SET_CONTEXT_MGR already set [ 2185.267981] binder: 28714:28739 ioctl 40046207 0 returned -16 [ 2185.305690] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2185.316651] binder: 28715:28733 ioctl 40046207 0 returned -16 [ 2185.324558] binder: 28714:28757 unknown command 262144 [ 2185.324567] binder: 28714:28757 ioctl c0306201 200002c0 returned -22 [ 2185.325684] binder: 28714:28757 Release 1 refcount change on invalid ref 1 ret -22 [ 2185.327865] binder: 28714:28757 BC_ACQUIRE_DONE u0000000000000000 no match [ 2185.374472] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2185.377410] binder: 28715:28756 unknown command 262144 [ 2185.377418] binder: 28715:28756 ioctl c0306201 200002c0 returned -22 [ 2185.377510] binder: 28715:28756 Release 1 refcount change on invalid ref 1 ret -22 [ 2185.404419] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2185.412163] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2185.421292] binder: 28714:28739 transaction failed 29201/-28, size 24-8 line 3136 [ 2185.429442] binder: 28715:28733 transaction failed 29201/-28, size 24-8 line 3136 03:54:16 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:16 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x2) 03:54:16 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:16 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x1, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) read(r1, &(0x7f0000000040)=""/143, 0x8f) 03:54:16 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:16 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0x0) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:16 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x1, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) read(r1, &(0x7f0000000040)=""/143, 0x8f) 03:54:16 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$KDDISABIO(r0, 0x4b37) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000040), 0x7747ebce9623c42f}, {&(0x7f0000000080)=""/240, 0xf0}, {&(0x7f0000000580)=""/168, 0x12b}, {&(0x7f0000000640)=""/155, 0xa7}, {&(0x7f00000002c0)=""/233, 0x301}], 0x5, 0x2fe) 03:54:16 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x4000000000001, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001f40)='/selinux/mls\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001fc0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x24, r2, 0xb04, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:16 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x1, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) read(r1, &(0x7f0000000040)=""/143, 0x8f) 03:54:16 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:16 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x400081, 0x0) lseek(r1, 0x0, 0x7) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='+(\xb6#%}:\x00', 0xffffffffffffff9c}, 0x10) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000000c0)=0x6) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:16 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socket(0x11, 0xe, 0x10000) timer_create(0x3, &(0x7f0000001140)={0x0, 0x21, 0x4, @thr={&(0x7f0000000080)="294b51306f95faa5b82c17b198204de3b177ba9ed2cf7be8dbe28e589ca53eb9b7fe8144b44ccd64ff15ae492bb09806ec7d33d7d423c9705d48aec05dcc6c84408b7f649b8ad668214c1ffcf1e7bcd2ab11933be02c54a37a1d239ff6ea767d752e9334188acd4d94b32925f0fb2b3b7a46a987fa557a2314be25d8465f3b562fec3141715dbf0ba82ca12ef59049ca83d88c48767509915127fc80150aaf8d4431205291", &(0x7f0000000140)="5cadcc3f679e69dd6e95ab29b9d207ad49d21d43fc6a7b68e93bb8135dbdf192f86031cf6f683cad424fc917867075ca3bf1b23d751b754f629dafdaaef0f2155a872efd2731ff7a9634bf4d415d1dc40bdf8f027a9bc3181143d746e697d9bbd0d979ad49aa15d76b704995b6615f49231712c78234adb7909f19ef089413cb8184545b6793732f0458f6c8cc247713f4811af39ec3cb03fe77af521f6dde67f445ddb2e92d9a54ae44210e766448afb0df9e413d1ff1d683c3535a97ee5f28cb8684f65e637fafa70b7662afc0a3997c2bd48ff92ef29d2ad409259a3756976228382f2be1d3691ba5fcda88efe77780e13b097260bdd194fb06c6cd6e879495d90947d9090a785467beddf6ca8310c80eafe8e6bd9284a8180362a20362e2450c649dcc07e24d161a8ed9253231747fcfffb4f7527d25eabf4399ede037afebcd380e4ad28dfe72ab5467e763d03c9bc98d14fcaa0aa959dea1254bd9778276f989360d62db9b16567aa8bac916c5deeb35bf20b57116042cc793418b0bd3021227914e169567ae3c43a1ceb932f734b00e453ab5b185ae1cc2bf2d4ba863c351a995046caafed4c8adb4a826f577b95c422f230dd2c39fff7590a3710900dcc79137628b02a34d3d61252913d63a0a5adf219b9c1c36ad29502aaf7c24a2ae2a7400409235df1b5eabdd4963a7b4e011e996fb976513f59b0997655f5709c3a0dd2df12e3368e32737e6f3211201b1b87900324f8780a7e89bd667c31818c3f2339fe411f90dcb529ffeb81d2676a16be5abfd075d1139475bff36e43dd9a021fdf444401d01fe7708ba0ff67289d6e84d4d19f960d12f93fee6c6ca472de96708f4b26687793f05075af75386c155933c86a188cbc4d7cf6ad766ac5b0f250fbaa4285d63b366cd444d04b65646c4b54f9cadc366f8045e16f191c1ce8d7f62ad3577393048ba6e69041c4a0fb44352532331c785bc42ac0e944b81e1c551330a8bd939e43d34e9952bf202ba2d18ee8e146b10439342672d6aba3ddf58be5fb647b40fcc218fa4f11c4f27901924c81e13c40b963456cab0ca4a27cb9cfabdc3d2c395ec145817aa80fbad0f07e862e11b4ce305b62c3682ced55249dd8836aed863b1ff2e8c1d4b4b960b5c944398822dced7af24e1d57739350fb5889eda9b108cd07179b73522e4ee1e5cbdbbdc2b6f550212b1fc043ed629978b0763e02f26562471b438ed71f4b14adb103b9950efb245ea2f914268aa5e5a36cccdba31098e83d5e1de65a88f099720dbdf25c3b2f7a6834d73aa67312e3b664114fcc3996e3ac2d9a359c5fe5562fd6a560d77aadf82e289275b93b5de94cd85adcc8960860c639b13bd54c95e6247bfb187f32b414b4fe96afb7cd6b7fed6bd3f3f7fdc2a0177f2d08608fc23ec351308cda4f0fc66957a3d52641e67f88a546ace5d22806e0a6afc047f58f1409f84f93cede7df95598b13cea84ef105aeebcf799944a74f8653f48d5cabe2ac8d543868574a7580e8ad57dc48fbc8bbae0bbfb798c2bf04b6cb828cb3c09ddcc49599877096a8f2e46615c1cd874446271f5d980a1c9e886bf5d933eb32f73b983cbfdce06176dea5199dd4c3d8b7c9629f026f383401ab52b682304020c784d1d737b3652e10ec940e293a65de744771c1fcdd1a08f214a782c57c647728a1c43d2a624add93cf0bf16ca13f8bc99d8fe6d15e012a1067fb228f2eb68b0865562219ea532ae852d13a6a7d94ba75b9716dcf6b2b1b89a4ffb5b7af49808d0d449a728fdb2ca091f97c50e7789abdf279b476b6021c292daf50e8a756816977accea6bef28ee9052b4d160b99cadad206f1b804c7c720c3d38d75a9fa9a51ac32c6da5e8d0554eae2c9ba21f816e8c1044cb3eeaf0c5a41a2775249f9972259d5d3d4ddca5dce55380d953357fee86879be535d5a332c94063d7ebf41c935534e0f823fb456ffa43f972b5c02c184411821736eb54413750d3136e91f5ae4145ea537849d070cb0cf338bf96a76307c0d6fb2d2c3f2ff82654b444c1e54fdd0042c9e274c6f0a04c6a38704528d0eb3a9271e5a88a002058444dedd96f0d5a4adca7f224db46ffb978d64f7d915e53f3124dc4af3e1adbe33b09f120d9e5196955192921e23c20cf2735f1ee178bcf34f599736284a66626a9dd615e5cdfcbb5ccfc2ed61e29e0cb7d6ac7c5d351636fc5a9b2f1e789b4ca03e0a6ad4f72c2292b778ab2f081270ad3d88f17fb29827697205593bb806ccdcb24fc21e1b021ed40d1958deac73f0bbdfc9b668618fadad40a132004accd9c03511148b483f87ec72fa404539c9861f1a0c260d33cee33f1d891c835ba585f733258807e46d12955189cbb92ac5fb22640d7ee4e81592201e5dd0475c0bc27b52bf3eba0753f411a7f722696be5e3e87b0d11d4629a24f062c5a844ebf875f9a0d772364ac9a7f06904ffbbff7fa71e2118a1b64db93844b03ab8574e5fc1b219bea518a09ab61769d7427804cd42cd5dea05f181e5c257912eac9b1037698fb7efc4960919813179bbe114bc1a7254d73f15a1af6b8ba12e2ec3177149992e46056307669a6c581645ee5a07cb6c860bbb9e2549b19e8f6123a4c7b9ac112664edd2720dbfddc1db01e186db4900492c99c75cdc0d7cd34bc31c7407d92240a4872038d1d83c7b54fe93c1e950f726d740abdf661b4579a576c10766fd9c1395c306c05edf00a91a7b1722d845884fb2551d9ef0a5715e493f39d8146b677274ae06150641eb66f4fc282d15b244d01185173ca26fccb26505525596ffec21663a4edb09b6e93473a179fe438f370d25fcda34bb8ce2c863d7b943cf748cd8540a38fc9a6218de7c34d7c063ff2ff53d13281c481ca726c93b9a347786338e11a90959ef52eaeff5b97b1ca615fe0d16bb4252a4bdc2a84fd3448216c19eb732b4d5057754185621507b78876de026933dde78eca5cb90356038cf07c5fe1c261ec83d76df46ef21f441c789c69e848683ce4a2f000f3759122a2ced3eb49d1f427f9558976a4b953824fe121390f9ec20e4554e08d59616841d0c5c35f135304214a20c88adfdf150a6ca1ad6aada9c8743b859854872af73b7cf28a4223b9e747338a10e7a7e78a11de54b0427463c2b1767a5b4ee2b0727fc73f9ee7379e226115f7c2a5c3faca54a8b1e1c1f062d8d4881a9ecf606be8f25d5a4c9876b32ae04bea1cd2133522f91e309ca97f1e6d3ef20112d82363b4c7c34cb267b82b57cce306f3c2e4f1eeba5061a5b6fae9b237d6cf414434cb59dfe66151c0e9ee489f18d1b4bad2bad4e8f4301bddfbfcfd46b22bfaf98c890daa8cad8481ffae438557f12a3bc346878d93d9d49935c062c104a223937d81ece9052fff35556744b19d764b03289f23a26e6465f938bdc34e32e00e439987958509647ac41d6fe4f284af0ba61ebdc05de24d7c8bcfcf1cf675e53ab170f2195185f772bfd0fc76ffa50783747247490fa921929ed4ed466d150461ee1c542941625bf6e45cbce5c63e940e13042299be8e5c3f1154ab98d06787ac1a302b66eadb089bb2fb4ca344da760aa961082d5b2fd1b2d1939c04f4cf464122c6b728b07a64f703c0b9fece9f661fc937732647a91e610f68c07ccb9709f3cef935470413b05067dd6e9e9fe8622dd49b6ee2f9c42f64d29349bbfbdad19fd13110366925eb78e9634ca08d00685d78d14fd679a0cc9073d5d0d0d559e9cbac9857003ac51c3d0d7a4051086ff9c0c292d9299ea3667fd006b12b69dbd952758815d37bd3da7e416c53fb13a5a83193a5be9f5d1d70428d3d414ddc715f0bb4b964c15d4e5ead6e5e31bb90cdd3e999b3904635da22515b0849395b92951886ea1369ebce7d1cdc60c9054fb2ae7b16a76fe66922838506731ebb2b2b1f1157847c646a8441bb426468cce2f120028bf95525d38c7873495cc3b0deda72ca91d458439a5dba23d68b7ae3488ee03de91a40c907153aa76b77836b7548eaa50289b9e2ed774805a89d9b3192b359bfc7c9b399ffc6057250cab63316ba87319e407461304410b7eb85be29f7d5e7a3b316641954a9b294f7f7c08ba29e234070dc961799b66324589f2dadb3dc4dbca09e8711509c7ad327f73c8837c7a13e059deca9000ff52769ce5f40444b909425306d0ed7abffa87a4e69aabd4f9091be2ca3592c0a9202322b80d695cdab8acf0b30f2652722f7d32ec0f2b032f177572b90794b65c957b6c24cfad6d1ed9831161dc5d8402466459a2417483fc0e214ae4cf4ffddad57a27658114fda26c5201544ca46b7f0dd8b11715f32c83be1838e12a6bbdaff385435d3b365d66df74cd92d57eccbe04908b3d1e7f84ce0de5a4d33922b531c1f04185d59aa09470db92513786149a6596a44366b991a5f73ffe3209e64f851b87dad7e0b1d8cc530a2967dcf8111f6e25b779aa2f94e171a6a6a3f2483b990b655a1f69f1b08adfc87e402ddb0b827629d291be934cdd01ca5e5e59b2510fcd2b09685cc70a9f585d97470d67d2f64d7bab38a4b1b15db71d54576c624c324d91bb6fef6bb159d19730e032cf9e8ab15d812fc56308f894823261b7bb781542072238fc952ba03c40a20452f2cb1d5a95e67edb6c6a024632056f98999a2ce65d2a99547bce0616497c33d9a0260103a84f3b424929ed5eb7e94e69218a5556f3bbccd122d16a1c59523c45870de2c5a309d7f3f55fafee4d16043092659e8cca9c1c9119aa6c7f775ba23acc4bed8128212d38884b92aae9225998dfcb2f4f8cdc301196cc91ceb7d4518f42aed7b9b15316e4cd580575714fada082d3b35cd6dc65ad321e97c0034bb234649be60fc3de91d6bd805bdb07631d6e04508cdc000385aae9c9e8da7d6697fd5513a834dad66c9ac86f7eb83c64dd5b11a8de7405d78dd722102b98e88395edb7fd7581cc0dc329184de561df60915acd36d1cf3a505b0b0227e3c29e6aa377c0822548c27aeabc79103f81951e6d9452f21d94f77adb821f2574459938d55c135895b38b44c5442875d822f913b1c59a4a462525605da59e23e1994f6bf874bc93bad389dfcbf7d552e8e08e125ad1fbe4a25d32c8d8846013393200aff262b594ac03e56dde911416b88eca5b2bf137a62068a88ea341352bb7e5ab3e6efe035fd90800a4f2243e198baa0699febc4cf1a15cfd0f8f4c4234377a4303252b6d40d843e813fae532012b7c65d684d5e9955dd65148b42b7752f0366e599aa3829fb6228043693f3b8fc027d9b06f7e4ddb2e300eb1b61d7294c388e2a441d66c3116032c7e81bd6c0381d23e8c76de295109dbdceb76b5d9a32daddf1f8d6d6650acfba1cc0fee57e029ad21fcc455c8cf5050512ad7b1c718689c18dc2cd466493f993f2f1f8c337ddc9199f1a537a946a5266efa3330f682476f52d945816424fba4a65525c0ad97b864ccb122b4ecd2d6c1f5c2db6022768e288293644c9c193f3844b0a345ef635a6b376f488bfce17b092d7ec1595f1b2d010afd34cc1839a9c9b7e4d0ec6a238a6fcff9a88f8959b5ccc4cc7614f5a936e4fc42de86ca2fb74566d40284abf12385904834b7910bcda2e005a5148f9f81a2d807115021d71785f87f803d7609fdd958c7f27a6fb2ee43ffb155000ccd5e78fb2a40b22d2494e08425958476780a35d88f44c3aa208eeddf922cb4db03c4841ef1c0da790f60ccba6dc23435347e3411fd8d92bef32cacfe2676f9b840baa613b9f9196871042a27bec5a02145d1a500f6383e"}}, &(0x7f0000001180)=0x0) r1 = creat(&(0x7f00000012c0)='./file0\x00', 0x1a) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000001300)={0x3, 0x22, 0x2}) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001200)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000001240)={{r2, r3+10000000}, {r4, r5+30000000}}, &(0x7f0000001280)) 03:54:16 executing program 2: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@in={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x80, 0x80000) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "1da285719c9e3919d2d594c75c312870103017bf"}, 0x15, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r1, &(0x7f0000000480), 0x1fc, 0x300) socketpair(0xa, 0x0, 0xfffffffffffffff9, &(0x7f0000000140)) 03:54:16 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 2188.245428] binder: BINDER_SET_CONTEXT_MGR already set [ 2188.254957] binder: 28768:28808 ioctl 40046207 0 returned -16 [ 2188.276635] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2188.283176] binder: BINDER_SET_CONTEXT_MGR already set 03:54:16 executing program 0: socketpair(0xf, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x26c, r1, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x348c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4291}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc00}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x698, @empty, 0x800}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000011) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) [ 2188.283183] binder: 28767:28816 ioctl 40046207 0 returned -16 [ 2188.326983] binder: 28768:28823 unknown command 262144 [ 2188.326990] binder: 28768:28823 ioctl c0306201 200002c0 returned -22 [ 2188.327059] binder: 28768:28823 Release 1 refcount change on invalid ref 1 ret -22 [ 2188.330921] binder: 28768:28823 BC_ACQUIRE_DONE u0000000000000000 no match [ 2188.332638] binder: 28767:28825 unknown command 262144 [ 2188.332645] binder: 28767:28825 ioctl c0306201 200002c0 returned -22 [ 2188.333050] binder: 28767:28825 Release 1 refcount change on invalid ref 1 ret -22 [ 2188.438222] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2188.447974] binder: 28768:28808 transaction failed 29201/-28, size 24-8 line 3136 [ 2188.450622] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2188.450629] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2188.450648] binder: 28767:28816 transaction failed 29201/-28, size 24-8 line 3136 03:54:16 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:16 executing program 5: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@in={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x80, 0x80000) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "1da285719c9e3919d2d594c75c312870103017bf"}, 0x15, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r1, &(0x7f0000000480), 0x1fc, 0x300) socketpair(0xa, 0x0, 0xfffffffffffffff9, &(0x7f0000000140)) 03:54:16 executing program 0: r0 = inotify_init1(0x800) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0xfffffffffffffffe, 0x0, 0x6, 0xcb, 0x6, [{0x1, 0x9, 0x5}, {0x7, 0x200, 0x80000001}, {0x80000001, 0x8, 0x2, 0x0, 0x0, 0x2400}, {0x3, 0xfffffffffffff001, 0x7ff, 0x0, 0x0, 0x1403}, {0x6, 0x1, 0x8, 0x0, 0x0, 0x80}, {0xfffffffffffffffa, 0x1000, 0x4, 0x0, 0x0, 0x2201}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) setreuid(r1, r1) ioprio_set$uid(0x3, r1, 0x0) 03:54:16 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x28002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x41e76fa6) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000404}, 0xc, &(0x7f00000006c0)={&(0x7f00000013c0)=@deltfilter={0x663c, 0x2d, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, r2, {0x7, 0xa}, {0xffe1, 0x7}, {0xf, 0x1f}}, [@TCA_RATE={0x8, 0x5, {0x5}}, @TCA_RATE={0x8, 0x5, {0x1, 0x400}}, @TCA_CHAIN={0x8, 0xb, 0x7f}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x88, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @mcast2}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="1c026f17f5e99b7d50e88e740842f865"}, @TCA_RSVP_SRC={0x14, 0x3, @mcast1}, @TCA_RSVP_POLICE={0x40, 0x5, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fff, 0x20000003, 0x100000000, 0x3, 0x2, {0x8001, 0x3, 0xfffffffffffffffd, 0xd0, 0x693, 0x8}, {0x3, 0x2, 0x175, 0x401, 0x373, 0x7fff}, 0x1, 0xf8, 0x800}}}]}}, @filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x5f60, 0x2, [@TCA_BASIC_ACT={0xbc, 0x3, @m_sample={0xb8, 0x0, {{0xc, 0x1, 'sample\x00'}, {0x4c, 0x2, [@TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x34}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x101, 0xffffffffffffffff, 0x1b, 0x40}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}]}, {0x58, 0x6, "0e21151c87d7585bbbe85e84695d8ab2e47139cc3869cb096870afd56b2cc4325357d8d718bdb482258dddee83717a4ee76e0386651fb1915cf27bdc7ede60a9000dcf15cacd65873ebf21708e43cd4fa38cf14e"}}}}, @TCA_BASIC_ACT={0x5a08, 0x3, @m_pedit={0x5a04, 0x6, {{0xc, 0x1, 'pedit\x00'}, {0x59c4, 0x2, [@TCA_PEDIT_PARMS_EX={0xf10, 0x4, {{{0x5, 0xfffffffffffffbff, 0x20000003, 0xffff, 0x5}, 0x2, 0x52d, [{0xfffffffffffffffe, 0xcb0, 0x9, 0x10001, 0xffffffffffffffcb, 0x2}, {0x2, 0x7, 0x7a6, 0x3, 0x1aa, 0x80}, {0x591a, 0x40, 0xffffffffffffffff, 0xf9, 0x2, 0x800}, {0x1, 0xe32, 0x7, 0x10001, 0x3f, 0x8001}, {0x83cb, 0x7f, 0xa6e1, 0x6d, 0x101, 0x2}, {0x9, 0x7fffffff, 0x6, 0xc000000000, 0x0, 0xffff}, {0x6, 0x4, 0x5, 0x2b82, 0x4, 0x4}, {0x8, 0x4, 0x1, 0x28, 0x631, 0x6}, {0x400, 0xfffffffffffffff9, 0x0, 0x1, 0x37, 0x40}, {0xa594, 0x10000000000, 0xb47, 0x8ab, 0x4, 0x10000}]}, [{0x7ff, 0x5, 0x401, 0x7, 0x7ff, 0x10000}, {0x1, 0x80000000, 0x9, 0xcf, 0xfffffffffffffffe, 0x200}, {0x100, 0x100000001, 0x7e, 0xfa, 0x3, 0x8}, {0x9, 0x5, 0x10000, 0x80, 0x2, 0xfffffffffffffe00}, {0x800, 0xb6c4, 0x3, 0x6, 0x9}, {0x3, 0xca1, 0x61, 0x1000, 0x9, 0x8}, {0x9, 0x0, 0x0, 0x7fff, 0x6c}, {0x1, 0x3, 0xfffffffffffffeff, 0xc6f, 0x5, 0x5}, {0x8, 0x3, 0x7d, 0x4ae3, 0x1, 0x8}, {0x6, 0x6e5, 0xfffffffffffffffe, 0xffffffff, 0x8, 0x9f0}, {0x7fffffff, 0xff, 0x8001, 0xfb8, 0x4, 0x3}, {0xe75b, 0x621e, 0x7fff, 0x2, 0xf35, 0xfffffffffffffff9}, {0x7, 0x0, 0x8, 0x6, 0x7f, 0xffffffffffffff24}, {0x3, 0x47ba, 0x2, 0x4, 0x2, 0x30ff}, {0x4f, 0x12000000000000, 0x2, 0x1f, 0xffffffffffffff81}, {0xe112, 0x1, 0x9, 0x7, 0x3}, {0x9, 0x9, 0x100000000, 0x6, 0x30f3, 0x6}, {0xf6, 0xce, 0x1, 0x1000, 0x87, 0x40}, {0x7fff, 0x5, 0x1f, 0x4, 0x20, 0x3f}, {0x7fff, 0x80, 0x9a5, 0x8, 0x1000, 0x1000}, {0x1000, 0x3, 0x58, 0x3, 0x7, 0x8}, {0x5, 0x7fffffff, 0x62, 0x42e, 0x5, 0x8}, {0x80, 0x80, 0x200, 0x7, 0x3f, 0x2}, {0x6, 0x1, 0x9, 0x7, 0x6, 0x8}, {0x0, 0xffff, 0xfffffffffffff440, 0x4, 0xdf7, 0xa7b5}, {0x100000001, 0x40, 0x5, 0x3ff, 0x1, 0x4}, {0x80000001, 0x8001, 0x0, 0x49, 0x3882, 0xb1e6}, {0x8, 0x6411, 0x0, 0x8, 0x3, 0x9}, {0x6, 0x0, 0x8, 0x0, 0x2, 0x81}, {0x4, 0x1, 0x6, 0x0, 0x1fe00000000000, 0x4}, {0x7f3, 0x1, 0xfff, 0x5, 0x80, 0x7}, {0x400, 0x0, 0x0, 0x1, 0xe94e, 0x5}, {0x5, 0x1, 0x100, 0xcc, 0x4, 0x5}, {0x0, 0x7, 0x3, 0xff, 0x6, 0x939}, {0x100, 0x6, 0x6, 0x100000001, 0xb6, 0x3}, {0x7, 0x3, 0xae, 0xfff, 0x9, 0x7216}, {0x9, 0x2000000000000000, 0x4, 0x7fffffff, 0x0, 0x8}, {0x2, 0xe48f, 0x81, 0x2, 0x7, 0x5}, {0x9, 0x80, 0x7f, 0x4, 0x2, 0x20}, {0x2, 0x100000000, 0x80000001, 0x764, 0x3, 0x4}, {0x431d, 0x4, 0x7, 0x9, 0x80, 0xcf}, {0x0, 0x80000000, 0x6, 0x9, 0x400, 0x4}, {0x7, 0x7, 0x3, 0x7, 0x4, 0x10000}, {0x4, 0x2, 0x9, 0x3, 0x9000000, 0x200}, {0x7, 0x9, 0x5, 0x6, 0x400, 0x7590}, {0x0, 0xfffffffffffffffb, 0xbf2a, 0x7, 0x5, 0x1}, {0x1, 0x7ff, 0x0, 0x1, 0x3, 0x7}, {0x5, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x5}, {0x100000000, 0x2, 0x6, 0x8000, 0x101, 0x1}, {0xffffffffffffffe1, 0x8, 0x1ff, 0x0, 0x800, 0xfff}, {0x3, 0x7fffffff, 0x101, 0xfffffffffffffff8, 0x3679, 0xfa62}, {0x4, 0x9, 0x100, 0x400, 0x1ff, 0x7}, {0x7, 0x7, 0x3, 0xfffffffffffffff9, 0x3, 0x101}, {0x2, 0x0, 0xc08, 0x9, 0x6, 0x1}, {0x8f5e, 0x10001, 0x2ad, 0x6, 0x4, 0x8001}, {0x1, 0x3, 0x3, 0x0, 0x7fffffff, 0x60}, {0x7, 0x5bc3709d, 0x4, 0x6, 0x7, 0x7}, {0x2, 0x3, 0x3, 0x1, 0x2bf, 0x6}, {0x5, 0xff, 0xffffffffffffffe0, 0x0, 0xcd, 0x6}, {0x8, 0x8, 0xffffffff, 0x4, 0x1, 0x5}, {0xfff, 0x9, 0x5, 0x12000000000000, 0x20}, {0x1f, 0x9, 0x5, 0x6, 0x1, 0x400}, {0x101, 0x35fd, 0x3ff, 0x1, 0x5, 0xfffffffffffffffa}, {0x4, 0xf800000000000000, 0x6, 0x101, 0x3, 0x80000000}, {0x1000, 0x80000001, 0x8, 0x81, 0xfff, 0x8713}, {0x8, 0x10000, 0xe01, 0x6, 0x8, 0x99a}, {0x994, 0x9, 0x15, 0x3, 0x6, 0x903f}, {0x81, 0x7f, 0x2, 0x1, 0x7}, {0x100000001, 0x7, 0x5b, 0x0, 0x5, 0x1}, {0x100000000, 0x8, 0x3, 0x100000000, 0x65, 0x4}, {0x2, 0x0, 0xe03a, 0x5, 0x58, 0x101}, {0xff, 0x7, 0x2, 0x5, 0x6, 0x2}, {0x20, 0x6, 0x0, 0x2, 0x1ff, 0x80000001}, {0x800000000000, 0x0, 0x6, 0x800, 0x0, 0x2}, {0x3f, 0x5, 0x40, 0x40, 0x2bad, 0x8}, {0x7f, 0x4, 0x401, 0x0, 0x100, 0x2}, {0x3d6, 0xfff, 0x6, 0x80000000, 0x150, 0x7fff}, {0x80, 0xcb0, 0x4, 0x0, 0x4f35, 0x9}, {0x80000001, 0x4, 0x1, 0xca, 0x2, 0xff}, {0x0, 0xffffffffffffff01, 0x44, 0x9, 0x2, 0x7}, {0x6, 0x7, 0x81, 0xcf1, 0x8, 0x5}, {0x4e, 0xac9, 0x5, 0x2, 0x7, 0x1}, {0xffffffffffffff8f, 0x4, 0x3, 0x261, 0x9f, 0x6}, {0x3, 0x80, 0x49, 0x80, 0x10000, 0x8d1}, {0x4, 0x7f, 0x100, 0xd3, 0x65d46340, 0x638}, {0x27, 0x9, 0x2, 0x5, 0x5, 0x6}, {0x0, 0x80000001, 0x62e4b22f, 0x8, 0x7fffffff, 0x998}, {0x7, 0xdf75, 0x6, 0xfd, 0x8, 0x4}, {0x9, 0x6, 0x100, 0x0, 0x4, 0x7}, {0x9, 0xc77c, 0x0, 0x0, 0xff, 0x7e}, {0x81, 0x7, 0x7f, 0x6, 0x1, 0x3723}, {0x2, 0x2, 0x3, 0x7, 0x10000, 0x2}, {0x4, 0x2, 0x101, 0x8, 0x0, 0x9}, {0x9, 0x4a, 0x2, 0x2, 0xffff, 0x7}, {0x800, 0xffff, 0xc9d, 0x597, 0xf0, 0x6}, {0x1, 0xf9, 0x2, 0x1000, 0x0, 0x3}, {0x3, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x9}, {0x0, 0x37f, 0xfffffffffffffffb, 0x1, 0x40, 0x7}, {0x5, 0x8, 0x7, 0x80000000, 0x7, 0x5}, {0x9, 0x7689e490, 0x0, 0xff, 0x9, 0x8000}, {0xffffffffffffffe9, 0x9, 0x7, 0x8, 0x3, 0x4}, {0x1, 0x2, 0x400, 0x0, 0xa8, 0x7fff}, {0x4, 0x8000, 0x7, 0x3, 0x4, 0x17}, {0x1000000, 0x80, 0xfa31, 0x7, 0x8, 0x3}, {0xfffffffffffff001, 0x8, 0xfff, 0x80000001, 0x7e5710a, 0x3}, {0x1, 0x101, 0xe5, 0xe9, 0x7, 0xffffffffffffffff}, {0x11b, 0x9, 0x6, 0x9, 0x7, 0x80000001}, {0x2, 0x2, 0xfffffffffffffffb, 0x2, 0xfffffffffffffffb, 0x8}, {0x80000000, 0x4, 0xfdd, 0x100000001, 0x7f, 0x8c}, {0x1, 0x5, 0x6, 0x1ff, 0xfffffffffffffffb, 0x4}, {0x5, 0xb4a9, 0x401, 0x580, 0x20, 0x10000}, {0x1ff, 0x10001, 0x3, 0x4, 0x4, 0x1}, {0x401, 0x9d, 0x1, 0x7f, 0x7, 0x3}, {0x417, 0xfffffffffffffffb, 0x1000, 0x101, 0x6, 0x6}, {0x7fff, 0x20, 0x1f, 0xff, 0x100000001, 0x43c7698c}, {0x3, 0x3, 0x100000001, 0xffffffffffffffc2, 0x6, 0x3}, {0x6, 0x0, 0x1, 0x20, 0x3bb01dc4, 0x5}, {0x6, 0x3, 0x9, 0x8000, 0xfffffffffffffffd, 0x7ff}, {0x3, 0x7fff, 0x100, 0xac1, 0xffffffffe942f660, 0x9}, {0x6, 0x100000001, 0x1, 0x5, 0x10000, 0x81}, {0x1000, 0x1, 0x40, 0x401, 0x1, 0x3}, {0x1, 0x5, 0x1f, 0x1ff, 0x8, 0x7}, {0x40, 0x229d, 0x60, 0x1, 0x3ff, 0xacf9}, {0x400000000000, 0x3ff, 0x7fff, 0x0, 0x5, 0x100000001}, {0x9, 0x20, 0x1, 0x0, 0x7, 0xffffffff}, {0x7f, 0x7fffffff, 0x1ff, 0x5, 0x81, 0x5}, {0x1, 0x9, 0x9, 0x800, 0x1791, 0x400}, {0x8, 0xd7, 0x100000000, 0x567, 0x5, 0x10001}], [{0x0, 0x1}, {0x7}, {0x7}, {0x5, 0xa97b01bd35b3b40d}, {0x1, 0x1}, {0x5}, {0x7, 0x1}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x7, 0x1}, {0x5}, {0x5}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x7}, {0x2}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7}, {0x2, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x7}, {0x2}, {0x1, 0x1}, {0x7}, {0x0, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x7}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x7}, {0x5}, {0x7}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x7}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x1}]}}, @TCA_PEDIT_PARMS={0xef8, 0x2, {{{0x3f, 0x80, 0x5, 0x100, 0x5}, 0x7, 0x7, [{0xffff, 0x8, 0x9, 0x200, 0x6, 0x1}, {0xffffffff, 0x2500000000, 0x7ff, 0xffff, 0x34f, 0x5}, {0x6, 0xd48, 0xc89, 0xd97f, 0x4, 0x31}, {0x5, 0xfff, 0x0, 0x5, 0x7, 0x4}, {0x401, 0x0, 0x3ff, 0x2, 0xd9, 0x40}, {0x3, 0x100000000, 0x8, 0x7fff, 0xe977, 0x4}, {0x20, 0x644, 0x8, 0xf9, 0xffffffff, 0xffffffffffffffff}, {0x2ea, 0x2, 0x8000, 0x100000000000, 0x1, 0x100000001}, {0x4, 0x4, 0x2, 0x1ec, 0x5, 0x8}]}, [{0x1, 0x5, 0x400, 0x3}, {0x4, 0x5, 0x100000000, 0x5, 0x1, 0x87}, {0x8, 0x8, 0x8001, 0x4, 0x9, 0x100}, {0x9, 0x4, 0x1, 0x5, 0x38000000000000}, {0x6, 0x0, 0xe4, 0xffffffff0000, 0x1}, {0x0, 0x6, 0x8, 0x8, 0x80000001, 0x4}, {0x800, 0x0, 0x8, 0x7, 0x2}, {0xfffffffffffffffe, 0x1, 0x2, 0x4, 0xffff, 0x9}, {0x1e1d, 0x0, 0x80000000, 0xbd30, 0x535f, 0x100000000}, {0x793, 0x0, 0x4, 0x3f, 0x1, 0x7}, {0x6, 0x3, 0x81, 0x4, 0x7ff, 0x7}, {0x10001, 0x83, 0x40, 0x9, 0x7, 0x2}, {0x1ff, 0x8, 0x8, 0xc18, 0x0, 0xfffffffffffffffb}, {0x7ff, 0xf800, 0x4, 0x6, 0xfff, 0x8}, {0x200, 0x6, 0xffff, 0x9, 0x2, 0x5}, {0x4, 0x5, 0x1, 0x9, 0x0, 0x3}, {0x2, 0x4, 0x3ff, 0xa5, 0x7fff, 0x87}, {0x9, 0xfffffffffffffffe, 0x3, 0xe1, 0x7, 0x40}, {0x3, 0x5, 0x5, 0x2, 0x1e2472e6, 0x7}, {0x8, 0x100000001, 0xffffffffffffffe0, 0x8, 0x1f, 0x1}, {0x0, 0xffff, 0x2, 0xffffffff, 0x3f, 0x6}, {0x8d5d, 0x100000001, 0xb35a, 0x1, 0x10001, 0xcf0}, {0x8, 0x5, 0x2, 0x3, 0x1000, 0xffff}, {0xbe5, 0x7fffffff, 0x81, 0x10001, 0x8162, 0x5}, {0x8000, 0x614a, 0x8, 0x6, 0x8000, 0x9}, {0x7, 0x4, 0x7, 0x1, 0x5, 0x7fff}, {0x1ff, 0x7, 0x2, 0x8, 0x3, 0x8000}, {0x800, 0x5, 0x4349, 0x2, 0x9, 0x10001}, {0x0, 0x5, 0xfffffffffffffffd, 0x8000, 0x8, 0x700000}, {0x2, 0x1, 0x5, 0x5, 0x1, 0x1ff}, {0x81, 0x2, 0x6, 0x7f, 0xb6, 0x7fff}, {0x20, 0x800, 0x5, 0x2, 0x6, 0x9}, {0x1, 0x7, 0x6, 0xff, 0x101, 0x80}, {0xffff, 0x7f, 0xffffffffffffff00, 0x8, 0x3ff, 0x6}, {0x8, 0x7, 0xffffffffffff7fff, 0x4, 0xd3aa, 0x2}, {0x6, 0x8001, 0x5675, 0xfffffffffffffff7, 0x34b, 0x5}, {0x80000001, 0x4, 0x96, 0x49d, 0x8000, 0xffffffffffffca8b}, {0x0, 0x8, 0x7f, 0x7fffffff, 0x2, 0x7}, {0x3fffffff800000, 0xffffffffffffffff, 0x8, 0x8, 0x3, 0x2}, {0x3f, 0x7fffffff, 0x20, 0x7f, 0x2, 0xfffffffffffffffb}, {0x58, 0x0, 0x1010, 0xe70, 0xfffffffffffff000, 0x789e}, {0x3ff, 0x1, 0x9, 0x8, 0x7ff, 0xc8f4}, {0x389, 0x800, 0x7, 0x915, 0x7, 0xfffffffffffff000}, {0xffffffffffffe9f2, 0x1000, 0x1, 0x9, 0x40, 0x100}, {0x5, 0x80000001, 0x6, 0xc7, 0x10000, 0xffffffff80000001}, {0x2, 0xef46, 0xffffffff, 0x4, 0x0, 0x7}, {0x0, 0x0, 0x1, 0x1, 0x800, 0x4}, {0xdc7, 0x7, 0x9d, 0x8, 0x3, 0x24a7}, {0x10001, 0x0, 0x9, 0xc, 0x0, 0x2}, {0x0, 0x2be, 0x7f, 0x4, 0x3}, {0x9, 0x101, 0x7fffffff, 0x2, 0x5, 0x4}, {0x5, 0x7fff, 0x2, 0x0, 0xfffffffffffffffe, 0x7fff}, {0x1, 0x554, 0x7, 0x2, 0x200, 0x9}, {0x0, 0x1f, 0x2, 0x9, 0xff, 0x7}, {0x3, 0x40, 0xfff, 0x3, 0x3, 0x10001}, {0xb0, 0xfffffffffffffffd, 0xbc, 0xfffffffffffffc01, 0xd983fab20000000, 0x81}, {0x9, 0xfffffffffffffffd, 0x1800000000000000, 0x0, 0x7fff, 0x1d0f3c97}, {0x890, 0x401, 0x5, 0x2, 0x7ff, 0x7}, {0x3f, 0x9, 0x4, 0x7, 0x1, 0x1}, {0x7ff, 0x6, 0x4, 0x8, 0x10000, 0x3}, {0x0, 0x7, 0x3f, 0x1, 0x4}, {0x0, 0x7, 0x3ff, 0x9, 0x0, 0x3}, {0x0, 0x81, 0x8, 0x65, 0xcfd, 0x5}, {0x101, 0x6d, 0x72, 0x20000000000000, 0x80000001, 0x3f}, {0xfff, 0x7, 0x3f, 0x48eb, 0xf9, 0xd1}, {0xffff, 0x3, 0x200, 0xfffffffffffff405, 0xfffffffffffffffb, 0xdef2}, {0x7fffffff, 0x1f, 0x7, 0x1, 0x7fffffff, 0x7fff}, {0x2, 0x7, 0x7, 0x0, 0x80000000, 0x3}, {0x1, 0xa956, 0xcf1, 0xffff, 0x2, 0x5}, {0x400, 0x8, 0xffffffff, 0x5, 0x4, 0x6}, {0x1000, 0x8000, 0x8001, 0x47b, 0x5, 0x9d}, {0xffff, 0x8000, 0xabda, 0x7, 0x5, 0x401}, {0x3f, 0xfffffffffffffffc, 0x0, 0x5, 0xa1, 0x2}, {0x3, 0x1000, 0x0, 0x7, 0x3, 0xffff}, {0x9, 0x6, 0xfc, 0x66ee, 0x5}, {0x7, 0x7, 0x5c6, 0x1, 0x8, 0x3}, {0x6, 0x100, 0x80, 0x3, 0x9, 0xc69}, {0x4, 0x7, 0x80000001, 0x5, 0x9, 0xfffffffffffffff7}, {0xfffffffffffff44b, 0x1, 0x401, 0x1, 0x7f, 0x4}, {0x9, 0x101, 0xae, 0xfffffffffffffffb, 0x4, 0x3f}, {0x4, 0xb1f, 0x5, 0x9, 0x4}, {0x6, 0x7ff, 0x10000, 0x1f, 0x1f, 0x6}, {0x9, 0x3, 0x2, 0x0, 0x8, 0x7fff}, {0x1, 0x8001, 0x3d000, 0x0, 0x5, 0x10001}, {0x2, 0x3, 0x80000001, 0x9, 0x8, 0x3}, {0x4, 0x40, 0x100000000, 0x5, 0x100000, 0x100000000}, {0x3f, 0x10000, 0xffff, 0xffffffffffffffc1, 0x80000000, 0x8ad2}, {0x3f, 0xffff, 0x8, 0x400, 0x9e61, 0x646f}, {0x10000, 0xfff, 0x0, 0x4, 0x5, 0x60e4}, {0x7, 0x4, 0xfffffffffffffff8, 0x40, 0x1f, 0xfffffffffffffff7}, {0x1000, 0x0, 0x2322, 0x6, 0xff, 0x80}, {0x5, 0x7, 0xffffffffffff65f7, 0x100, 0x6, 0x6}, {0xef3, 0x0, 0x0, 0x4, 0x2, 0x20}, {0x8549, 0xffff, 0x101, 0x4, 0x53d1, 0x5}, {0x8, 0x3, 0x2, 0x3, 0x4, 0x400}, {0x80000000, 0x8, 0x0, 0x3, 0x10001, 0xffffffffffffffe1}, {0x0, 0xfffffffffffffff7, 0xffffffff80000000, 0x1, 0x0, 0x9}, {0xd3f2, 0x8000, 0x7, 0xffffffffffff6ad8, 0x10001, 0x80000001}, {0x7f, 0x3ff, 0x4d, 0x0, 0x2}, {0x1, 0x2b, 0x8, 0x5, 0xcfa}, {0x4144, 0x80, 0x8, 0x1000, 0x5, 0xffffffff}, {0x3, 0x5, 0xff, 0x8, 0x800, 0x3ff}, {0x7f, 0x9, 0x5, 0xff, 0x5, 0x6}, {0x2, 0x0, 0xfffffffffffffffb, 0x1, 0x8632, 0x2}, {0xffffffff, 0x2, 0xfffffffffffffff9, 0x6}, {0x6, 0x100000001, 0x7, 0xffffffff, 0x1, 0x20}, {0x7ff, 0x20, 0xa83, 0x9, 0x101, 0x80}, {0x7ff, 0x100, 0x8, 0x3ff, 0x5f, 0xfbce}, {0x4, 0x1, 0x1, 0xff, 0x3, 0xbfc}, {0xa781, 0x3, 0x0, 0x7fff, 0x9, 0x8}, {0x2, 0xd8e, 0x400000000000, 0x7, 0x8b1, 0x11}, {0x1f, 0x1, 0x6, 0x6, 0x2, 0x40}, {0x237c9fbe, 0xffffffffffffffff, 0xfff, 0x2, 0xfff, 0x4}, {0x7, 0x8, 0x0, 0x800, 0x1, 0x10001}, {0x400, 0x80, 0x401, 0x200, 0xfff, 0x3}, {0x1, 0x24, 0xff, 0x401}, {0x6, 0x9, 0x67, 0x0, 0xb0e000, 0x100}, {0x4, 0x40, 0x200, 0x5, 0x6, 0x8}, {0x8001, 0x4, 0x3, 0x9bb, 0xfff}, {0x80000000, 0x1ff, 0x49f5, 0x10001, 0xfffffffffffffffb, 0xd5}, {0x3, 0x1000, 0x4, 0x1, 0xfffffffffffffffd, 0x1}, {0x1ff, 0x0, 0x2, 0x0, 0x4, 0x3}, {0xfffffffffffffff8, 0x0, 0x4, 0xdd, 0x0, 0x1000}, {0x9, 0x2, 0x0, 0x6, 0x2, 0x80}, {0x5, 0xfffffffffffff4d7, 0x80, 0x3ff, 0x5, 0x7fffffff}, {0x9, 0x1ff, 0xe137, 0x7, 0x20e, 0x1}, {0x90a, 0x3, 0xffff, 0x6, 0x0, 0x4}, {0x9, 0x8, 0x589, 0xfffffffffffffffe, 0x80, 0x4}], [{0x0, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x7}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0xc4b3b7561d0062c1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x7, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x5}, {}, {0x3}, {0x2}, {0x5}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x6bcc3b722b1fd14c}, {0x2, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x7}, {0x5, 0x1}, {0x4}, {0x3}, {0x7}, {0x5}, {0x3, 0x1}, {}, {0x7, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x7}, {0x1, 0x1}, {0x3, 0x1}, {0x7}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x7, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x6, 0x1}, {0x5, 0x1}, {0x2, 0xd8bea2dd52d4a1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x7, 0x1}, {0x6}, {0x5}, {0x0, 0x1}, {0x2}, {0x7, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x7}, {0x3, 0x1}]}}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xfff, 0xef46, 0x0, 0x8, 0x179a}, 0x101, 0x4, [{0x9, 0x9d, 0x8, 0x4c37, 0xf2bf, 0x5}, {0x3, 0x8, 0x41, 0x90f, 0x4, 0x9}, {0x3, 0x9e, 0x1, 0x4, 0x7, 0x5}, {0x9, 0x1000, 0x6, 0x9, 0x3f, 0x1}, {0x9c2a, 0x7, 0x1f, 0x2, 0x89f, 0xe22}]}, [{0x9, 0x7, 0x0, 0x4, 0x5, 0x100000001}, {0x100, 0xad03, 0x1f, 0x4, 0x4af, 0xf8}, {0xfffffffffffeffff, 0xff, 0x7fff, 0x6, 0x1, 0x2}, {0x0, 0x3, 0x7f, 0x0, 0x21, 0xffffffffffffff00}, {0x0, 0x5, 0x1f, 0x7fffffff, 0x6, 0x1}, {0x2, 0x8, 0x9, 0xff, 0x4, 0x6}, {0x48e, 0x1000, 0x1, 0xea, 0x6, 0x9}, {0xc1f, 0x8, 0x8133, 0x5, 0x80000000, 0x3ff}, {0x3, 0x5, 0xfffffffffffffff7, 0x800, 0xfffffffffffffffe, 0x8}, {0x40, 0x100, 0x7, 0x9a1, 0x1, 0x8}, {0x1f, 0x5, 0x1, 0x8, 0xf5, 0xfffffffffffffffa}, {0x1f, 0x40, 0x3, 0x6f89, 0x3, 0x101}, {0x400, 0x3, 0x2, 0x101, 0x0, 0x9}, {0x3, 0x5, 0x2, 0xf9b, 0xfffffffffffffffe, 0x3}, {0x4, 0xfffffffffffffff7, 0x100000000, 0x1, 0x2, 0x10001}, {0x0, 0x200, 0x20, 0x5, 0x5, 0x8}, {0x9, 0xb54, 0x93, 0x6, 0x5, 0x80}, {0xa96b, 0xffffffffffffffc0, 0x800, 0x5, 0x0, 0x81a6}, {0x10000, 0x5, 0x2, 0x2, 0x10001, 0x39}, {0x3, 0x2, 0x80000001, 0x7, 0x9, 0x5}, {0x80, 0x810, 0x80, 0xf42, 0x8, 0x8}, {0x80000000, 0x81, 0x6, 0x6, 0xfffffffffffffff8, 0x9}, {0x6222, 0xf457, 0x8, 0x3ff, 0x7f, 0x7}, {0x4, 0x5bc, 0x40, 0x5b28176c, 0xfffffffffffffeff, 0x20}, {0x4, 0xc7, 0x9, 0x6a57, 0x8, 0x8}, {0x657, 0x9, 0xffffffffffff8000, 0xffff, 0x468a, 0xfffffffffffffffb}, {0x1, 0xffff, 0x6, 0x5, 0x1, 0x7fff}, {0x6, 0xff, 0x3, 0x734b, 0x46, 0x7f}, {0x50a4fabc, 0x93, 0x4, 0x8, 0x5, 0x9}, {0x0, 0x10001, 0x2, 0x2, 0xffffffff, 0x8001}, {0x7fff, 0x8, 0x5, 0xfc, 0x2, 0x7fff}, {0x6, 0x80, 0xde, 0x40, 0x7, 0x3}, {0x6, 0x1, 0x7, 0x8, 0x7, 0xfffffffffffffff9}, {0x0, 0xb10, 0x7a, 0x9, 0x923, 0x40}, {0x6, 0xbdf, 0x10001, 0x800, 0x9, 0x6}, {0x9, 0x3, 0x0, 0x4, 0xe569, 0x2}, {0x7, 0x9, 0x7f, 0x0, 0x1ff, 0x8}, {0x10000, 0x3ff, 0x0, 0x8, 0x7f, 0x1f}, {0xd063, 0xd00f, 0x5, 0x7, 0xfe2, 0x3}, {0x7, 0x3, 0x6, 0x2, 0x4, 0x1f}, {0x1, 0x200, 0x8, 0x1ff, 0x0, 0x1}, {0xffffffff, 0x0, 0x0, 0x1f, 0x1f, 0x4}, {0x6d4, 0x5, 0x1, 0x3f, 0x10001, 0x4}, {0xffffffff7fffffff, 0x8, 0xf5, 0x3, 0x0, 0x8d26}, {0x7, 0xff, 0x2, 0x7, 0x1}, {0x3e4, 0x2, 0x1ff, 0x59, 0x4, 0x3}, {0x401, 0x1000, 0x3ff, 0x800, 0x400, 0x24f7}, {0xfffffffffffffffb, 0x6, 0xfffffffffffffffe, 0x0, 0x9, 0x71}, {0x7f, 0xffffffffffff8000, 0xffff, 0x1, 0x486fb82b, 0x7d1c}, {0x97e2, 0x5, 0xfffffffffffffffd, 0x80, 0x9, 0x8001}, {0x6, 0x1000, 0x20, 0x6, 0x8000, 0x1}, {0x8, 0x4, 0x3, 0x1, 0x7, 0x8}, {0x4, 0x53225f61, 0x800, 0x80000001, 0xfff, 0x5}, {0x58, 0x7, 0x6, 0x0, 0x800, 0x7fffffff}, {0x4, 0x7f, 0x2, 0x0, 0x7b, 0x2c07}, {0x9, 0x2, 0x5, 0x1f, 0x0, 0x100000001}, {0x7, 0x3, 0x9, 0xffffffffffffffa3, 0x4, 0x100}, {0x400, 0x100000000, 0x8000, 0x7, 0xd5, 0xd9b}, {0x3, 0x5, 0x1, 0x20, 0x7fffffff, 0x1}, {0x40, 0x200, 0x7, 0x4, 0x6, 0x7fffffff}, {0x4, 0x9, 0xd5, 0x80000000, 0x5, 0xfffffffffffffffc}, {0x5, 0xe64, 0x1, 0xfffffffffffffffc, 0x8, 0x7c}, {0x3, 0x2, 0x3, 0x7f, 0x1f, 0x7}, {0x5cac, 0x6, 0x7f, 0x7, 0x1f, 0x4b}, {0x5f, 0x4, 0x0, 0x80, 0x8, 0x800}, {0x80000000, 0x1f, 0x0, 0x7fffffff, 0x8, 0x869}, {0xffffffff, 0x4, 0x8, 0x7ff, 0x7, 0x3}, {0x2, 0x0, 0xec5, 0x6, 0x7, 0xbe9}, {0x100000000, 0x3, 0x0, 0x101, 0x3}, {0x7fff, 0x3, 0x7fffffff, 0x10000, 0xffffffffffff9fb9, 0x7}, {0x10000, 0xbe, 0x4, 0x4, 0xfffffffffffffffb, 0x10001}, {0x5, 0x800, 0x10000, 0x0, 0x8, 0xf150}, {0x5308, 0x3, 0xa37, 0xffff, 0x6, 0x10000000000000}, {0x5, 0x0, 0x917, 0xb6, 0x3, 0xb5c}, {0x0, 0x0, 0xedb, 0x5, 0x9}, {0x3ff, 0x9, 0x100, 0x46, 0x925, 0x7fff}, {0x1, 0x2, 0x7ff, 0xfffffffffffff291, 0x0, 0xfffffffffffffe00}, {0x5, 0x22a7ba1c, 0xaafd, 0x9, 0x61, 0x6}, {0x40, 0x9, 0x8, 0x3fc000000000, 0xffffffffffff0001, 0xa2e6}, {0x871, 0x7d, 0x3, 0x7, 0x7, 0x6}, {0x8, 0xff, 0x400, 0x200, 0x1000, 0x80000001}, {0x1, 0x8000, 0x1, 0x2, 0x1}, {0x2, 0x1000, 0x5, 0xfffffffffffffffe, 0x9, 0x1ff}, {0xd57, 0x1, 0x2, 0x6, 0x0, 0x3f}, {0xfffffffffffffffe, 0x8020000000000000, 0x3a5c, 0x1, 0x5, 0x2e}, {0x4, 0x8, 0x5, 0x1, 0x3, 0x2}, {0x80000001, 0x10000, 0x99, 0x20, 0x9, 0x7}, {0x1f, 0xfff, 0x9, 0x2, 0x7, 0x2}, {0x3a9b, 0x400, 0x4, 0x3, 0x0, 0x401}, {0x7, 0x6, 0x5, 0x3, 0x1c, 0x6}, {0x2, 0x2, 0x0, 0x7, 0x4, 0x2}, {0x7, 0xffffffff, 0x62b4, 0x7, 0x1, 0x100000001}, {0x3, 0x0, 0x1000, 0x1, 0x7, 0x3}, {0x3, 0x2, 0xd4aa, 0x7, 0x1, 0x3}, {0x1000, 0x4, 0x2, 0x753, 0x6, 0x6}, {0x3, 0x7fff, 0xeb6, 0x7, 0x6, 0x8}, {0x7f, 0x1ff, 0xfd32, 0x1, 0x3f, 0x3}, {0x20, 0x6, 0x3, 0x3ff, 0x3, 0xffffffffffffffe0}, {0x1e, 0x6, 0x0, 0x9, 0x3, 0x80000001}, {0x3, 0x7f, 0x1ff, 0x4, 0x9}, {0x1, 0x6, 0x1, 0x8, 0x81, 0xbb}, {0x5, 0xffffffffffff911b, 0x48, 0x81, 0x6, 0xfff}, {0x7, 0x100, 0x1, 0x7fffffff, 0x8001, 0x7}, {0x2, 0x0, 0x7, 0x94f, 0x5, 0x9}, {0x800, 0x80000000, 0x7, 0x1ff, 0x7fff, 0x3}, {0x2, 0x7f, 0x2c, 0x100000000, 0x7, 0xffff}, {0xffffffffffffffc4, 0x6, 0x4, 0xfffffffffffffffd, 0x5, 0x7}, {0x0, 0x1, 0x4, 0x4be3, 0x0, 0xfffffffffffffffb}, {0x1f, 0x20, 0x4, 0x6, 0x90, 0x8}, {0x26be3e41, 0xfff, 0x0, 0xc3e, 0x7, 0x8000}, {0x100000001, 0x500000000, 0x81, 0x4, 0x1, 0x2e31}, {0x1, 0xffffffff, 0x4, 0x4, 0x2, 0x7ff}, {0x10000, 0x5, 0x8, 0x2, 0x3ff, 0x4}, {0x1, 0x0, 0x1, 0x75, 0xffff, 0x444}, {0xfff, 0x7fffffff, 0x1, 0x0, 0xd99, 0x7}, {0x5, 0xd, 0x1, 0x9, 0x59f, 0x3}, {0x10000, 0x0, 0xea2f, 0x5, 0x3, 0xf43}, {0x400, 0x9, 0x6, 0x8, 0x2, 0xdcec6ec}, {0xffffffffffff8001, 0x9, 0x0, 0x4, 0xff6, 0xffff}, {0x5, 0x5, 0x0, 0x2, 0xffffffffffffffff, 0x6}, {0x0, 0x10001, 0x4, 0x1ff, 0x6, 0x1f}, {0x6, 0xfffffffffffffffc, 0xb, 0xd7e, 0x8, 0x3}, {0x1, 0x7, 0xfffffffffffffff9, 0x3d499f8c, 0x7, 0x8}, {0x100, 0x100000000, 0x5, 0xce, 0x8, 0x2}, {0x6, 0x3, 0x0, 0x36a4, 0x3, 0xfffffffffffffffd}, {0x6, 0x84, 0x401, 0x6c, 0x40, 0x1}, {0x800, 0xffffffff, 0x3f, 0x7, 0x1, 0x9}, {0x0, 0x0, 0x4, 0xe1, 0x9, 0x21d}], [{0x0, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x7}, {0x3, 0x1}, {0x5}, {0x4a21f2d7463d4b45, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x7}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x7, 0x1}, {0x4}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {0x5}, {}, {0x1}, {0x3}, {0x3}, {0x7}, {0x2}, {0x6, 0x1}, {0x7, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0xde8b56849843e713}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x7}, {0x6}, {0x2}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x20119f9668b9190, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x7}, {}, {0x5}, {0x3, 0xeba50e4a65dcac01}, {0x1, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0xc60e4c43799f4e31}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x7}, {0x3}, {}, {0x7, 0x1}, {0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x9, 0x3f800000, 0xf, 0x7ff}, 0x4, 0xa3, [{0x0, 0xffffffffffffff01, 0x20, 0x100, 0x2, 0xa21}, {0xfffffffffffffffa, 0x8, 0x6, 0x81, 0x1, 0x1}, {0x0, 0x200, 0x7, 0x463, 0x5, 0x319}]}, [{0x0, 0x7, 0x7e6, 0x209, 0x9, 0x6dcd}, {0x0, 0xff, 0xa55b, 0xd0a3, 0x39, 0x8}, {0xbdf, 0xfff, 0x7fff, 0x80000001, 0x80000000, 0xffffffff}, {0x1000, 0x18000000000, 0xc5e9, 0x566, 0xdc36, 0x4}, {0x94, 0x80000001, 0x1, 0x4, 0x0, 0x1000}, {0x9, 0x6ad, 0x400, 0x6, 0xb1, 0x7fffffff}, {0x1f, 0x400, 0x7b, 0x1, 0x7e5, 0x100}, {0x4dc7, 0x0, 0xb529, 0x8, 0x10001, 0x1}, {0x0, 0x8, 0x101, 0x7f, 0xffffffffffffffff, 0x7}, {0x4f, 0x0, 0x4, 0xfff, 0x7, 0x81}, {0x10000, 0x3ff, 0x1, 0x29e9, 0x7, 0xfffffffffffeffff}, {0x7, 0x2, 0x6, 0x80, 0x80, 0x1ff}, {0x1, 0x9, 0x7, 0x2, 0x9}, {0x5ad, 0x1000, 0x10001, 0x7, 0x1ff, 0x3eeb}, {0x8, 0xcba, 0x5f, 0x2, 0x0, 0x5}, {0x7f, 0x4, 0x100000001, 0x6, 0xff, 0x7}, {0x6, 0x5, 0x3, 0x4, 0x7, 0xd4a6}, {0x800, 0x7, 0x1, 0xc5, 0xb9, 0x6}, {0xff, 0x8d11, 0x1, 0x1, 0x3, 0x97ec0000000000}, {0x1000, 0x2222a62f, 0x3ff, 0x3, 0x400, 0x2}, {0x8000, 0x1, 0xfff, 0x9, 0xc1, 0x180000000000}, {0x5, 0x6, 0x401, 0x0, 0x4, 0x100000000}, {0xfff, 0x4, 0x3ff, 0x8, 0x1, 0x7ff}, {0x5d, 0x356, 0xfffffffffffffff8, 0x7b79, 0xffff}, {0x8000, 0x80000001, 0x800, 0xfdb, 0x1, 0x8}, {0x1, 0x9e5, 0x5, 0x6, 0xb2, 0x9}, {0x0, 0x87e, 0x100000000, 0x3, 0x2, 0x5}, {0xfffffffffffffffd, 0x7, 0x6, 0x7, 0x7f, 0x5}, {0x5, 0x30, 0x5, 0x1e000000, 0x0, 0x4}, {0x400, 0x0, 0xfffffffffffffff7, 0x2, 0x3195, 0xff}, {0x101, 0x10000, 0x1, 0x7, 0x7d84, 0x9}, {0x3, 0x4, 0x0, 0x1000000, 0x1, 0x3}, {0x7, 0x3ff, 0x1, 0x0, 0x7, 0x8}, {0x7fffffff, 0x8, 0xb8, 0x5, 0x7, 0x80000000}, {0x9, 0x3, 0xe0, 0x7, 0x9, 0x622}, {0x3, 0x400, 0x1, 0x8000, 0x6, 0x9}, {0x0, 0x1ff, 0xdfa, 0x79a9ec47, 0x8, 0x6b29dbed}, {0x4, 0xfffffffffffffffc, 0x5, 0x9, 0xa06, 0x2}, {0x100000001, 0x1d1e, 0x8, 0x1, 0x0, 0x8001}, {0x3, 0x4, 0x31, 0xff, 0x0, 0x40}, {0x2, 0x90, 0x80, 0x6, 0x8, 0x3}, {0xaa, 0x8001, 0x7fff, 0x8000, 0x1000000000000000, 0x3f}, {0x7, 0x40, 0x3, 0x3ff, 0x98, 0x7}, {0x7, 0x2, 0x3, 0x9, 0x3, 0xf}, {0x7fffffff, 0x1ff, 0x10000, 0x6, 0x100000001, 0x5}, {0x10001, 0x100000000, 0x8, 0x5, 0x1, 0x1ef1}, {0x6, 0x3, 0x6, 0x0, 0xfffffffffffffffc, 0x1}, {0x1ff, 0x9, 0x3000000000000000, 0x10001, 0x5, 0x2}, {0x9, 0x2, 0x400, 0x8, 0xfff, 0x800}, {0xf8a, 0x1ff, 0xc146, 0x3, 0x1, 0x9}, {0x6, 0x1, 0x4, 0xe52, 0x0, 0x8}, {0x2, 0x5, 0xf5, 0x10000, 0x9, 0xf5}, {0x9, 0x6, 0x7, 0x8000, 0xea2, 0x1000}, {0xffffffffffffffff, 0x2, 0x400, 0x0, 0x7}, {0x8, 0xfff, 0x3, 0x7ff, 0x3, 0x10000}, {0x0, 0x8, 0x0, 0x7f, 0xffffffff, 0x1}, {0x1ff, 0x2, 0x5, 0x7, 0x9, 0x3511}, {0x8, 0x2, 0x10001, 0x6, 0x7fff, 0x6}, {0x1000, 0xffffffffffffffff, 0xf2, 0x5, 0x2, 0x1}, {0x100000001, 0x20, 0x7, 0x35, 0x1}, {0x80000001, 0x40, 0x0, 0x80, 0x0, 0x8}, {0x100, 0x3ff, 0x8f, 0x0, 0x7fffffff, 0x81}, {0x9, 0x6, 0x7, 0x7, 0x3, 0x5}, {0x0, 0x20, 0x3, 0x0, 0x9, 0x81}, {0xfffffffffffff000, 0x85, 0x4, 0x2, 0x1, 0x9}, {0x5, 0x7, 0xb0e, 0x0, 0x5, 0x100}, {0x10000, 0x7, 0x3, 0x2, 0x9, 0xde1cc8}, {0x5109, 0x8, 0xa13, 0xfff0000000000, 0x9, 0xffffffffffff6aa0}, {0x3, 0x1, 0x7, 0x3f, 0x1, 0x5}, {0x0, 0xb3, 0x4, 0x7, 0x7, 0x1}, {0x200, 0x3, 0x800, 0x3c20, 0x6, 0xfffffffffffffff8}, {0x8, 0xff5, 0x1, 0x6fc, 0x60168d49, 0xfffffffffffffffc}, {0xffffffff, 0x4, 0x1, 0x4, 0x7ff}, {0x2, 0x2e, 0xe9, 0x400, 0x9, 0x4}, {0x80000000, 0x80800000000, 0x1, 0xb432, 0x4, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x5, 0x2f25}, {0xf6e, 0xffffffffffffffe0, 0x3, 0x6, 0x7, 0x1}, {0x9, 0x80000000, 0x800, 0x1, 0x8}, {0xfffffffffffffffd, 0xfffffffffffffe01, 0xfffffffffffffff8, 0x100000001, 0x8001, 0x7}, {0x1, 0x4, 0x7, 0x6, 0xe84f, 0x3f}, {0x2, 0x10001, 0x100000000000000, 0x8, 0x3, 0x5}, {0x11f3, 0xffffffff, 0x347, 0x20, 0x7, 0xff}, {0x8, 0x6, 0x800, 0x26, 0x401, 0x1fe0000000000000}, {0x8, 0x1000, 0x24fd56e7, 0x1, 0x1, 0x5}, {0x2, 0x9, 0x8f, 0x6, 0x8, 0x2}, {0x40, 0x2, 0x633a, 0x50a1, 0xe000000000000000, 0x4}, {0x88ae, 0x2, 0x62d6e9bb, 0x4, 0x8, 0x46}, {0x1, 0x5, 0xffffffff, 0x8, 0x564, 0x2}, {0x1, 0x8, 0x4, 0x66, 0x3, 0x8}, {0xffff, 0x8, 0x7, 0x9ce6, 0x0, 0x2}, {0x9, 0x6, 0x1, 0x1, 0xfffffffffffffff8, 0x100000000}, {0x2, 0x1bb80274, 0x1000, 0x287, 0x3ff, 0x1}, {0x200, 0x8, 0x3, 0x9, 0x3, 0x9}, {0xff, 0x3e8c, 0x8000, 0xfff, 0xffffffffffff9b0f, 0x7}, {0x8, 0xfffffffffffffff7, 0xff, 0x6, 0xe5, 0x7}, {0x5, 0x1, 0x4, 0x8, 0x10001, 0x3}, {0x7, 0x7fff, 0x1ff, 0x4, 0x7, 0x6}, {0xfffffffffffffffd, 0x80, 0x9, 0x7, 0xffffffffffff8001, 0x5}, {0x100, 0xfffffffffffff000, 0x2, 0x7, 0x0, 0x4}, {0x30, 0x1200000000, 0x100, 0x3, 0x4, 0x9}, {0x2b5, 0xffffffffffffff00, 0x4821, 0x2, 0x80000001, 0x3f}, {0x8e, 0x1, 0x20, 0x100, 0x100000001}, {0x8, 0xfffffffffffffecf, 0xffff, 0x1, 0x8, 0x3}, {0x4, 0x1, 0x1, 0x7fff, 0x5, 0xfffffffffffff74c}, {0xb1, 0xffff, 0x81, 0x3, 0x1, 0x6}, {0xdf0c, 0x7, 0x7, 0x4, 0xfffffffffffffffb, 0x814c}, {0x3ff, 0x0, 0x1b0b, 0x8, 0x1f, 0x170}, {0x6, 0x2, 0xfffffffffffff9c3, 0x6c7c, 0x8f2, 0x100000001}, {0xa48, 0xde, 0x9, 0x8, 0xffffffff, 0x4a}, {0x80000000, 0x1a24e52b, 0x0, 0x0, 0x100000000, 0x5}, {0xfff, 0x1000, 0x7, 0x100, 0x5, 0x80}, {0xfffffffffffffff9, 0x20, 0xff, 0x6, 0x302311c0, 0x401}, {0x7, 0x5, 0x0, 0x7, 0x4, 0xb81}, {0x41, 0x5, 0x4, 0x3, 0x5, 0x8}, {0xa2, 0xcd10, 0x3, 0x1ff, 0x8, 0x1}, {0x1000, 0xa6, 0x21, 0x100000001, 0x7f}, {0xffffffffffffff7a, 0x1, 0x8, 0x2, 0x7, 0xffffffff}, {0x6, 0x1ff, 0x3f4c, 0x8000, 0x10001, 0xfffffffffffffff9}, {0x5, 0x80000000, 0x3, 0x7, 0x0, 0x7}, {0x3, 0x8d9, 0x40, 0x2, 0x3, 0x9}, {0x20, 0x9, 0x8, 0x40, 0x5, 0x7}, {0x100, 0xffffffff, 0x3, 0xa3e, 0x101, 0x100000001}, {0x8, 0x0, 0x2, 0x9, 0xd94, 0x9}, {0x934, 0x5, 0x8000, 0x6, 0x80000001, 0x4}, {0x1, 0x1, 0x4, 0x5, 0x1b, 0x75b}, {0x800, 0x0, 0x401, 0x80000001, 0x4, 0x5}, {0x5, 0x7ff, 0xac42, 0x8, 0x0, 0x8}, {0x80000000, 0x9, 0xfffffffffffffffb, 0x100, 0x80000001, 0x7}], [{0x3, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x0, 0x1}, {0x476a6576fa4d2d89, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x7}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x7, 0x1}, {0x5, 0x1}, {0x3}, {0x7}, {}, {0x7}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0xed2bc3aa86821ee4}, {0x7, 0x1}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x6}, {0x3}, {0x7}, {0x6, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x7, 0x1}, {0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x7}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x5}, {0x2}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x4, 0x9bc1425e2644d420}, {0x0, 0x1}, {0x7, 0xfcfaaae677991a19}, {0x3, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x1}, {0x4, 0x1}, {0x7}, {0x7, 0x1}, {0x7}, {}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x6}, {0x7, 0x1}, {0x3}, {0x1, 0x1}, {0x7}, {0x0, 0x1}, {0x3, 0x1}, {0x7}, {0x4}, {0x2, 0x1}, {0x4}, {0x7, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x7}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x7}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}]}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x3, 0x9ee6, 0x7, 0x9, 0x81}, 0x7e13, 0x9, [{0x1, 0x1, 0x9, 0x8, 0x8, 0x7fff}, {0x6, 0x3, 0x20, 0x101, 0x8, 0x1}]}, [{0x0, 0x100, 0x0, 0x400, 0x7af, 0x20}, {0x100000001, 0x4, 0xfffffffffffffffe, 0x4, 0x8000, 0xffffffffffffffed}, {0x8, 0xea8, 0x1000, 0x2, 0x0, 0x8}, {0x100000001, 0x10001, 0x800, 0x6, 0x20, 0x60}, {0x1, 0xa35c, 0x7fff, 0x80000000, 0x1, 0x9}, {0x8, 0x6, 0x248, 0x8, 0x0, 0xad6a}, {0x2, 0x0, 0x4, 0x80000001, 0x10000, 0x6}, {0x9, 0x95, 0x8, 0x10000, 0x7}, {0x0, 0x7, 0x9, 0x20, 0x7, 0x6}, {0x7, 0x91, 0x85ce, 0x5, 0x7, 0x8}, {0x4c, 0x9, 0x1, 0x100000001, 0x6, 0x8}, {0xdb, 0x2, 0x7, 0x9, 0x4, 0xb2}, {0x7f, 0x8434, 0x5, 0x8000000, 0x0, 0x1}, {0x5, 0x0, 0x0, 0x80000000, 0x6, 0x9}, {0x96, 0x2, 0xfffffffffffffffa, 0x2, 0x80, 0x90000000}, {0x6, 0x1fffe00000000, 0x6, 0x7fff, 0x3, 0xfffffffffffff365}, {0x1, 0x3, 0x7, 0x5, 0x400, 0x3}, {0xfffffffffffffff8, 0x0, 0x1, 0x4, 0x1}, {0x7, 0xfffffffffffffffb, 0x10001, 0x9, 0xbc80, 0x3e32}, {0xec, 0x2, 0xfffffffffffffff8, 0x3, 0x46, 0x8e}, {0xffffffff00000000, 0x80000001, 0x5, 0x8b, 0x1ff, 0x80000001}, {0x7, 0x6, 0x1000, 0x9, 0x7fff, 0x200}, {0x4, 0x80000000, 0x1, 0x40, 0xa76e, 0xfffffffffffff160}, {0x8000, 0x6, 0x48, 0x100, 0x2a2, 0x3765}, {0x81, 0x5, 0x4, 0x6, 0x9, 0x7}, {0x0, 0xb8, 0x4, 0x3, 0x0, 0x7fffffff}, {0x1, 0x7, 0x54d, 0x8001}, {0x401, 0x8, 0xfffffffffffffbff, 0x1, 0x6}, {0x0, 0x1, 0x4, 0x2, 0x2, 0x15e}, {0x7, 0x7ff, 0x7459, 0x7, 0xffffffff7fffffff, 0x8}, {0x7, 0x101, 0x0, 0x2, 0x10000000000000, 0x1}, {0x205a6f87, 0x9, 0x0, 0x1, 0x5, 0x8}, {0x9, 0x4b, 0x7, 0x0, 0x0, 0x8}, {0x401, 0x1a, 0x200, 0x3, 0xe5, 0x400}, {0x40, 0x9, 0x9, 0x6, 0x33fb, 0x2}, {0xff, 0x95, 0xfb45, 0x10001, 0x72555688, 0x9}, {0x9, 0x800, 0x1, 0x6, 0x3dab2afc, 0x4000000000000}, {0x401, 0x2, 0x6c3f, 0x9094, 0x20, 0x1000}, {0x3, 0x2, 0x9, 0x0, 0xf3fb, 0x80}, {0x4921, 0x4, 0x7ff, 0x0, 0x8}, {0x8, 0xfff, 0x401, 0x5, 0x8, 0x100000000}, {0x8001, 0x401, 0x4, 0x3, 0x100, 0x5}, {0xd7, 0x1f, 0x3, 0x80000000, 0x8, 0x53c6}, {0x8, 0x0, 0x1ff, 0x9, 0x6, 0x1}, {0xb7, 0xfff, 0x8, 0x100000001, 0xd, 0x1ff}, {0xa, 0x2, 0x2, 0x3, 0x1f1, 0x6}, {0x0, 0x9, 0x80000001, 0xca1, 0x3, 0x8}, {0x8e, 0x3, 0x7ff, 0x7fffffff, 0x3, 0x6}, {0x2400000000000, 0x200, 0xed7, 0x5, 0x100000001, 0xffffff8000000000}, {0x28c62e6d, 0x0, 0x0, 0x1f, 0x3}, {0x1000, 0x8, 0x400, 0x7, 0x0, 0x3f}, {0x7, 0x8, 0x400, 0x365, 0xaf2, 0x5}, {0x0, 0x9, 0x8, 0x6, 0x8, 0x8}, {0x7ff, 0x7, 0x9, 0xfffffffffffffff8, 0x3, 0x80000000}, {0xfffffffffffffffc, 0xffffffff, 0x0, 0x3, 0xa5, 0x80000000}, {0x4, 0x100, 0xffffffffffffffe0, 0xfffffffffffffdf8, 0x1, 0x1b}, {0x943, 0x100000001, 0x7, 0x6, 0x1, 0x2}, {0x9, 0x1, 0x1, 0x3, 0xfffffffffffffff8, 0x5}, {0x80000001, 0xdfb, 0x0, 0x401, 0x0, 0x9}, {0x8, 0x1f, 0x7b, 0x931, 0x5ec, 0x6}, {0x9, 0x8000, 0x8, 0x6, 0x9, 0x3}, {0xa825, 0x8, 0x1, 0x8, 0x2, 0x80}, {0x1800000000000000, 0x6, 0x4000000, 0x2f, 0x1, 0x3ff}, {0x206b1e1e, 0x6, 0x340, 0xc3, 0x1, 0x100000000}, {0x81, 0x5, 0x10000, 0x6, 0xffffffff, 0x10001}, {0x5, 0x8, 0x2, 0xfd14, 0x5, 0xd}, {0x5, 0x9, 0x10000, 0x401, 0x8, 0xff}, {0x400, 0x3, 0x1, 0x9, 0x4, 0x3}, {0x3, 0x2a9, 0xfffffffffffffa7c, 0x4, 0x400, 0xf5bd}, {0x7d0c, 0x1, 0x5, 0x0, 0x7fff, 0x3}, {0x8, 0x0, 0x1, 0x3, 0x5f780000000000, 0x1}, {0x1, 0x6, 0xb30, 0x689f, 0x5, 0x8236}, {0x3f, 0x6, 0x101, 0x5, 0x2, 0xa17f}, {0xfffffffffffffff9, 0xffffffffffffff7f, 0x8, 0xffffffffffff8000, 0xa0000000000000, 0xfff}, {0x40, 0x23, 0xfffffffffffffff9, 0x200, 0x81, 0x81}, {0x100000001, 0x4, 0x0, 0x1ff, 0x4, 0x4}, {0x6, 0x400, 0x50000, 0x9, 0x4, 0x200}, {0x9, 0x0, 0x7, 0x9, 0x3ff, 0x10001}, {0xfe12, 0x8000, 0x7, 0x4, 0x7}, {0x8000, 0x7, 0x40, 0x3bd, 0x80000000000000, 0x2}, {0x6566ece8, 0x100000000, 0x79, 0x9, 0xb77e, 0x84e}, {0x20, 0x7, 0x6a2900000000000, 0x3, 0x665, 0x1ff}, {0xa8, 0x5, 0x660e, 0x100000000, 0x3, 0x1}, {0x8001, 0x91a, 0x81, 0x91, 0x14e5, 0x8}, {0x800, 0x8, 0x4, 0xc7f, 0x3, 0x102000000000}, {0x0, 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, {0x80, 0x80, 0xffff, 0x800, 0x401, 0x8}, {0x959, 0x5, 0x737, 0x1, 0x2, 0xff}, {0x2, 0xfb14, 0x7, 0x0, 0x1000, 0x401}, {0x1ff, 0xc55, 0x3, 0x4, 0x80000000, 0xfffffffffffff801}, {0x1ff, 0xafe7, 0x1f, 0x3, 0x10001, 0x3}, {0x800, 0x5, 0x7f, 0xbe, 0x5, 0x3}, {0x9, 0x8001, 0x5, 0x2, 0x1000, 0x1f}, {0xebd, 0x3, 0x1f, 0x7, 0x3f, 0xc84}, {0x3, 0xc8, 0xeaa1, 0x80000001, 0x5, 0x1}, {0x8, 0x3f, 0x5, 0x5, 0x200, 0x1000}, {0x0, 0x3, 0xfffffffffffffffb, 0x6db4, 0x0, 0x86da}, {0x2e03, 0x40, 0x7, 0x1, 0x2, 0x9}, {0x6, 0xff, 0x0, 0x3fb9d48d, 0x3f, 0x401}, {0x1, 0x9, 0x0, 0xc9d2, 0x7fffffff, 0xaf4}, {0xfffffffffffff3f9, 0x1, 0x7, 0x8001, 0xfff, 0xa5d0}, {0x5, 0x0, 0x2, 0x9, 0x1ff, 0xfffffffffffff0a5}, {0x4, 0x459796ee, 0x3, 0x3f, 0x7, 0x3ff}, {0x6, 0x10001, 0xffffffff00000001, 0x2af, 0x5, 0x5681}, {0x401, 0x100000000, 0x0, 0x1, 0xff, 0x2}, {0x6, 0xfff, 0x8, 0x80, 0xb7e, 0x3}, {0x8001, 0x10000, 0x80, 0x7ff, 0x100000000, 0x7}, {0x81, 0x8, 0x2, 0x0, 0x7, 0x3}, {0xfffffffffffffffe, 0x6, 0xfff, 0x8000, 0x8, 0x800000000}, {0x5c, 0x4, 0x7, 0xe82f, 0x6, 0x5}, {0x9, 0x9, 0x1000, 0xfffffffffffffff8, 0xb92, 0x800}, {0x100, 0x7, 0x0, 0x9aa2, 0xffffffffffff98a3, 0x10001}, {0x0, 0xe541, 0xe0, 0x100000000, 0xf8d, 0x3ff}, {0x7, 0x83, 0x1, 0x2e, 0xfc9, 0x7}, {0x80000000, 0x800, 0x8001, 0x100000001, 0x20, 0x80000000}, {0x5, 0x9, 0x8, 0x800, 0xffffffffffffff7f, 0x1}, {0xdc89, 0x20, 0x80000001, 0x1, 0x200, 0x3}, {0xffff, 0x8, 0x1ff, 0x40, 0x1, 0x8}, {0x5, 0x2, 0x2, 0x6e9, 0xef, 0x7}, {0x3, 0xffffffffffffffe1, 0xffffffffffff8000, 0x800, 0x7, 0x4}, {0x3, 0x11, 0xffff, 0x1, 0x9, 0x5}, {0x8, 0x40, 0x5, 0xc2, 0x0, 0x1}, {0x90000, 0x8, 0x9, 0x8, 0x9, 0x6}, {0xb6ce, 0x81, 0x7, 0xfffffffffffffffa, 0x3, 0x2}, {0x0, 0xffffffffb4b4b3bb, 0x5e11, 0x401, 0x2, 0x7ff}, {0x3, 0x3, 0x8, 0x4, 0x1}, {0x3, 0x6, 0xe8c, 0x1ff, 0x2, 0x8000}, {0x6, 0x9, 0x4, 0x7, 0x800000000000, 0x40}], [{0x0, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {0x1}, {0x6, 0x1}, {0x5}, {0x2, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x7, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x7, 0x1}, {0x7}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {}, {}, {0x3}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x7}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x7}, {0x5}, {0x4, 0x1}, {0x7, 0x1}, {0x5}, {0x7}, {0x7, 0x1}, {}, {0x0, 0xfe8044145d527d46}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x7}, {0x6}, {0x69b8c7a9842bc18, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x7}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x7, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x34, 0x5, [@TCA_PEDIT_KEY_EX={0xc, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8}]}, @TCA_PEDIT_KEY_EX={0x24, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x8}]}]}, @TCA_PEDIT_PARMS={0xef8, 0x2, {{{0x570, 0xf72, 0x0, 0x4, 0x3}, 0x9, 0x0, [{0x7fff, 0x8, 0x6, 0x80, 0x100}, {0x1f, 0xa0bd, 0x0, 0x5, 0x2, 0x8}, {0xfffffffffffffff8, 0x1f, 0x10000, 0xb1, 0x2, 0x6}, {0x0, 0x7f, 0x0, 0x8, 0x0, 0x1f}, {0x10000, 0x6, 0xfffffffffffffffb, 0x0, 0x0, 0xe0}, {0x1000, 0x1ff, 0x0, 0x7, 0x4, 0xef63}, {0x93, 0x8000, 0x3, 0x0, 0x3b1e, 0x1}, {0x7ff, 0x7, 0x40, 0x4, 0xfffffffffffffc01, 0x5}, {0xbfd1, 0xfffffffffffffff8, 0x0, 0x4740, 0x9a50, 0x2}]}, [{0x9, 0x3f, 0x200, 0x401, 0xbd, 0x3}, {0x4069, 0x800000000, 0x1, 0x3, 0x9, 0x1}, {0xffffffff, 0x1ff, 0x8, 0x4, 0x8, 0x20}, {0x4, 0x5, 0xced3, 0x20, 0x3000, 0x26c}, {0x7ff, 0xde9, 0x67a9, 0x4, 0x6, 0x1}, {0x1, 0x697b, 0x27, 0x9, 0x1, 0x4ea}, {0x80, 0xff, 0x20, 0x101, 0x80000001, 0x6}, {0x7, 0x7, 0x2, 0x4, 0x0, 0x7}, {0x8000, 0x100, 0xb2300000000000, 0xab, 0x46d, 0x40000000}, {0x1f, 0x7, 0x4, 0x19dc000, 0xffffffffffff5fa1, 0x3}, {0x9, 0x100, 0x1, 0x3f, 0x9, 0x7f}, {0x2, 0x2, 0x7f, 0x7, 0x9, 0x6}, {0x6, 0xffffffffffffff7f, 0x194200000, 0xe54e, 0x9, 0x4ca}, {0x7f, 0xd8, 0x20, 0x1, 0x3, 0x5}, {0xc75, 0x7be6, 0x9, 0xce, 0xffffffffffffd0e9, 0x401}, {0x5, 0x80000000, 0x3f, 0x340a, 0x8, 0xffffffffffffffff}, {0xb20, 0x101, 0x4, 0x2, 0x7, 0xffffffffffffb339}, {0x8, 0x5909, 0x9, 0x4, 0x1, 0x3}, {0x8, 0x80, 0x9, 0x40, 0x5, 0x6}, {0x1, 0xf, 0x7, 0x5, 0xfa0, 0x9}, {0xd46, 0x2, 0x3ff, 0xffff, 0xb45, 0x5}, {0x5, 0x5, 0x3, 0x6, 0x100000000, 0xffffffff}, {0x1, 0x1, 0x7834, 0x7, 0x4}, {0x9, 0x10000, 0xfffffffffffffe01, 0xbdb, 0x49de7d5f, 0x200}, {0x3, 0x8001, 0x3, 0x200000, 0x1, 0x7}, {0xe91d, 0x2c0, 0x1ff, 0x2, 0x0, 0x3}, {0x1, 0x800, 0x4, 0xc7e, 0x7, 0x20}, {0x4, 0x80000001, 0x8, 0x6, 0x0, 0x2}, {0x80000000, 0x938, 0x7fff, 0xc000000000000000, 0x7, 0xffff}, {0x100, 0xfffffffffffffffe, 0x20, 0x200, 0xfffffffffffffff7, 0x2f}, {0x1, 0x7, 0x9, 0xd6e, 0x1, 0x401}, {0x1, 0x100000001, 0x6, 0x81, 0xa5b, 0x3f}, {0x10000, 0x3, 0xff, 0x0, 0x0, 0x5}, {0xffffffff, 0x7, 0x4, 0xfffffffffffff000, 0xffffffffffff0000, 0x80000000}, {0x73, 0x7, 0x10000, 0x5, 0x2, 0x9}, {0x400, 0x100, 0x80, 0x2, 0x8}, {0x2, 0x1, 0xffffffff, 0x1, 0xffffffffffffffff, 0x9}, {0x9, 0x4, 0x6, 0x1, 0x171, 0x1f}, {0x400, 0x2, 0x8001, 0x76, 0x7, 0x6}, {0x1, 0x7, 0x2, 0x1ff, 0xfffffffffffffffc, 0x3f}, {0x9, 0x6, 0x6, 0x100, 0x0, 0xffffffff}, {0x5ab, 0x7a2b, 0x2, 0x0, 0x6, 0xff}, {0x7e87, 0xfffffffffffffffa, 0x7, 0x36, 0x1, 0x1f}, {0x8000, 0x8, 0x7, 0x5, 0x3, 0x100000000}, {0x9, 0x101, 0x8, 0x7, 0x1, 0xce04}, {0x347a6886, 0xffffffffffff8001, 0x8, 0xff, 0x2, 0x4}, {0x0, 0xffffffff, 0xffffffffffffff80, 0x9bf, 0x1, 0x6}, {0x5, 0x10001, 0x24000000000, 0x5, 0x10001, 0x9}, {0x2, 0x0, 0x9, 0x4, 0x80000000, 0x100000000}, {0x7, 0x9, 0xfff, 0x6, 0x2, 0x3}, {0x7, 0xfffffffffffff9fa, 0x9, 0x7, 0x47a, 0x7fff}, {0x9, 0x3, 0x264, 0x10000, 0x8, 0x5}, {0x9, 0x5, 0x1, 0x6, 0x800, 0x8}, {0x0, 0x2, 0x5, 0x7, 0x7a0, 0x80000000}, {0x57, 0x4, 0x7fffffff, 0x4, 0x8001, 0x2}, {0x7af, 0x20, 0x8, 0x80, 0x100, 0x121}, {0x56, 0x692916ac, 0x80000001, 0x8, 0x49, 0x4}, {0x58, 0x8001, 0x5, 0x3, 0x1}, {0x7ff, 0x5, 0x1, 0x0, 0x3f, 0xa7}, {0x7, 0x401, 0x4, 0xffffffff, 0x3, 0x8}, {0x5, 0x782, 0xc, 0x1, 0x9e5, 0x15}, {0x1, 0x0, 0x9, 0xff, 0x7, 0x400}, {0x401, 0x80, 0x9, 0x80000000, 0x5, 0x400}, {0x2, 0x3f, 0x7ff, 0xcd7, 0x2a69, 0xfffffffffffffffe}, {0x6, 0x22a, 0x80000001, 0x101, 0xa7e, 0x1f}, {0x10000, 0x6bb, 0x80, 0xffff, 0x15b5200, 0xfffffffffffffff8}, {0x8, 0xfffffffffffffe00, 0x0, 0xffffffff, 0x6, 0x3}, {0x3, 0x5, 0xffff, 0x60ff000000000000, 0x81}, {0x80000001, 0x100000001, 0xd33, 0x3800000, 0x8, 0x4}, {0x0, 0x971a, 0x1, 0x6e, 0xfffffffffffffff8, 0xfff}, {0x0, 0x9, 0x0, 0x3, 0x9, 0x1}, {0x7fffffff, 0x1, 0x50, 0x6, 0x8, 0x1ff}, {0x4, 0x9cc, 0x0, 0x7, 0x2, 0x3ff}, {0x1, 0xff, 0x2, 0x8d28, 0x3ff, 0x4}, {0x40, 0x7, 0xa0e, 0x6be, 0x1, 0x5}, {0x1, 0x81, 0x5, 0x6a9f2b7b, 0x55, 0x80800000000}, {0x7, 0x8, 0xfff, 0x101, 0x80000000, 0x3}, {0x3, 0x1000, 0x5, 0xfffffffffffff638, 0xffffffff, 0xfffffffffffffff9}, {0x8001, 0x1, 0xf31e, 0x4, 0x3, 0x4}, {0x2, 0x2, 0x9, 0x4, 0x1, 0x81}, {0xc1, 0x2, 0x0, 0x5, 0x2, 0x8}, {0x3f, 0x0, 0x1, 0x1, 0x7f}, {0x457, 0x80000001, 0x1, 0xf12b, 0x0, 0x55}, {0x5, 0x20, 0xa, 0x400, 0x80000001, 0xd49}, {0x3, 0x3, 0x7f, 0x1, 0x7, 0x2}, {0x3d8, 0x100000001, 0x1000, 0x3, 0x0, 0x10001}, {0x29c, 0x1f, 0x8000, 0x2, 0x5, 0x100}, {0x1ff, 0x3ff, 0x6, 0x9, 0xb0a1}, {0x97d1, 0x98, 0x3ff, 0xffffffffffffffff, 0x8, 0x8}, {0x2, 0x8000, 0x9, 0xf2f2, 0x0, 0x7}, {0x8, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x9, 0x2, 0x3, 0x2, 0xce, 0x6}, {0x7, 0x7, 0x9, 0x8, 0x1, 0xffffffffffff266f}, {0x1, 0x3, 0x10001, 0x8, 0x6, 0x8}, {0x1, 0x4, 0x7, 0x7fffffff, 0x7ff, 0x10001}, {0x4, 0x80000001, 0x7, 0x5, 0x37b9, 0x1}, {0x3, 0x5, 0x401, 0x4, 0x8001, 0x5}, {0x6, 0x100000000, 0x0, 0x1, 0x2, 0x7}, {0x7fffffff, 0x1000, 0x9, 0x9, 0xd, 0x1ff}, {0x3a2, 0xfffffffffffffffc, 0x81, 0x2, 0xa4, 0xf6e}, {0x5, 0x1, 0x20, 0xa1f, 0x4251, 0x4}, {0xe0000000000000, 0xf80, 0xffffffff00000000, 0x80, 0x6, 0x7}, {0x3, 0xe7f9, 0x100, 0x3, 0x692f, 0xd0}, {0xffffffff, 0xfffffffffffffff7, 0x20, 0x7, 0x1000, 0x1}, {0x1, 0xb8f, 0x9dd2, 0x401, 0x280, 0x80000001}, {0x8, 0x9, 0x3, 0x6, 0x8001}, {0x7, 0x2, 0x400, 0x6, 0x6, 0x1}, {0x8, 0x7, 0x7, 0x9, 0x2, 0x86}, {0xa64, 0x15, 0x10000, 0x9, 0x8, 0xffff}, {0x400, 0x1, 0x2800, 0xd0b4, 0x200}, {0x0, 0x1, 0x80, 0xb4, 0x400, 0x37c}, {0x5409, 0x1c5, 0x7, 0x3, 0x8}, {0x7, 0x1, 0x7f, 0x400, 0x2a96ccff, 0x3f}, {0x310000000000000, 0x1, 0x2, 0x1, 0x539, 0x9dcd}, {0x5, 0x5, 0xfffffffffffffffd, 0xffffffff, 0x4, 0x7fff}, {0x5, 0x200, 0x5, 0x7, 0x7, 0x3}, {0xf4, 0x22, 0x1, 0x1, 0x3, 0x6}, {0x8, 0x800, 0x7f, 0x7, 0x40, 0x2}, {0x3, 0x4, 0x676, 0xfffffffffffffffd, 0x1, 0x8000000080}, {0x101, 0x80000001, 0xdb, 0x8001, 0x9, 0x9}, {0x6, 0x5, 0xfeb, 0x200, 0x7fff, 0xe7}, {0x1, 0x10001, 0x7, 0x2, 0x1, 0x81}, {0x100000001, 0x7ff, 0xa8e7, 0x7, 0xfffffffffffffffe, 0x7}, {0xe2b, 0x1ff, 0x5, 0x32, 0x0, 0xcf2c}, {0x101, 0x7fff, 0x4, 0xb5f, 0x0, 0x9}, {0xfffffffffffffffb, 0x3, 0x8000, 0xad, 0x3ff, 0x72a}, {0x8c, 0x0, 0x3, 0x3, 0x0, 0x726d}, {0xffffffff80000001, 0x0, 0x7ff, 0x2, 0x40, 0x1ff}], [{0x7, 0x1}, {0x5, 0x1}, {0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x7}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {}, {0x4}, {0x3, 0x1}, {0x2}, {0x4}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x7}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x7, 0x1}, {0x6}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x7}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x7}, {0x1}, {0x5, 0x1}, {0x3}, {}, {0x0, 0x1}, {}, {0x8ec88fad9c575a5a}, {0x2}, {0x3, 0x1}, {0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2}, {0x6, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x2, 0xff61da22803f9a6e}, {0x2}, {0x3}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x7}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5}, {0x7}, {0x3}, {0x7}, {0x3}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x0, 0x2606a6facc5f0969}, {0x0, 0x1}, {0x5}, {0x5, 0xdfa7d0258dc7beda}, {0x5}, {0x7}, {0x7}]}}, @TCA_PEDIT_KEYS_EX={0x13c, 0x5, [@TCA_PEDIT_KEY_EX={0x1c, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0x54, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x8}, @TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x8}]}, @TCA_PEDIT_KEY_EX={0x34, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x8}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x3}]}, @TCA_PEDIT_KEY_EX={0x34, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0xc, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0x14, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x8}]}, @TCA_PEDIT_KEY_EX={0x24, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x7}]}, @TCA_PEDIT_KEY_EX={0x1c, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_HTYPE={0x8}, @TCA_PEDIT_KEY_EX_CMD={0x8}]}]}]}, {0x2c, 0x6, "2f65b8d8cd7a69f631d55f956965739c2352ee3a27f06f63a5703ae28f9116ad3e102b119fa98cf8"}}}}, @TCA_BASIC_ACT={0x90, 0x3, @m_sample={0x8c, 0x1e, {{0xc, 0x1, 'sample\x00'}, {0x1c, 0x2, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x6, 0x1, 0x0, 0x101}}]}, {0x5c, 0x6, "ade89723dbed34e256144ef1918f3f7bd47401513073e9f9f9324c45afe918ca1c948091a68e8e05164e344fcd040d52a4c43590e39a50c49840fa772c4a87f894ca751a7181ecc17870ea71c63a1bff274385c05e"}}}}, @TCA_BASIC_POLICE={0x408, 0x4, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x21a4, 0x0, 0x0, 0x101, 0x5, 0x8001, 0x4, 0x7, 0x8, 0x9, 0x100000001, 0x9, 0x100000000, 0x3ff, 0x84, 0x4, 0xfffffffffffff800, 0x7, 0x7, 0x3, 0xd49, 0x80000000, 0x2, 0x2b29555c, 0x9, 0xffffffff, 0x6, 0x1, 0x0, 0x9, 0x6e0236c1, 0x3, 0x1, 0x4, 0x86b, 0x4, 0x401, 0x4, 0xffff, 0x7, 0x2, 0xc5d3, 0x6, 0x401, 0xb18, 0x5, 0x735, 0x2, 0x2748, 0x7, 0x0, 0x4, 0x5, 0x7, 0x7, 0x7fffffff, 0x0, 0xfffffffffffffff9, 0x5d8d, 0xff8c, 0x4, 0x1f, 0xff, 0x5, 0x7fff, 0x7, 0x8aa4ae0, 0x8001, 0x7, 0xfff, 0x7, 0xe59, 0x6, 0x8, 0x2119, 0x3e0, 0xfff, 0x3, 0x4, 0x10001, 0xfffffffffffffff9, 0x5, 0x11e, 0x1f, 0x5, 0x6, 0x678, 0x0, 0xfffffffffffeffff, 0xacb, 0x7fff, 0x1, 0x8, 0x8b, 0x4, 0x6, 0x6, 0xffffffff, 0x0, 0xff, 0x6, 0x101, 0x44f7, 0x8, 0x4, 0x5, 0xfffffffffffffffa, 0x32, 0xfffffffffffffffb, 0x1b0600000000, 0xe66, 0x18000000, 0x9e0, 0x2, 0x40, 0x5, 0x3, 0x0, 0x4, 0x5, 0x1, 0x62a6, 0x2, 0x4, 0x101, 0xff, 0x5, 0x2, 0x9, 0x80000000, 0x5, 0xfffffffffffffffa, 0x8, 0x3ff, 0x80000001, 0x9cec, 0x8001, 0x3, 0x600000000000000, 0x3f, 0x5, 0x1000, 0x3, 0x4, 0xe000000000, 0x2, 0x9, 0x3, 0x6, 0x9, 0x8b, 0x4, 0xffffffff7fffffff, 0x800, 0x4b9, 0x10000, 0x101, 0x7ff, 0x6, 0x6, 0xfffffffffffffffa, 0x100000001, 0x5a, 0x8, 0x1, 0x9, 0x3ff, 0x4, 0x1, 0x4, 0x7, 0xb7, 0x6, 0x1, 0x2, 0x6, 0x8, 0xae, 0x0, 0x8, 0x1, 0x80000001, 0x3, 0x400000000000, 0x3, 0x0, 0x9, 0x5, 0x80000000, 0xffff, 0x4, 0x4, 0x180, 0x82c9, 0x4, 0x5, 0x4, 0x2, 0x2, 0x8000, 0x2, 0x5, 0x80000000, 0x1, 0x1, 0x380000, 0x5, 0x1ff, 0x2, 0x1, 0x0, 0x49, 0x9, 0x1, 0x7, 0x4e28, 0x48a2a71c, 0x9d, 0x9, 0x7fffffff, 0xfff, 0x80, 0x2, 0x7ff, 0x2d, 0x400, 0xbe, 0xcfc6, 0x7f, 0xffffffff, 0x5, 0x3b4, 0x7, 0x185, 0xff9, 0x8001, 0x1, 0xee7, 0x1000, 0x1, 0x1, 0x2, 0x2, 0x8, 0x8, 0x9, 0x20, 0x5, 0x401, 0x10000, 0x6a4, 0x4, 0x0, 0x4, 0x6]}}]}}, @filter_kind_options=@f_route={{0xc, 0x1, 'route\x00'}, {0x20, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x1d}, @TCA_ROUTE4_IIF={0x14, 0x4, 'bond_slave_1\x00'}]}}, @filter_kind_options=@f_fw={{0x8, 0x1, 'fw\x00'}, {0x5c4, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x100000000}, @TCA_FW_ACT={0x518, 0x4, @m_police={0x514, 0x16, {{0xc, 0x1, 'police\x00'}, {0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x2, 0x3, 0x8, 0x8000, {0x3ff, 0x2, 0x9, 0x2, 0x10000, 0x2bb9de69}, {0x1, 0x3, 0x80, 0x4d5, 0x0, 0x2}, 0x8, 0x20, 0x557}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x80, 0x8, 0x6, 0x2, 0xc18, 0x4bb81fd5, 0xa8e7, 0x3, 0x7, 0x2, 0x1, 0xfffffffffffffffb, 0xffff, 0x1, 0x3, 0x7f, 0x83b1, 0x10001, 0x5, 0x0, 0x8, 0x8, 0x3, 0x401, 0x7fff, 0x3ff, 0x8a1e, 0x7, 0x4, 0x1, 0x2, 0x7, 0x1, 0xf9, 0x800, 0x24, 0x20, 0x365, 0x9, 0x1f, 0x5afc000000000, 0x100000000, 0x58f, 0x5, 0xffffffffffffff00, 0x3, 0x0, 0x1, 0x10000, 0x6, 0x8000, 0xdf2, 0x2, 0x48, 0x3, 0x9, 0x7, 0x1, 0x100000000, 0x7, 0xfffffffffffffff8, 0xfffffffffffffe01, 0x9, 0x1, 0x635, 0x0, 0x10000, 0x9, 0xfffffffffffffffe, 0x6, 0x7, 0x80000000, 0x400, 0x5a5c5697, 0x5, 0x8000, 0x1, 0x6, 0xe61, 0x3, 0xffffffffffffff33, 0xd9, 0x7, 0x8, 0x5, 0x5, 0xffff, 0x3000000000000, 0x3, 0x9, 0x7, 0x8e, 0x5, 0xfffffffffffffffc, 0x8, 0x1, 0x8, 0x51, 0x0, 0xffffffffffffffff, 0x80000000, 0xb563, 0x2, 0x6, 0x0, 0x401, 0x3f, 0x3, 0x9, 0x400, 0x8, 0x7ff, 0x100, 0x1, 0x6, 0x3, 0x2d2, 0x800, 0x1, 0x3, 0x5, 0x3d, 0x9, 0x101, 0x2, 0x6c98, 0x800, 0x1, 0x2, 0xffffffff, 0x7fffffff, 0x5, 0x0, 0xad2, 0x8, 0x3, 0xdb9, 0x7fffffff, 0x8, 0x4, 0x2, 0xffffffffffffab74, 0x31, 0xffff, 0x5, 0x100000001, 0x7, 0x8, 0x80000001, 0x4, 0x7, 0x3, 0xff, 0x8, 0x5, 0x8000, 0x363, 0x4, 0x1, 0x9, 0x5, 0x5, 0x3ff, 0x8, 0x0, 0x4e5d, 0xb44c, 0x2, 0x2, 0x3, 0x8b32, 0x4, 0x3, 0x101, 0x8, 0x10001, 0x5, 0x80000001, 0x5, 0x3, 0x4, 0x7fff, 0x80, 0x40, 0x4, 0x13, 0x7, 0x4, 0x2, 0xfffffffffffffff7, 0x6, 0x400, 0x0, 0x3f1, 0x9, 0x2, 0xfff, 0x3, 0x1ffe00000, 0x7f5, 0x0, 0x4, 0x6, 0x8, 0x3, 0x5, 0x401, 0x3, 0x5, 0xfffffffffffff56f, 0x8, 0xffff, 0xb, 0x4, 0x4, 0x1, 0x2, 0x1b, 0x9, 0x4, 0x80000001, 0x6, 0x7, 0xbac7, 0x1000, 0x6, 0x0, 0xff, 0x5, 0x101, 0x8, 0x6ce, 0xff, 0x5, 0x202b0000000000, 0x7ca, 0x1000, 0x9, 0x5, 0x3, 0xfff, 0x6, 0x9, 0xb985, 0x8001, 0x42be, 0x1, 0x2, 0x8, 0x3, 0xfffffffffffff40f, 0x4, 0x791a, 0x5, 0x7ff]}]}, {0xbc, 0x6, "47b449deb96385d15e246271cb5635c32b5f9cffe995a20e9293573587891299cf0822b0a786c5f1574973ddccb62bf9d2cb6ff5aff27cb045bc7d544179d153d63cb8200b9f1ac2a787711ce961b17d8585f2f39196bb809233bd57dbac876578076d017867b5dfaef6e54cfa249b16ff38f76fdab04798adf9745b6decdc92eeea541ed403383aa10611904fd92081878fe41c21f09375dc38b4dd5907c75eb8fe18078ac526b181b58a750b575496a2512f760a0d4f"}}}}, @TCA_FW_INDEV={0x14, 0x3, 'ip6gretap0\x00'}, @TCA_FW_ACT={0x30, 0x4, @m_bpf={0x2c, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x4}, {0x18, 0x6, "170f3f17e0057d9549cfa5eb3e5851c4147392dd"}}}}, @TCA_FW_CLASSID={0x8, 0x1, {0x7}}, @TCA_FW_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c, 0x1, {0xbe, 0x0, 0x7, 0x1, 0xffffffffffffffff, {0x6, 0x0, 0x80, 0x1, 0x3ff, 0xfff}, {0x557, 0x2, 0x2, 0x100000000, 0x3, 0x4}, 0x7, 0x0, 0x5}}}, @TCA_FW_INDEV={0x14, 0x3, 'yam0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0xffff}]}, 0x663c}, 0x1, 0x0, 0x0, 0x1}, 0x800) preadv(r1, &(0x7f0000000480), 0x1000000000000081, 0xfffffffffffffffe) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x1}) 03:54:16 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0x0) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:16 executing program 5: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@in={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x80, 0x80000) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "1da285719c9e3919d2d594c75c312870103017bf"}, 0x15, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r1, &(0x7f0000000480), 0x1fc, 0x300) socketpair(0xa, 0x0, 0xfffffffffffffff9, &(0x7f0000000140)) 03:54:16 executing program 5: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@in={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x80, 0x80000) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "1da285719c9e3919d2d594c75c312870103017bf"}, 0x15, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r1, &(0x7f0000000480), 0x1fc, 0x300) socketpair(0xa, 0x0, 0xfffffffffffffff9, &(0x7f0000000140)) [ 2189.034503] binder: BINDER_SET_CONTEXT_MGR already set [ 2189.040165] binder: 28843:28863 ioctl 40046207 0 returned -16 [ 2189.047296] binder: BINDER_SET_CONTEXT_MGR already set [ 2189.047339] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2189.047345] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2189.047361] binder: 28843:28863 transaction failed 29201/-28, size 24-8 line 3136 [ 2189.047449] binder: 28843:28863 unknown command 262144 [ 2189.047455] binder: 28843:28863 ioctl c0306201 200002c0 returned -22 [ 2189.047509] binder: 28843:28863 Release 1 refcount change on invalid ref 1 ret -22 [ 2189.097331] binder: 28850:28864 ioctl 40046207 0 returned -16 [ 2189.097435] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2189.097441] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2189.097455] binder: 28850:28866 transaction failed 29201/-28, size 24-8 line 3136 [ 2189.097570] binder: 28850:28866 unknown command 262144 [ 2189.097576] binder: 28850:28866 ioctl c0306201 200002c0 returned -22 [ 2189.097636] binder: 28850:28866 Release 1 refcount change on invalid ref 1 ret -22 [ 2189.099677] binder: 28850:28866 BC_ACQUIRE_DONE u0000000000000000 no match 03:54:19 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x7ffffffc, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x1ffffff) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:19 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@local, @in=@initdev}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) ioprio_set$uid(0xffffffffffffffff, r1, 0x23c1) 03:54:19 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x4, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x706, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) 03:54:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2a, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000006bc8ba8100d81c297500e004594fc2d10000", @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, 0x0}) 03:54:19 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x0, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:19 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:19 executing program 5: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="42aa914a7a93bd1685023f00000000000000977c780dfe07e46b0dd778cd46"], 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000004, 0x9c}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:54:19 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x1f, r0, 0x0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x2, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8880) set_thread_area(&(0x7f0000000000)={0x6, 0x0, 0x2000, 0x800, 0x6, 0x1, 0x6, 0x5, 0x7, 0x8c}) 03:54:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/11, 0x7b3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x11) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0xfffffffffffffffe, 0x0) ioctl$sock_ifreq(r1, 0x0, 0x0) 03:54:19 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getegid() getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) getgroups(0x7, &(0x7f00000000c0)=[0x0, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0xee01]) setresgid(r1, r2, r3) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) [ 2191.363073] binder: BINDER_SET_CONTEXT_MGR already set [ 2191.378918] binder: 28877:28912 ioctl 40046207 0 returned -16 03:54:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x307040, 0x0) write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x8e, 0x4, 0x1}, 0xc96}}, 0x18) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1ffffe}, 0x248, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYBLOB="180026bd7000ffdbdf250d00000024000600080001003a00eaff080001000700000004000200080001010200000004000200"], 0x3}, 0x1, 0x0, 0x0, 0x800040000}, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0xda9}, @mss={0x2, 0x8}], 0x2) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x1, @remote, 'veth0\x00'}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000540)="17b01afd6bc51aa99d96bed45676e2fc5b5d435e2f0c4caa7aa8dbe8f937aebbcc772b7b69fa43af04c8fff69e2c66185ad6c95f5572048c0e4a7714bcaf9122d21ffda42a59e504e3fbcf195aec8a636fca2752dcc0d31e829ea3b81522bcc9e506e947a667ac49e55914b607a234984f46cc94da4319c4b8164f960a3dfd2dd063df26e664cdd2e07df3869802343ae55700a16b5658f080c1969d952e7e4f61b20f167cc4ef9df0e1ab7b8486a23095d7f97aab378e959650f5b7a43fa05a3de0f7f5cf79b51aa43e628abe21da83fb8222568d6de3577f6d", 0xda}], 0x1, &(0x7f0000000440)}, 0x80) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) sysinfo(&(0x7f0000000440)=""/107) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@multicast1, 0x4e20, 0xffff, 0x4e23, 0x0, 0xa, 0xa0, 0xa0, 0x3f, 0x0, r2}, {0x6, 0x117, 0x9, 0x200, 0x9, 0x9, 0x8000, 0x7}, {0x401, 0x8, 0x1000000000, 0xc000000000000000}, 0x100000000, 0x6e6bb3, 0x2, 0x1, 0x2}, {{@in=@empty, 0x4d3, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, [], 0x27}, 0x3503, 0x7, 0x1, 0x5, 0x9, 0x7fff, 0x200}}, 0xe8) r3 = getuid() ioprio_set$uid(0x3, r3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf={0x4c, &(0x7f0000000100)="921551656be7f43d5dbaddf3b7cebc9dec42610fed6f71a8423bb99e450094ab6c13c316a50bd2fd2b3e2c02ffca587028b3fe3558454ba21f574125765ca957620b49f071fa05e165c54121"}) [ 2191.380600] binder: BINDER_SET_CONTEXT_MGR already set 03:54:19 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x7, 0xfffffffffffffffd}) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) [ 2191.380609] binder: 28880:28914 ioctl 40046207 0 returned -16 [ 2191.380830] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2191.380838] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2191.380857] binder: 28880:28914 transaction failed 29201/-28, size 24-8 line 3136 [ 2191.382010] binder: 28880:28914 unknown command 262144 03:54:19 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x100000000033) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0xa0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$unix(r2, &(0x7f0000002b00)=[{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000940)=""/148, 0x15d}], 0x1, 0x53) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast}, &(0x7f0000000100)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@empty, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f00000006c0)=0x98) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000740)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000840)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a00)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000b00)=0xe8) accept$packet(r0, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b80)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000f00)={&(0x7f0000000000), 0xc, &(0x7f0000000ec0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="c4020000", @ANYRES16=r3, @ANYBLOB="00002abd7000ffdbdf250000000008000100", @ANYRES32=r4, @ANYBLOB="e801020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400090000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r8, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="0800079a4e50e700080001001e3d247d3cc741e7b3960000000046a44b1023052484c12e00d501edc399a4b3cdeb867ae8fd5547b71b11", @ANYRES32=r11, @ANYBLOB="b8000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000900000008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400010000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c000400b000800209000000"], 0x2c4}, 0x1, 0x0, 0x0, 0x844}, 0x810) [ 2191.382016] binder: 28880:28914 ioctl c0306201 200002c0 returned -22 [ 2191.382094] binder: 28880:28914 Release 1 refcount change on invalid ref 1 ret -22 03:54:19 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) [ 2191.399727] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2191.399734] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2191.399749] binder: 28877:28925 transaction failed 29201/-28, size 24-8 line 3136 [ 2191.401081] binder: 28877:28925 unknown command 262144 [ 2191.401088] binder: 28877:28925 ioctl c0306201 200002c0 returned -22 [ 2191.401156] binder: 28877:28925 Release 1 refcount change on invalid ref 1 ret -22 03:54:19 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r2 = creat(&(0x7f0000000140)='./bus\x00', 0x169) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) setxattr$security_evm(&(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x6100) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) [ 2191.406034] binder: 28877:28925 BC_ACQUIRE_DONE u0000000000000000 no match 03:54:19 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x0, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:19 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:19 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x2b0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) [ 2192.161718] binder: BINDER_SET_CONTEXT_MGR already set [ 2192.167480] binder: 28965:28975 ioctl 40046207 0 returned -16 [ 2192.167492] binder: BINDER_SET_CONTEXT_MGR already set [ 2192.167499] binder: 28961:28974 ioctl 40046207 0 returned -16 [ 2192.167701] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2192.167707] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2192.167725] binder: 28961:28974 transaction failed 29201/-28, size 24-8 line 3136 [ 2192.167890] binder: 28961:28974 unknown command 262144 [ 2192.167895] binder: 28961:28974 ioctl c0306201 200002c0 returned -22 [ 2192.167951] binder: 28961:28974 Release 1 refcount change on invalid ref 1 ret -22 [ 2192.208357] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2192.208364] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2192.208382] binder: 28965:28977 transaction failed 29201/-28, size 24-8 line 3136 [ 2192.208481] binder: 28965:28977 unknown command 262144 [ 2192.208488] binder: 28965:28977 ioctl c0306201 200002c0 returned -22 [ 2192.208549] binder: 28965:28977 Release 1 refcount change on invalid ref 1 ret -22 [ 2192.211808] binder: 28965:28977 BC_ACQUIRE_DONE u0000000000000000 no match 03:54:22 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xb, r0, 0x0, &(0x7f0000000000)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) 03:54:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@dev, @in=@remote}}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) geteuid() fstat(r0, &(0x7f00000002c0)) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) ioprio_set$uid(0x20003, r1, 0x3) 03:54:22 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) 03:54:22 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x0, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:22 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 2194.370257] binder: BINDER_SET_CONTEXT_MGR already set 03:54:22 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x2, r0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 03:54:22 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000101ee9400000000066f66db6b3bd51f36bc045826e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/mnt\x00') r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10, 0x80000) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000100)={r2, 0x0, 0x738f7d6c, 0x200, 0xfffffffffffffffe}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:22 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000040)=""/32) write$selinux_context(r0, &(0x7f00000000c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21) [ 2194.394755] binder: 28988:28990 ioctl 40046207 0 returned -16 [ 2194.423572] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space 03:54:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') ioctl$KDMKTONE(r1, 0x4b30, 0x6) [ 2194.423579] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) 03:54:22 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = dup(r0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xe8) ioctl$TUNSETOWNER(r6, 0x400454cc, r7) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000140)=0x0) waitid(0x0, r8, &(0x7f0000000240), 0x40000000, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{r1, r2/1000+10000}, 0x4, 0xe3a}, {{0x0, 0x2710}, 0x17, 0x7fffffff, 0x8000}, {{r4, r5/1000+30000}, 0x17, 0xffffffffffffff00, 0x549}], 0x48) 03:54:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4005, 0x0, 0x12, r0, 0x0) [ 2194.423598] binder: 28988:29002 transaction failed 29201/-28, size 24-8 line 3136 [ 2194.423734] binder: 28988:29002 unknown command 262144 03:54:22 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) flock(r1, 0x7) 03:54:22 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge0\x00', 0x10) sendto$unix(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) [ 2194.423741] binder: 28988:29002 ioctl c0306201 200002c0 returned -22 [ 2194.424598] binder: 28988:29002 Release 1 refcount change on invalid ref 1 ret -22 [ 2194.429020] binder: 28988:29002 BC_ACQUIRE_DONE u0000000000000000 no match 03:54:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) write$P9_RATTACH(r0, &(0x7f00000000c0)={0x14, 0x69, 0x5, {0x48, 0x1, 0x1}}, 0x2) r1 = socket$inet6(0xa, 0x80a, 0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) [ 2194.462477] binder: BINDER_SET_CONTEXT_MGR already set [ 2194.462501] binder: 28985:29000 ioctl 40046207 0 returned -16 [ 2194.465125] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space 03:54:22 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00000002c0)) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) [ 2194.465146] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2194.465249] binder: 28985:29000 transaction failed 29201/-28, size 24-8 line 3136 [ 2194.470574] binder: 28985:29000 unknown command 262144 [ 2194.470612] binder: 28985:29000 ioctl c0306201 200002c0 returned -22 [ 2194.471419] binder: 28985:29000 Release 1 refcount change on invalid ref 1 ret -22 03:54:23 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:23 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:23 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080)=0x1, 0x4) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0xe5, &(0x7f0000000040), 0x361, &(0x7f0000000040)}}], 0x40001ab, 0x0) [ 2195.173751] binder: BINDER_SET_CONTEXT_MGR already set [ 2195.179669] binder: 29057:29060 ioctl 40046207 0 returned -16 [ 2195.188947] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2195.198795] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2195.207764] binder: 29057:29060 transaction failed 29201/-28, size 24-8 line 3136 [ 2195.216345] binder: 29057:29060 unknown command 262144 [ 2195.221646] binder: 29057:29060 ioctl c0306201 200002c0 returned -22 [ 2195.228839] binder: 29057:29060 Release 1 refcount change on invalid ref 1 ret -22 [ 2195.233439] binder: BINDER_SET_CONTEXT_MGR already set [ 2195.233446] binder: 29058:29068 ioctl 40046207 0 returned -16 [ 2195.233965] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2195.233973] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2195.233990] binder: 29058:29068 transaction failed 29201/-28, size 24-8 line 3136 [ 2195.234702] binder: 29058:29068 unknown command 262144 [ 2195.234708] binder: 29058:29068 ioctl c0306201 200002c0 returned -22 [ 2195.234767] binder: 29058:29068 Release 1 refcount change on invalid ref 1 ret -22 [ 2195.287785] binder: 29057:29070 BC_ACQUIRE_DONE u0000000000000000 no match 03:54:25 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000040)=0x1ff) ptrace$setopts(0xffffffffffffffff, r0, 0x4, 0x0) 03:54:25 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_load(r0, &(0x7f0000000200)={0xf97cff8c, 0x8, 'SE Linux', "fabf26b59151e97e950fe2a2de00f613421267d176a6fc520a642e0e601eebdb251f4a12638b8c3924a28f336c529133a76e071ba196aa4b05dbbf5f2e"}, 0x4d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1dcbd4ae, 0x5a726a51}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000000)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) ioprio_set$uid(0x5, r2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={@ipv4={[], [], @rand_addr=0x3}, 0x0, r1}) 03:54:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340400000000000000008000000020000000000000000000000100000000000000000000000000000efff48c6000000010080"], 0x0, 0x0, 0x0}) 03:54:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x22, 0x2, 0x4) close(r0) 03:54:25 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:25 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:25 executing program 5: r0 = inotify_init1(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) dup3(r1, r0, 0x80000) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "f43e789bd28202944768fa013bb511de4e65dd7860ed9477f5427f5d2d95b1f63f2e2920c45be72ff4248703b27c82cb4005ffad0aa5ad1a46cd9d11a89d04a1b93f8276bf2a4bd35f3edf81feae3aac70c6b534d2d405817742883151359b1e449f991d1f6195ef928b4895637e81dd3578e70f"}, 0x78) 03:54:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 03:54:25 executing program 2: syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@local, @empty=[0x7], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, @dccp={{0x0, 0x0, 0x4, 0x60, 0x0, 0x0, 0x3, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) 03:54:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0dd28000000000000e8bf700000000000009500000000000000"], 0x0}, 0x48) 03:54:25 executing program 2: recvmsg(0xffffffffffffffff, 0x0, 0x0) getuid() clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608631f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf370539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 03:54:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) preadv(r0, &(0x7f0000001200)=[{&(0x7f00000001c0)=""/27, 0x1b}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x2, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000012c0)="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") r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001240)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x810c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) [ 2197.541367] binder: BINDER_SET_CONTEXT_MGR already set [ 2197.558070] binder: 29079:29083 ioctl 40046207 0 returned -16 [ 2197.577947] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2197.608157] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2197.617077] binder: BINDER_SET_CONTEXT_MGR already set [ 2197.617085] binder: 29080:29120 ioctl 40046207 0 returned -16 [ 2197.622399] binder: 29079:29121 unknown command 262144 [ 2197.622406] binder: 29079:29121 ioctl c0306201 200002c0 returned -22 [ 2197.622484] binder: 29079:29121 Release 1 refcount change on invalid ref 1 ret -22 [ 2197.631213] binder: 29079:29121 BC_ACQUIRE_DONE u0000000000000000 no match [ 2197.666624] binder: 29080:29133 unknown command 262144 [ 2197.666633] binder: 29080:29133 ioctl c0306201 200002c0 returned -22 [ 2197.666707] binder: 29080:29133 Release 1 refcount change on invalid ref 1 ret -22 [ 2197.710757] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2197.710763] binder: 29079:29083 transaction failed 29201/-28, size 24-8 line 3136 [ 2197.727913] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2197.737321] binder: 29080:29120 transaction failed 29201/-28, size 24-8 line 3136 03:54:28 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000003d00670d7b066f66db683bd50736bc044926e4ce1ec260774b3a00e7080008009a1c79f727a46e007ab1b89b86be00"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82011}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200088d0}, 0x80) tkill(r0, 0x1d) ptrace$cont(0x1c, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:28 executing program 5: syz_execute_func(&(0x7f00000001c0)="3666440f50f564ff0941c3c401f82ebd92823dcfc4c27d794e00f246160041d25688766d00006636f044ff0fc4225db621") clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x1044, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) execve(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)}, 0x0) 03:54:28 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) 03:54:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getuid() ioprio_set$uid(0x3, r0, 0x0) 03:54:28 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, &(0x7f0000000700)}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:28 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:28 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) [ 2200.570851] binder: BINDER_SET_CONTEXT_MGR already set [ 2200.585806] binder: 29149:29152 ioctl 40046207 0 returned -16 [ 2200.605941] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space 03:54:28 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) 03:54:28 executing program 0: r0 = open(&(0x7f0000000380)='./file0\x00', 0x60040, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@empty, @in6=@remote}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/netfilter\x00') ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000340)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000500)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x103) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000540)="c400a9eb5c99de6b0621236d06435778ab88c297aee74805e5f89f80ccce8053b90b853bb966c34e1dd039a56162f1c7f100a137336f6c0a0855f1c28aba9b11fed1f201d68af9f84cb5d9ad53b68919cabd575b098168935bf1f47009763afab83b4bc9d9d7c3129226ab0906417369bb1466d3813687a49fcb35d343a48717ba46e44105398e6c1dbcf7d911a40886ecc2f0626b2d2ace595fed598c760d266b2dfd2cb6bcdbbf06e836dc29329563710a60c9af8df8dd822215161594598e7b033530a26a9a0be16cefb7185b8715532a5fc4ce776d9d250f5705ee3283") ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000004c0)=[@sack_perm, @mss={0x2, 0x4}, @timestamp, @mss={0x2, 0xa1}, @sack_perm, @window={0x3, 0x8, 0x9000000000000}, @timestamp, @timestamp], 0x8) fcntl$getownex(r2, 0x10, &(0x7f0000000480)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000400)={{0xa, 0x4e22, 0x4, @remote, 0x350a2fe1}, {0xa, 0x4e20, 0x7, @mcast1, 0x86a5}, 0x6, [0x800, 0xe00000000000000, 0x7fffffff, 0x1, 0x8, 0x81, 0xe94, 0x9]}, 0x5c) r3 = geteuid() ioprio_set$uid(0x0, r3, 0xffffffffffffff7e) [ 2200.616384] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2200.626482] binder: 29149:29152 transaction failed 29201/-28, size 24-8 line 3136 03:54:28 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) [ 2200.630848] binder: BINDER_SET_CONTEXT_MGR already set [ 2200.630857] binder: 29145:29176 ioctl 40046207 0 returned -16 [ 2200.642829] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2200.642838] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) 03:54:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x7fff, &(0x7f0000000000)=0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x103200, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000000040)="365d755f0e38ba9c01781b68e0ba17f8bcb6bbcd5b1044f1983611cc033d80b9cdeb52a128d4849c0d4ddfa9237177b087f45ac33b4155c5c43af2c13671deec4fc50551fb0eb7f12327c7b2782c054d169cb774aab7fc5708ded3cb427e741928cf8b658033cb2ff1f4190b9627dfaf702d3259b7860bc50f31d56711cbd9a59f2d44ad2cff0cc797ba399e500de7a7504043c79dffb0f46ebe83145f08b87258b748bfba975b02b8c8888469bec9b2e90858d36716", 0xb6, 0x6, 0x0, 0x3, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7b35, r0, &(0x7f0000000180)="7734e211bb8f71409bebbfb07d55800bf13d673dc5829951cb66c509117caa11c146ca5c3cc306ec136259aa49ecfdb4caf9cf5b5ea77baacd97f05090217029e04ccf3d66bcf0fb051196e812e218cd2dee18142688ffae0cdaddc4f5db9590314b10adec9612e9357978f714da02acbe012b3ed13d780b3ae6cee2b22441c0b7659fb16de161407fffda40478e962cc5e33b53bc0ada11aefadd63857cf8a450b5b03ef78662ed0d720e36a15307e6eeca", 0xb2, 0x1, 0x0, 0x3, r3}]) [ 2200.642858] binder: 29145:29176 transaction failed 29201/-28, size 24-8 line 3136 03:54:28 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)) lseek(r0, 0x0, 0x0) [ 2200.643014] binder: 29145:29176 unknown command 262144 [ 2200.643021] binder: 29145:29176 ioctl c0306201 200002c0 returned -22 [ 2200.643131] binder: 29145:29176 Release 1 refcount change on invalid ref 1 ret -22 [ 2200.652962] binder: 29149:29180 unknown command 262144 [ 2200.652971] binder: 29149:29180 ioctl c0306201 200002c0 returned -22 [ 2200.653056] binder: 29149:29180 Release 1 refcount change on invalid ref 1 ret -22 [ 2200.665012] binder: 29149:29180 BC_ACQUIRE_DONE u0000000000000000 no match 03:54:31 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0ee0e100e271d2ddf9ff000000002d00670d7b066f66db683b2ad51f36bc044926e4ce1ec260774b3a0046e7080000009a1c79f727a46e007ab1b89b86becc8b8322a02f03951e748f1e4aeca40142029cb161ddb8a1267e04161a6b0f156c653c05bccb649e4cf502a5f6c00b11d25e397652069660b2158169992e7312ce53640ab90e71cb117cf47a9f3ffa95c4759a5c6ebdcac259"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x1, &(0x7f0000000000)="c835fcd2bfa1671b4b0b16f39930b7ebfe146ecb1b29c836c696433b0ab114a0493d31357e732c85e13f0d2bf1c2b59b970733734e9771541d19495c7aecfc1c412e603cdfc6c3") ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x140, 0x2) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:31 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000380)="3666440f50f564ff0941c3c4e1fee62419410fafdedbd1c441dfd04b00c442019dccd3196f3ef2450f1add") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r0, &(0x7f00000000c0), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0xfdf2) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, 0x0, &(0x7f0000000080)) 03:54:31 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, &(0x7f0000000700)}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:31 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)) lseek(r0, 0x0, 0x0) 03:54:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x4, 0xb7, [], 0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=""/183}, &(0x7f0000000200)=0x78) mknod(&(0x7f0000000240)='./file0\x00', 0x1802, 0x8001) ioprio_set$uid(0x3, 0x0, 0x0) 03:54:31 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:31 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:54:31 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)) lseek(r0, 0x0, 0x0) 03:54:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x7fffffff, 0x1, 0x4, 0x4}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 03:54:31 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2008240}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 2203.584558] binder: BINDER_SET_CONTEXT_MGR already set [ 2203.606517] binder: 29203:29211 ioctl 40046207 0 returned -16 03:54:31 executing program 5: creat(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="5954a4db99b5bbccc7945844b0584e879693fe21b8e9bca8daffe7963265953ef3fe64693c1d749df5680e755e1d67eb80b4d72dbfee1b0a65c9b06b8c478558d408356a9d4a0d77a0ce67e37d7d195323fe431eb6d4f2b2d5d49f378a7148c9dec03e1e04053e46c42aa3e1b2bd8c9d5a8545eec2de3ecbf564e469e3db75214ce5a2daa0cb3f022f"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 03:54:31 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) [ 2203.632997] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2203.645154] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2203.651792] binder: BINDER_SET_CONTEXT_MGR already set [ 2203.651800] binder: 29208:29234 ioctl 40046207 0 returned -16 [ 2203.685706] binder: 29203:29241 unknown command 262144 [ 2203.685713] binder: 29203:29241 ioctl c0306201 200002c0 returned -22 [ 2203.687518] binder: 29203:29241 Release 1 refcount change on invalid ref 1 ret -22 [ 2203.701210] binder: 29203:29241 BC_ACQUIRE_DONE u0000000000000000 no match [ 2203.703291] binder: 29208:29243 unknown command 262144 [ 2203.703299] binder: 29208:29243 ioctl c0306201 200002c0 returned -22 [ 2203.703487] binder: 29208:29243 Release 1 refcount change on invalid ref 1 ret -22 [ 2203.764461] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2203.765164] binder: 29203:29211 transaction failed 29201/-28, size 24-8 line 3136 [ 2203.780251] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2203.794223] binder: 29208:29234 transaction failed 29201/-28, size 24-8 line 3136 03:54:34 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff00007842d543670d7b066f66db6802000000bc04493f000000080008009a1c79f727a46e007ab1b89b86be0000000000000000"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x9, r0, 0x7fffffff, 0x7ac9) ptrace$setregs(0xd0707b726d8ff16a, r0, 0x0, &(0x7f0000000000)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:34 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/11, 0x10158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10a) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) 03:54:34 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) 03:54:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x4, 0x0, 0x100000002) 03:54:34 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, &(0x7f0000000700)}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:34 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x40, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) waitid(0x2, r3, &(0x7f0000000200), 0xe0000006, &(0x7f0000000280)) write$evdev(r0, &(0x7f0000000180)=[{{r1, r2/1000+30000}, 0x1f, 0x9, 0x1}], 0x18) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x161) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg(r0, &(0x7f0000001880)={&(0x7f0000000340)=@l2={0x1f, 0x2, {0x5, 0x9, 0x100, 0x1, 0x7, 0x1ff}, 0x200, 0x1}, 0x80, &(0x7f0000001540)=[{&(0x7f00000003c0)="c8b5ca8c3b345dc9fa355563a4fc521dccfcb2c6ee7dc822d0c2485a78b97dc708fb55475530fbae0bd47bf83c00b78974eea025a7058ae61f898692599c7021f35d312bc33f02db0dc0fc39ed8d22f60c206cacb48cd5250732cb2ceed469f2c90307ff4b6af2362249b6fd1cb92c82ad4f7d126e394cfc1929e5fa411b278e85075e5dc99c4c9380e81c01da958111d31a0d7986d22823881c857c783aa6d1fd2aa5fbecaf47ba87dfc21654078a21dd6813c5dd4cf24e828e5a4147204aad4623f39918c9ff24d7a43b11d83285c3625fa03d5e7e639cf50382a59e593976450a1301dcd7bc45806f13b09e1012cc0f52fa124928943503236564c1017d9788c8975567e5305d7b07d486332f50722eb88dd0dad0d30b0017ca74eff86d1a0e6e98f08857b02110472ffd05dad38b325a78bf63696335c2cdb8f127be8b502cc98f3fec78c4f371c7fcfbfcbeebadf46bbe64dbcf380cf19f278180d07350c620eba7b41ff7f8bdf4c8236836de8906c8caa2ce33928b5e5e7adba3f7323ebf4d7a8af804a32445b3fc1f7d549c76890e779579b6df59849ff8120b9d454dec2f608734f3c08fdaf6386aed268f47be61581746efaf6ae10500b2a2c8460849904ba848c4a0b00bc4959ab808608e00880c15717663759bdaa4c8184fed22f5202a7a6d881d789b0887d902393bf5638d50c4de3868fe81c9198da7a0926ab167f6a55038e2e3e903eafa3ceb62ea178b3d35ee960f732e5040f2dabd697bec6bf151d2dc306b8a9393070e261b76d351a1569f74a0304a3c2558a2ab41002f85bfd7414caa8587e9b72668044df0c793130b74447bcd6ea95d04834e59b363bff8f998389833414702cb7dd3ed404c79e7d9247d41c8ba064f41dce6fde6855b0f20d3cae29d5fda56b6dc5a81a62c6072218f82ebc3aecb4655bced7690d4bb3a3bd57b92ec1981d9e6a02e93516e59db14140919c8c1a522273f5618594bc660a3823926d1b497021d6bcf4bf357c7a3bae294c1b9daf0bfd6b5df96e5955ee5d6b1bd0ae35eb8db7f5e9a60c03d0399b14c95aba59520850013a80a381f09883c7325f2efdd44df6e9432c16fd3c42cd4f2438764724444311b8698a90e0a2456feedbae6176a6218256081ccda8da950d03579256e0c383160479c6180e6527e2d5bba209f5eedc469b47750532a9708ffd682ada8ec4e7827e59cd5b95fe87bf0a4a2f7d442309034d3c1876bf08fd2ca6b44994b0cbbf2c4ebeefcafe5696f30d59f5210ea03551baf713041fd1a738937ffa46b18cc7e7567aaae6fbba05f9a54765c8baac74213a79b6bfb921f150a0d87848b40025ab6147e5a72590190330b02d7bd8ac88b5d1de01e2115682fd614c4852f2e73a5159e0e0b40d2519bbe85b9066dd6103c2b52551ff30cf45f8c90168f8357cbe71ca3e74def9d8acea40d24869bcd8b7226a3f0c99a7720cf2c2290d4f5def68237db3a0b001f6c749992f3922907defc397b1499311a2096cd616356c1bb337b68138276ec050716d8edae142ef6e53a6a9c3dffeed1aa30b6965a3ce9b9eb9464fb1f29b84ad0e841e2b96cb092e78a638acfb360f794d711ff18d04815350a4d9e4fadf35d4162aefad7ce2cde13ca18df61c14d513b08e4d005ea8e3543a6005db0a1b501d45cbf33bc868e223e3482c258724183c614a41621e405e8af4a916d5bfe2bf48cb84da341c9cb8e0c802da454cbd35932250d74d4bddd0dcba4715b04657931363cfab9b1245f86e54f0097453a6bb3f3e11da94967d2b32bcc2aa1e229da2e47cada1f7d30105c3d6b16b0f556a6cbb19ed8bed5e62bbef4cac93ffc3b8ffb1aa30852f4446bf8fc625283cf92d2a3d94f095a4bce83e8de94dcd060aaf817f1d153d745c10f9d3a9115c8d4bf7a86b654ac84934335b3f7f9e375d55c09760e1e56a8853880c82780c6266bf2ede41ec22bc8472bb0f5c40211fc33debe854e92c4cce6303aaa2e5a6bce6a293a9dad1198271f45da650f7411b440e2a89fcf69649ff1a4487bf9ac5a78ae03cb4d0ad43242e16473dd9a66191e9712d12afeb7b9460df6273578e41d52f5c6eebac65723923c8cd58680d06b1ba004b13dc963faadc7e4a7e162e754e38b456294a4c073f95e1d3c2b045ab7ab45b4f60c128e359305d51299f53f74c50ddebcfa4352d862a3087113b7f47f950a67afa85ce4aada959370f44952e8a95d1e51f82bf1b7cdd72473df9e1100608e1064243e97d5c261b8a4932509e632f054b7ed767e626a66c918da855735fd16c45c04545b61d10a2f11c1261e9dd33e6fd429463a41e77d7b16774b5f5b01326b115a59b7551f5a71338ff2fe7d259565f8de1b1bf42723a8ec6d25966dee45572f42b486fe473c4d3cc0a07a104eb42fb353d085ffbedbda5d340f5ea77aa2664d9b364bb7ecae92f75a68fef0e9d2f809660210b6d116550c5c40c6826c00e824301d7451fb60696be85098afcddded55ec45ad340097551aea8763450584414737f064f42f80ec3f7b5f871d101d8738bd20b7a457780bbdc1e386accfc438d249b291f5192b6e967d93e498d460dec1e2ce69597e9772a03c99bbadec0fd74f883425aa69f136ab582f9ea8459bfac358065c411e2a336ccf604fabc95bcb82ffb7509ddf9a772656459b072a53bd8f0ea22c1937b736ed058bef5d9a0fcd6aeecc4e8c362ce97313d99de22b93040eeaa96312a1edde5a1124ceceddd08e7ceab06ff33ae9324527ff3b5e42adbfdde596600b928a720133ba83efe5abbda6c171272e84f65ca385b4d685126d904b6c5e6214ff185e87bb5c79fa24c7907d58f8c6dc9d0251ff3ab7ac95ed963b86d241b59c71403bce7a5c624df0af858d2555aa4c25a4dfd01496e2dcf308508f510c23a6d593f3cadae178a6b522efb23774d9fdb14e9f4136a501d9a196b3f398a0d62331a601f4174dff0039d8121b8a45c81620633f540324ee9e3932726bf448a71e08862e62b0b3e749eefa9106d6e63cf046f33ccc610fd415b8a718c5c55190b340e80b8add4ac43012920365ebf34c06afcb282b37577499bab861c595e0841c645b9fc81124d9fe713bf8294d827e25735a92717f1a0b00be32877bf26812d95a03020ccb7e343975060ac43241f83116c19b33275257572d557fe7ecfcb30eab000dd3eee410d7b77e7feaa524b3816e704bee79b9d99f9089c06e9973edeeff45eebf25d0259ada44c57d3a5840fcd9be7dfb6ef56db1022062d85eaa546828ff0113e0733e5c7e5a56ecc59dc30f54688a4d32d8d26278ad2c55b4472bab14065afb82fd286dd98abae3100df1d1839a11ea45b0fdccdd272dfe60387ac9ae757e29db6669f3237a7aa95c593cd79ef5c5a9c137d0f76675324f268d8a946852b1fdafe8bba3d9f17a61785746a9dfae7f881dc2e39991f053e533554ccb9e216b65c5f20561a99208e9faba8bed0e9b06f8f8afcd1f996bff5030a9c39d4fa7c662d2cec6d45c8ab487334305f274d129585266865f8c329519665e5a30e94caea1bf17aff167fabf6eb43b88e93b947420ac8cc63c6bbc8c6a940837546f4dca5c124888b7701f06aa1e086727d8318b15be602f67479a22ab149b63d2874bbfb1b6f2e4535cbfc6244986d9d95f84a387c8b6f851c90ea6c34a27b1c327b3ef46aaacd3f629082b844e7b23c8ad650694b22e92150415118c25c6aa6312be698c46a8feee7b62b452540b849f6d8d4692c0be425dfc7309cbb680ff126a92bfa08b3ade851955286ac3008b3be20793e8a3b0c25d3a8de413014f7a7850e0a396d61dc21c71a30bde2bfc6c6d2fdd766f89b3903e941bfefd31a2d994743dfdb6abdff9bc1a2b72d6366c990a918b732871a6e47e7c74507ad8c3f645db7f5b06a3179798f28f97810cb36509fb1178e6f933b16aaac8c0554e3857ed44da5d8545868a377763e5daec132eabae02be4a771d4847eaf79bf81331e2c12bda3e5694f399a46d525f54ec0ccd7993237ee7030e4911a8dca7b220fc9585da6d57916bd98eafcf48f94be7fda9203373a169ff844c6380ea77c4f73b6a230e9b252b65d7c86d5aca924ce565c283218fbad881b459000ede3b13fda973ad9f6fa12606fe1ac0b8525fcf697a90547af5e0f2785d9c563345abddb1efab9f423d0215e5cb1e9be8f471f421f320fe1361cae947d4e9a0449fa26c16a5c51ae3ad0751d5f3a6b4b90ec55b566e7978893ae6bfee7cd660324d7a9963c101015c438923102d4abe6ff7d6c8d11f6dd5f45a0879c887b029884675cad7587f032b67763dd8ff945afcb2b2ba10d92666884ad3563513a523a376b41683b0b17e52756490193df2a5d19f7fce3c18235693543290bd1a5226d7036bc6b3473cb7c642c53efeb300b10c684a5beda9e6d01a4e8e041e3215f96c5cb28e541e52196dfecfb4b1873cbc82869596cd5f63425599b0e38c953e0f087c75a7e749384acfe14171ca6507b6c0d4038599d783d33143f66addfe50e4cf5e16aaf61a3db708693b8a9f4b54c65f5ec9f958d5b7580549d2b54377e022b1f98196bacb5633bd7ced119145c26503f9f1f7779b4532a82940c70f1850a328c3da7bdb5680e40a49da72f9cc02f0b65ab73e99eefde309f02b2cd4d38a844b540ad8174c97bdb698f1df968ba421cd9324a0c644c6afe1a2d600f0693d2975fbafe35ce96d9aa385017f352fd0c04e164cea821cba420ac59dd637fdbc6f1a21195792325effd6ee5bd6a854b244b66e85777a185137c93f28be71af1daa79cdbd999345962aaa77d4d48aa8698c5d52369fa183c9011b2c4847d2face26b41d7fa8c7b0208f1c94ef45d7263aac6267d062b3b5c3cb6d4dc9447f1477b093678723822e5c5d4189d561436bae202dc8aafda89f3a702baad33b0eebafd5b1d723c134c2f8c5f42a75378d0be53aed444567fc7d4f78c378546fc5ea46d1443e0cefa0eb48e5a24a5046c62ad908f6889243f56babfad9ea3c52cf962335356137682d458e3f210c0611f8f26f7279bc482bcb384baa1f808139b3802be8c06fff3a468b5fa95ce8f3abf3971df7373a560552d561f7d48a45f0fb0c8f020dc9afb0ab831e178693e9ae0381bb2c66f0e9eb76ff085359df68235d587e3a8a2c385cd0f91c7d9f3f7c01bd06091a5c2c87ce73b9ab1f757ecd0ae830cb0d031168ba4f53011c767fbd6184c5a0a0c533ecbbc1eb06b3e34f25ac5f294d11afce2d83aaf06d890e328bc7f77fc58418dec275cd68fe76accf8df39358651a7ce056ff1cfab8a86ffa5f85c34aa7325c466df12098054d5fa40e02cdcc1bedb763eb2db034c71e5a04e91fd5cda106a647c3a6c624be7a2898b42d45160ea8670c32885d3223b3641575db9e245d8293ff5a903de59d9489f3c14989d815206cfb5303f7226b08270d91137e76e52ee1b26776d58bbe07d39daf03c4443b45ba11b5315cd2ba6c41aefc3ebcfdfd455dc407499fa8672707b2c0bd818e06078070c801380ebdbfeb4bbeffae02794bceafccffa196a8fd1f75406d6afb2f7f150c0fe4b7e1534ea577fd0339b8f01a2350fcebd70a950ce21356f45f4134bac1df8a7fee1feadda23e25cd01116e047f3445a79cfc2736c937f1fd77152a3f51d67756ba6393a9ee80a3189bfde5c26cb37ff882e6fbd4d4b842317f92715b50dbef35a1412722e14eeae52807787e5488c69ee27300356c234869334c7d346e2d6b45d423820003fdfaf799f3363c711109", 0x1000}, {&(0x7f00000013c0)="a34e5d375184c74ef90f59b7c18f5335ab91befe2b4f556e130264b1624f80469b2e807c7c57fec4472a6ceea108621e70605123e3762e9d4c31cd4c54ab9d07cc94577d01ccd5df3232a7952c358e2ee888340dc3b8aff00180c3c89c943983b9dc3f6d847280daea3abacee9128a004005e61321330587f267ba6b1262ba19d828d8ea67f810c9bafde3d301a86ef5211c9fcbc259761a", 0x98}, {&(0x7f0000001480)="abca017ef77344bc0b6283257f4cf930b89116a1b879c7754638af048130866bd8a4ea1065830927bc8b8c49670be9d4d56dcf4b840271549119c7f71f32368f3d97b021a8f50b7107fb490f7618284c810c708f4ffd0e68f8eb40e8f9d0961230a238add39a2ecf90f08e50ff0eb31cc71026d4e1411249bcbc14ce6f805655c7a8e22858830a36cd00f81b715bcb6650de13844865f5326a9b51259fcbed712f94682c219899f90651", 0xaa}], 0x3, &(0x7f0000001580)=[{0x70, 0x11c, 0x8001, "a0f03261c63201256a1a2cc2727cf6574c91c5106d7b17cc93b7a48be0e9d18002e86508cbec2244bf9e490813a39617e57740cdac786f9d6e3474861ad7d42923f60d0f18c2eb1ca151d61d29ce608843e77c21ee0c73ac03"}, {0x98, 0x29, 0x5, "9fca1ba8fcb732ad4ab6993cb6b3a3aa340045937bbd5ccc63b4288024c0c44439822e3ad0c044d9e190e485aa8679082cd9f4151abc86cf0c85974a97d4fc5b7e7a985d9229a86cb786c64659f562561238226d8a875c9c417d89af73a98c8c36c27b679cc0930cd0b515ca8bee3ca63fcbd13245fc49234f7a655920b329ff94efb0532c"}, {0xe8, 0x10d, 0x4, "ce9ea2d3391bdc75698cae219b97f3fdeb1dc379b6c547dafc4b800f1868fb5021eeea42bb7df491789fc6be8170a745adbba5c8751ede674cda52d20c5c65297ec7309074ba8e2aa7de0fa95936860c4582c4719bf8cd1a3a760008dd98d9a0fe032840b6adee21abcf3a5f513691183834e8fde5b6a808e686c918f6cc13ed8aeb70d985e9920f4232ed509cac5de9b92b9d9bbab1a5dd7876a58c8d13e71dd08eff3765023b792f3afbfd30af4703fc9376c7849fe01b3b7d425042a2ac1bf97ca878ab50eea9ca61e67efb0c7f08fae486"}, {0x110, 0x117, 0x1, "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"}], 0x300}, 0x40) renameat(r4, &(0x7f0000000040)='./file0\x00', r5, &(0x7f00000000c0)='./file0\x00') r6 = geteuid() ioprio_set$uid(0x3, r6, 0x5) set_robust_list(&(0x7f00000019c0)={&(0x7f0000001900)={&(0x7f00000018c0)}, 0xd1, &(0x7f0000001980)={&(0x7f0000001940)}}, 0x18) 03:54:34 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) [ 2206.578038] binder: BINDER_SET_CONTEXT_MGR already set [ 2206.583380] binder: 29253:29259 ioctl 40046207 0 returned -16 [ 2206.604923] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2206.612654] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) 03:54:34 executing program 2: unshare(0x400) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lseek(0xffffffffffffffff, 0x0, 0x0) 03:54:34 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='./file1\x00') mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 03:54:34 executing program 2: unshare(0x400) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lseek(0xffffffffffffffff, 0x0, 0x0) [ 2206.623397] binder: BINDER_SET_CONTEXT_MGR already set [ 2206.623404] binder: 29258:29278 ioctl 40046207 0 returned -16 [ 2206.635052] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2206.643244] binder: 29253:29259 transaction failed 29201/-28, size 24-8 line 3136 [ 2206.644892] binder: 29253:29259 unknown command 262144 03:54:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x101, 0x8000}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x84000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) [ 2206.644921] binder: 29253:29259 ioctl c0306201 200002c0 returned -22 [ 2206.645189] binder: 29253:29259 Release 1 refcount change on invalid ref 1 ret -22 [ 2206.665600] binder: 29253:29259 BC_ACQUIRE_DONE u0000000000000000 no match [ 2206.674217] binder: 29258:29289 unknown command 262144 [ 2206.674223] binder: 29258:29289 ioctl c0306201 200002c0 returned -22 [ 2206.674296] binder: 29258:29289 Release 1 refcount change on invalid ref 1 ret -22 [ 2206.750331] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2206.761709] binder: 29258:29278 transaction failed 29201/-28, size 24-8 line 3136 03:54:37 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e708009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:37 executing program 2: unshare(0x400) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lseek(0xffffffffffffffff, 0x0, 0x0) 03:54:37 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x24, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:37 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getgid() fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, r2) ioprio_set$uid(0x207, 0x0, 0xffffffffb73cb060) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200000, 0x40) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xf) 03:54:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2000000000000003, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021000000a000000000010ec0000080008001200000402000000004d000007000000b4cb8cb61b12e7280bc1bbb461ae1c6900000000008c0800000000000000006b36ebc6556c898a2e0100ad790000"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x2ae, 0x0) 03:54:37 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) 03:54:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 03:54:37 executing program 0: r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/relabel\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/protocols\x00') epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x100, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x40, 0x6, 0xfd, 0x2, 0xfffffffffffffffb, 0xf75, 0x9, 0x5, 0x80000001, 0x5, 0x1, 0x3, 0x1, 0x0, 0xff, 0x7c3, 0xf2, 0x2, 0x5, 0x80000001, 0x4, 0x40, 0x5, 0x3, 0x2, 0x7fffffff, 0x7ff, 0x8, 0x0, 0xffff, 0x4, @perf_config_ext={0x6, 0x1}, 0x80, 0x6, 0xfffffffffffeffff, 0x1, 0x3000000000, 0x1, 0x80000000}, r3, 0xa, r2, 0x1) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x10a) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) ioprio_set$uid(0x3, r4, 0x61f) 03:54:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) 03:54:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffea0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 03:54:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) [ 2209.583201] binder: BINDER_SET_CONTEXT_MGR already set [ 2209.589401] binder: 29318:29347 ioctl 40046207 0 returned -16 [ 2209.596286] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2209.607228] binder: BINDER_SET_CONTEXT_MGR already set [ 2209.607235] binder: 29316:29350 ioctl 40046207 0 returned -16 [ 2209.624847] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2209.633827] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2209.641869] binder: 29318:29347 transaction failed 29201/-28, size 24-8 line 3136 [ 2209.642101] binder: 29318:29354 unknown command 262144 [ 2209.642107] binder: 29318:29354 ioctl c0306201 200002c0 returned -22 [ 2209.650840] binder: 29318:29347 Release 1 refcount change on invalid ref 1 ret -22 [ 2209.656596] binder: 29316:29355 unknown command 262144 [ 2209.656601] binder: 29316:29355 ioctl c0306201 200002c0 returned -22 [ 2209.658042] binder: 29318:29347 BC_ACQUIRE_DONE u0000000000000000 no match [ 2209.663135] binder: 29316:29355 Release 1 refcount change on invalid ref 1 ret -22 [ 2209.701728] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2209.710696] binder: 29316:29350 transaction failed 29201/-28, size 24-8 line 3136 03:54:40 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@multicast2, @in6}}, {{@in6=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) ioprio_set$uid(0x3, r1, 0x404000000000000) 03:54:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) 03:54:40 executing program 2: unshare(0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) 03:54:40 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0ee0e140f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ceaa641ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0x19910b4dafdd10a0, r0, 0x3, &(0x7f0000000040)="78ee5cd069bdf904c6339cf57f6f918f67fab4c8fd00569103a022d997dbc566d36cbbc25d1546da1eea7bca18f978af58df9597a1e686dd1f6819c428ce895ad90eaacf35913bfe45ad809a86972d68a917c819f6c0c4323e5a8b90c9d94911f261128027d02da55deea328c951d5cfcf728711b613e6c1f416eaf32723c9f2e6e65ed69cdc6f34faa66dd922436339415c83ab90da32ec192cc08aeda6b91b922dc40bf18dfd3dbc32aca0a96c280b14c73a1b47c508b27591c4230169aa76137263f3e3f9af3fc78c18ef98f22dc0a890e1262adbd7f27b") ptrace$setregs(0xd, r0, 0x7fff, &(0x7f0000000040)) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/ip_vs_stats\x00') sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_delrule={0x58, 0x21, 0x800, 0x70bd25, 0x25dfdbfd, {0xa, 0x80, 0x10, 0x6, 0x8, 0x0, 0x0, 0x0, 0xa}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x1}, @FRA_DST={0x14, 0x1, @mcast2}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x1}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'ip6tnl0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x810) ptrace$cont(0x1f, r0, 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000300)={0x34, 0x0, &(0x7f00000002c0)}) 03:54:40 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x24, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:40 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:40 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0ee0e117f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec2606c4b3a0046e708a2f048f7cfdc125b605cbcba7b54b5ba79f7a46e007ab1b89b86becbf7cc8fda845970ef8938c88b769c08a88c3663215af82c2901e628436b717e5516bd027819702175d0f1"], 0x1) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x27, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) 03:54:40 executing program 2: unshare(0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) 03:54:40 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$PPPIOCDISCONN(r0, 0x7439) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 03:54:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket(0x15, 0x80005, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608631f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf370539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 03:54:40 executing program 2: unshare(0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) [ 2212.630902] binder: BINDER_SET_CONTEXT_MGR already set [ 2212.636588] binder: 29363:29391 ioctl 40046207 0 returned -16 [ 2212.653652] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2212.666743] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) 03:54:40 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000000)={0x3, 0x3, 0x1, 0xf0, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x2005, 0x0, 0x0) 03:54:40 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) [ 2212.676184] binder: BINDER_SET_CONTEXT_MGR already set [ 2212.676190] binder: 29367:29398 ioctl 40046207 0 returned -16 [ 2212.692126] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2212.703196] binder: 29363:29391 transaction failed 29201/-28, size 24-8 line 3136 [ 2212.704641] binder: 29363:29405 unknown command 262144 [ 2212.704647] binder: 29363:29405 ioctl c0306201 200002c0 returned -22 [ 2212.716591] binder: 29363:29391 Release 1 refcount change on invalid ref 1 ret -22 [ 2212.729093] binder: 29367:29413 unknown command 262144 [ 2212.729099] binder: 29367:29413 ioctl c0306201 200002c0 returned -22 [ 2212.729159] binder: 29367:29413 Release 1 refcount change on invalid ref 1 ret -22 [ 2212.730318] binder: 29367:29413 BC_ACQUIRE_DONE u0000000000000000 no match [ 2212.772241] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2212.781116] binder: 29367:29398 transaction failed 29201/-28, size 24-8 line 3136 03:54:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@rand_addr="8f46b037220c247ad226f82123dfdadc", @in6=@mcast1, 0x4e22, 0x8553, 0x4e23, 0x3f, 0xa, 0x20, 0xa0, 0x32, r1, r2}, {0x8, 0x2, 0x80, 0x2f41, 0x3, 0x0, 0xd1, 0x4}, {0xfffffffffffffc01, 0x7ff, 0xee2e, 0x6}, 0x80, 0x6e6bb8, 0x0, 0x1, 0x2, 0x3}, {{@in=@remote, 0x4d6, 0x2b}, 0x2, @in6=@mcast1, 0x3504, 0x3, 0x3, 0x7, 0x1, 0x800, 0x1}}, 0xe8) ioprio_set$uid(0x3, 0x0, 0x0) r3 = accept(r0, &(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f00000003c0)=0x80) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000440)=0x1e) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2d, 'pids'}, {0x2d, 'rdma'}]}, 0xc) 03:54:41 executing program 5: 03:54:41 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) 03:54:41 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x24, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:41 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:41 executing program 5: 03:54:41 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) 03:54:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) ioctl$KDGETMODE(r2, 0x5437, 0x0) 03:54:41 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) [ 2213.470569] binder: BINDER_SET_CONTEXT_MGR already set [ 2213.476024] binder: 29423:29447 ioctl 40046207 0 returned -16 [ 2213.482124] binder: BINDER_SET_CONTEXT_MGR already set [ 2213.487447] binder: 29424:29448 ioctl 40046207 0 returned -16 [ 2213.493631] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2213.493636] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2213.493649] binder: 29423:29447 transaction failed 29201/-28, size 24-8 line 3136 [ 2213.510516] binder: 29423:29447 unknown command 262144 [ 2213.510522] binder: 29423:29447 ioctl c0306201 200002c0 returned -22 [ 2213.518280] binder: 29423:29447 Release 1 refcount change on invalid ref 1 ret -22 [ 2213.528313] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2213.528318] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2213.528332] binder: 29424:29449 transaction failed 29201/-28, size 24-8 line 3136 [ 2213.528414] binder: 29424:29449 unknown command 262144 [ 2213.528418] binder: 29424:29449 ioctl c0306201 200002c0 returned -22 [ 2213.528460] binder: 29424:29449 Release 1 refcount change on invalid ref 1 ret -22 [ 2213.529770] binder: 29424:29449 BC_ACQUIRE_DONE u0000000000000000 no match 03:54:43 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) tgkill(r0, r0, 0x8) 03:54:43 executing program 0: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 03:54:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000340)=@srh, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) 03:54:43 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) 03:54:43 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x36, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:43 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000340)=@srh, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) 03:54:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10001) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200), 0x4) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c280008", @ANYRES16=r1, @ANYBLOB="000429bd7000fddbdf250600000008000400001400030008000100020000006eb0f20000140003000800030068ce0200000008000500e0000001080004000400000100000000000000de000200000008000600080000000f000100080001001200000014000300ac1e01010000000000000000000000000800050004000000b1c64c056e324512bfa4fe0d1dd77c24420cc0008eb02db2c9cf27070000000000000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000240)) 03:54:43 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) 03:54:43 executing program 5: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge0\x00', 0x10) sendto$unix(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 03:54:43 executing program 5: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_open_pts(0xffffffffffffffff, 0x0) 03:54:43 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) [ 2215.821073] binder: BINDER_SET_CONTEXT_MGR already set [ 2215.838307] binder: 29457:29491 ioctl 40046207 0 returned -16 [ 2215.840644] binder: BINDER_SET_CONTEXT_MGR already set [ 2215.840651] binder: 29455:29493 ioctl 40046207 0 returned -16 [ 2215.841303] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2215.841309] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2215.841325] binder: 29455:29493 transaction failed 29201/-28, size 24-8 line 3136 [ 2215.842130] binder: 29455:29493 unknown command 262144 [ 2215.842134] binder: 29455:29493 ioctl c0306201 200002c0 returned -22 [ 2215.842179] binder: 29455:29493 Release 1 refcount change on invalid ref 1 ret -22 [ 2215.852012] binder: 29455:29493 BC_ACQUIRE_DONE u0000000000000000 no match [ 2215.878715] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2215.878720] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2215.878734] binder: 29457:29497 transaction failed 29201/-28, size 24-8 line 3136 [ 2215.887704] binder: 29457:29497 unknown command 262144 [ 2215.887709] binder: 29457:29497 ioctl c0306201 200002c0 returned -22 [ 2215.889826] binder: 29457:29497 Release 1 refcount change on invalid ref 1 ret -22 03:54:46 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x7, r0, 0x5, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0x80000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0xff, 0x4) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:46 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:54:46 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) 03:54:46 executing program 5: 03:54:46 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x36, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:46 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:46 executing program 5: 03:54:46 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x2) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:46 executing program 5: 03:54:46 executing program 5: 03:54:46 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) 03:54:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xffff, 0x5, 0x80, 0x1000, 0x0, 0xfffffffffffffc00, 0x44808, 0x0, 0x5, 0x3, 0x400, 0x22, 0x7, 0xb69, 0x1, 0x100000001, 0xfffffffffffffffe, 0x4, 0x10000, 0xfffffffffffffffb, 0x8, 0x1, 0x1, 0x10001, 0x4, 0xfffffffffffffff7, 0x15, 0xfffffffffffff14d, 0x9, 0x2, 0xfe8, 0x0, 0x0, 0xfa, 0x8, 0x5, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x2, 0x6, 0x2, 0x7, 0x1, 0x0, 0x63c7}, r1, 0x6, r0, 0x8) ioprio_set$uid(0x3, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x9f, 0x5, 0x59a, "7fb36d5aa2d8089b69837f92fc21ea69", "b68cb4d7dbcd5f8d889e96ccbd812bd8e368ef1797f85be3a9ccc8476a6b49f375a908426a365907a99f16676eb2fef0bf9c5ce604a6c0d7a51bf92cd79be288999077fc100b05d3f10750f8a4639eaf6fa504d3dc6e4fff96001207bc7c0e448636af4b94ce87362d7d6e58a71a0947862134e2c4aaf09ba78b436371b772be74186e66eaa476be0052"}, 0x9f, 0x1) 03:54:46 executing program 5: 03:54:46 executing program 5: 03:54:46 executing program 5: 03:54:46 executing program 5: [ 2218.810702] binder: BINDER_SET_CONTEXT_MGR already set [ 2218.817074] binder: BINDER_SET_CONTEXT_MGR already set [ 2218.827045] binder: 29508:29544 ioctl 40046207 0 returned -16 [ 2218.833756] binder: 29506:29543 ioctl 40046207 0 returned -16 [ 2218.840797] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2218.840802] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2218.840836] binder: 29506:29543 transaction failed 29201/-28, size 24-8 line 3136 [ 2218.840938] binder: 29506:29543 unknown command 262144 [ 2218.840943] binder: 29506:29543 ioctl c0306201 200002c0 returned -22 [ 2218.840991] binder: 29506:29543 Release 1 refcount change on invalid ref 1 ret -22 [ 2218.842994] binder: 29506:29543 BC_ACQUIRE_DONE u0000000000000000 no match [ 2218.871184] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2218.871191] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2218.871208] binder: 29508:29550 transaction failed 29201/-28, size 24-8 line 3136 [ 2218.876070] binder: 29508:29550 unknown command 262144 [ 2218.876076] binder: 29508:29550 ioctl c0306201 200002c0 returned -22 [ 2218.876272] binder: 29508:29550 Release 1 refcount change on invalid ref 1 ret -22 03:54:47 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x36, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:47 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:47 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) [ 2219.604883] binder: BINDER_SET_CONTEXT_MGR already set [ 2219.610743] binder: 29563:29572 ioctl 40046207 0 returned -16 [ 2219.610974] binder: BINDER_SET_CONTEXT_MGR already set [ 2219.610980] binder: 29558:29573 ioctl 40046207 0 returned -16 [ 2219.612712] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2219.612716] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2219.612727] binder: 29558:29573 transaction failed 29201/-28, size 24-8 line 3136 [ 2219.612805] binder: 29558:29573 unknown command 262144 [ 2219.612809] binder: 29558:29573 ioctl c0306201 200002c0 returned -22 [ 2219.612845] binder: 29558:29573 Release 1 refcount change on invalid ref 1 ret -22 [ 2219.614361] binder: 29558:29573 BC_ACQUIRE_DONE u0000000000000000 no match [ 2219.652853] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2219.652859] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2219.652872] binder: 29563:29576 transaction failed 29201/-28, size 24-8 line 3136 [ 2219.653027] binder: 29563:29576 unknown command 262144 [ 2219.653032] binder: 29563:29576 ioctl c0306201 200002c0 returned -22 [ 2219.653076] binder: 29563:29576 Release 1 refcount change on invalid ref 1 ret -22 03:54:49 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = geteuid() getgroups(0x2, &(0x7f0000000000)=[0xee00, 0x0]) fchown(r0, r1, r2) 03:54:49 executing program 5: 03:54:49 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) 03:54:49 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x1, r0}) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) recvmsg(0xffffffffffffff9c, &(0x7f0000000200)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x40) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000280)=0x40) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:49 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:49 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:49 executing program 5: 03:54:49 executing program 5: 03:54:49 executing program 5: 03:54:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@empty, @in6=@dev}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) ioprio_set$uid(0x3, r0, 0x0) 03:54:49 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) 03:54:49 executing program 5: 03:54:49 executing program 5: 03:54:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6, @in6=@ipv4={[], [], @empty}}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) r0 = openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x40, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x28, &(0x7f0000000500)}, 0x10) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in6, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r1, 0x22) 03:54:49 executing program 5: [ 2221.870611] binder: BINDER_SET_CONTEXT_MGR already set [ 2221.879037] binder: 29581:29611 ioctl 40046207 0 returned -16 [ 2221.888809] binder: BINDER_SET_CONTEXT_MGR already set [ 2221.888815] binder: 29585:29614 ioctl 40046207 0 returned -16 [ 2221.889031] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2221.889072] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2221.889084] binder: 29585:29614 transaction failed 29201/-28, size 24-8 line 3136 [ 2221.889171] binder: 29585:29614 unknown command 262144 [ 2221.889175] binder: 29585:29614 ioctl c0306201 200002c0 returned -22 [ 2221.889216] binder: 29585:29614 Release 1 refcount change on invalid ref 1 ret -22 [ 2221.889828] binder: 29585:29614 BC_ACQUIRE_DONE u0000000000000000 no match [ 2221.915811] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2221.915816] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2221.915836] binder: 29581:29620 transaction failed 29201/-28, size 24-8 line 3136 [ 2221.916464] binder: 29581:29620 unknown command 262144 [ 2221.916469] binder: 29581:29620 ioctl c0306201 200002c0 returned -22 [ 2221.918385] binder: 29581:29620 Release 1 refcount change on invalid ref 1 ret -22 03:54:50 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 2222.640515] binder: BINDER_SET_CONTEXT_MGR already set [ 2222.645934] binder: 29623:29628 ioctl 40046207 0 returned -16 [ 2222.652440] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2222.660495] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2222.669280] binder: 29623:29628 transaction failed 29201/-28, size 24-8 line 3136 [ 2222.677738] binder: 29623:29628 unknown command 262144 [ 2222.683010] binder: 29623:29628 ioctl c0306201 200002c0 returned -22 [ 2222.689961] binder: 29623:29628 Release 1 refcount change on invalid ref 1 ret -22 [ 2222.698839] binder: 29623:29628 BC_ACQUIRE_DONE u0000000000000000 no match 03:54:52 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00e6007b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:52 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) lseek(r0, 0x0, 0x0) 03:54:52 executing program 5: 03:54:52 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x2, 0x1, 0x71, 0x2, 0xcf9a}) ioprio_set$uid(0x3, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x101000, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000200)={0x1a, 0x7, 0x2, {{0xd, '\xa3em1/selinux\x00'}, 0x9}}, 0x1a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r1, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0xe2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0xd, &(0x7f0000000080)='\xa3em1/selinux\x00', r2}, 0x30) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x1, 0x7ff, 0x13a, 0x7, 0x0, 0xffffffffffffffff, 0x1, 0x9, 0x8, 0x7, 0x8, 0x4, 0x10000, 0x6, 0x3960bc88, 0x7ff, 0x1, 0x1, 0x9, 0x4, 0x1, 0x3, 0x71e0, 0x8, 0xe44, 0x4, 0x0, 0x8a5f, 0x4, 0x6, 0x4, 0xfffffffffffffc99, 0x5, 0x81, 0x2, 0xfc00000000000000, 0x0, 0x5, 0x0, @perf_config_ext={0x377, 0x3}, 0x4000, 0x1, 0x3, 0x3, 0xd59d, 0x7, 0x966b}, r3, 0x2, r0, 0x3) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x2) 03:54:52 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:52 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:52 executing program 5: 03:54:52 executing program 5: 03:54:52 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0xa6) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000300)=""/174) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x4000, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCXONC(r1, 0x540a, 0x10001) ioprio_set$uid(0x3, r2, 0x3) 03:54:52 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) lseek(r0, 0x0, 0x0) 03:54:52 executing program 5: 03:54:52 executing program 5: [ 2224.874586] binder: BINDER_SET_CONTEXT_MGR already set [ 2224.883704] binder: 29635:29664 ioctl 40046207 0 returned -16 [ 2224.885770] binder: BINDER_SET_CONTEXT_MGR already set [ 2224.885776] binder: 29639:29665 ioctl 40046207 0 returned -16 [ 2224.885987] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2224.885992] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2224.886004] binder: 29639:29665 transaction failed 29201/-28, size 24-8 line 3136 [ 2224.886065] binder: 29639:29665 unknown command 262144 [ 2224.886069] binder: 29639:29665 ioctl c0306201 200002c0 returned -22 [ 2224.886104] binder: 29639:29665 Release 1 refcount change on invalid ref 1 ret -22 [ 2224.887310] binder: 29639:29665 BC_ACQUIRE_DONE u0000000000000000 no match [ 2224.925476] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2224.925480] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2224.925490] binder: 29635:29668 transaction failed 29201/-28, size 24-8 line 3136 [ 2224.925617] binder: 29635:29668 unknown command 262144 [ 2224.925621] binder: 29635:29668 ioctl c0306201 200002c0 returned -22 [ 2224.925659] binder: 29635:29668 Release 1 refcount change on invalid ref 1 ret -22 03:54:55 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db025a968e8ced683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e00b02da6faf0aae67d9292ec05177c0f6eaad8cdb58e2d266b04539a9ef8247cc275deac8f835250a3594b87b7922655b09ab13670c1667764b718fb25b6fc23cb100a32491f42483f187fe0d4671aa3c8d38dce6b352ae8dd153868f7ba5550682ae2fdd4e140a647abc7fad41bba4a677f93097850f382df12fb7bb4d8d3c75c207fa43c7ddd869b179df13ce24385e672422d741861130dcbfbd4b5334c727a7a0b"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:55 executing program 0: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 03:54:55 executing program 5: 03:54:55 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) lseek(r0, 0x0, 0x0) 03:54:55 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:55 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x44, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b489"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:55 executing program 5: 03:54:55 executing program 5: 03:54:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x42001, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) 03:54:55 executing program 5: 03:54:55 executing program 5: 03:54:55 executing program 2: unshare(0x400) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lseek(0xffffffffffffffff, 0x0, 0x0) [ 2227.878771] binder: BINDER_SET_CONTEXT_MGR already set [ 2227.885012] binder: 29678:29704 ioctl 40046207 0 returned -16 [ 2227.892053] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2227.900838] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2227.901690] binder: BINDER_SET_CONTEXT_MGR already set [ 2227.901696] binder: 29679:29705 ioctl 40046207 0 returned -16 [ 2227.924425] binder: 29678:29704 transaction failed 29201/-28, size 24-8 line 3136 [ 2227.924508] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2227.924512] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2227.924529] binder: 29679:29705 transaction failed 29201/-28, size 24-8 line 3136 [ 2227.924635] binder: 29679:29705 unknown command 262144 [ 2227.924639] binder: 29679:29705 ioctl c0306201 200002c0 returned -22 [ 2227.924687] binder: 29679:29705 Release 1 refcount change on invalid ref 1 ret -22 [ 2227.925999] binder: 29679:29705 BC_ACQUIRE_DONE u0000000000000000 no match [ 2227.940271] binder: 29678:29709 unknown command 262144 [ 2227.940276] binder: 29678:29709 ioctl c0306201 200002c0 returned -22 [ 2227.940334] binder: 29678:29709 Release 1 refcount change on invalid ref 1 ret -22 03:54:58 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) waitid(0x1, r0, &(0x7f0000000000), 0x1, 0x0) tkill(r0, 0x1d) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:54:58 executing program 5: 03:54:58 executing program 2: unshare(0x400) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lseek(0xffffffffffffffff, 0x0, 0x0) 03:54:58 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = dup(r0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x2) 03:54:58 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:54:58 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x44, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b489"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:54:58 executing program 5: 03:54:58 executing program 5: 03:54:58 executing program 5: 03:54:58 executing program 2: unshare(0x400) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lseek(0xffffffffffffffff, 0x0, 0x0) 03:54:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000000)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) ioprio_set$uid(0x6, r0, 0x10000000) 03:54:58 executing program 5: [ 2230.891718] binder: BINDER_SET_CONTEXT_MGR already set [ 2230.898060] binder: 29722:29748 ioctl 40046207 0 returned -16 [ 2230.898072] binder: BINDER_SET_CONTEXT_MGR already set [ 2230.898077] binder: 29723:29749 ioctl 40046207 0 returned -16 [ 2230.903721] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2230.903725] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2230.903738] binder: 29723:29749 transaction failed 29201/-28, size 24-8 line 3136 [ 2230.903808] binder: 29723:29749 unknown command 262144 [ 2230.903812] binder: 29723:29749 ioctl c0306201 200002c0 returned -22 [ 2230.903847] binder: 29723:29749 Release 1 refcount change on invalid ref 1 ret -22 [ 2230.906140] binder: 29723:29749 BC_ACQUIRE_DONE u0000000000000000 no match [ 2230.944121] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2230.944126] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2230.944139] binder: 29722:29752 transaction failed 29201/-28, size 24-8 line 3136 [ 2230.944222] binder: 29722:29752 unknown command 262144 [ 2230.944226] binder: 29722:29752 ioctl c0306201 200002c0 returned -22 [ 2230.944656] binder: 29722:29752 Release 1 refcount change on invalid ref 1 ret -22 03:55:01 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x7, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:55:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x482402, 0x80) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz1\x00') 03:55:01 executing program 5: 03:55:01 executing program 2: 03:55:01 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:55:01 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x44, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b489"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:55:01 executing program 2: 03:55:01 executing program 5: 03:55:01 executing program 5: 03:55:01 executing program 2: 03:55:01 executing program 5: 03:55:01 executing program 5: [ 2233.930602] binder: BINDER_SET_CONTEXT_MGR already set [ 2233.936494] binder: 29760:29783 ioctl 40046207 0 returned -16 [ 2233.943232] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2233.951776] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2233.961142] binder: 29760:29783 transaction failed 29201/-28, size 24-8 line 3136 [ 2233.961558] binder: BINDER_SET_CONTEXT_MGR already set [ 2233.961564] binder: 29759:29784 ioctl 40046207 0 returned -16 [ 2233.961935] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2233.961939] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2233.961951] binder: 29759:29784 transaction failed 29201/-28, size 24-8 line 3136 [ 2233.962016] binder: 29759:29784 unknown command 262144 [ 2233.962019] binder: 29759:29784 ioctl c0306201 200002c0 returned -22 [ 2233.962055] binder: 29759:29784 Release 1 refcount change on invalid ref 1 ret -22 [ 2233.989092] binder: 29760:29786 unknown command 262144 [ 2233.989106] binder: 29760:29786 ioctl c0306201 200002c0 returned -22 [ 2233.989162] binder: 29760:29786 Release 1 refcount change on invalid ref 1 ret -22 [ 2233.990015] binder: 29760:29786 BC_ACQUIRE_DONE u0000000000000000 no match 03:55:04 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) fchdir(r1) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)) ptrace$cont(0x9, r0, 0x1, 0x80000000) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) clone(0x40000100, &(0x7f0000000380)="67725889239ab786eb1ce127331cb282c89cc3b2e0e2d3211fb57a09a178e496c1a5576d0993fb893d1144f634f6d5e386e91f06f51da4692f92103c9f44a875926d991c42c319830e5285", &(0x7f0000000080), &(0x7f0000000400), &(0x7f0000000440)="5adbcaec3452abdd635fd963e37b91f74b32c8d6ea37239ffca723aefa93bc8cde40282a8f0fd6bfe97c7d7ba7200f9def0e9163a9d2a66f5c618a11223f4d8af41395e3fa05ff18703dbce3f81e7b239b8d3865871b6f7f17f3231bc2adeaafce0475") r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x100, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:55:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8000) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x44000, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 03:55:04 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:55:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000180)=0xffd5) 03:55:04 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x46, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:55:04 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:55:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:55:04 executing program 2: rt_sigprocmask(0x0, &(0x7f0000834000), 0x0, 0x8) 03:55:04 executing program 5: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) sendmsg$nl_route(r1, &(0x7f000000a000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000004001400300016002c0001000000010000000000aaaaaaaaaa0000000000000fddb921ea6087c500000000000000000000000000"], 0x1}}, 0x0) 03:55:04 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x10800000000002, 0x0, 0x80000001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'caif0\x00', 0x0}) r2 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0xfffffffffffffffc, 0x4e21, 0x0, 0xa, 0x80, 0x20, 0x2f, r1, r2}, {0x100000000, 0x2, 0x8, 0x3, 0x6, 0x0, 0x2, 0xffff}, {0xfffffffffffffffe, 0x6, 0x7}, 0x7, 0x6e6bb6, 0x2, 0x0, 0x3, 0x3}, {{@in=@loopback, 0x4d2, 0x33}, 0x2, @in=@multicast2, 0x3507, 0x3, 0x1, 0x1f, 0x3ff, 0x7, 0xfffffffffffffff7}}, 0xe8) 03:55:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x2, 0x1, 0x71, 0x2, 0xcf9a}) ioprio_set$uid(0x3, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x101000, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000200)={0x1a, 0x7, 0x2, {{0xd, '\xa3em1/selinux\x00'}, 0x9}}, 0x1a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r1, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0xe2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0xd, &(0x7f0000000080)='\xa3em1/selinux\x00', r2}, 0x30) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x1, 0x7ff, 0x13a, 0x7, 0x0, 0xffffffffffffffff, 0x1, 0x9, 0x8, 0x7, 0x8, 0x4, 0x10000, 0x6, 0x3960bc88, 0x7ff, 0x1, 0x1, 0x9, 0x4, 0x1, 0x3, 0x71e0, 0x8, 0xe44, 0x4, 0x0, 0x8a5f, 0x4, 0x6, 0x4, 0xfffffffffffffc99, 0x5, 0x81, 0x2, 0xfc00000000000000, 0x0, 0x5, 0x0, @perf_config_ext={0x377, 0x3}, 0x4000, 0x1, 0x3, 0x3, 0xd59d, 0x7, 0x966b}, r3, 0x2, r0, 0x3) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x2) 03:55:04 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000000c0)=ANY=[], 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r1, 0x0, 0x0) 03:55:04 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x30041, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:55:04 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xffff, 0x5, 0x80, 0x1000, 0x0, 0xfffffffffffffc00, 0x44808, 0x0, 0x5, 0x3, 0x400, 0x22, 0x7, 0xb69, 0x1, 0x100000001, 0xfffffffffffffffe, 0x4, 0x10000, 0xfffffffffffffffb, 0x8, 0x1, 0x1, 0x10001, 0x4, 0xfffffffffffffff7, 0x15, 0xfffffffffffff14d, 0x9, 0x2, 0xfe8, 0x0, 0x0, 0xfa, 0x8, 0x5, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x2, 0x6, 0x2, 0x7, 0x1, 0x0, 0x63c7}, r1, 0x6, r0, 0x8) ioprio_set$uid(0x3, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x9f, 0x5, 0x59a, "7fb36d5aa2d8089b69837f92fc21ea69", "b68cb4d7dbcd5f8d889e96ccbd812bd8e368ef1797f85be3a9ccc8476a6b49f375a908426a365907a99f16676eb2fef0bf9c5ce604a6c0d7a51bf92cd79be288999077fc100b05d3f10750f8a4639eaf6fa504d3dc6e4fff96001207bc7c0e448636af4b94ce87362d7d6e58a71a0947862134e2c4aaf09ba78b436371b772be74186e66eaa476be0052"}, 0x9f, 0x1) 03:55:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000080)=""/36, &(0x7f00000000c0)=0x24) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x4) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1) [ 2236.937946] binder: BINDER_SET_CONTEXT_MGR already set [ 2236.943687] binder: 29791:29831 ioctl 40046207 0 returned -16 [ 2236.949560] binder: BINDER_SET_CONTEXT_MGR already set [ 2236.949566] binder: 29795:29832 ioctl 40046207 0 returned -16 03:55:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10001) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200), 0x4) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c280008", @ANYRES16=r1, @ANYBLOB="000429bd7000fddbdf250600000008000400001400030008000100020000006eb0f20000140003000800030068ce0200000008000500e0000001080004000400000100000000000000de000200000008000600080000000f000100080001001200000014000300ac1e01010000000000000000000000000800050004000000b1c64c056e324512bfa4fe0d1dd77c24420cc0008eb02db2c9cf27070000000000000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000240)) [ 2236.952371] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2236.952387] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2236.952406] binder: 29795:29832 transaction failed 29201/-28, size 24-8 line 3136 [ 2236.954012] binder: 29795:29832 unknown command 262144 [ 2236.954017] binder: 29795:29832 ioctl c0306201 200002c0 returned -22 [ 2236.954716] binder: 29795:29832 Release 1 refcount change on invalid ref 1 ret -22 [ 2236.998489] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2236.998493] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2236.998506] binder: 29791:29842 transaction failed 29201/-28, size 24-8 line 3136 [ 2236.999025] binder: 29791:29842 unknown command 262144 [ 2236.999030] binder: 29791:29842 ioctl c0306201 200002c0 returned -22 [ 2236.999685] binder: 29791:29842 Release 1 refcount change on invalid ref 1 ret -22 [ 2237.000464] binder: 29791:29842 BC_ACQUIRE_DONE u0000000000000000 no match 03:55:05 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x46, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:55:05 executing program 5: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 03:55:05 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@initdev, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) preadv(r0, &(0x7f0000002600)=[{&(0x7f0000000480)=""/8, 0x8}, {&(0x7f00000004c0)=""/116, 0x74}, {&(0x7f0000000540)=""/161, 0xa1}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x5, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) finit_module(r1, &(0x7f0000002680)='/selinux/policy\x00', 0x1) getpeername$netlink(r1, &(0x7f0000000400), &(0x7f0000000440)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000380)=0xe8) ioprio_set$uid(0x3ffffff, r2, 0x0) 03:55:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10001) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200), 0x4) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c280008", @ANYRES16=r1, @ANYBLOB="000429bd7000fddbdf250600000008000400001400030008000100020000006eb0f20000140003000800030068ce0200000008000500e0000001080004000400000100000000000000de000200000008000600080000000f000100080001001200000014000300ac1e01010000000000000000000000000800050004000000b1c64c056e324512bfa4fe0d1dd77c24420cc0008eb02db2c9cf27070000000000000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000240)) 03:55:05 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:55:05 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = geteuid() fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x800000, r2, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x3) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001580)=0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) r7 = gettid() sendmsg$netlink(r3, &(0x7f0000002000)={&(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001f80)=[{&(0x7f0000000340)={0x20, 0x26, 0x200, 0x70bd27, 0x25dfdbfe, "", [@generic="4f2060069305786c424a3fc4c9c3c68a"]}, 0x20}, {&(0x7f0000000380)={0x11f8, 0x26, 0x400, 0x70bd2a, 0x25dfdbff, "", [@generic="e6a410ddadfe24eff30b5e06a8c42266a272e8d03843ba43af9d09b5a0b329b2b5923e9e834a8289ad37a5a4a98d7ac5869c48c8e67f1318a4244a4f5ebbdb43014039a46475889bb318a11c2ce42be6e0a5e968287e80b70e2a36c287b6b6d280ce07e4c226dcbc7ab42f13de5ffa5d5e6218acfdd5133d2bdf1d6aa283c5396951bf9d68a856f51641ea5e0abbd3432245b4481dae7b6e53a2f4fb52ebbc8aa0fdd87b5a99600c5300c45bb98d88c689dd0a261f4081cecf8ec3bc9d9620ace3edafd225ff5ba96bd8a65289b52669331b148ade9da488cd7c58f28499d146f3cd4fd2a9e4cad34a4e391fbe", @typed={0x8, 0x51, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}, @generic="56f7a10249e5c9f2a9dd657ed76e77239516ed5823cda971506b868abb456fb4754690f403d328b3852b4e7c42136959c1e24485d1577a6664205f6e246da8a39fd33605a576d7218ea0bef9285c57a0c69fc6d4fee307d4858c833d203b11b5085889a74b8677d033ab9105d2798ffbfe7ad533e57079f00f56b7a175d059d04cab5e597494b8426e3657dd0fe0f1bbd0122dd872095139ba1a80c96c4c9d8c3017a72a576b38ab735fc55e64e5931d87c5efee2371e748a6a0be853888aaaed4c250200e7d371fc6da78806025be699e", @typed={0x1004, 0x38, @binary="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"}, @typed={0x8, 0x68, @fd=r3}, @typed={0x14, 0x2d, @ipv6=@rand_addr="2ebe53ad1f6959c636054da865090d25"}]}, 0x11f8}, {&(0x7f00000015c0)={0xa4, 0x13, 0x408, 0x70bd27, 0x25dfdbff, "", [@generic="7fabcba4d4bf74a411f56edb05151ddddf9ed489778fbd6d10e01f97221b671239827bf228277dd871cf9fd20e357249dc84880dd3d97754e5906617bc39bb1c8d5f9126ece2db51cf64971db3ce5c8fc81d9c99ff5a3b8f70873931c041561d4e0f33c8b59728fb893bee42be5d232e9354eef7d2cd383f384278df94316c89a3b16fab6ebed43a2f66028e", @typed={0x8, 0x52, @pid=r4}]}, 0xa4}, {&(0x7f0000001680)={0x280, 0x39, 0x0, 0x70bd2c, 0x25dfdbff, "", [@nested={0x188, 0x4b, [@generic="0651d465ca23bf0e2e5cc24599241d03fa54ca1c4acd44f44a8438121c8a1a219b79d109d97656cce649ad3a268a86126c4cdc4563ae64b6edef60e102623e22ee614b95d98802e47574a1ca707e7666d672571fd0d286296a55b0f7ebe4205d00a182f294211e36595240bd671713cd284affaa8e3e9fdeb977230eb0e568925f06a56d8a5594fb237d64eb06f47516876f0acb7074ee3c847042613d43c5e87a19cde0ce8689f9274303a78621aed38ce4d88b534cf54ccc269ae2e44261e6676af89ae52a76842cc66292c7f03f1ad38dca3bc7256d6b294871ccfebd18ca25a0b6", @typed={0x8, 0x22, @ipv4=@broadcast}, @typed={0x8, 0x71, @pid=r5}, @typed={0x8, 0x82, @uid}, @typed={0x4, 0x7d}, @typed={0x8, 0x1a, @uid=r1}, @generic="1d3b78756424cf7da4838043e46e7a8d1e13fd9c0fc74226ef72aef648335454ab1d55e26203e1f9ac891b2c506ea60e4de45c745bd90a41a89494c6043e392c4c6070a2585df4f246d731", @generic="6a775d617c7dab5c5dd3306a69045577c6e0341834627750ebb86d1edfb270125f15", @typed={0x8, 0x92, @uid}, @typed={0x8, 0x24, @pid=r6}]}, @typed={0x8, 0x85, @fd=r3}, @typed={0xc, 0x17, @u64=0x8}, @typed={0x8, 0x5f, @u32=0x3ff}, @nested={0xc0, 0x35, [@generic="1851081945c67d86d2e8f656db577ac264ec3a0dea2ad14b69074b431271cc414490f64be7880290570cb37b282986965b98398542e0fa226487e10ff9a7144145e81d305ae7354e04192293c919635d32a4ba2c0774bfe8f9c9fdd2284390c8e7b4c500fe5d80f7732db43ca9a6a20e80f70d3bfc5fb111d1832e76d19883bee278168dbfa93b046778365ea60fb7a436e2703f7c47af6703dc7cce24791665da8e0ea7ce69758bf814438a7e41ffe3513d72e0054b86deb2"]}, @nested={0xc, 0x32, [@typed={0x8, 0x45, @pid=r7}]}]}, 0x280}, {&(0x7f0000001900)={0xffffffffffffff36, 0x1a, 0x8, 0x70bd25, 0x25dfdbff, "", [@typed={0x14, 0x11, @ipv6=@mcast1}, @generic="c2a87989b5557d71432e69d5268f53dac62495fd1d51d1d3c834c37c76395f04c6d2a277e3c5b775e08b770a7503933183abcad9b2c4cab6c578ddc49af6855374625e26f8d27acdceae3fa1c47da7ec3bfe5059f2c14b7722b541cb139eba66d305424ce332597468a23f3867f9a9d5b98c5cebe66d313dbfa04b83500a74456d44656f187a4de61ca06aef46fca78e601c9a0e028da97ef4974a5b421e7ee65dd2e2ee738fe2bc5787992306dc1947d43b98c2fbbae331066228e7f29dd9ed92e50675cb50c418de2971dfa3b2e931395f9590f96ec89be34f8e83d6beb3d88ebecce870718bbc7f6c1e13473c", @generic="cf52bcd61774b3f45e6e64430dae3df7b884ae1994be03df6fad986c9ff46d4defa22d25ff28741f4a0103e8c909e830e841ff657eeaf8f935d6753477330080e4d497416d858a82326173356eb30ef120556784199992366e73769545f34452e34ad2d6e38caf0f60d1286d7d95f9f5554316d67994346d78919945d503a6a1e0f06c1e2e9c60bfacb5b005a83e3acb0473e5ee77c43df13bc87509e665", @generic="8645693bded4c72c99110388428fab917781445192c3a1876064bf9f5023a189d957ae5b89acba2ab0ddb3cec4ce0cd43af542f32d11e6430cce8a011dd1fbcde16626dd22484654fa096262956248c71f3eccfdd641d241f59d3a7bf59649cd3b1398d77567394d909829ad169f61459dbc31621089f77fdcaf64265eebafd7becf34f7469a144d700825a9e60d2aacbe20d4566b1aa026a3135a6384974aaf545e135c1d22fed81b9a359b5d95345d087bfa954cda58b2029a5b665cd99f382c09d09ff45d963a89b071a233b6edcc6c00275454d0de7935f8b7c0575c1e8a526168a74c5c6931f507d3a5daca784357d3"]}, 0x2a4}, {&(0x7f0000002040)=ANY=[@ANYBLOB="e80000003d0000012bbd7000ffdbdf250c000a0008008000", @ANYRES32=r1, @ANYBLOB="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"], 0xe8}, {&(0x7f0000001cc0)={0x110, 0x25, 0x0, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x63, @fd=r0}, @typed={0x4, 0x51}, @typed={0x8, 0x47, @uid}, @nested={0xd4, 0xc, [@generic="443e0dc57d9ca6a635be488b6b82c348c8499a9c87f6641a735f391c5238815cd80cdc02db42836a092c274df79fb12466391100bf15ef4a8ca4267a5af8eef1d169100fbeb21c736742425679be8f8e774f7123e78cfe09b565ddc5905fcce4f4c7a485e0912a319c440652ea20b5150fede5504101444a41a3f841c115757c6b06f4532b50f41b3de328b7213e4cf89e36733a2d64b0cee96b6b689abdf3d7814558f33898be9d14fd759e1eaddadcc4db9bdab8b7c8d52f8d91b7d9b0e70652f44047030e44ce0234a0e19f82dab6"]}, @generic="c0592abcd743b7757191424de7fb3380c3f426337b68"]}, 0x110}, {&(0x7f0000001e00)={0x158, 0x3e, 0x20, 0x70bd2c, 0x25dfdbfb, "", [@generic="28dd135e7e177da3961cbe8a3e6bcc9239e052f33dc728987160a7aa3c13b2ffa5ac84d6de3006e5b2ff0d71da1d75475bb888820ab66c697f3651bdbc91d8ac2055c7f018f4266ffbadfde72a812a08bdfe96996745f005bdaecb7f302fb5e22d98889d56190db19c3fcdab3012f5255bb72a5803d8c14a489aba5fd5bae46128e5c2ba80f7c50a77da14154d07ec3d4e5206087956e0fa6b1c3e6adbbad5984437c5e5bd58ae0ad15d8d3c2e9a05bc0910b122b3d7ff62d1965b4478ceca7df0f68f0ff748d26bea54e25ca5086d2573772a1c475cbc5053bcbc280c2b90510e610fa9a4bcc4237dde13ce0877c7", @generic="9056e37e7fe6c7f52d3929b751a07240c6c5aa67bbb904c2343ab22aaa9134bd8673320bd43953867e641e567822c275bc7699a69bfaab3244806e7340bc7b3ef58af686351f35a7eb33d9", @typed={0xc, 0x40, @u64=0x3}]}, 0x158}], 0x8, 0x0, 0x0, 0x85}, 0x880) prctl$PR_SET_KEEPCAPS(0x8, 0x1) ioctl$BLKPG(r3, 0x1269, &(0x7f0000001bc0)={0x4, 0x4, 0xe8, &(0x7f0000000040)="bb70aa70f0f65c9ac12d269b75b49cdb63cecb7c185c8f73910cb7707cd52d310fa74ec614789780992faf95952ad6cee231674f191d7b8108dfd42d2127fc48268d1df904a75b9c3e4812815d3e6b4d289ae8604ec6803da84f4178231748c5654e5f01281ad66d170c8b50e3f05efb3533170bce20f1ffb22524d26cd782ab3ea96376319c6aa2fb1bc5f502d3fe8378cdedc783a697f4d57f02ae29e439a7dfdd9c772477c94e619c617bacb9211cb8c5b527e28dca55ebfd741cdece729a78fe77748fb8717cf63d3f8c81e1680d0b860acba0adb0a2c5ba705721ab4a639f85f80ec342f120"}) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000002c0)) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x8, 0x0, 0x5, 0x8, r3, 0x2}, 0x2c) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000200)={'nat\x00'}, &(0x7f0000000280)=0x54) 03:55:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000080)=""/36, &(0x7f00000000c0)=0x24) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x4) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1) 03:55:05 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in=@loopback, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r0 = geteuid() ioprio_set$uid(0x4, r0, 0x20f7fffffe) [ 2237.758820] binder: BINDER_SET_CONTEXT_MGR already set [ 2237.766738] binder: 29861:29880 ioctl 40046207 0 returned -16 [ 2237.777445] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2237.785696] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2237.794508] binder: 29861:29880 transaction failed 29201/-28, size 24-8 line 3136 [ 2237.802454] binder: BINDER_SET_CONTEXT_MGR already set [ 2237.807764] binder: 29861:29880 unknown command 262144 [ 2237.807771] binder: 29861:29880 ioctl c0306201 200002c0 returned -22 [ 2237.809931] binder: 29861:29880 Release 1 refcount change on invalid ref 1 ret -22 [ 2237.827388] binder: 29867:29882 ioctl 40046207 0 returned -16 [ 2237.834879] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2237.842647] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2237.851864] binder: 29867:29882 transaction failed 29201/-28, size 24-8 line 3136 [ 2237.860730] binder: 29867:29882 unknown command 262144 [ 2237.866428] binder: 29867:29882 ioctl c0306201 200002c0 returned -22 [ 2237.873269] binder: 29867:29882 Release 1 refcount change on invalid ref 1 ret -22 [ 2237.883123] binder: 29867:29882 BC_ACQUIRE_DONE u0000000000000000 no match INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes 03:55:07 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f99f5b0000002d0267237b066f66db683bd51f36bc044926e4ce1ec260774b3a6a46e7080008764fec8a9070febacd009a1c79f727"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:55:07 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@multicast2, @in6}}, {{@in6=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) ioprio_set$uid(0x3, r1, 0x404000000000000) 03:55:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) ioprio_set$uid(0x4, r0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='pids.current\x00', 0x0, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000240)) 03:55:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x101, 0x8000}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x84000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) 03:55:07 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:55:07 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x46, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:55:07 executing program 0: sched_yield() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 03:55:08 executing program 0: prctl$PR_GET_SECCOMP(0x15) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) [ 2240.097326] binder: BINDER_SET_CONTEXT_MGR already set [ 2240.104002] binder: 29891:29915 ioctl 40046207 0 returned -16 [ 2240.104328] binder: BINDER_SET_CONTEXT_MGR already set [ 2240.104335] binder: 29888:29914 ioctl 40046207 0 returned -16 [ 2240.104521] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space 03:55:08 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, &(0x7f0000000700)}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 2240.104527] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2240.104543] binder: 29888:29914 transaction failed 29201/-28, size 24-8 line 3136 [ 2240.104977] binder: 29888:29914 unknown command 262144 [ 2240.104983] binder: 29888:29914 ioctl c0306201 200002c0 returned -22 [ 2240.105051] binder: 29888:29914 Release 1 refcount change on invalid ref 1 ret -22 [ 2240.108880] binder: 29888:29914 BC_ACQUIRE_DONE u0000000000000000 no match [ 2240.170025] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2240.170034] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) 03:55:08 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, &(0x7f0000000700)}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 2240.170053] binder: 29891:29919 transaction failed 29201/-28, size 24-8 line 3136 [ 2240.170377] binder: 29891:29919 unknown command 262144 03:55:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) socketpair(0xf, 0x800, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000080)=0x8, 0x4) ioprio_set$uid(0x3, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb3501c3d7abf4bb7bc528561ce2281b62e6fe4eccc5da8a02d3ee941a647589f1aaff599413da615b2ac0b8497fbfe26805f1dc"], 0x35, 0x1) 03:55:08 executing program 2: prctl$PR_GET_SECCOMP(0x15) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) [ 2240.170384] binder: 29891:29919 ioctl c0306201 200002c0 returned -22 [ 2240.171139] binder: 29891:29919 Release 1 refcount change on invalid ref 1 ret -22 [ 2240.321937] binder: BINDER_SET_CONTEXT_MGR already set [ 2240.321982] binder: 29921:29923 ioctl 40046207 0 returned -16 [ 2240.328730] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2240.328748] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2240.328892] binder: 29921:29923 transaction failed 29201/-28, size 24-8 line 3136 [ 2240.335740] binder: 29921:29923 unknown command 262144 [ 2240.335800] binder: 29921:29923 ioctl c0306201 200002c0 returned -22 [ 2240.336326] binder: 29921:29923 Release 1 refcount change on invalid ref 1 ret -22 [ 2240.367244] binder: 29921:29923 BC_ACQUIRE_DONE u0000000000000000 no match 03:55:10 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x40008200bfb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:55:10 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, &(0x7f0000000700)}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:55:10 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)) lseek(r0, 0x0, 0x0) 03:55:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xce04, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 03:55:10 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x47, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:55:10 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:55:10 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4203, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:55:10 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)) lseek(r0, 0x0, 0x0) 03:55:10 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x7f, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, r1, 0x0, 0xd, &(0x7f00000005c0)='/selinux/mls\x00'}, 0x30) r4 = getuid() r5 = getgid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000640)=0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000680)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@empty}}, &(0x7f0000000780)=0xe8) r8 = getegid() sendmsg$unix(r1, &(0x7f0000000840)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000140)="266013f3a11e4ab00a3a40a58466e3bb4f58333f2fa79f82055066d3d28bb5fd84b0217648e3820c043fd7e02eb8487e51da46216ea46c2bf5c03c1c2f868a3d0d93c7a769f7d0d9abb842ad5c522ff77ebc57770e0822e645705fa3c563b1efc396969155b64340ab5b8314e71b5aec704c6331", 0x74}, {&(0x7f00000001c0)="57ab04a848a4be223005fe932b9a93f70b2d3a022af223cca2a61e76860829ce222c5b1a1826b1456bae4367e51743b96145628c9372dea77be68b227ee4dd7cc86ec9bb6e881904695a11472800a1e6f89498884b7080acce6626a6d0380d7430d3", 0x62}, {&(0x7f0000000240)="362b10610ec08ea6a8e23d11dad3ff9839d7f78416a2c86e4a7218f21f819fb053e7a14d903fe0a3b8e908af8198a63739fcec12c343c869bb700b76a6e8b1acb5673a06e7edca68f1c7fc8369f5282f871526582cf485df1ce0fa4a67f706fc8538d7a097c82c357b1d3041a1f17d98cdd53a50d902bd716261908e2313fd1c0f36397a1f37e13377e35dd0875dd29336179dfe71b4e66b501fc9610fbe805abfdbd6d5b199a37f13fe35c43ea95300697083fdba08d282bfb4f76c951fe402838736", 0xc3}, {&(0x7f0000000340)="ad2b", 0x2}, {&(0x7f0000000380)="be682fdf892628f8d218923afcc8c0129faad20fb7532a28263ac8f4276fc05530ec5a0a8f49f8499bf9e6f4009de6dd6b262f2c73cd9a87ab3951e43b0caef77a027a42fb18d05b2aff8c475e09342bff2a1e0969ed26ebc0f16bbfa6cf6f8cd088472eb3f5fb9801459271658104ebec22780047e0e59ee240500a9334b5da634698e1ec0ec61f0ead8c5929632705e85b256403a5643df9a23c42f716e6efda6123872e9cd6fa16146804344bb85a866b02", 0xb3}, {&(0x7f0000000440)="5c4a61b1ecf55f8fac129ac964b88182", 0x10}, {&(0x7f0000000480)="d2537611da17656221ee30a51fec1422ae932b2e4ed32bcea0e79eaf13085928aff7ba12247f2a2a857bc68286f3ad919182af3b798f8ea225d8cc4155b37eb5635b79bc33b529f92ec8d3a4edd818bb68ae238fb20b00befb2de6f7d2ad1698739efaca41d118003495a3ae4e6c294e9a8d118f9395f20aa529591f96993d2ecaafd8ec64dbd023d5", 0x89}], 0x7, &(0x7f00000007c0)=[@rights={0x30, 0x1, 0x1, [r1, r0, r0, r1, r2, r1, r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}], 0x70, 0x4000000}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x6, 0x6d3, 0x7}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) 03:55:11 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, &(0x7f0000000700)}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:55:11 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$setopts(0x4201, r1, 0x0, 0x100000) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:55:11 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000080)) lseek(r0, 0x0, 0x0) 03:55:11 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) tkill(r0, 0x5) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:55:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9) ioprio_set$uid(0x3, 0x0, 0x0) 03:55:11 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 2243.121509] binder: BINDER_SET_CONTEXT_MGR already set [ 2243.135270] binder: BINDER_SET_CONTEXT_MGR already set [ 2243.141182] binder: 29946:29970 ioctl 40046207 0 returned -16 [ 2243.148540] binder: 29943:29968 ioctl 40046207 0 returned -16 [ 2243.156889] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2243.156911] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) 03:55:11 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) flock(r1, 0x7) [ 2243.157052] binder: 29943:29968 transaction failed 29201/-28, size 24-8 line 3136 [ 2243.158617] binder: 29943:29968 unknown command 262144 [ 2243.158637] binder: 29943:29968 ioctl c0306201 200002c0 returned -22 [ 2243.158972] binder: 29943:29968 Release 1 refcount change on invalid ref 1 ret -22 [ 2243.189367] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2243.189374] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2243.189393] binder: 29946:29989 transaction failed 29201/-28, size 24-8 line 3136 [ 2243.194673] binder: 29946:29989 unknown command 262144 [ 2243.194680] binder: 29946:29989 ioctl c0306201 200002c0 returned -22 [ 2243.194771] binder: 29946:29989 Release 1 refcount change on invalid ref 1 ret -22 [ 2243.210740] binder: 29946:29989 BC_ACQUIRE_DONE u0000000000000000 no match 03:55:11 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x47, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:55:11 executing program 2: unshare(0x400) lseek(0xffffffffffffffff, 0x0, 0x0) 03:55:11 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) flock(r1, 0x7) 03:55:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000071c0)={{0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x20}}) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f00000070c0)=[{{&(0x7f0000000040)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80, &(0x7f00000025c0)=[{&(0x7f00000000c0)="4440163373470e491e93c6a6e324e7eaa9f1f0dc2d363054c1cb1c02139358c14487944ef3119d091eb1b622f4db778e2e9eec458ef1a09085b156015c0abb8bd6896f4e1a", 0x45}, {&(0x7f0000000140)="6d107c7b87a6d3a983c732161e0dc9779657a988950c1ed16ae4566c0fd1448b0187298a2bdda6cd41403078da6b2f18993953b5a7b990a52f549ca8623b1fb4614043726e05a56fbbdc9b403c5964d97b2455a4d3ffaf15955ed8088d5958e4d323aeb21d900b4f39ed55ed222df29723e8284e1e74e8734927ba15", 0x7c}, {&(0x7f00000001c0)="379f63fec5c4abc4c55ddbbf5b117afcf6ff61578ab4c9d6ae3f691dc75a8cc10a408b5420591b0a4adfaf5eaf0d8a66a9ff695164671f3408cba665d0c61f90debff6f4bc4dc31cf93fe67d582b892efe247fb74ed480fbe201be59f51178ef8adb2cce08b224efa322f57489ad83beb0a3e7156ea477ce691701f16357690806f3a69f87a67bf6cfad841d9a7c6947da4a0ef71b2b9baf2dd133bfed28428df3a21bd2700b1cffcc63fb6606a88960d22e2760f6cc81902482a59caa350e205811c70126599591a9609703bf37154720735d6d2a6940b3bc082e7a950b7e2a7cd9b0b9f953216cd86430ebea9720ee4bee794c08d1b42a487d039d2dda8708c3baf906bcb7cbd1257db78d2c753cfecda8021bb0410b406598aaefa9ff95c534f199a50d4081c43ba052f6d93962f4bd89c536189121a8be4ee8967ff3ae344c570c8cad7c803d5c359ae298d2d2bfc9be7b50b25a2760064edc5127e594b7070e80808b29eabe1f6d57b465b130cb5867fb3f082e5d205db0c770ca3b7c1fe169266226dc8d35c7438e9eadcb3041a3d54af0bc3f62c13a10c4b890e28bb2666d11b5db3f1285591ec20fec2358964ebfbf1ee50364dd4454f7495a1846937e84e44954d1440fbec26feb2b9bd59fa60968c85e3115206833d0e51e34e591b531efd8f5d13ce936833a4498a3d4f5c1d383384f0572f3d6bcbb9cfbbbdcabf0d3180478e578826c89ae7c7799099fa2fc0eaead7547700179195ff06895f1600eec7489b5e77bfb4133ea2b03636e4158473e780def975a99795a83329246c8e0387854a99d70e1aca4d6b9ace54558357f5aaa2164f48684f0af7cd408095f2dbd41155d1eedbde20e3862a1e28bb669660a34550098fd888b1f0ef1733a0ce3bb1b982439a7000d0f767d54a1261e4aba8ac9461195016ea95f64cc5c0e0099c9073d7f5c5c01218e1de319108ad6e5255f8a5c3af5871777b7216412e3727b8dc8d009f207ff3ac881f7ddd7f637669a53edcc9fad27bfb4d24295a4db924da9ef6fd928e5ceed506a62877cbfdcc3280a03918169bb6942276cda30c798dca5f3446b053f57d123c245851caeda17330ed0f9759c05122658b186ba62b06afe34084207f1d1987dd99606afb564bd7b17ddca69a38329bcc8f5a92ddf48f21240919a79c8fb8a8564f2a321dd35422d404908d3e6eee549d2b040b5a800513b3b1175f389723d121d24b8d2d6b261486d82219d838568d1b737f767167c500e734ab6193b394f7e645871e630c4d119d4adbaccf8f6e9a38e6a2c89ee7e2ad768074a836ecb9b504131368b25cd7cea7b6165df63aadd72b50378d118985765b188751a5963decbdc6951306b4a6dba96f62e2a50b7c6aa92bc74fcb85f5dc8c1307b0166f1b65d619e72d648b0dd3d652fd29b62f692a5e04cee3ae22dee78044a1616da877d792f4ac5717f8657fb8bf6a84849934e1b7ddb8b189b32be6187e01409345f74fd51f48625606c18325c661d637024a17e9b0e7b9764e6539671e81ab4a026bd6d546cca9fefb3cc2b6145038e4f85b727801fce4f11b04d46a526c18b406f9c61c16bbadf58a50e00e9b159e6f4038c9c0285b9a933e49ed5d223699c98c5b952fdba9b66a96fc38e87813a4d74d4b3aa0197eab7af11fd4a6e7d4a2aaea49bc05c3b4f71e123fd8581896b3e0af2bc4bcc163a40eb538abd00d97f539d45b915d457e5038781fe619a07890d18e2eefedacedc8b3c4e068853ba30d62b5dc73d28e75e9a1b031ae89207411103d49a15c12dfa81d7e17ae47be58b2e9c8484af89f95d7911c7524d0360850c9ef1fe359a935da8e3fb141fcb95e9af47835bd0125bb2814f01cc114f547fc231f4134740e69862b8ae1508a2368e03315d740be1238a3b74280f5e9a0269836f0a69e5da2f9d9237cc59c06fcc4b42e521a8796c053c7c2929e35c179e9c5e905295f41247261c90c2a443082cb94ab78c81663208356f0ef060b6b39d8d0c1fc2818248a7e87baf9b82031f21fa0349fe59179ca5b8c8edf13e3e937751301993ed6d709df0f872335e3997f77df5b04704d97085e810f24d9cf840217603d90517704dccbffb80d78f72ac5020c447686153564bb40c4f0e68da350e8728cc140155a754704c1845da83efdc8aafdc9e25dc46f8b9204f53ccf545e1c5eed97af63ab201ca7511682d03d6787bdf6f7dbddb9eebc4c9f350b6aa16f9c039670e2ded8c86586ae1acca8e41ca56e6b4e75175e5b3bce01395eb7b3774d1f1f9c4025458d05d6d6862a114a9b119430bed83992f9fa01c188fc7e4b7171594d6333c2654f71ed8afe88b6b3c2ca8d0be0450e7e8996c8688a9f400aa268f296f580b1c74aea099566187d29ecd512d33dd30d6ee1347d82e7cc7e34923af4a890025da376af5ca783b37e364550291a0b5f4aed92b7d489d813348ebf1dd71f93ce4075e2a2f1cf491226e1ca9bd0fc89258142be833696b436616f4e79e9598fa1262eb4103631d4c58d757803936cd67d55e90f7c6527016cb5c0c5b1b94a198eaf2f28038a573d911cccec5346334928fca92980452f610c9c80a5f8693c15d7b97a97b770018f9d9096546cfeb972e4c56d4eb21736efc955c9583db59bb4efd13a3e03493c28d796761c3a36e757e748b4eb5496f34bab0a4742ebdb73509221e2d8d4884172daf9279a0c75c1831034e8106786dd97cfadac0bceed9c4d24b90cd81fc24349eb297373829c187e364ed3ffee915c266c021d40851c1379dc20a058ba57fa4873c36b09466946b327a91e073e71ff45c974f8200b492e436aa07f6ff470e0b42c53b74a43c95fe7aa21710939a3d0d5547d60ca9b6dcd24a14a1bc1463e205ed478638eeeae793f211ae08a409f0555c8aec4ea8b052c9bad545fb81ef3885cf5062538951ccdca6725a77db912af20fd251ed45c80d684b03dd975294842a868375182b23cdfb22b1d2e35e87c60f80d40f18ed6f9c009883f3aa45373ab9497f84392033b8f8e02b440c5d0084e78e82bf4826b27de86bb9278d192b5bd762bd861cef0d2c35f3e5c10af1563bd4cdd7c68c39da2e6b461e90d5da715a1aa40a3ca416a2a2c0164731438a620fba2019e90c082a23868938bcbd9d6b5178637a69d3ee4c5caeba37f2aaa6a8be0e6c6cf44ec5293cc8a758cf88fe4b96077fc8d47b2ad17397341d93a16286d0b800436f6104ceabed099717c5b02df09f9427e5a45dd6eaba022103b403ec925fccd191a9e73974e8b8cc4819fe6f822b8c3fef42503a5007be69af7179c98dbab8173b5331fb4a08c0add084a7f886bc157eeefbaa55919fc1602fc5cabbffc8909d775db7c0bcc80d859c13e7c2a51368572c8f51233c04d5f713eb7097a75184a58cdf54b5d451e2d21ec54402735df85b51847c89e61078364bbf926b226ba12ac8e5a282cf8ab08b8f3c81f26e34aed73d0d5c25725cb79cf37bf64ddf57af01a0bf806f5df1be2aea11781d249c33887aadaf769fa2fa158672060da00c2807ee9890a68166d1d96480f22ac0ebbeffe5951522426dccf6dad6016c2512025a889069049545e2c5eb149d87bb6f6a977aa88bc6558e51f6d716afc6ef5660b6fceef51f0d877c0c268f5a8391199b0381260f7ba5a6634aadbc001d64dec3dbc2eff7e21e87b1c65fafb887d4cf7ff48ce08fc6f9c5abd7bd641ee405db03eb8a97b18727dbb4631c4429adc0ed1016d566489f53aed9bc8e411cd717019e54a6d53fa3ecf7da1bf394daa91c77a1e7f9163020917bc33d4afa566ff483304a48974c8af2311355ce9d531796a8ef1743f3096f7df23b826eedc44802ef08bdef2a7cf9250be0ab4639b3310728d6343bc0f238673e1d02364711fc04b31ff3d1a15f2d5f0b5b22a39f9e61e403caae23dea6bcdb754b92e355d62dff8ec3848b1f6f448d888c5ccbb4475c87ca1d3eff9e320cc5ac8c13097577ac41dc8954a383d2ae4cdfc60eb37482013e53d0c989ea3a51cdc8bf6eb6cd371891fd859051464f4c444dff32d3ac089625e3a79757ecc06a7953a44467c235893fd412ef5591ae3ab4025cc39d6e920f839903e98fe86d9c422afcb8182031bb0c8cbea1c0bca0bc870c7b22d58cb09f02a4418e97f60f90aaab60898c6c5e6864d58edd3a2b117b29522893c1f1f2dc2b09021e46f3edde29b391431a985953df26456774fbb4c5378b77d89555b0695c6a47344c414db8fdfb02f496b7d05b828bce63148f75c7894a113bc77a4a855afd0f71784d2a453dd742a7e1350ac0cd862e9294c56175478c00dace64484561ad660191e844e1a1452480d8c20227b336cbbdfe7f0e90fe83d6772582939c487564040153f9725147f54d81ba82230d665abf621a91bcb79ea123eea8f7f70450fc6b25676891b91043d908d4182ea9273e3027c0f156af5c199059054af0f9a96c8d97e15704c906f933d94c358166e350ffd785077a24be36234772a3c2d5a8903fc7d0384562eb5728dfd5a9147ec580037d8ed92e175c72c03845f43338e4c91abdc9f10b41d52ae6f8e0d5f8b82ef58db6f87b15b9de17ae8743461a40ef3d1acdbc9a07741147051ab22dc86bfabfed0a8ce43ab0d816f6887161edd22473c77945b007434c875b361dea3e098a485708c4d81c77512c1045354ca169bd9d72869d35df67820e6ec892ac4a356a6a562b0de16aed81f06bb98bf409508a6b067df0b776cf1b860cbf367e9850686935a56081597eac6998ec1f1b6626d7157e9d08d66c3103308479c5d5f686c8d4888b94acf61a466d0f8d50309ff8c6653dcf5acdb6023c702205d0b18ccc82fe10106a8fa4e49015ada85b4d73d537addaea12d7d543e32dedf07e8b35c05b38e186171c7c92611d2ad5e86ccef8255dd7f03ef85382bca0da836ecf33084bd31fac6c04a60e9d98c7558af05991bb1885762394bd3fb6962fceb8fe53a6ff91fdd76e792114ef341d92ca51306cad8856e4191c8ee61161a362e7d9c5c36002adf28bc0da5a6be0494d29fa15480ba98e4bf6a301d0099446a99e882bc7ae24126d3a636d6adf5ba4c478fc09b47d9fb79779c6df65ef7586228ae777951eed7f96f3b841c0e0574d8709bcd9955fd9e183d0a6be30c0534bcdf7e0e9ed556aa943ff7e1df831deffe9c10b37a3ecc96670d0764d3b3fc745d28f77e4d6c38363bdddebcb39d8b495a4986dfa023186ff630adde0ebd9dd96672a7e5bda2ff610f47bce8f74e4061b96e8769085bdc65e49efa9d68cd63b26feed1615f636568598e195a8af9b4cfadfcd5fc8dd74d86b000371cdac07d172148a0b563de2baef0a7d9eb87b76dadda2717bd3fc373e58ce0fb3db0c6b1813f33bdfd0f6edb106e5bd4834eb58d19ae8561b12a98c7bbf77e49601b08452d82a2321b2443e985f86c70b5ce0e8b71b8aefb8c91b05c9f2ce0742d77eb2e57557f2406803746ba9437bb477b77be5fef78478b99b08e667c447fbfb8e483c8d6b7148c564deb7e2a65bed1d0f5cd198801a9849a68ac7f04779dee6a007a0a691960c41a20e42f474523a64ce2baa80d1c798c76e42ca01547554bbe6bfe573cc2330bd636b672c60e4635b8d5572c9b68391a533efad9418cae8ff92a5687fe16cdefd585a4552f3f5e5c31dfae5c8762f8d0edc5b7425df669797e420bd52cb91592c4bdb84e8d68fa8555ec2b57acd61fee18debbca501e153e19ba963cb5c2ea73b2f3518c570ea8c453d2a95edfb5f0ad7f553", 0x1000}, {&(0x7f00000011c0)="de11caf08b325408b88a235d7cab282c7c8aa49f494ba7621a7db36d5dc30e831a844b13761785d489435fc8ac03a060472956c7b3cf7740a922ad158cca4fc3600a9a8819", 0x45}, {&(0x7f0000001240)="d1493b1a9db5d8f3852155676e918ab7658791d10d6d02d8495dbe27a4a37a37094660f7cb9d342aaae648c5fcac651f8e9fc1be41c5d96e3a319f5444b2cd0bb83e2ee65cc160f50db6149c3e0d6c7d88fcc61c3c4deafc06a3931ce0a040c0966d7efa9d99f19397e8e13170a45141eda382e921c0b62269422002e43fb858ee1463d260bf3103cb31d17098b562ea388c5c5dd1dbe8f2b370942f3b581da44cbdd81084fbb020d070c7c6a2c5f9b3d3be2cf8f59362b419c0191b785194db1275000e4bd85d83da86c1653d8612226880689836e8ab2b9e4a37ac70bb5f326e71ba95284c", 0xe6}, {&(0x7f0000001340)="d300c1ed54baf74f5d3f960705d1af132336c2e0c7c3b31f79189bc793af0d0b94", 0x21}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="89500e4244341d4d442e6f6778c9eecb054319c6306e7c2c672d8d6343bec848381443deb8db0c5f369b8dec3e125fa6d9ca8d82f56a74cc90724d849360036829fe71e72125311ff2b1452d1a9b1d00d7f595776c8be627c19fa5fc8b7f01416b70467bdd050700a8d6c7f0bea283bfe0a9fa886fa5de0f2294373969868e0fb4a7654e2e941c0048dd62385f14c85bfdf178ec33918e4fd7238cda099e8fbebdb152389189067d741630d65e7614704b3be588de71e01e3a319dd598c5b076af", 0xc1}, {&(0x7f0000002480)="285cda864c1eeb8edc7796a00606333e856301bc41e9ef0ceb37cf56b7a1d49dc05746a3b54c744ed19186b52fb5a21e1cf0dedcd0c4343956bef80796dc20703b9f0b8e83f8f141c140b244fa8e4ec4a20b26c90b00fd39330ebd1c028b832c159164ef520b77a087620951db3e1dc9ee5c3b3a0a13000598af3181eb7bd85d339107678ac0bbd671fccfc1eb5d5ed42d0d81030e4e9fe7613650fbced527a2cc7c33043200792bbeae4c7340b63aa2e0", 0xb1}, {&(0x7f0000002540)="b871727893282614eccd7ab3022e3ecd9df277e2faa57908dd0e8565ef0cbfca946637db2c8d27d24534c78f143ca6a20918bcc248add6b976ec8362d6b172ab0832d614e1ca7de34ad6da0f0c", 0x4d}], 0xa, &(0x7f0000002680)=[{0x1010, 0x13f, 0x0, "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"}, {0x90, 0x19f, 0x7, "8a80363111d7f7a13d473ddefe9614397a4290795dadaefb4677ccbd1e3b64744d52c0d58b4c69f3c85b769ad9bdbd7a477c395b141ce83622541314cc3a627516b459b3b37766c9c6a1e09161207bec86763f603a5108679a44a4fef09c23caf14ae99a01624e0cf421a167579d484970526eca324de8100e429f67"}, {0xc8, 0x111, 0xffff, "773e36a19374debf1f8f7a331122668cfe65cd54dcc0a1944382d6387febe06a2539538c5a8994fce644eaf1b4116abcdc10e524083f35c27e193412c99a9291b9c44b47eeb73d99ba1a66fe9baed978a58885f107fc2fc90d31df442f023930dbe45d2100813d2b7bb365b26edbab4b76c0bab24d90a4e7e89bf7f3a80666c26955fdde7a59cbb63961ac5ef972dfaa759ce1d5cfd22982c25988878c2dc112527a605704d3d0fa0cc6e613e1880fcf4d"}], 0x1168}, 0x10000}, {{&(0x7f0000003800)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @broadcast}, 0x1, 0x1, 0x3, 0x1}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003880)="63cc6cc5e2f5ea1b30128137cbd88adb14c1b77c6271e3d8ea7abbd745a5ba6580333e3cc5b10f7ca7ae58903370c25e0febbf77c355e9c26b8b52280fb65610d7b6e1cd129aa283162b0dbca65bc28210ea3404e84164f25f9de4fef498e42ec04f8be9731fb31126d75d57afe7cda15c7b54ac5292a7679bccb0e6c6cdd44b1d8805e6b41076c5b73b9623ecb3ce9d9b979f1d1d3a4d90e3af92fac5c818fc212a78bd6cc0523dbdda", 0xaa}, {&(0x7f0000003940)="c0f5ec", 0x3}, {&(0x7f0000003980)="6413d0dd0ea2c44a5175a0d01ecb9dff8045e3b70201dc17904c6987838eee25a4ed1b7eba18e9b32eb2e7b959fa614963925cd713613cd750049ed988898573a39a23", 0x43}], 0x3, &(0x7f0000003a40)=[{0xb8, 0x88, 0x8, "33ff53ea82b5918fbfdcf5b00f6573be42079ea0b36563ac4bdc4ce7c1c1fd68d4cc489dd358ee9fd36e8bbc0c832b2113d09de52cfc031eedb8ca85782af85490bd675f79b3b4b675ed2a72046305f8584825afe3ecf3689ad7eff343d290538a9be6c026b6ad0f299831fee63ce0388ec18a069491d04566d78ac109342e5be022002f5248fcde4e861e45b8b5b642c258720f9a0bc29d808114a0c5385978a884422579825262"}, {0x1010, 0x0, 0x800, "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"}, {0xd8, 0x116, 0x6, "63bdb3dad1a5f3f1600f9baf758fb2122f4e5e2aba036462b7aba6b55d9ddabe213af87515677bac8caed462a45615d41bf39e80656c403091243a0d3ce1773b057bf450da966b37ed281f66eefaa5cdeec3858f958ddfe4e796b84df620f5f24656925c6ded911a371c6971ac2c9035a893ff07d0e1d49f12256af71f581438648989636c13c7226a9e79e5a9b74adaaf546652247f04ce71f4ce7128d8fc3033c35c0054e977eda5f736254fd4fd13db4a929ed5528516f4917ca657a0286675"}, {0x68, 0xff, 0x7, "4a1b848256e4f080e3d8a7e3f00949281aadaa767b3ee23d7c2e3089724cfd241c261d2de3c28907153a2be75e7d35f9ee4940f6f630728e581f793d80c783e5a1bafa02f38d1ec3b0ef359b883ce4a36d6b"}, {0x100, 0x118, 0x6, "fa955c45e3a24ec19bb0c44a56277a9bfe7f7ae61a286496891c43ad0842249c09a05d8d14a4ed8665d56b7c299768b1cadb3106479d1a87f7ddff34a25f6dabeeb587029a2363551e38bf5bddd40969e6a7ab355365e4bc7bb1496cebf82bb8484580a3a330abc49a2a1f2ec751ebeff502484aa77d4b3c033af8487c358491fa4240c3aa1dc36924122d125ca9c6699bba642f7e825d36883ac8dca44097a6c0255ed197aee2aca1dc02e76ec10ea6976578323d766c475fd2a3d5e69f9d2b12c5933027a8b0831b7e30830db8db76d480e3b4181d339e9ac14926ef7056806ce066d4a623881b28f4751d23a8e4aa"}, {0x98, 0x1ff, 0x0, "4ac588c98d2e4d606ac320b040bfde51eb73647315717604b77e00d050c121afca1678f85ad0d4cc843d9f4fddc9069cfca5bc9fe17ca64a94542738293004680da4bc3b41a1f613aa39090c4d92cd1a700f506d32a950800030dd59f95452e970e493335a0ab5093ad24fcd3c0b6b5e98f978d6a4deb06c8d3bd62f9b23182b82"}, {0x40, 0x10a, 0x400, "bbce0bcb1170de29d67cf713e45f175883a4b816b4fbb6f28198ef2f89c7bee35bdcac10787a5f3784"}], 0x13e0}, 0x9}, {{0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000004e40)="2d226dbad017ab221f23913981f83c39c31c30e03788ff99d089804cb1f4e00e0dc4edc226dbea3d6c079bad9c94b98e45a80582d5f7504c7a28448f6902dd3b17805074a84e93bae4b8da0fcc487f357a643acfd1f2a7dbf8d7e60202eebcee0edb5ebf6298329794329b4089d866fb4c972993aef2491915c27a6d11dd35e97fda7c6d3f858236a04d88e145fcd91f390496e1a0dfae0c7d7add62aa3cb4cbbe14056c9650d5f8121cb1f527b021ceede8ef5f794d836e4c935716fdd67f2f0867395706eb49cc37d262a75359328bc9", 0xd1}, {&(0x7f0000004f40)="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", 0x1000}], 0x2, &(0x7f0000005f80)=[{0x38, 0x107, 0x424, "62756b105813f86d26877dc9e019385693ce510d903b647b68b4dfe668890ba334442cef2b34"}, {0x1010, 0x107, 0x6, "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"}, {0x38, 0x11b, 0x7, "a4c96ef58086095dc18160de32fdd33e72f45a2d82a562cfae12e5ce76df8893e12a7d"}, {0x90, 0x104, 0x0, "dc01aac2d4827cc94531ff2cce0de660eadaa08dad0e99ded5cde4b1a4a0adb59035017036848540769b36331c6061fa8850491ddb3c02d941882fd2ee0a35f6f3327308c27416891b94608eb27aaf5b579bb04c20e4e75e010dc6f146f57e7d6d3b91e02f5c3e31292c66cd8d2c8dd89096457acc8e1c2683"}], 0x1110}, 0x1}], 0x3, 0x8000) 03:55:11 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:55:11 executing program 2: unshare(0x400) lseek(0xffffffffffffffff, 0x0, 0x0) 03:55:11 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x300) flock(r1, 0x7) 03:55:11 executing program 2: unshare(0x400) lseek(0xffffffffffffffff, 0x0, 0x0) [ 2243.908150] binder: BINDER_SET_CONTEXT_MGR already set [ 2243.929208] binder: 30005:30023 ioctl 40046207 0 returned -16 [ 2243.944325] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2243.952122] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2243.960920] binder: BINDER_SET_CONTEXT_MGR already set [ 2243.960928] binder: 30012:30027 ioctl 40046207 0 returned -16 [ 2243.991162] binder: 30005:30023 transaction failed 29201/-28, size 24-8 line 3136 [ 2243.991238] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2243.991245] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2243.991271] binder: 30012:30027 transaction failed 29201/-28, size 24-8 line 3136 [ 2243.991753] binder: 30012:30027 unknown command 262144 [ 2243.991760] binder: 30012:30027 ioctl c0306201 200002c0 returned -22 [ 2243.991823] binder: 30012:30027 Release 1 refcount change on invalid ref 1 ret -22 [ 2243.994506] binder: 30012:30027 BC_ACQUIRE_DONE u0000000000000000 no match [ 2243.998895] binder: 30005:30030 unknown command 262144 [ 2243.998903] binder: 30005:30030 ioctl c0306201 200002c0 returned -22 [ 2244.007000] binder: 30005:30030 Release 1 refcount change on invalid ref 1 ret -22 03:55:14 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x23, r0, 0x8000000000000000, 0x3) 03:55:14 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:55:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 03:55:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x2) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x81, 0x1, 0x0, 0x3, 0x6167, 0x6, 0x1}) 03:55:14 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:55:14 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x47, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:55:14 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(r0, 0x8, r1) ioprio_set$uid(0x3, 0x0, 0x0) 03:55:14 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x0) 03:55:14 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:55:14 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x0) 03:55:14 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x4, 0x3ff, 0x7ff, 0x0, 0x0, 0x4, 0x8414, 0x1, 0xeb37, 0x7fffffff, 0x3, 0x8001, 0xfffffffffffffffc, 0x2, 0x9, 0x8, 0x1684, 0x1ff, 0x4, 0x2, 0xffffffffffffffe0, 0x8, 0x6, 0x9, 0x9, 0x80, 0x93af, 0x7, 0x2, 0x3, 0x6189, 0xa42, 0x8, 0x2, 0x2, 0x100000001, 0x0, 0x200, 0x2, @perf_bp, 0x22000, 0x5, 0x25b4e043, 0x0, 0x5, 0x81, 0x101}, r0, 0x8, r1, 0x2) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x6, 0x80000001, 0x1000, 0x7, 0x1, 0x9686, 0x6, 0x10001, 0x1f, 0xfffffffffffff801}) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2}}, r2, 0x0, 0xffffffffffffffff, 0x0) 03:55:14 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 2246.243291] binder: BINDER_SET_CONTEXT_MGR already set [ 2246.263078] binder: 30042:30064 ioctl 40046207 0 returned -16 [ 2246.274993] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2246.275002] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2246.275022] binder: 30042:30074 transaction failed 29201/-28, size 24-8 line 3136 [ 2246.275160] binder: 30042:30074 unknown command 262144 [ 2246.275249] binder: 30042:30074 ioctl c0306201 200002c0 returned -22 [ 2246.275317] binder: 30042:30074 Release 1 refcount change on invalid ref 1 ret -22 [ 2246.295555] binder: BINDER_SET_CONTEXT_MGR already set [ 2246.295562] binder: 30036:30079 ioctl 40046207 0 returned -16 [ 2246.297797] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2246.297805] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2246.297840] binder: 30036:30079 transaction failed 29201/-28, size 24-8 line 3136 [ 2246.297952] binder: 30036:30079 unknown command 262144 [ 2246.297958] binder: 30036:30079 ioctl c0306201 200002c0 returned -22 [ 2246.298016] binder: 30036:30079 Release 1 refcount change on invalid ref 1 ret -22 [ 2246.300722] binder: 30036:30079 BC_ACQUIRE_DONE u0000000000000000 no match 03:55:17 executing program 4: getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) setuid(r0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) sched_getattr(r1, &(0x7f0000000340), 0x30, 0x0) tkill(r1, 0x1d) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000002c0)=0x68) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000300)={0x81, 0x2, 0x9, 0x2, 0xa, 0x2fca, 0x1, 0x8, 0xbc6, 0x8}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r1, 0x0, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ptrace$setopts(0x4200, r1, 0x1, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'ip6_vti0\x00'}, 0x18) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f00000000c0)={{0x3, 0x3, 0x4, 0x3, 0x64}, 0x6, 0x81}) 03:55:17 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x10084, &(0x7f0000000080)={[{@mode={'mode', 0x3d, 0x80000000}}, {@mode={'mode', 0x3d, 0xff}}, {@mode={'mode', 0x3d, 0xff}}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}'}}, {@fsname={'fsname', 0x3d, ','}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vboxnet1user$'}}, {@smackfstransmute={'smackfstransmute'}}, {@smackfsroot={'smackfsroot', 0x3d, '['}}]}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) 03:55:17 executing program 2: syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 03:55:17 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:55:17 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:55:17 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:55:17 executing program 2: syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 03:55:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) 03:55:17 executing program 2: syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) [ 2249.235352] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2249.259664] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2249.269967] binder: 30090:30109 transaction failed 29201/-28, size 24-8 line 3136 [ 2249.293639] binder: 30090:30115 unknown command 262144 03:55:17 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) 03:55:17 executing program 0: ioprio_set$uid(0x3, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x2) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000180)=0xb48, 0x4) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() chown(&(0x7f0000000000)='./file0\x00', r1, r2) 03:55:17 executing program 2: r0 = creat(&(0x7f0000000340)='./file1\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) dup2(r1, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102201ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000140)={0x77359400}, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) [ 2249.293647] binder: 30090:30115 ioctl c0306201 200002c0 returned -22 [ 2249.293753] binder: 30090:30115 Release 1 refcount change on invalid ref 1 ret -22 [ 2249.298182] binder: 30090:30115 BC_ACQUIRE_DONE u0000000000000000 no match [ 2249.319456] binder: BINDER_SET_CONTEXT_MGR already set [ 2249.319465] binder: 30087:30108 ioctl 40046207 0 returned -16 [ 2249.319795] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2249.319815] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2249.319835] binder: 30087:30108 transaction failed 29201/-28, size 24-8 line 3136 [ 2249.319974] binder: 30087:30108 unknown command 262144 [ 2249.319981] binder: 30087:30108 ioctl c0306201 200002c0 returned -22 [ 2249.320053] binder: 30087:30108 Release 1 refcount change on invalid ref 1 ret -22 03:55:20 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000100)) ptrace$cont(0x1f, r0, 0x0, 0x0) time(&(0x7f00000000c0)) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x420000) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x5, 0x7f41546, 0x4, 0x18cc, 0x2, 0x4, 0x0, 0x1ff, 0xffffffffffffffc0, 0xfffffffffffffff9, 0x9, 0x2fb9}) 03:55:20 executing program 5: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="003f68000000000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e", 0x5a, 0x1a0}]) 03:55:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000000)) 03:55:20 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:55:20 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:55:20 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x4, 0x3, 0x0, 0x0, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 03:55:20 executing program 5: getdents(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="010003000000000000eaaaaaaaaaaa00abaaaaaa9441d27487437ba6dee0d23db36faabbf22cffc51805ea2831e01039a0e18561211ce16f6d791517b086a3a45488eaf68b53355dee42be0f560ec279036b6574ed1d484b75346cc0fc83025dd3393a553fb953e7bb39d8d6"]) quotactl(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000600)='fou\x00') sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000022ff0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1, 0x0, 0x0, 0xa00000000000000}, 0x0) 03:55:20 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:55:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x800, 0x1, 0x0, 0x100000001, 0x0, 0x8, 0x40000, 0xe, 0x1, 0x7fffffff, 0x1, 0x2, 0x1, 0x80000001, 0x2bf, 0xffff, 0x5f3c, 0xbd, 0x9, 0x800, 0x84b2, 0x960a, 0x20, 0xfffffffffffff374, 0x80, 0x7, 0x9, 0xfffffffffffffffd, 0x9, 0x1, 0x9, 0x9, 0x40, 0x200000000000000, 0x6, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1ff, 0x9}, 0x0, 0x8001, 0xdc5, 0x5, 0x1, 0x5, 0x3}, r1, 0x2, r0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 03:55:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0x7, 0x4, 0x3, 0x0, r1}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f00000001c0), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000040)}, 0x10) 03:55:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040), 0x4) 03:55:20 executing program 5: getdents(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="010003000000000000eaaaaaaaaaaa00abaaaaaa9441d27487437ba6dee0d23db36faabbf22cffc51805ea2831e01039a0e18561211ce16f6d791517b086a3a45488eaf68b53355dee42be0f560ec279036b6574ed1d484b75346cc0fc83025dd3393a553fb953e7bb39d8d6"]) quotactl(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000600)='fou\x00') sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000022ff0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1, 0x0, 0x0, 0xa00000000000000}, 0x0) [ 2252.276780] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2252.316593] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) 03:55:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x43e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8, 0x8081) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x5fce, 0x1a9f, 0x1}) [ 2252.330018] binder: 30149:30183 unknown command 262144 [ 2252.330026] binder: 30149:30183 ioctl c0306201 200002c0 returned -22 [ 2252.330113] binder: 30149:30183 Release 1 refcount change on invalid ref 1 ret -22 03:55:20 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x1000) r2 = creat(&(0x7f00000004c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10001) sendfile(r0, r1, 0x0, 0xffffffff000) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 2252.330433] binder: BINDER_SET_CONTEXT_MGR already set [ 2252.330441] binder: 30150:30182 ioctl 40046207 0 returned -16 [ 2252.334299] binder: 30149:30183 BC_ACQUIRE_DONE u0000000000000000 no match [ 2252.387061] binder: 30150:30188 unknown command 262144 [ 2252.387069] binder: 30150:30188 ioctl c0306201 200002c0 returned -22 [ 2252.387151] binder: 30150:30188 Release 1 refcount change on invalid ref 1 ret -22 [ 2252.593705] binder: 30149:30171 transaction failed 29201/-28, size 24-8 line 3136 03:55:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001080)=@filter={'filter\x00', 0xe, 0x4, 0x1010, [0x0, 0x20000040, 0x20000bb0, 0x20000cf8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0x5, 0x2, 0x8917, 'veth0_to_bond\x00', 'bond_slave_1\x00', 'eql\x00', 'veth0_to_team\x00', @local, [0xff, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0xff], 0x990, 0xa10, 0xb40, [@among={'among\x00', 0x8b0, {{0x2, 0x8000, 0x3, {[0x5, 0xfffffffffffffff8, 0x4, 0xffffffffffffffff, 0x101, 0x800, 0x74cb, 0x7, 0x0, 0x8fd8, 0x8, 0x10001, 0x800100000, 0x7, 0x1, 0x8, 0x100000001, 0x80000001, 0x67, 0xfffffffffffffffe, 0x8001, 0x9, 0x4, 0x3, 0x6, 0x7, 0xa1c2, 0x8, 0x3f, 0x9, 0x7, 0x9, 0x1, 0x80000001, 0x2, 0x5, 0x6, 0x0, 0xfff, 0x10001, 0x20, 0xffff, 0x9, 0x2f5, 0x55, 0x6, 0x7, 0x5, 0x8, 0xffff, 0x4, 0x6, 0xdc, 0x5, 0x1000, 0x8, 0xaf, 0xffffffffffff2f80, 0x1, 0xae5, 0x100000000, 0x3, 0x3, 0x100000000, 0x7, 0x6, 0xe66, 0x1ff, 0x8000, 0x8001, 0x86, 0x800, 0x20, 0xfff, 0x101, 0x4a47, 0xff, 0x5, 0x6, 0x6, 0x8, 0x5, 0x19460000000000, 0xfff, 0x8, 0x81, 0x9, 0x5, 0x6a7b, 0x5, 0x0, 0x1000, 0x9, 0x2, 0x4, 0x20, 0x0, 0x0, 0x4, 0xeedd, 0x7650, 0x9, 0x7, 0x9, 0x1, 0x100, 0xfffffffffffff687, 0xfffffffffffffffc, 0x1, 0x80, 0x100000001, 0x6, 0x7ff, 0x20, 0x8952, 0x6, 0x1, 0x6, 0x8eaf, 0x2, 0x7, 0x7, 0x8, 0x9, 0xffffffff, 0x7, 0x80, 0x25c3, 0x43c, 0xffff, 0x6102cb0d, 0x6, 0x9, 0x7fffffff, 0x9, 0x4, 0x3ff, 0xaac, 0x5fbb, 0x100000001, 0x2, 0x7f, 0xeaf, 0x2, 0x5, 0x182, 0x54, 0x0, 0x7, 0xfffffffffffffffb, 0x7, 0xc5, 0x9, 0x57, 0x7ff, 0x168759fd, 0x3, 0x5, 0x2, 0x6, 0x0, 0x5, 0x4, 0x609f3e46, 0x6, 0xf2, 0x34f1, 0x2, 0x94, 0x2, 0x7, 0x3ff, 0x6, 0x7ff, 0x3, 0xffffffff, 0x7, 0x3, 0x1, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x8, 0x0, 0x3, 0x1, 0x8, 0x7, 0x9, 0x5, 0x5, 0x8, 0x6, 0x9, 0x8f, 0x6813, 0x1, 0x6027, 0x6, 0x8c6, 0x8, 0x8, 0x2, 0x3, 0x0, 0x488c, 0xb805, 0x5, 0x6f, 0x2, 0xecc3, 0x3, 0x10001, 0x4, 0x9, 0x3, 0x0, 0x800, 0x3f57b341, 0x8, 0x4, 0x6, 0x100000000, 0x3, 0xfff, 0x81, 0xffffffffffffffff, 0x3ff, 0x6, 0x1, 0x8, 0x7ff, 0x20, 0x4, 0xffffffff, 0xe18, 0x1ff, 0x0, 0x6, 0x2639dec9, 0x401, 0x10001, 0x4, 0x2, 0x1e21, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x9, 0xbb1, 0x9b, 0x79, 0x1, 0x1f], 0x8, [{[0x6, 0x8], @multicast1}, {[0x20, 0x9], @empty}, {[0x1, 0x3ff], @dev={0xac, 0x14, 0x14, 0xd}}, {[0x7, 0xffffffffffffffc0], @loopback}, {[0x3, 0x9], @loopback}, {[0x7fff, 0x2], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[0x5, 0x6], @local}, {[0x6, 0x8], @loopback}]}, {[0x1, 0x8, 0x1ff, 0x2, 0x4fa8, 0x7fff, 0x81, 0x1, 0xedf, 0x9, 0x62d, 0x4, 0x6, 0x3ff, 0x7, 0xfffffffffffffffc, 0xfffffffffffff6c3, 0x40, 0x80000001, 0x25e, 0x8c280b8, 0x8, 0x9, 0x0, 0x401, 0xffffffff, 0xd55, 0xfffffffffffffffb, 0xe446, 0x5cb, 0x0, 0x80000000, 0x4, 0x2, 0x1, 0x800, 0x40, 0x1, 0x7, 0xcf4f, 0x2, 0x8, 0x618, 0x1, 0x2, 0x66, 0x6a1d, 0x5d, 0xfffffffffffffffc, 0x8, 0x10001, 0x0, 0xffffffff00000000, 0x3f, 0x100, 0x86ca, 0x86, 0x3, 0x1, 0x1, 0xfffffffffffffffb, 0x7fffffff, 0x1, 0x20, 0x12a, 0x8, 0x6, 0x12, 0x7fff, 0x4, 0xfffffffffffff001, 0x5, 0x334e, 0x119, 0x7be, 0x8, 0x1, 0x3, 0x29d, 0x100000000, 0x8001, 0x4, 0x8, 0x80, 0x3, 0xf8, 0x40b, 0x8000, 0x4, 0x8001, 0x9, 0x3, 0x6, 0x23f, 0x4, 0x8, 0xc61, 0x1cf6, 0x7ff, 0x1, 0x4, 0x9, 0x4, 0x21, 0x5, 0xffffffffffffff4a, 0xfffffffffffffffd, 0x80000001, 0x100000000, 0x1, 0x9, 0xff, 0x2, 0x2, 0x0, 0x4, 0x80000001, 0x6, 0x200, 0x7fffffff, 0x20, 0x1, 0x6, 0x10001, 0x426, 0x3, 0x7, 0x4, 0x1, 0x8, 0x0, 0x9, 0x400, 0xff, 0xfffffffffffffff9, 0x5, 0x3f, 0x200, 0x3, 0x0, 0x1, 0x5, 0x3, 0x4, 0x200000000000000, 0x3, 0x2, 0xffffffffd1b137d9, 0x4, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x6b10, 0x7, 0x400, 0x5, 0xcc, 0x2, 0x7, 0x4, 0x0, 0x7, 0xc, 0x2, 0x20, 0x20, 0xfffffffffffffffd, 0x1ff, 0x400, 0x4, 0x2, 0x200, 0x1, 0xffff, 0x6, 0x0, 0x922, 0x9, 0x8910, 0x81, 0x1f, 0x3, 0x8, 0x4, 0x20, 0x2b9f, 0xffffffff, 0x0, 0x6, 0x73f14e9, 0x3, 0x55, 0x2, 0x6, 0x2, 0x5cf, 0x7, 0x2, 0x2, 0x19, 0x401, 0x3, 0x101, 0xa96d, 0x1, 0xe8d9, 0x34, 0x2, 0x180000000000, 0x4, 0x2, 0x40, 0x5, 0x100000000, 0x9, 0x401, 0x8001, 0x4, 0x3, 0x10000, 0xffffffff, 0xff, 0x100000001, 0x9e, 0x3, 0x200, 0xfff, 0x2, 0x8000, 0x8000, 0x8, 0x7fffffff, 0xbd27, 0x1cc, 0x8, 0xffffffffffffffc0, 0x6, 0x0, 0x8, 0x0, 0x4, 0x8, 0xafc, 0x100000000, 0x1, 0xfffffffffffffffd, 0x0, 0x3, 0x91e, 0x20, 0x10001, 0x6, 0x200, 0x7ff, 0x80], 0x4, [{[0x3, 0x5], @empty}, {[0x6634, 0x9], @loopback}, {[0x660e, 0x1f4a], @multicast2}, {[0x3, 0xc0], @dev={0xac, 0x14, 0x14, 0x11}}]}}}}, @limit={'limit\x00', 0x20, {{0x3, 0x3, 0x1, 0x3, 0x7, 0x8}}}]}, [@common=@log={'log\x00', 0x28, {{0x3, "0d21347c25402e3c1c7c31ae1bc3563d3fbcb58d249bbfd418cf15f01016", 0x8}}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x40, 'system_u:object_r:xen_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x15, 0x7dbe6d2de3269990, 0x18, 'bond_slave_0\x00', 'eql\x00', 'bridge_slave_0\x00', 'hwsim0\x00', @random="fa98b178b314", [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0xe8, 0xe8, 0x118, [@ip6={'ip6\x00', 0x50, {{@local, @local, [0xffffffff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], 0x7, 0xff, 0x0, 0x20, 0x4e21, 0x4e20, 0x4e23, 0x4e21}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{{{0x3, 0x4, 0x0, 'ip6erspan0\x00', 'ipddp0\x00', 'nlmon0\x00', 'veth0_to_hsr\x00', @random="f4aca1919f1b", [0xff, 0xff, 0xff], @random="54503f75289a", [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0xf0, 0x120, 0x168, [@connbytes={'connbytes\x00', 0x18, {{0x1000, 0x659b, 0x1}}}, @time={'time\x00', 0x18, {{0x8, 0x8001, 0xe292, 0x3ad2, 0x7fffffff, 0x7, 0x2}}}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x100000001}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"72f6c1e2204f1bcc04ac534269ac217894b15718a05335340596fc1c8345"}}}, {{{0xb, 0x12, 0xf6, 'ipddp0\x00', 'vcan0\x00', 'bridge_slave_0\x00', '\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x148, 0x148, 0x190, [@physdev={'physdev\x00', 0x70, {{'veth1\x00', {}, 'eql\x00', {0xff}, 0x1, 0x8}}}, @connbytes={'connbytes\x00', 0x18, {{0x1, 0x40, 0x570afa569fd85b55, 0x2}}}]}}, @common=@ERROR={'ERROR\x00', 0x20, {"df8da89b82caeb4b634d975d16709dd404ae1263a9e04a4142e86598a208"}}}]}]}, 0x1088) [ 2252.593794] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2252.593801] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2252.593820] binder: 30150:30182 transaction failed 29201/-28, size 24-8 line 3136 03:55:20 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:55:20 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:55:20 executing program 5: r0 = creat(&(0x7f0000000480)='./bus\x00', 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x5) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = creat(&(0x7f0000000140)='./bus\x00', 0x169) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000002c0)) setxattr$security_evm(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000280)=@sha1={0x1, "d1dadb600adb2b3c6f9943f7e6c850329338a0aa"}, 0x15, 0x1) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_int(r0, &(0x7f0000000380)=0x7, 0x12) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000440)) sendfile(r3, r2, &(0x7f0000000040), 0x100000001) 03:55:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/234, 0xea) fstat(r0, &(0x7f00000001c0)) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@empty, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/checkreqprot\x00', 0x101000, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000540)='/dev/input/mice\x00', 0x0, 0x6000) write$P9_RRENAME(r1, &(0x7f0000000580)={0x7, 0x15, 0x1}, 0x7) fstat(r0, &(0x7f0000000400)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x0, r2, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)) r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000040)) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000005c0)="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") [ 2253.126570] binder: BINDER_SET_CONTEXT_MGR already set [ 2253.131976] binder: 30207:30220 ioctl 40046207 0 returned -16 [ 2253.134988] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2253.134996] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2253.135013] binder: 30204:30221 transaction failed 29201/-28, size 24-8 line 3136 [ 2253.135115] binder: 30204:30221 unknown command 262144 [ 2253.135121] binder: 30204:30221 ioctl c0306201 200002c0 returned -22 [ 2253.135185] binder: 30204:30221 Release 1 refcount change on invalid ref 1 ret -22 [ 2253.138419] binder: 30204:30221 BC_ACQUIRE_DONE u0000000000000000 no match [ 2253.172701] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2253.172710] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2253.172727] binder: 30207:30223 transaction failed 29201/-28, size 24-8 line 3136 [ 2253.173890] binder: 30207:30223 unknown command 262144 [ 2253.173896] binder: 30207:30223 ioctl c0306201 200002c0 returned -22 [ 2253.173968] binder: 30207:30223 Release 1 refcount change on invalid ref 1 ret -22 03:55:23 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f76183b1159dedb683bd51f36bc044926e4ce1ec260774b3a9f5adc57c3670046e7080008009a1c79f727a46e007a3bb5463b79b91d7e86420661c6b840efadce0ae08f64ea085a9dd7154463e61965a2cb9b9c572cf7db24171f41fd9ff3da61a2f9e139f64f2eca9c0c4242b1c709c7c022a27597aa2a1ddc995c0800000078380b746e995e51a75cfd10f3f224f13d56ad8db41ede40a0130c83ca5f24a8d8f46da4980a00aa4f77b3202b000000000000000000000000000000"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:55:23 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') 03:55:23 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x4, 0x3, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local, @dev}}}}}}, 0x0) 03:55:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x5) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x80000, 0x2) ioprio_set$uid(0x3, 0x0, 0xffffffffffffffff) 03:55:23 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:55:23 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:55:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x3102001bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clock_gettime(0x2000000002, &(0x7f0000000080)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r1) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f00000002c0)={0x0, r2+30000000}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 03:55:23 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)={0x3a, 0x3, 0x0, {0x5, 0x19, 0x0, '/selinux/avc/cache_stats\x00'}}, 0x3a) write$eventfd(r0, &(0x7f00000001c0), 0x8) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioprio_set$uid(0x3, 0x0, 0x0) 03:55:23 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x7400, 0x0, 0x0) 03:55:23 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$FUSE_POLL(r0, &(0x7f0000000040)={0x18, 0x0, 0x4, {0xfffffffffffffffc}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0xffffffff80000003, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in=@loopback}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioprio_set$uid(0x3, 0x0, 0x3) 03:55:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) ioprio_set$uid(0xfffffffffffffffb, r0, 0x4) [ 2255.387774] binder: BINDER_SET_CONTEXT_MGR already set [ 2255.396671] binder: 30228:30264 ioctl 40046207 0 returned -16 [ 2255.412563] binder: BINDER_SET_CONTEXT_MGR already set [ 2255.412571] binder: 30227:30267 ioctl 40046207 0 returned -16 [ 2255.413274] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space 03:55:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000000)) ioprio_set$uid(0x3, 0x0, 0x0) [ 2255.415297] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2255.417132] binder: 30227:30267 transaction failed 29201/-28, size 24-8 line 3136 [ 2255.419197] binder: 30227:30267 unknown command 262144 [ 2255.419204] binder: 30227:30267 ioctl c0306201 200002c0 returned -22 [ 2255.419265] binder: 30227:30267 Release 1 refcount change on invalid ref 1 ret -22 [ 2255.447391] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2255.447397] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2255.447413] binder: 30228:30270 transaction failed 29201/-28, size 24-8 line 3136 [ 2255.447513] binder: 30228:30270 unknown command 262144 [ 2255.447519] binder: 30228:30270 ioctl c0306201 200002c0 returned -22 [ 2255.447588] binder: 30228:30270 Release 1 refcount change on invalid ref 1 ret -22 [ 2255.450984] binder: 30228:30270 BC_ACQUIRE_DONE u0000000000000000 no match 03:55:26 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$pokeuser(0x6, r0, 0xc8c, 0x800) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:55:26 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x10000, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0xa00}}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x80000000}}], [{@uid_eq={'uid', 0x3d, r3}}, {@fsmagic={'fsmagic', 0x3d, 0xff}}, {@smackfsroot={'smackfsroot', 0x3d, '-),eth1@'}}, {@hash='hash'}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 03:55:26 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:55:26 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:55:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400000, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x40, 0x2, 0x5}}, 0x14) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) 03:55:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2, 0x4) ioprio_set$uid(0x3, 0x0, 0x0) 03:55:26 executing program 5: syz_emit_ethernet(0x140, &(0x7f0000000040)={@local, @empty=[0x7, 0x0, 0x0, 0x0, 0x4000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, @dccp={{0x0, 0x0, 0x4, 0x60, 0x0, 0x0, 0x3, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) 03:55:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e6ea076cca63e0537907"}, 0x1c) sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0) [ 2317.532632] binder: BINDER_SET_CONTEXT_MGR already set [ 2317.538781] binder: 30298:30308 ioctl 40046207 0 returned -16 [ 2317.546320] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2317.555606] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2317.563472] binder: BINDER_SET_CONTEXT_MGR already set [ 2317.563481] binder: 30301:30309 ioctl 40046207 0 returned -16 [ 2317.577652] binder: 30298:30308 transaction failed 29201/-28, size 24-8 line 3136 [ 2317.577718] binder_alloc: 16252: binder_alloc_buf size 32 failed, no address space [ 2317.577725] binder_alloc: allocated: 12288 (num: 390 largest: 32), free: 0 (num: 0 largest: 0) [ 2317.577743] binder: 30301:30309 transaction failed 29201/-28, size 24-8 line 3136 [ 2317.577891] binder: 30301:30309 unknown command 262144 [ 2317.577898] binder: 30301:30309 ioctl c0306201 200002c0 returned -22 [ 2317.577978] binder: 30301:30309 Release 1 refcount change on invalid ref 1 ret -22 [ 2317.579321] binder: 30301:30309 BC_ACQUIRE_DONE u0000000000000000 no match [ 2317.594699] binder: 30298:30311 unknown command 262144 [ 2317.594708] binder: 30298:30311 ioctl c0306201 200002c0 returned -22 [ 2317.594790] binder: 30298:30311 Release 1 refcount change on invalid ref 1 ret -22 03:56:25 executing program 2: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r0 = geteuid() setreuid(r0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r1 = socket$inet(0x2, 0x800, 0x3e7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8000000000000a, 0x0, 0x0) fstat(r1, &(0x7f0000000200)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='vboxnet1/$md5sum\x00', r2}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/commit_pending_bools\x00', 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x200000, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x11) accept4$inet6(r3, 0x0, &(0x7f0000000100), 0x0) sendmmsg(r3, &(0x7f0000007e00), 0x26e, 0x0) sendmmsg(r3, &(0x7f000000ac80), 0x400000000000302, 0x4008800) mknod(&(0x7f00000001c0)='./file0\x00', 0x10, 0x1000) 03:56:25 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)="756064f211d04a884023ad08638750a995376df0ea04a85bab2db635f740b7b3783373a65ee8b00203eab01dd403468473f10d3e9bdada6b982d1040280332aa9b7fda97ded8b205b3aed76b10d2eece025b8d27ea6f87355dfed8d65bc2287a73e036b1bf0b7d081bf2e87449c784c7eac07990a0", 0x75, 0xfffffffffffffff9) keyctl$describe(0x6, r0, &(0x7f0000000140)=""/59, 0x3b) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r1, 0x0, 0x0) 03:56:25 executing program 5: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f00000091c0)=[{{&(0x7f0000006a00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @mcast2}}, 0x80, 0x0}}], 0x1, 0x400000000000000) 03:56:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 03:56:25 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffff87, 0xa}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48) 03:56:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/rt_acct\x00') r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) clone(0x80000, &(0x7f0000000100)="1149279fff577aa732bbaeae6db7c929d1910dfc2260492ef4b1ff2035c3c0c7cddf79026919243c952081c9f22e368af0c13fe6ee8efd2e4e944f4355190e81e6c06e68e5edf26e117bc885d4bcfa99cef7e4b8df6c9f75293b7b571e550e31db176fa947775a96ca9248214f61189887831fa0517449756493b9", &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0)="c2cada040ef825484a804895acdb7ceeadf46da941f276503f9f73fd98bc5f4e502b13862364733c5b71517bbacc09af282af33b556031b9a27f73d4ae2ab8660b9eeb9741928dbf481d9e7569f088eb679d41") ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r2) ioprio_set$uid(0x3, 0x0, 0x0) [ 2318.490613] binder: send failed reply for transaction 56, target dead [ 2318.513387] binder: send failed reply for transaction 59, target dead [ 2318.520000] binder: send failed reply for transaction 62, target dead [ 2318.540266] binder: send failed reply for transaction 65, target dead [ 2318.560484] binder: send failed reply for transaction 68, target dead [ 2318.567339] binder: send failed reply for transaction 71, target dead [ 2318.574149] binder: send failed reply for transaction 74, target dead [ 2318.580713] binder: send failed reply for transaction 77, target dead [ 2318.587488] binder: send failed reply for transaction 80, target dead [ 2318.594187] binder: send failed reply for transaction 83, target dead [ 2318.600744] binder: send failed reply for transaction 86, target dead [ 2318.607486] binder: send failed reply for transaction 89, target dead [ 2318.614562] binder: send failed reply for transaction 92, target dead [ 2318.621132] binder: send failed reply for transaction 95, target dead [ 2318.628193] binder: send failed reply for transaction 98, target dead [ 2318.635072] binder: send failed reply for transaction 101, target dead [ 2318.641749] binder: send failed reply for transaction 104, target dead [ 2318.648749] binder: send failed reply for transaction 107, target dead [ 2318.655692] binder: send failed reply for transaction 110, target dead [ 2318.662383] binder: send failed reply for transaction 113, target dead [ 2318.669382] binder: send failed reply for transaction 116, target dead [ 2318.676334] binder: send failed reply for transaction 119, target dead [ 2318.683007] binder: send failed reply for transaction 122, target dead [ 2318.690227] binder: send failed reply for transaction 125, target dead [ 2318.697430] binder: send failed reply for transaction 128, target dead [ 2318.704400] binder: send failed reply for transaction 131, target dead [ 2318.711078] binder: send failed reply for transaction 134, target dead [ 2318.718053] binder: send failed reply for transaction 137, target dead [ 2318.725106] binder: send failed reply for transaction 140, target dead [ 2318.731782] binder: send failed reply for transaction 143, target dead [ 2318.798382] binder: send failed reply for transaction 146, target dead [ 2318.805408] binder: send failed reply for transaction 149, target dead [ 2318.812067] binder: send failed reply for transaction 152, target dead [ 2318.818794] binder: send failed reply for transaction 155, target dead [ 2318.825787] binder: send failed reply for transaction 158, target dead [ 2318.832450] binder: send failed reply for transaction 161, target dead [ 2318.839298] binder: send failed reply for transaction 164, target dead [ 2318.846165] binder: send failed reply for transaction 167, target dead [ 2318.852825] binder: send failed reply for transaction 170, target dead [ 2318.859854] binder: send failed reply for transaction 173, target dead [ 2318.866653] binder: send failed reply for transaction 176, target dead [ 2318.873862] binder: send failed reply for transaction 179, target dead [ 2318.880536] binder: send failed reply for transaction 182, target dead [ 2318.887231] binder: send failed reply for transaction 185, target dead [ 2318.893923] binder: send failed reply for transaction 188, target dead [ 2318.900584] binder: send failed reply for transaction 191, target dead [ 2318.907371] binder: send failed reply for transaction 194, target dead [ 2318.914145] binder: send failed reply for transaction 197, target dead [ 2318.920799] binder: send failed reply for transaction 200, target dead [ 2318.927577] binder: send failed reply for transaction 203, target dead [ 2318.934258] binder: send failed reply for transaction 206, target dead [ 2318.940917] binder: send failed reply for transaction 209, target dead [ 2318.947703] binder: send failed reply for transaction 212, target dead [ 2318.954424] binder: send failed reply for transaction 215, target dead [ 2318.961081] binder: send failed reply for transaction 218, target dead [ 2318.967758] binder: send failed reply for transaction 221, target dead [ 2318.974442] binder: send failed reply for transaction 224, target dead [ 2318.981108] binder: send failed reply for transaction 227, target dead [ 2318.987804] binder: send failed reply for transaction 230, target dead [ 2318.994487] binder: send failed reply for transaction 233, target dead [ 2319.001158] binder: send failed reply for transaction 236, target dead [ 2319.007839] binder: send failed reply for transaction 239, target dead [ 2319.014524] binder: send failed reply for transaction 242, target dead [ 2319.021189] binder: send failed reply for transaction 245, target dead [ 2319.027877] binder: send failed reply for transaction 248, target dead [ 2319.034575] binder: send failed reply for transaction 251, target dead [ 2319.041317] binder: send failed reply for transaction 254, target dead [ 2319.048020] binder: send failed reply for transaction 257, target dead [ 2319.054785] binder: send failed reply for transaction 260, target dead [ 2319.061453] binder: send failed reply for transaction 263, target dead [ 2319.068137] binder: send failed reply for transaction 266, target dead [ 2319.074841] binder: send failed reply for transaction 269, target dead [ 2319.081606] binder: send failed reply for transaction 272, target dead [ 2319.088312] binder: send failed reply for transaction 275, target dead [ 2319.095013] binder: send failed reply for transaction 278, target dead [ 2319.101663] binder: send failed reply for transaction 281, target dead [ 2319.108351] binder: send failed reply for transaction 284, target dead [ 2319.115181] binder: send failed reply for transaction 287, target dead [ 2319.121842] binder: send failed reply for transaction 290, target dead [ 2319.128517] binder: send failed reply for transaction 293, target dead [ 2319.135200] binder: send failed reply for transaction 296, target dead [ 2319.141892] binder: send failed reply for transaction 299, target dead [ 2319.148562] binder: send failed reply for transaction 302, target dead [ 2319.155241] binder: send failed reply for transaction 305, target dead [ 2319.161901] binder: send failed reply for transaction 308, target dead [ 2319.168574] binder: send failed reply for transaction 311, target dead [ 2319.175262] binder: send failed reply for transaction 314, target dead [ 2319.182054] binder: send failed reply for transaction 315, target dead [ 2319.188739] binder: send failed reply for transaction 320, target dead [ 2319.195429] binder: send failed reply for transaction 323, target dead [ 2319.202084] binder: send failed reply for transaction 326, target dead [ 2319.208767] binder: send failed reply for transaction 329, target dead [ 2319.215438] binder: send failed reply for transaction 332, target dead [ 2319.222091] binder: send failed reply for transaction 335, target dead [ 2319.228788] binder: send failed reply for transaction 338, target dead [ 2319.235475] binder: send failed reply for transaction 341, target dead [ 2319.242134] binder: send failed reply for transaction 344, target dead [ 2319.248819] binder: send failed reply for transaction 347, target dead [ 2319.255503] binder: send failed reply for transaction 350, target dead [ 2319.262157] binder: send failed reply for transaction 353, target dead [ 2319.268840] binder: send failed reply for transaction 356, target dead [ 2319.275530] binder: send failed reply for transaction 359, target dead [ 2319.282185] binder: send failed reply for transaction 362, target dead [ 2319.289139] binder: send failed reply for transaction 365, target dead [ 2319.295934] binder: send failed reply for transaction 368, target dead [ 2319.302588] binder: send failed reply for transaction 371, target dead [ 2319.309270] binder: send failed reply for transaction 374, target dead [ 2319.315954] binder: send failed reply for transaction 377, target dead [ 2319.322602] binder: send failed reply for transaction 380, target dead [ 2319.329299] binder: send failed reply for transaction 383, target dead [ 2319.336145] binder: send failed reply for transaction 386, target dead [ 2319.342807] binder: send failed reply for transaction 389, target dead [ 2319.349489] binder: send failed reply for transaction 392, target dead [ 2319.356160] binder: send failed reply for transaction 395, target dead [ 2319.362814] binder: send failed reply for transaction 398 to 19729:19737 [ 2319.369670] binder: send failed reply for transaction 401, target dead [ 2319.376351] binder: send failed reply for transaction 404, target dead [ 2319.383001] binder: send failed reply for transaction 409, target dead [ 2319.389855] binder: send failed reply for transaction 415, target dead [ 2319.396540] binder: send failed reply for transaction 421, target dead [ 2319.403193] binder: send failed reply for transaction 425, target dead [ 2319.409877] binder: send failed reply for transaction 426, target dead [ 2319.416562] binder: send failed reply for transaction 427, target dead [ 2319.423223] binder: send failed reply for transaction 428, target dead [ 2319.429901] binder: send failed reply for transaction 431, target dead [ 2319.436580] binder: send failed reply for transaction 432, target dead [ 2319.443235] binder: send failed reply for transaction 433, target dead [ 2319.449912] binder: send failed reply for transaction 434, target dead [ 2319.456697] binder: send failed reply for transaction 437, target dead [ 2319.463383] binder: send failed reply for transaction 440, target dead [ 2319.470042] binder: send failed reply for transaction 443, target dead [ 2319.476739] binder: send failed reply for transaction 446, target dead [ 2319.483411] binder: send failed reply for transaction 449, target dead [ 2319.490225] binder: send failed reply for transaction 452, target dead [ 2319.496924] binder: send failed reply for transaction 455, target dead [ 2319.503604] binder: send failed reply for transaction 458, target dead [ 2319.510255] binder: send failed reply for transaction 461, target dead [ 2319.516943] binder: send failed reply for transaction 464, target dead [ 2319.523623] binder: send failed reply for transaction 467, target dead [ 2319.530389] binder: send failed reply for transaction 470, target dead [ 2319.537073] binder: send failed reply for transaction 473, target dead [ 2319.543764] binder: send failed reply for transaction 476, target dead [ 2319.550420] binder: send failed reply for transaction 479, target dead [ 2319.557095] binder: send failed reply for transaction 482, target dead [ 2319.563779] binder: send failed reply for transaction 485, target dead [ 2319.570449] binder: send failed reply for transaction 488, target dead [ 2319.577455] binder: send failed reply for transaction 491, target dead [ 2319.584380] binder: send failed reply for transaction 494, target dead [ 2319.591058] binder: send failed reply for transaction 497, target dead [ 2319.598019] binder: send failed reply for transaction 500, target dead [ 2319.604974] binder: send failed reply for transaction 503, target dead [ 2319.611647] binder: send failed reply for transaction 506, target dead [ 2319.618599] binder: send failed reply for transaction 509, target dead [ 2319.625517] binder: send failed reply for transaction 512, target dead [ 2319.632186] binder: send failed reply for transaction 515, target dead [ 2319.639162] binder: send failed reply for transaction 518, target dead [ 2319.645883] binder: send failed reply for transaction 521, target dead [ 2319.652545] binder: send failed reply for transaction 524, target dead [ 2319.659237] binder: send failed reply for transaction 527, target dead [ 2319.665928] binder: send failed reply for transaction 530, target dead [ 2319.672597] binder: send failed reply for transaction 533, target dead [ 2319.679283] binder: send failed reply for transaction 536, target dead [ 2319.685969] binder: send failed reply for transaction 539, target dead [ 2319.692626] binder: send failed reply for transaction 542, target dead [ 2319.699310] binder: send failed reply for transaction 545, target dead [ 2319.705995] binder: send failed reply for transaction 548, target dead [ 2319.712655] binder: send failed reply for transaction 551, target dead [ 2319.719329] binder: send failed reply for transaction 554, target dead [ 2319.726029] binder: send failed reply for transaction 557, target dead [ 2319.732684] binder: send failed reply for transaction 560, target dead [ 2319.739360] binder: send failed reply for transaction 563, target dead [ 2319.746046] binder: send failed reply for transaction 566, target dead [ 2319.752703] binder: send failed reply for transaction 569, target dead [ 2319.759376] binder: send failed reply for transaction 572, target dead [ 2319.766067] binder: send failed reply for transaction 575, target dead [ 2319.772723] binder: send failed reply for transaction 578 to 21187:21226 [ 2319.779570] binder: send failed reply for transaction 581, target dead [ 2319.786250] binder: send failed reply for transaction 584, target dead [ 2319.792909] binder: send failed reply for transaction 587, target dead [ 2319.799589] binder: send failed reply for transaction 590, target dead [ 2319.806278] binder: send failed reply for transaction 593, target dead [ 2319.812932] binder: send failed reply for transaction 596, target dead [ 2319.819610] binder: send failed reply for transaction 599, target dead [ 2319.826286] binder: send failed reply for transaction 602, target dead [ 2319.832947] binder: send failed reply for transaction 605, target dead [ 2319.839632] binder: send failed reply for transaction 608, target dead [ 2319.846305] binder: send failed reply for transaction 611, target dead [ 2319.852959] binder: send failed reply for transaction 614, target dead [ 2319.859636] binder: send failed reply for transaction 617, target dead [ 2319.866309] binder: send failed reply for transaction 620, target dead [ 2319.872965] binder: send failed reply for transaction 623, target dead [ 2319.879649] binder: send failed reply for transaction 626, target dead [ 2319.886323] binder: send failed reply for transaction 629, target dead [ 2319.892979] binder: send failed reply for transaction 632, target dead [ 2319.899660] binder: send failed reply for transaction 635, target dead [ 2319.906339] binder: send failed reply for transaction 638, target dead [ 2319.913001] binder: send failed reply for transaction 641, target dead [ 2319.919674] binder: send failed reply for transaction 644, target dead [ 2319.926360] binder: send failed reply for transaction 647, target dead [ 2319.933015] binder: send failed reply for transaction 650, target dead [ 2319.939745] binder: send failed reply for transaction 653, target dead [ 2319.946430] binder: send failed reply for transaction 656, target dead [ 2319.953085] binder: send failed reply for transaction 659, target dead [ 2319.959756] binder: send failed reply for transaction 662, target dead [ 2319.966454] binder: send failed reply for transaction 665, target dead [ 2319.973110] binder: send failed reply for transaction 668, target dead [ 2319.979786] binder: send failed reply for transaction 671, target dead [ 2319.986476] binder: send failed reply for transaction 674, target dead [ 2319.993129] binder: send failed reply for transaction 677, target dead [ 2319.999803] binder: send failed reply for transaction 680, target dead [ 2320.006490] binder: send failed reply for transaction 683, target dead [ 2320.013146] binder: send failed reply for transaction 686, target dead [ 2320.019825] binder: send failed reply for transaction 689, target dead [ 2320.026511] binder: send failed reply for transaction 692, target dead [ 2320.033185] binder: send failed reply for transaction 695, target dead [ 2320.039857] binder: send failed reply for transaction 698, target dead [ 2320.046539] binder: send failed reply for transaction 701, target dead [ 2320.053197] binder: send failed reply for transaction 704, target dead [ 2320.059880] binder: send failed reply for transaction 707, target dead [ 2320.066560] binder: send failed reply for transaction 710, target dead [ 2320.073255] binder: send failed reply for transaction 713, target dead [ 2320.079928] binder: send failed reply for transaction 716, target dead [ 2320.086625] binder: send failed reply for transaction 719, target dead [ 2320.093279] binder: send failed reply for transaction 722, target dead [ 2320.099948] binder: send failed reply for transaction 725, target dead [ 2320.106726] binder: send failed reply for transaction 728, target dead [ 2320.113409] binder: send failed reply for transaction 731, target dead [ 2320.120062] binder: send failed reply for transaction 734, target dead [ 2320.126733] binder: send failed reply for transaction 737, target dead [ 2320.133408] binder: send failed reply for transaction 740, target dead [ 2320.140053] binder: send failed reply for transaction 743, target dead [ 2320.146730] binder: send failed reply for transaction 746, target dead [ 2320.153403] binder: send failed reply for transaction 749, target dead [ 2320.160046] binder: send failed reply for transaction 752, target dead [ 2320.166721] binder: send failed reply for transaction 755, target dead [ 2320.173393] binder: send failed reply for transaction 758, target dead [ 2320.180058] binder: send failed reply for transaction 761, target dead [ 2320.186739] binder: send failed reply for transaction 764, target dead [ 2320.193411] binder: send failed reply for transaction 767, target dead [ 2320.200056] binder: send failed reply for transaction 772, target dead [ 2320.206733] binder: send failed reply for transaction 777, target dead [ 2320.213422] binder: send failed reply for transaction 782, target dead [ 2320.220069] binder: send failed reply for transaction 787, target dead [ 2320.226748] binder: send failed reply for transaction 791, target dead [ 2320.233420] binder: send failed reply for transaction 792, target dead [ 2320.240087] binder: send failed reply for transaction 793, target dead [ 2320.246763] binder: send failed reply for transaction 796, target dead [ 2320.253443] binder: send failed reply for transaction 798, target dead [ 2320.260183] binder: send failed reply for transaction 800, target dead [ 2320.266867] binder: send failed reply for transaction 804, target dead [ 2320.273537] binder: send failed reply for transaction 805, target dead [ 2320.280199] binder: send failed reply for transaction 807, target dead [ 2320.286889] binder: send failed reply for transaction 806, target dead [ 2320.293569] binder: send failed reply for transaction 812, target dead [ 2320.300310] binder: send failed reply for transaction 815, target dead [ 2320.306988] binder: send failed reply for transaction 819, target dead [ 2320.313664] binder: send failed reply for transaction 822, target dead [ 2320.320314] binder: send failed reply for transaction 825, target dead [ 2320.326986] binder: send failed reply for transaction 828, target dead [ 2320.333665] binder: send failed reply for transaction 831, target dead [ 2320.340343] binder: send failed reply for transaction 834, target dead [ 2320.347014] binder: send failed reply for transaction 837, target dead [ 2320.353711] binder: send failed reply for transaction 840, target dead [ 2320.360364] binder: send failed reply for transaction 843, target dead [ 2320.367032] binder: send failed reply for transaction 846, target dead [ 2320.373734] binder: send failed reply for transaction 849, target dead [ 2320.380404] binder: send failed reply for transaction 852, target dead [ 2320.387074] binder: send failed reply for transaction 856, target dead [ 2320.393757] binder: send failed reply for transaction 857, target dead [ 2320.400416] binder: send failed reply for transaction 860, target dead [ 2320.407085] binder: send failed reply for transaction 861, target dead [ 2320.413773] binder: send failed reply for transaction 864, target dead [ 2320.420434] binder: send failed reply for transaction 865, target dead [ 2320.427110] binder: send failed reply for transaction 866, target dead [ 2320.433800] binder: send failed reply for transaction 869, target dead [ 2320.440453] binder: send failed reply for transaction 872, target dead [ 2320.447128] binder: send failed reply for transaction 875, target dead [ 2320.453818] binder: send failed reply for transaction 878, target dead [ 2320.460482] binder: send failed reply for transaction 881, target dead [ 2320.467159] binder: send failed reply for transaction 884, target dead [ 2320.473853] binder: send failed reply for transaction 887, target dead [ 2320.480514] binder: send failed reply for transaction 890, target dead [ 2320.487187] binder: send failed reply for transaction 893, target dead [ 2320.493877] binder: send failed reply for transaction 896, target dead [ 2320.500539] binder: send failed reply for transaction 899, target dead [ 2320.507215] binder: send failed reply for transaction 902, target dead [ 2320.513911] binder: send failed reply for transaction 905, target dead [ 2320.520563] binder: send failed reply for transaction 908, target dead [ 2320.527234] binder: send failed reply for transaction 911, target dead [ 2320.533930] binder: send failed reply for transaction 914, target dead [ 2320.540584] binder: send failed reply for transaction 917, target dead [ 2320.547276] binder: send failed reply for transaction 920, target dead [ 2320.553967] binder: send failed reply for transaction 923, target dead [ 2320.560622] binder: send failed reply for transaction 926, target dead [ 2320.567295] binder: send failed reply for transaction 929, target dead [ 2320.573985] binder: send failed reply for transaction 932, target dead [ 2320.580640] binder: send failed reply for transaction 935, target dead [ 2320.587847] binder: send failed reply for transaction 938, target dead [ 2320.594531] binder: send failed reply for transaction 941, target dead [ 2320.601181] binder: send failed reply for transaction 944, target dead [ 2320.607855] binder: send failed reply for transaction 947, target dead [ 2320.614538] binder: send failed reply for transaction 950, target dead [ 2320.621193] binder: send failed reply for transaction 953, target dead [ 2320.627867] binder: send failed reply for transaction 956, target dead [ 2320.634555] binder: send failed reply for transaction 959, target dead [ 2320.641211] binder: send failed reply for transaction 962, target dead [ 2320.647884] binder: send failed reply for transaction 965, target dead [ 2320.654667] binder: send failed reply for transaction 968, target dead [ 2320.661319] binder: send failed reply for transaction 971, target dead [ 2320.667990] binder: send failed reply for transaction 974, target dead [ 2320.674673] binder: send failed reply for transaction 977, target dead [ 2320.681328] binder: send failed reply for transaction 980, target dead [ 2320.688004] binder: send failed reply for transaction 983, target dead [ 2320.694685] binder: send failed reply for transaction 986, target dead [ 2320.701339] binder: send failed reply for transaction 989, target dead [ 2320.708010] binder: send failed reply for transaction 992, target dead [ 2320.714690] binder: send failed reply for transaction 995, target dead [ 2320.721441] binder: send failed reply for transaction 998, target dead [ 2320.728209] binder: send failed reply for transaction 1001, target dead [ 2320.734975] binder: send failed reply for transaction 1004, target dead [ 2320.741705] binder: send failed reply for transaction 1007, target dead [ 2320.748490] binder: send failed reply for transaction 1010, target dead [ 2320.755244] binder: send failed reply for transaction 1013, target dead [ 2320.761969] binder: send failed reply for transaction 1016, target dead [ 2320.768727] binder: send failed reply for transaction 1019, target dead [ 2320.775487] binder: send failed reply for transaction 1022, target dead [ 2320.782219] binder: send failed reply for transaction 1025, target dead [ 2320.788977] binder: send failed reply for transaction 1028, target dead [ 2320.795735] binder: send failed reply for transaction 1031, target dead [ 2320.802572] binder: send failed reply for transaction 1034, target dead [ 2320.809341] binder: send failed reply for transaction 1037, target dead [ 2320.816101] binder: send failed reply for transaction 1040, target dead [ 2320.822831] binder: send failed reply for transaction 1043, target dead [ 2320.829598] binder: send failed reply for transaction 1046, target dead [ 2320.836351] binder: send failed reply for transaction 1049, target dead [ 2320.843085] binder: send failed reply for transaction 1052, target dead [ 2320.849841] binder: send failed reply for transaction 1055, target dead [ 2320.856602] binder: send failed reply for transaction 1058, target dead [ 2320.863358] binder: send failed reply for transaction 1061, target dead [ 2320.870095] binder: send failed reply for transaction 1064, target dead [ 2320.876851] binder: send failed reply for transaction 1067, target dead [ 2320.883617] binder: send failed reply for transaction 1070, target dead [ 2320.890346] binder: send failed reply for transaction 1073, target dead [ 2320.897098] binder: send failed reply for transaction 1076, target dead [ 2320.903851] binder: send failed reply for transaction 1079, target dead [ 2320.910583] binder: send failed reply for transaction 1082, target dead [ 2320.917339] binder: send failed reply for transaction 1085, target dead [ 2320.924190] binder: send failed reply for transaction 1088, target dead [ 2320.930921] binder: send failed reply for transaction 1091, target dead [ 2320.937678] binder: send failed reply for transaction 1094, target dead [ 2320.944428] binder: send failed reply for transaction 1097, target dead [ 2320.951156] binder: send failed reply for transaction 1100, target dead [ 2320.957905] binder: send failed reply for transaction 1103, target dead [ 2320.964655] binder: send failed reply for transaction 1106, target dead [ 2320.971396] binder: send failed reply for transaction 1109, target dead [ 2320.978150] binder: send failed reply for transaction 1112, target dead [ 2320.984907] binder: send failed reply for transaction 1115, target dead [ 2320.991632] binder: send failed reply for transaction 1118, target dead [ 2320.998378] binder: send failed reply for transaction 1121, target dead [ 2321.005146] binder: send failed reply for transaction 1124, target dead [ 2321.011872] binder: send failed reply for transaction 1127, target dead [ 2321.018627] binder: send failed reply for transaction 1130, target dead [ 2321.025381] binder: send failed reply for transaction 1133, target dead [ 2321.032110] binder: send failed reply for transaction 1136, target dead [ 2321.038858] binder: send failed reply for transaction 1139, target dead [ 2321.045621] binder: send failed reply for transaction 1142, target dead [ 2321.052477] binder: send failed reply for transaction 1145, target dead [ 2321.059328] binder: send failed reply for transaction 1148, target dead [ 2321.066084] binder: send failed reply for transaction 1151, target dead [ 2321.072817] binder: send failed reply for transaction 1154, target dead [ 2321.079570] binder: send failed reply for transaction 1157, target dead [ 2321.086323] binder: send failed reply for transaction 1160 to 25061:25065 [ 2321.093225] binder: send failed reply for transaction 1163, target dead [ 2321.099974] binder: send failed reply for transaction 1166, target dead [ 2321.106730] binder: send failed reply for transaction 1169, target dead [ 2321.113478] binder: send failed reply for transaction 1172, target dead [ 2321.120216] binder: send failed reply for transaction 1175, target dead [ 2321.126989] binder: send failed reply for transaction 1178, target dead [ 2321.133756] binder: send failed reply for transaction 1181, target dead [ 2321.140485] binder: send failed reply for transaction 1184, target dead [ 2321.147236] binder: send failed reply for transaction 1187, target dead [ 2321.153989] binder: send failed reply for transaction 1190, target dead [ 2321.160836] binder: send failed reply for transaction 1193, target dead [ 2321.167615] binder: send failed reply for transaction 1196 to 25342:25375 [ 2321.174542] binder: send failed reply for transaction 1199, target dead [ 2321.181272] binder: send failed reply for transaction 1202, target dead [ 2321.188020] binder: send failed reply for transaction 1205, target dead [ 2321.194771] binder: send failed reply for transaction 1208, target dead [ 2321.201498] binder: send failed reply for transaction 1211, target dead [ 2321.208245] binder: send failed reply for transaction 1214, target dead 03:56:29 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x5, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 2321.394706] binder: undelivered TRANSACTION_ERROR: 29189 [ 2321.400388] binder: undelivered TRANSACTION_ERROR: 29189 [ 2321.414144] binder: undelivered TRANSACTION_ERROR: 29189 03:56:29 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="080027bd7000ffdbdf250e00000004000100"], 0x1}}, 0xd30fada1e2ba9cd9) socket(0x7, 0x0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000f80)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x3}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 03:56:29 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x20000, 0x40) wait4(r0, &(0x7f0000000040), 0x2, 0x0) fcntl$setown(r1, 0x8, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:56:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x3cd) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 03:56:29 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200800, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) getresuid(&(0x7f0000000fc0)=0x0, &(0x7f0000001000), &(0x7f0000001040)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001080)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000001180)=0xe8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001200)={0x0, r0, 0x0, 0x306, &(0x7f00000011c0)='self\x00', 0xffffffffffffffff}, 0x30) r9 = getpgid(0xffffffffffffffff) r10 = request_key(&(0x7f0000007400)='keyring\x00', &(0x7f0000007440)={'syz', 0x2}, &(0x7f0000007480)='/dev/zero\x00', 0xfffffffffffffffa) keyctl$chown(0x4, r10, r2, r3) r11 = getpgid(0xffffffffffffffff) lstat(&(0x7f0000005800)='./file0\x00', &(0x7f0000005840)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000058c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000007300)={{{@in6=@mcast2, @in6=@remote, 0x4e21, 0x5, 0x4e24, 0xfffffffffffffff9, 0xa, 0x80, 0x20, 0x6, 0x0, r6}, {0xfffffffffffffffa, 0x0, 0xb171, 0x0, 0x200, 0x7f, 0xfff}, {0x3, 0x1, 0xffff, 0x1}, 0x0, 0x6e6bbd, 0x0, 0x1, 0x3, 0x3}, {{@in=@loopback, 0x4d5, 0x68}, 0xa, @in6=@empty, 0x3500, 0x7, 0x3, 0x5, 0x8, 0x2, 0x4}}, 0xe8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000005dc0)=0x0) sendmsg$netlink(r1, &(0x7f00000072c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc, &(0x7f0000007240)=[{&(0x7f0000000240)={0x5e4, 0x23, 0x2, 0x70bd28, 0x25dfdbff, "", [@generic="b9ca43ca5807602147c5b5845414bb9792d330233fb47761351645995254a0ebfd3dba4cf9569ee429d34b75ad044681b2a335e5ac5dea2321a22e9f037c9a672a851c70b1432f69d409804b19fe1432ae311c81b179e42cdffe9cab054bd7d8be7f8527a450179f9d7d5a3ba8d5dd3859359bd4e65a420eb8226613a36ce56eb4ab7a3b8dd12aa442cc18a68643b9fcb44690f47eac0abe7527ec0f47543390cc5e05b242b9e6d28f74e7ec8db28a6caf69c733eb", @nested={0x23c, 0x7, [@generic="6f7523e641c1b6c72f63b0159e554c09f5ac4eedd97c4f76f3487cc60706374ccd78a522e55f6c1b9625ab9913adf447072412fa8a4b9babd66a5f4cb7233e5aac38e2be31e4562fa04016ce151b4d78f5499cca4bdd11c80cba398c5e1550a682ed2c38c1fa2827de8380dfc309bf7ff0a6b3386d0bea643ecd150d39c4b7f27f4d4b5e75c662315a9db477c6a37cf1e2d1b8d71e5fb1e632fdda11591621757bdc25cd80d2aea7eda6cc7b2507b5f0fcfb14a6a86d4245d5276e1b7b8ec36b368784302329", @typed={0x8, 0x46, @ipv4=@multicast1}, @typed={0x8, 0x5e, @uid=r2}, @typed={0x14, 0x27, @ipv6=@ipv4={[], [], @rand_addr=0x8}}, @generic="47ea27fb6b0c2d04ff", @typed={0x8, 0x67, @u32=0x7}, @generic="9febb7c0a32ed76d91441e10a58248963e7f46ebee60d7140cd54199a8d98d2a9cbf09d31773601a3925454ed68c4f035578c0c6926d5ffac6633d75fe374e65d0e86c81005ca74d46b88ba8b31097c927919cdd8e96f16f70d581bfa19b154e9e814b1ca515b26c5a62ba0239d1aa299866767afcdf657bbb420f3b98471449542a85439af05469b0caf2e233ae9c5835bc269c10de7f81f9ace8822e2514aeb449ac006582f834e4be323f1ecfc5f3b22eb7480efc47526c19209d1b20c110760f6b6d308e0e4dd1fe4bd90da31d727c597d936e39337d79f01f27b40fa070d057b8aa21455402aa", @generic="085056c95b2a7189cde81203a7c54563a441e9665d3551f9b4b530632a54c65795433c839d4b66f24d75597baf5e5cc596e83b454b85103a6a9b6a968a33c251e0fc0c1ef6fac5bc16d15932a9ad0d32db88"]}, @nested={0x74, 0x20, [@generic="b986d9de15d4460b52c3c1136f7caa68a047085da0bed3e08ab60be56863b85148c6a8d2611b17276d020582ce02800e5316e7c6f230bc797005487b105125a25bf2bb856ff68d0c43757f478309f1e0c0f74efb144e7f58f1e7edef478db3e574e04475bb30a275e4c260ab2012683f"]}, @nested={0x178, 0x21, [@typed={0x8, 0x5d, @fd=r0}, @generic="e2f7f03fa76eb2c2a0b0200e554e1155b1ceea1aaf77cb3180cb3016ecad7c862bf3f4fcef502ae4780f0547c6563f17323b2b58d8cf3360df3205559ce5b9811dde658c80645deddaa0950fe4c0085cf7611a411b8bf96c50d40b61e174f5dbab4066ca633036c6d0d199b70959235db77adaa11dd1a9793e098d1672d78d9be107c5dbb02ee847109bc27e018c06af819a2fa4b39bbb0e228f9f9c1f05bfcfeb8e20f23ea451fa2154d26f2025eb3ee1621fbbf447cee4e065ea1b6af1830bde644241748e9ba19241", @typed={0xa0, 0x50, @binary="94d18e1723a6ea5ce788d95d5f1c0f738710f692143c7bbf1bfa75cc0683cc6b79e2ae5127ab5ad3decf1a95a2ee9f75c775eb292bde1508f5bb3760a1099950e5713d0955ca7cea2234314fe4c698f9f9579479e55f98ade2092428d8bb219048b43e02b8767e9e4d14798d9772f96c4f81a1437b650852ea0f2b2b368acb3e6b91f7131268625477952ade94313ab2ae7bf145dbb89a1f1721"}]}, @typed={0x4, 0x4e}, @typed={0x8, 0x3e, @uid=r4}, @generic="1f60c9677f5425db15df03106051f75ed4ea212f40296a5524aa2600f632f62d73c969e5e1010f3b95c9690179aa6df7229ddaabe5355f87b42d36e548227b7156f69c63b5d1ceb38c4a38a4", @generic="2f2fd6f7867413f26d42c0186e573a2fe357ae2b64e9c1207c43ce8691208160a9a082e424cad8264a2be7c891fb6883fb5a20b8ea597d7402ba6a93ea5a48336d5157d5236ed2102478dd98ab0dda3ecd50aa87d57d7042b5443a41fa3394704383e611576e5467fb241ed1a12744305855d340bfd235e1006bd3a53c8ede1bb10569607ab7054680448e0bfd6c3279ac08318935204b0b15fb3161"]}, 0x5e4}, {&(0x7f0000000840)={0x18, 0x2e, 0x400, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x1e, @ipv4=@rand_addr=0xffffffffffffffa3}]}, 0x18}, {&(0x7f0000000880)={0xc8, 0x12, 0x60a, 0x70bd29, 0x25dfdbfd, "", [@generic="b3fa0e94756746c73c2562645b1e2c58bd3def5783a313376bfd5840e5f3b258703ccb4fdcb6565fa2126080656a68788f015277d316a3cb2340383716557600e74bc40b736730a93c698b9f7664328daaa451b282c6f7f99a4290f6fe2d7e2cd74b90f841320af6ab6d8495ec0b331ed0d0e18c2546f077e50fbbc707ac731643c26b2f40e4363d6efd9d12be47689d2f598433e848b58d6c42a1746df621001b2407d0e54a9ceb3696640b2704f6c3c7f39168ca37172a"]}, 0xc8}, {&(0x7f0000000980)={0x60c, 0x25, 0xf21, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x7d, @fd=r0}, @nested={0x118, 0x56, [@generic="eaace249535e9cddee9e84c6f8057e8962f96b4216d06136e122e55a5746a997d9a61592dae19cb7a4dd9db8bf", @generic="1281dc5c504545a9b64527ed7f1ce0c1b5c6bd86815b9c5fa602cabb5db418b306b909a23990ffe4f809e99fb6599d9030f196c284be86ad", @typed={0x14, 0x8b, @ipv6=@empty}, @generic="340e1b5b0622877fb646fd64ed2d9c0343456201277e0df10f0711f429dd4159272ed4bfe34450540bbd5d889ae465a3b9afec988a793c1e41c62a8f27ac345fc83e556d6d7cdcf3541cad0faf73fcb734df3491179d193d47a759e0b46e2fb186860ca9bd38e53c4e3dd5a2b3d9da357601199d0b977ca3e658d155851e9165447114a75d9a933f1e7a8fdae622de4bd74f24a5ab9e67ac70ca"]}, @typed={0x8, 0x9, @str='(\x00'}, @nested={0x4d4, 0x33, [@generic="2eb5609c35c84d78916a1f3f41b9d800e1be8a8379ad772eb24658cdf66cac75fb86048b074a92d54d98e34822a0ef8b7fed48a04d949de26da4b5b548b3de069e5e07fd20dab59355f1e1b11744ebee581e90296f03c3056771bb4d8c7f57", @generic="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", @typed={0xbc, 0x51, @binary="b601f742c57e14d61a1f96cbaecd4aefeda3cb62d72f0efd073d47e1e55acf9b8496b41f1f0923a6105515e5eb5cd6bf194f84465a2cd752359bdce888f8e8b8df70f84f1cc285e57355fbafb6473048a24e4c54d7848096d2673fb3b646ddd69d09f95bad1365418487d01446b7a46a51d18aacbced5e5cc18a8303ecc02b5953c6dcb1fbb58b21d4fb891961993ba87ec2772c2fb45050af461e7befdb604eb7bc45125174b37f2df62bd45b41de4f147be0bea73daee6"}, @generic="47d532cc068b6f2ddcf7859f0465ae64b601632ac8f5b3286c4476f29abccf6dfb", @generic="bba5516a206e3e423a030c732334dcc6025e5bf9e1890479c292d979e3721135456f143742bc0248329b9a36d9b036e6ba86ad6da3b8c0051961216a29a1fc652e370f43bbee571c579d54d1e5c452ff8450cd499326bd682aa3312fca79404eb87130937035b34a687ca59e9feeef6aa4066cf0507673c1c4ba893d0b7324da37b45e23b0a777d6a52aad9290e0183b74a6c51f1adf9ccb1dc63981962880116e40992b1b96f9ea6172fdebef230a6c8d3748dc7caf6173", @generic="c3a3ada5f84392d1727ca0d477b07e6ed387176b513b73538614273eed7df2", @generic="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", @typed={0x8, 0x2a, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="b88b2bd277d469413e427ffdc1a0e1f66a29111b6881f81b1647d9786a89c023319b2ad081bef9f3f5a88ed77cd3f8b68bc4bdab3821361ba22f4cf1bc0a101b059c8ebca83c9edec2b26f8134cbfebfe919e4a28b80a6a7ed87b02a6a2fb7da4ff54afde6ba8bbc203fc8d9b915ec36577b43ae187d8ec0717ad21b91ea383bb4eb35d0951d8124d14a46e6541c9ec2cae5e0366e1da8b8410e670626b7d75a260b2ece13a16675d3a3aafd4e7af6e83eed4bd71e3b"]}]}, 0x60c}, {&(0x7f0000001240)={0x4594, 0x1d, 0x0, 0x70bd29, 0x25dfdbff, "", [@typed={0x8, 0x8f, @ipv4=@empty}, @generic="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", @typed={0x8, 0x9, @fd=r0}, @typed={0x4, 0x3d}, @nested={0x1230, 0x91, [@typed={0x18, 0x2, @binary="0175969b13ab1aabd9610a7527238e441c7820"}, @generic="c6bc63b26aedad2ae94ebbce148a8d0520c3ce6297e4c2e75aebfe3a6f008515869ce83abf3afa628c9367da594f1a743591d14e3ee67ae2b492154ade34312269a3125966d3c9e8b351dc2f035a2a310a21b5c176a1b660f9c16165081632434cb6bde4f7c7538b839a7e93e96b4467f75ee6f31cd93b742a90a3638fd448b530f84c7bc7d5ad3ab3ef6de8e15f00ac51ce02164b7ff3f6d217876ff393", @generic="1f3344e213192bcb80eae828b5f90243ac80e4f5b3fb0446e5f8855290db196afd2d908c6f1ae62aad716fba4838b2e95470bb4029f3fc0d11d68224f72d0148a575e10e85b6da12208b298bf87932d1da399b3817df5dd5faf3990b5ea00db2bd5b62e8ea74cf1c644dc79667d89d7f8875df1b2838e7f57b01d7c783d34bfaa6a2", @typed={0xc, 0x2b, @u64=0xe61}, @generic="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", @generic="bf3f84ba96c16b5bc15cf226ee187d1b6d88510da55e679f169b58e09da922774f11de518dc2aa1cd61b5e6a10a0c26ad85f105ccd2b19499db99bdcd8ad4a00fa7e95bcbc6139ae4c98018c0dd5f3ad10986f3923f26802ddaa50d97cfcd633fa328c5fe993976f7c98cd5212244abf48ae3cfe437fc15cbc11c5877debb2b61c7059863a9112fdb19b76eb1cb325e2fc1bcf9109b53ee6ddd26c907aaad9c8fa14984d2ddaec3d1dca0197beeeca9cc8a33b1ecd92ad3e95e674f4ae58f5b96fff06221b1fcb5b2e030b81a96709acf38d8875c5c8a25ba721a48e69ed9345", @typed={0x8, 0x32, @uid=r5}]}, @nested={0x2278, 0x3b, [@typed={0xc, 0x4, @u64=0x8}, @typed={0x14, 0x81, @ipv6=@dev={0xfe, 0x80, [], 0x23}}, @generic="19416a48ca540702823eae7e1b50732d9c38004a52359736478a699933f098c4d3752b9af41135cc4981429bb278af6e80c02bdb9df5a6f311cfcb907688c6ea9c9000a644812091c9595a6e626cdbcac6ed5f1d5c60fbcb73b6c7a95c622f0af2090ce0bd6c70501fc8f102846f9d4fe7e4213061596095594481e76e9c7430cfeed076dac0a3107c619988bff28d8616fcf060d4dfffe9d29588fac0c11a963a", @generic="b7220af9f7c1e613f6d98ab7322971120614681dee3da1ba6b27bfa78b87be966f1fe7b1580fb2ce06c400412113a6aa6bf7ffe58af51c1c20291ec12a6da2adea45bcfbf6697a463cdb7a2be85e1129", @generic="911596d1e5697abc2868ed980fc990af194d677dfb6f68899238b2eb26b85cd9ddcdf6ffcf774ec9abaaa441ba3264eb5e25a1fcae5030a237b7fdbc56957e84f69dee58dfdec3b48a37ff62f1257db5e578cc668cfbd24a22ddc37e192460efa8e3d7ffb9d501827623a78a0940d4b00ca9c4448a5478384a685d19aca22744cf617c951d1bce0c56eac3bcce7a6153df2b1601e2211ce90d325cfba66a87d03c80b6848bf0c2cf37d6ef79ed3607da3275327e1c922f3eb2648d07189a776bb835f60466d55396", @generic="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", @generic="b8ac8d3578c77e54b15ac0da381d8b3504e1c1310141e9a2312665ac85f5fe04c0be02eaf7f43992c30f032e4bc05135a3e445ab7edf9f944215f70a1d949d7d2d4e05a095be0f22baa0e17ecc2f9916fb81297912e8fe65f7f820a833cfbcb11a1906e5f722c03efcd42f22583a808fd51ad414210564299264c215a54f85cde8f68170e2798299721550f8603218da28ae8bedc43b1eefa5a6066ed997ee2cafc298150713d61fd660febb978dca1084ca0630d20ce74e698c767479e4752081d74f276540f4780df5b8c62372b0078fc7698b17e10db00ffee02c2e92d0f8c4482efe2f1d3cf0828f68e84ec2c22ca21921de6e84e4a69666fc161366ec4804f29724f68d6be39e1f2db0f9429b02dd67ce2a3b6ece1bdb85bbdf275436858f8102f62d9e10f0eb5fba3b50d5942c04640ed129048cf362aea4d768e75051d7aba91760a2748bd7d015ef4de92fb8dfed0ee0090bf61d5a3cb178b822dfa39a97c759c919ee1a362fb4cd72f3807a85c2e8e4ca5e85b3be6865ab94a762086ecabec2685af94e2c05856e5b88893c11f5c5af967b966a1c1596daff625ce064bd24fdd915a1efdced2d1bf422485c6a372346e013e9ffaf6e6c42ad8d1157077324f5236cc377feca9b85ebf39c7d849e3640dc56632194a60ea656005debdeb2895e2cc1b85a520e10a2cbeb745020f03eed94277a8f2aed38ef6683c2c51060ca1cab768232ee8ee6e1ca90b7c0394741e2ae6e4daaeef9c71fce023376ae83a9808f31911a9f9c9de0458c5548c1ec87540972be1262fe47deb4c2c8ebc7ef8c4d039f01c5d3687d915960678fd615234d8ced811a7d41d66624ea91e7656c2287a7875fa7781a16e9964357e3845cc9c89ab2bb20419bdc39c371f8413987ace0d903f049c3c197b16ce5dc05edb4753da207ee3c632410a203f805b78a17965a6ea69d510bfe94630a987957618d3736e6d87a98e7fc9660ebb0d36375701d1b68a052e6d4de90c57c2e1ce772dc8845fb879656dbc0df41d471c18474060f18b95fefd636e49f6fd96fda859a6a9f4d994bb05d00597cea39ba182312b90545016a4750ef29a9d07d3094478f16909c2992c4ecbe640260c63fb13997886fa622a3e75aa0a7c0eb917e09c23d170ec0629ce1a01880c9cb7316841a91efeab771456240a1cbe796a177ee6a05e9cdfbd1e845982ccf7f91f745a96b826d3a1adbf8d12039aaf2d0a9bfed6f4e33975ef675a23a2d34fa3e3ecdc9e7658753f766aba3a780fbd62c0e579dfca64759d6e465f752f867980098bc37b3b197ccd5e01693c60d78135d8b33b1e5a499f79f6564c3f78dbc764d85e93b13ee28e7004fd4f3b0c89bca08546c2b58265e55e779ee54104f3a89256cdf378bb1319ef0a0f4d5c35b602f3bc95eaed27a39b5a69450c90ceccdbf9ed2354f3f42be6879623a3a8d4b2d75710c8216825b36ffe558ea6af6bf5c6b575d8e889cbab30cb309ed09c2b65aeaee5462bc35d8cec84bfd86c47b01ae4e17ebef6ae875c6753a811bf634ae292294b6e766a50acfdd7fdfecd48d2edabb4d1a643cfecacf067871541a342612b14922ae06e2b3c34fe88828a3c01901cac1d2dc359bf2f8b4268f879042d6ca1540ca94158ad3ecdb5c6925bd05a6c7da8aeed74365eb33955d76e52acabb76f9f260004b0dc8d4e458c361311007e3de37471d1a1652c7219e26c40b3c12a4a60c91ddccc070b7f182b30bf5344ca4d58d794dad64e0d33e2eeb6a3717d2e6ebf50b48e4243f266f40f88e3038e76b033234cf1639e91093234c31a1d40a8031c9374b8cb1cc79f54f52ddd3228ae18e6021e0e68cf378516886abd13fd55021e8857a75fa7842f9073b9f43e582969bbf6015e6303ce7e782abec5cfb60a11e2786c674045314140e863279f78e2b135c4ece0b795f0f14deea263dc4b6d7ab387eaeabcb155b6b2f0b3540d99929737788d3e89d6a2369728c6f834368daec5c40dc9f73b300b816c37127a8c29f9688574faea77abea34da2cc665fd08d5e7b01dc42484eb92e6645bc7e57993a07f038096ccd7b02efbf5195826abbf9b487f7358c694ae9261814c9fe38700de2e4d95ac43148c3ae572d56b2752f22d0e4e5174a53ab39a92394e2bd2f7f6be683b142fb96bc0bfc4f578b553db1fac98f65e5b4bad3e1b0f88810282f9181ceb7b2735f7bd9b47a4523458d9bbe55eae2cc4c390cea4960cb56dabc20795e758dc7bd05272b163399fc11629f46b1d1641e0fe8616af28e7bd375f948c91f40f05dd505b6c2bc8e7749c0c0c424039c20df655167af5ef56dc9551dfc20222e08c7064a667f210e751c15f8f7338418c8d94509c06b336f66f951eb85f2b6f1d84baac5143a283b3a32baa5d6d2e4344c6fbdf5b876573e8339765994398cdb78df3ddb0d175431a0bb60f1a56a4b83299f3eeb1f90cbeb78e8f4559b6c85bb87642dd07f61fe10b59fa40cd503854dad78efe5981e2320187dea5c583d09adbfbc287c368640962009bfac78a5785d4783fd4fc46aa064c0b1889c5c218f3210ac80fc0682f47fd7bd934d3bd3378d5f947f34cf33cb362e501879d94093e264307ab119df29784b368ef18e06645480d6ace2454e9a572c282d4a4a0a49e405343448d272fd16daac744a04c9fae9773be986d230b70be0541de24ba5b263bd01c5f145e001c77b189a94f24c410ab4833d01c3a979294a1460fa7b8dcf4379ddc07645a752b61a53554c4c2610de789fbfae19294e37c16cabb13301e641821b7b3754c88b3628a9773b106ce4c459268a09f06883843cd6fb398bcfddc20cfd87db5643fa3d78e86b38bd7658e1fb6403a0837f1a15d326c74dcf75990da4fc27966057c271c2e4e34a2de69b85af9bfe70cbefb5a7dcdd871646b3ad689550efcbcac75a60b55533f35856d6172a4539ea46f0a80c94a1bbcbbd48b51c67ba59b17c92e2236384028ea8fc1078c77b7acd5d53894c0c2df4bd71f9ede806c2d2429e504beaaeb77d6bfb45d3d849eae8ee1cb322f59eebd5a4db8598b19beb9a656086aafc2f25e2b9a0a09095300a3ad1db8e40cd1d55d5ba0d51c1cfd27188642dd9dc12265b77ff402c5f346189c621e03735ce898f4d9e166b66003b4ea57670d6b8c681822d6fd5379d0720e86de2e7b3bef8ff7dc7735b329bed8b6071f1891277f8a151cef36d0fe7a59b510647478ab26137c9d4f02a7468312da52a18daacbb54478dcc9d1fb4a9e67d62f1e00cb89545aa393d7783b9c11365ed770c88202056623cce2c809136d708d33c0f5c96b3d248aaaacf5fdd115d7b5816b84c45005eac38ad91cf43966295579ff2cfa0b3faa04ee15bcbb2a9cf35f0f8b0549deaaa55cbda6c63e957356c031296ad3eb50b9c3654da8d8a77e484c9e6ef711033f9b2313910771313f7461b206a982cbdd94d489fbbf93483f4c5aabb54b104068b04ab4763c172a542a57e53cdb3c831083b53a5c10a8a10646895d19893dd4e107afed951681054de3c25d577a728e2981a9e657815889a5b08e5d9b2c2e97a39119a12b9bf9d3d4f70c862349a023cc10d014c4a813d5261835cc74bef9a41cdb58d1620173b52e0d0ec53444229e37cc1f23f009e05f52c02f89a45a898eebeef21744de4687d1b3aeff668740ca45c2c5e7659fb5e5442d48faf935357d32bbab4e26846b8bf0cc27ef89a37665ad38474857c0668513b5fbdedff49911175de83980e416637586b3361c39f0a45c687dce221201152ec865ccfdd5e079f6a60cf29ac3063a2a22abeb42ddf191dc79a6efdf6592d307ab1a0cc9cfd7a4f205d50d647b809ad4a6f407818a73b5113b8f869b85caf5bab0577c1f11efeb2dfc0b9bfa006de625a4f5184ee4cb6d3ecfc4fa2b5d600c2f0c9d78a36fe512511befc570519a51ecb6643b7b54002b7978fe655200b816c0fc1f92d8f0e7614621c84018c76e072b4ea497ea7832568ca5c022b2c8c7d3b8d2e7563c41afaef65feee6115373c0d15146fdb81f96790ed3cb695cf807f56097cace0807aec0546aefb52e469e303ef93dad7f61d05b80af48ea50dddaee9ecb2ec97d346f2baa1615112a530b04fce9e519dfab7dfd7bcae1cfa1cc7037a9c46e240e9e3c060a802560962b256e85ac0c26c2c7311dae8150b9f898942c11dfa40760072e077ca0048ffcc3aef90c5d151929c3db074ef6e3faba1fa62d9e23a67f0cdb692e5a6df9265cda2b4e5c8af180e6e30d3094f1614934c2b7ec2e7243641f6fe7fb0861e35601ac8e9f8080ce9412262bb2a725a5db8503a9c99e475219768ba478dbb43d64a1792b0c4128e15c6e0583f7f50b6c1460b178745da4abce21284d136e3c93653943de15b78b203ed0aecfd920a036367779dd29715fbee219e6a73a0a2874e70556dbdcec7d2dee07b82b7ad1248fa45d322bc45874c5b26c6915ed36d970aafbc482f8ebad90530d9fd2a6f7c94a051b0ab25dc51c738974692a69dc6dd226ade85451fb58c3c4bb4f6881d8d0679b004c00799bcea6f55bf83473c959cf773e541494f839cf3dbae66ccb3fc3e85c406358b2aef83bf51dc2d4e255372074ded0832bb45169c2b90d7fc586d82c1b485def4a06b247ff66c76d03e691e40c1c4afcd20eca5d86321101c474af51b2cb947f964a9a8d8863e9db1dc88c230a5705ae8e70824ee3a3fa40b5a46b4ad8fa7c6ee5bc9894f07e4de0a1f400975624de979e2942ccfaa2ec858be32326cec2a94ffd1254f3d39ec5c120f50065b69801cbc9dfd58b2a362a0210b2f89dd6e7bd6d9cc90c0ff6eeef29719ca974987bcb494702fd0ca02a9ecfa292f70c3363b3983bdbd2f3dca4bd3ed8f6e6af6b688edb83bf1c0a3b990ad2393da7d72f2ea5edb4e9b616dbcc5a1fbcfcb88595d19e8c4f72d97c26673c53c523124410450932b36016f33c721a1216e154d502bf5b6845ac94020ba08bb050ad46f6d2315f082cf012856850e5038a45bc38b2467dcc74f612d91ab6a7d51b85374beca4b0670ea1b2d1cd8d50188e64793f5e866a9d7bf36fa3a74c3ef12a04ac86dd29fd334ca227014bbf1d189b139d9197a325bacb60be197be37b8e75a36559cc18dcbab6106ca6dc5a9ae78dedc689286b5138c07dd0f915f9ba7878469aebfaba41db5a0131ff01b5da92edd4e06d3f4012c9beb5ba586dfc62e72e7d08bde549e44f96fbbecb2dc877b22ddf366c458731c95fc70c01d47b74965f793d1d26d535b84ce37dfe24124034dc51b28edc85fa82ca2207a41e83f7c4e0e18c5ce2d80d52d4b4388bd88f8d198aaea3bd3fd4c8022e51006a00cc54c109d03b69e01d61b93d52201d7664dae59cbe8f7da4ca85b0f385c3e730b7c976dc5abd57490e46e76843ad083502eb1bae6544be7a30c9455f3870f09ca3fa2b58424cd58fb1df2d4c642f54b17a21214651252165bdbd18e79e1be9ba592ee29f734fb8d9f5927fc17db8ad8043408f65078761660715aec9806df2e8ed5c5f5c3d3f8954cceae7836afb695cffd4d8410469a5330068c04bec4015a2fc068047491fb967abbef876475aaac6bbdd14db2f146ee2b3d18268e9b8a97e1a5df39550f5f52eeec73eeba4badfa09a4c958b6feee3b528910f98226e98244e2460e7d4ef997699e3975bc6220e830dad69618a6614d8be114465d1c0e8b6775f2fbc81aae720f37d03ddf154dd0ece0b2dc7e08f96c27ee8f578596c5bb6813704233485be9c4aa84aaab99c9fb39ac78", @generic="04338d79a965a31bfc37f6166b04eb0a9550383737cb5663bbd62a6b6111cad275f84db2a24c9d0762af54d2a71de9d580752b4c5ea18fa23844aaf5ca9285bbc01ff47c20765d456c35428285c0", @generic="416167e14507c622b804905dab3c56c8e0fbf5a56dae31ea2a59be0fedced8b46df2033a57262fd9bc4c00491a3e4eab76c8d567a69346", @typed={0x14, 0x2f, @ipv6=@mcast2}]}, @typed={0x8, 0x1c, @uid=r7}, @generic="0ca21605e0ee10245d8422ed98953a24d061e9ffaf5e4cbe67a485b6ebcfdb83014aceea12e297cfee2fde06e62bccccaea03294883546a96f50da67c083735d8e647806e06b61365e5c3623486dd726cb25dbb23ab6fb877efe1d32b363a7f4a82cd9852fc8ae15ee27de939cb8591ddb5d03c79b777cfe15817176cf6946776e9edfc8fc032c7306e0afcc1e865c96fdcd1544c04163903e5a2f510362f2a4b12ec8bd64f43d6c1595adda4df6bcd5", @typed={0x8, 0x5f, @pid=r8}, @typed={0x8, 0x8b, @pid=r9}]}, 0x4594}, {&(0x7f0000005900)={0x1c8, 0x37, 0x100, 0x70bd29, 0x25dfdbfc, "", [@nested={0x1b8, 0x12, [@generic="3b945db7eda06c74fd740efc46c549f385b5581b9ca8881d9e9a7a0e55bd80acffafad92b0f403f66a1e8ce1af8ff21beddf4e82", @typed={0x8, 0x2, @pid=r11}, @generic="8378e7bde9267adf8557f3a0c282e29389eb0e0c8d104c142ee04ba813c7aa0510b6b740fa22c3772f9c9aedca6df63832282ef0a74e53fa060eed98655ec0cb0e335947dc6d465fbc62c97476a2310730c7c84ef138a79bde438dbdcaadc796c0ad65bfd3cff82977abe5e51184c1133988edfa5859b90fb44502fc76a03a66741253d2d57589bd4980961a5ca6662056712875741acdaffc0f58cfc6ef662fc3ed53619423ad65bbdb3b80555b1ceb49a3c58c2882b1c13759ee4ee45a2328e215adb86b19d1031449caaaf1dbc49a2d4ecb48460f6331d361cee3720f2eb0e5a8e3f27962ac30073cb50ea7de7d24c327dc213fad", @typed={0x70, 0xc, @binary="31ec649f506165f86b9d308089989a7ec8acf94bd763a7448c35fca7b2f573eabd6bdaceb4b8b3963677ef4aac4fdfa1ca2392f1b2a60ea38019973aa5d965bdb625edf7c24ae176ae1cd9bb4f2f873a39b33ea3a5bcf28512e14dc9fc2d0b790204ecc0259afb7540"}, @typed={0x8, 0x5a, @uid=r12}, @typed={0x8, 0x65, @pid=r13}]}]}, 0x1c8}, {&(0x7f00000074c0)=ANY=[@ANYBLOB="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"], 0x2b8}, {&(0x7f0000005e00)={0x1438, 0x1a, 0x10, 0x70bd2c, 0x25dfdbff, "", [@nested={0x98, 0x17, [@generic="7afec9febd458fbf7e3bf1da785e06d06fa9f04ebaaa72ca2b3ecff239f87c128abecd2ac00e12f373b62890abcd1094d189f4284de0d5135e928bca27111efb", @typed={0x8, 0x53, @u32=0x4}, @generic="8ece988dfca5cf71d8cefb772b772f244f7d2e003f62c8932d6363480bcbb3818d68abc3624d29ab7a77189429c661091a39bcd8caa9fe58ba235d68d61bccf9d401231d904da80017481b"]}, @generic="833a48f50906d78d44096aea09d4c052b4b1baf2eaff8080", @generic="dd91f4ebf13562d17865dcb067cf400c7457ba423a9a54173348dc76186556681fc19a8af76ca2d4af58292a9d26b76a21381ddbe2de6562ef0e3363ca2c96206266b4d2d08520e49d1b7e5f11910f1cf04cc44bf0d96dad6bcd337ca9c0f4a930c7a69868d2060a1d74c233fa51", @nested={0x1238, 0x46, [@generic="09f3054a89cb398820138db0164e72251044c6324cdaf05bd0c8e7bb1c9ba3e0a1fa5680bd54be1e8e26a020d3a80febb9d7a0bae78f7c110f7a6d91e66c14a57a8e74e9621adc0702ca5e96049bed6f9c6dead5178c6611edfcc8cd3e6595693db8dcae2e52ca20e25cda3bb4e240a8bcda9e4f1f30d8dbd199075b77e2c7a87697fb3a42fc3b2e66e46c940ee66b0c1f31ac4bc33ebbdacda61168b1c8f447cdcffb892b8437886f4e9083b067e001f7001b728ca87eed2d1743895a1e672fb35d642a519674499c3d7b838d9ef01ccf99c5b88af3e80a45a8a7e95a59a601c39ea75bc5df5a9ddbc583471a5d9491546f9fe0a12c51b1845316cce1bb82cc734db8179e4e2fc00e9f74f350b6946f2f5c0fe7c72da6c80357ae49107d53784d68ce99edfcd21255d10528361a65a29de78916fff9469997ed2c71907d995da6644a6ae5255f6f4b08f7801ca53a3e6589a0675c18426cb2d0dbf2678e8f16bc7c42fd33a9183038fe1bc34ef79b341f923ab433cb8a9edb34a7680a4d703d4d8c4b761d1aa7035200be56d9a5e3060b3f2a299ea54547f91965f9fdb9a9ce5a49dd27c3dbd2e4a12faf2ba26ea1bff1cc27b6ad89ed0ea43b486485d485714e9f0132bba8081006b0528c7e64243fbcf867cf145b6b359c50ef3575789e709cf90a33951ce7d4fb7b0a7961c035576992deb4d01c9a9cd7761a9a7a633a0ba9b9c5070063c7dba8f1f5ea7b39e4ac699a042238d76b0ba3ec05d7e25fe9f73a5cf22f492ee17999897892e72cfbb28ade78eb8a39c01d032f3eb293034ee14b5edb3347c69fde0169f3378e043fcc58f70ede9ceba90d53a2ac791477a543316bd32a3396a163804080f140dab4a05b83ae8fd82405e9f820ba375ff2d83d2e7613f808f2ea19c47b557b1119392914ee463306992cb77ec091a4c3ed4a5e947f288d437aac471258b06995ea28453b441ef4b429ecc0e069fcee9137d7de77ce7a560977aad06a7e77fc47c57c424cecee21629383d9a90d0cc96f450c9bd6b833a9cb4f89d11909e4fd1be184bda24945ce7250f7b57a0de3bc4256080326641c0a3907a509eb68f9cb025b65310cc42c52b07f51f5f3ec7b5009e369980acec456b9ad2107481e6f9375d37bb99000147d22323827214173d3eb8d2dbf51313a3ecbe4d79ce3867659102894a250ea3e7d5f987724321836d4f311d0b31a110fad2cccabb8adc896fd30a8e6d59f41529b57da5fa5bb2f89906e94520108291d9b8baa365bbafd48f051c4947624b88c12f14f8b8107f1ede5f8ab77df8e5e582c59650977c07540ad4afd2cb0e735e785a686e75f17ed4b17f72400e5c27e42529ecc5a25bffc2c4be62c6bf670b282ad219315850411e7824ab702cace98630b3c0a97d6da6764e56e524b18da01e1d14e119783eb7e03e1b6c5b0de07807008a9453598e42a39852ae316f9cf4e1ac99426154a4533cc7f9f87cdb4d00ef7e7fab98f57a54679f9b42d222691719dd8b124e2be583754e50b134418b39b33a99a0a0634a22cbbd59421e496522fe60a5a6581ae12fe20f1bc4a343e5c16f23ee0277420162803b20ed7be3a4d1e33478598d74ea4b29f785d199f213192709cc93853f82f33c170bd6a47dde08115a7d54cc83a8af9b0dcf3a0a5e0d400ebd3d9912e8debfa297be93877d0d79d3df51803735c1a6def5424ef415e1bba5f1a1c48ea679f98de8cf1abc45c68700d1a77a4b5524579338b3ebe699a6c84aa8ba00badda01598df99c83e117b915cb69a568c215966b0c27d3b9b1e097038f254bfb59a9db9be898ccde0beb222675243296061602e119cabd02c28dc74aa523413ef780c9bd3014451cca1aa0bf2f597a7e933865b20fe83fc0c9f9dec41a69283af5fcc73c3570c790d1e661f969a6fa91bf814286e9fd2c9c240bfb6e3a1f12006f6c160cc9224d227c40038868a3bd311c680c91780d957870c8091274edf5a69f206d1446144bd8d33021450f93ce02607539a307adfeea2a980e1abfe08cace8abc00153c0058842f6ca127d4b6c51b660a621cf1c8cbaeb91e1e64a6ac1c3bb2025b06b1ffc0bc4e19f6d55b6f57beea69628284d2044adcd85850c99c5aeff70508e698550d2358e53f9979cda2c8db4ccee3e85a413626f75114224cfaee0828bd6195625ff6998157f8835ab325a719727b2e0bdcdc3cd6a657914f18cbbc5122f2cfff729f833404af8c6b757c3fb92b03f7acc47e798b204cb6b6411546da0c9987e3b8bd8a4fbbf95697ac0bee17bca1eeb36776ed867d10213ec2f2aa3ac7b0c13e14296f45a1637ce45274bb5a0e38b69aa1ad64d4ffa70635c4c89c1ae858b2c3bb89f013aa6ea2512d864f758c1fa512890f087cc55efaa9dd53602a2f4789bcfe2817cc8f4241a460d5afaa9e0f20f0b39c69f0cbd515e72e072cc88aad4def34af539b0152ecf02991260d3c429c8399c2df5730f091fef48731dda5898e5b867218d4e9b2de1e58de88a6a016b5d25f5b2098e3fcd712e08b978aff56928bd1ce4390cb3075a27420bfaf07a2a3e46665e8453749aa57d969afa0976b3a48c81292c3e787ff0b8a7df013e45bb6abe60c465b7ebd598d26531c4541faadbfead5fa0ae7d6e70d42627ead9adf16b38ec6b70a78ae4e164d46a997c6362ebc9416391ffdcf634a9f2452c85c545ca16a3d05e3eff3a780c3ca81472d0f8d0857434770c7e54eae2f085ee74be6ecaed04b17dc5550f136008d42b348d32c1e1f976528035fbe93b5d5778898bf2a438f4ee7ceb0214361ab57a710673033f31877ac92875600f908e497f5d01b769576413fe4b25022376a2b9807519d975a10dcc4e3b83a3d8214fbeadc0e10696d0e30030a80e7bb98dce39a88bbdc270e568ec7d1c0b8a39c2e469609a7f11f6e2a9aec520571dc81ee36230aa5b9a274a0a47fdf2a92b8f206b3d302232c4d3e93a4fafb24a11459eb7172f90a7ca0b3df3ef175f4e87afc46019feb293a54eef611cd4b2f0a23d1fb4a9b2c1f204166ba18481f030c09014bf4501c02f441fb88d0fcdf678f0e7c165b7575cb1c53cf30ed610a836c6f1cfcf383ac5b24bc4186d0de77bd7eab8fc365d26b70c3da956c5a8ac3d5bbe8ad31ee94ff65378683950d2de248249e719660103f3959fd3e7cfe8489323d0595e666b1a5592dcad5a08d4c9c498d9bd5c1950f705e92df221f6654ea4364b15fbda9a11426f6b0105929499a32b2d41ae585260a2397dd5795260c825cd28c2c6e8c9e3897dcdcda9ac07f83b6e6afd1a34b0f20b6e5d0541d7e25edb4e272061314336f4d323d3c47700bb0dfcc81ad894891789bb187c3b0bc89e4adf2bf7d386428230fb04f001f0fd7d572cbfb6b87ed9c8f41cbb626ad39b2988b94bca7f2aae992dec314a7cc926d8f68ad53d27aeb94e7774d4d1a1e2ba4e457668a88ea067f59d171c839db7748efb7dcf995601938d596f8e4971770dbb64e948bedf232137d4a8787596c2365037213c225e3db865b3593e42aa9ce2d1ba1ab7f3da5e9386c9395fb577b72d2747cd9cdc96077addea4d6362228f7fe1481882bbade108c4b673b31af7d3732ba3b449ac1dcf06cf9e74314cfa7ce414ce9f14699e05d1dbec94deb5c968cf4bca39034378415ad0578cbdff5524762f6e9c7dfa8b63b40ef3c3d8b46a55d52d84de719dc31bb1b84fcd49c4e091c63c3eb0d4ea6a96424af98f52e9603b3c70acc699b9c50d2ecd3ff36cea59ed6d1989e266829a22df734806139e0c1899bb81a5826aade25a59f5c7147b55c4c719812219f6a964dfdc803c48bd0bf1916d9856bb0660a6d0f89d68225a768ccfd3dc832d93f970004620febd7daa8e4cc0ac0726677288d6e32ad8bfe4171b442681f7b250e1a33f7995f879f7d0ba69d949ab01785991b6ef388e7653c44dc8d65e0ebf6caccf41408f35117bcf2f76fab932d17ff20b08bfd1f31d0ae0a080b086613f1dca061ffc2217dd6a9dcd5a089717872ed0a009c5718c68c584b2b1626f9b9362a9e35baf62333a18072aed3ac74759d913dc5bb9f720b6faabd0a37a64cff36c775d2cf328bacf4e56742a69676cf28242bcf7e4837664cc3bc003623dd5885fa28ef0b74b0cc0169661e6a988f3df80b74b14eae2a50b5576ef777409a8c6e49bf0184f2d189ad8f2567fd415493cf18a337c689899b983c9d390dc4dc44e8f8da22801f4a258244a730926009c3ae611d239f463dc61275145b8d47af7d1a692212203cf5b233bae3ef33ab05635dafe9bf2b7ed69c91bd98a08af4fb2548f19c08753065511130b39dbc4532da7166e405c9baf1e7f83f3ddeadbe301f1b0a21342dc684969b3cd17f0b7d2c3849d5b836cd355605987067f9e14224f0b618d6326d2fed142df7db2daf82f0b772a6924c046fdc5965da8860b36524a0307bb1ba0112cab3badcd1efb462fae7b103c7e2cca675907caca3b89f9097cd690871397e479612b2e350a0cce9b411800a1fc5f4844090b163a0c91554505ed6be46b5a08adbb5a76aa4c1dfb527b4689ff4da9671d76dd7b69b893be85ea33a688cd7d75f7eb8219bf05433ca2e67e139cbb7067f4608cb112b88d9208661fd508f04681fa767a6d40eb00397afc617f88ed7a17cbe3d679007557745cca4ddf3fde7773f33627d50c6af8a1060bb9b435e9b924bb29af88a0da0db84881c1a0866e867d996d9b29113f9e96e30a69633879f76cb5272e80ce113d71ae851366419bfc01ccce5829417058e8c024c764f343525e617424072d45883906ef7824f9ab64507c0f41658c1f80c56823c9f513c3db72054ab61c4d4ecf82a86ecb46175c7a4fe144c4a4972443211190aaa63090d80971e127b0e1e66d7b692fa3c2e3fcacc17b7f2113402847589d9fde01473f24522864b505464ec681ca45e8bee72b40d122ecc434f09422fa2b776c766380b101eb5cb7bdd9c36881122b4520a28d73bc74b5762312f8611586e8e7d6201ddb292706cbf15cb75f0ae241e1fd6fa03da83066bcc9d080496dbd99bcd712bb460f0cacb9f0a89c464565549a46575eebadc7144df9fca9010e558267d272c062e95afb95ed6eca14188eb5b0fc845b7dc6c8d863dcbfc24beec8e45f12013452ea6a95e931b44a20a89a14b4e1247a9759b472882f400809dc66ae05e6645646136efb92344377fb64c759d46c09569f44bb6efd83333d05a2452c0c27c98330d0b03bcccb24353966701cf237095763d6dab3c0a462bcdf9c87e15a0de6a443aa8712ddca994c5e9aa3a0a79a1de85151fe641183244295f62f4656253c13f6a82b29b68f6f7a8d2c770108f489fb642a62178bedc8e59103c22a2be71d01d5b8c57fcbb030a34ea61b7353cc427b2589e4827c763d7ab2b28528cae04a19085a1e0de12682633ece57f14045a48f303dfa8ec579f6ecd9e92be4683602c8c5df0d54c65fb18a3c0a75745770c3b8425d60d569d5d86f038f14f03438e9ff7248a99e5263521636a8b915c39ef078a74520926af69baceb27b453c9eacbde9e528263fb280a4ec1515d274e8b55ebd4e0810a25a474e10ede6e30bd0de600c3546ceaefcc9471afb42859924ec2c685fc9f08650e3c7d1dfa8b3880e57b5cb6c44bfebbede9eaf5e68cff0554b94af5bfb9c97769e91a11c7bd6d96ba5df95a579bb4805ed1f4c53d64fa8c6e81b663d8edefcd4db4b39b9ebd21a838856204d50b89c76cd33560fb3366ed0fe3c9c35138e7920bd977fceb", @typed={0x8, 0x24, @pid=r14}, @generic="ea2a47e342d2baa45e6a46c367a3c556901c9ab24b9f3c5e6deb1471040ac3758439958477d85813a0c2f25c4a788d9ee269632cc6c68c387ae5d0f6eda4d927a8a2ae666723e39c83f44176edd55a3788b3f2da831393e2f1517b4e9a2148b68b6666cf5df7d10b5c16d3c5fac14cb7d52edb16f8936e89f99c931f2d426863c78b2dcfc6ae8ee05f77", @generic="938214b0f091893919585c25b80e3f19a55f12b56a37d32dfcf6f3c65c9491e66aaaff5e63bb4bfdbbe1e57ed82191daa010fd3d16c59938b49cd7970b69712255f2b1871314babaf283ee190cbaaf59b190e939de89cc2e2928b2d2e8dc8d74d3b326734b6315b12c583711", @generic="9492835db8ccb2fe1eac055af92ac34e9222c603331553fe73b14c48d1d56c4eb8f19e2981f334259f1384ce6230164058220c992e49b96034a87ca6b9bb3646298df3b327c6ebdfa203403feaff0e9bd637bde181c6b0908ce986226adbe682bb92658b748342b8547aff6ccc1c35e3859ce90e9699ba2c2f0e820e15d18a2b36be7a8e15350344ebd00372180e8cc7581742daab7129803318c4c588198d5c275d0c295ad182fc7fd5c64483da0cd729e483fe6437ce32fb384ab8442384e21d3b557edfdf6ee0f0729cefc3ed09de9fc0a1d352a900b465cc254c8cbf64fcbfe41c77ad261b79c8f66fa1", @generic="3b95d40d46ad84dc44ba17131e985ee7e2e12d1ea8e62d14db7f9b4669ffcf0e22a7f18bdeb55381335defa1ca985e254fbd14d929dc2104214c2764e8e68ef714873d53", @typed={0x4, 0x5c}]}, @generic="ea66314c6c0d207991ffb6abe135f4c101156174a268073bbbe26df44ee3c2a70cc9aaf262468ee58cb19e4d2680e8f6a70f358d5790d96d58e08e3aee49116e472b1d3105882122d1082ed5a3c35d5cf77861ca0a78097d58e9047a6c313eea7d5ad791a317b448b9ca8f7a31819494dd4cac061012b8b795ff28a6f8729a0e64cb072b2acd43a6cf18e97ea369f32aadbaf666745ffb968c570c36210723685f7f79c762f4ad84c42547d18f41f9cd673faf54932152955af6e45ee0f5e6c3b1e5580a40b10ada7a2defce4c8c2c7d"]}, 0x1438}], 0x8, 0x0, 0x0, 0x40}, 0x8000) ioprio_set$uid(0x3, 0x0, 0x0) [ 2321.482950] binder: undelivered TRANSACTION_ERROR: 29189 [ 2321.554315] ================================================================== [ 2321.561817] BUG: KASAN: use-after-free in ipv4_conntrack_defrag+0x2ae/0x2f0 [ 2321.568971] Write of size 4 at addr ffff88019ce20588 by task syz-executor5/30346 [ 2321.576491] [ 2321.578118] CPU: 0 PID: 30346 Comm: syz-executor5 Not tainted 4.9.154+ #21 [ 2321.585120] ffff88018f917658 ffffffff81b47411 0000000000000001 ffffea0006738800 [ 2321.593190] ffff88019ce20588 0000000000000004 ffffffff826028fe ffff88018f917690 [ 2321.601264] ffffffff81502615 0000000000000001 ffff88019ce20588 ffff88019ce20588 [ 2321.609345] Call Trace: [ 2321.611924] [] dump_stack+0xc1/0x120 [ 2321.617284] [] ? ipv4_conntrack_defrag+0x2ae/0x2f0 [ 2321.623859] [] print_address_description+0x6f/0x238 [ 2321.630532] [] ? ipv4_conntrack_defrag+0x2ae/0x2f0 [ 2321.637106] [] kasan_report.cold+0x8c/0x2ba [ 2321.643079] [] ? nf_defrag_ipv4_enable+0x10/0x10 [ 2321.649497] [] __asan_report_store4_noabort+0x17/0x20 [ 2321.656330] [] ipv4_conntrack_defrag+0x2ae/0x2f0 [ 2321.662733] [] nf_iterate+0x12e/0x310 [ 2321.668199] [] nf_hook_slow+0x114/0x1f0 [ 2321.673817] [] ? nf_iterate+0x310/0x310 [ 2321.679432] [] raw_sendmsg+0x1ccc/0x23e0 [ 2321.685154] [] ? raw_sendmsg+0x1851/0x23e0 [ 2321.691036] [] ? avc_has_perm+0x164/0x3a0 [ 2321.696833] [] ? compat_raw_setsockopt+0xd0/0xd0 [ 2321.703235] [] ? __lock_acquire+0x5e5/0x4350 [ 2321.709304] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 2321.716051] [] ? check_preemption_disabled+0x3c/0x200 [ 2321.723057] [] ? trace_hardirqs_on_caller+0x542/0x5a0 [ 2321.730023] [] ? ip4_datagram_release_cb+0x970/0x970 [ 2321.736776] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 2321.744308] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 2321.751058] [] ? check_preemption_disabled+0x3c/0x200 [ 2321.757892] [] ? check_preemption_disabled+0x3c/0x200 [ 2321.764730] [] ? check_preemption_disabled+0x3c/0x200 [ 2321.771561] [] ? inet_sendmsg+0x143/0x4d0 [ 2321.777358] [] inet_sendmsg+0x202/0x4d0 [ 2321.783087] [] ? inet_sendmsg+0x76/0x4d0 [ 2321.788790] [] ? inet_recvmsg+0x4d0/0x4d0 [ 2321.794584] [] sock_sendmsg+0xbe/0x110 [ 2321.800115] [] sock_write_iter+0x235/0x3d0 [ 2321.805994] [] ? sock_sendmsg+0x110/0x110 [ 2321.811797] [] ? iov_iter_init+0xaf/0x1d0 [ 2321.817599] [] __vfs_write+0x3c1/0x560 [ 2321.823151] [] ? bpf_fd_pass+0x270/0x270 [ 2321.828866] [] ? __vfs_read+0x550/0x550 [ 2321.834484] [] ? selinux_file_permission+0x85/0x470 [ 2321.841141] [] ? security_file_permission+0x8f/0x1f0 [ 2321.847880] [] ? rw_verify_area+0xea/0x2b0 [ 2321.853753] [] vfs_write+0x185/0x520 [ 2321.859112] [] SyS_write+0xdc/0x1c0 [ 2321.864380] [] ? SyS_read+0x1c0/0x1c0 [ 2321.869822] [] ? do_syscall_64+0x4a/0x570 [ 2321.875615] [] ? SyS_read+0x1c0/0x1c0 [ 2321.881053] [] do_syscall_64+0x1ad/0x570 [ 2321.886758] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 2321.893672] [ 2321.895398] Allocated by task 30346: [ 2321.899113] save_stack_trace+0x16/0x20 [ 2321.903077] kasan_kmalloc.part.0+0x62/0xf0 [ 2321.907394] kasan_kmalloc+0xb7/0xd0 [ 2321.911097] kasan_slab_alloc+0xf/0x20 [ 2321.914976] kmem_cache_alloc+0xd5/0x2b0 [ 2321.919035] __alloc_skb+0xe7/0x5e0 [ 2321.922674] alloc_skb_with_frags+0xb0/0x4f0 [ 2321.927075] sock_alloc_send_pskb+0x5ec/0x760 [ 2321.931559] sock_alloc_send_skb+0x32/0x40 [ 2321.935780] raw_sendmsg+0x10ed/0x23e0 [ 2321.939675] inet_sendmsg+0x202/0x4d0 [ 2321.943460] sock_sendmsg+0xbe/0x110 [ 2321.947174] sock_write_iter+0x235/0x3d0 [ 2321.951228] __vfs_write+0x3c1/0x560 [ 2321.954933] vfs_write+0x185/0x520 [ 2321.958459] SyS_write+0xdc/0x1c0 [ 2321.961902] do_syscall_64+0x1ad/0x570 [ 2321.965777] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 2321.970864] [ 2321.972483] Freed by task 30346: [ 2321.975843] save_stack_trace+0x16/0x20 [ 2321.979808] kasan_slab_free+0xb0/0x190 [ 2321.983777] kmem_cache_free+0xbe/0x310 [ 2321.987743] kfree_skbmem+0x9f/0x100 [ 2321.991447] kfree_skb+0xd4/0x350 [ 2321.994969] ip_defrag+0x620/0x3bc0 [ 2321.998593] ipv4_conntrack_defrag+0x1b4/0x2f0 03:56:29 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee0e100f9ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b3a0046e7080008009a1c79f727a46e007ab1b89b86be"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x5b, 0x0, 0xf, "af3f7a2b81b46757002e54bacde9b4f0", "864867312122e3b7205878b3a79595e7bc0e50777159d0601ef9f0caf82bdf159d513aa0b3bf2b60fd9d6099d79d60c2f3369d567f2774d2deaa7180a8aff3e03030c1e83617"}, 0x5b, 0x1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x5) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 2322.003167] nf_iterate+0x12e/0x310 [ 2322.006787] nf_hook_slow+0x114/0x1f0 [ 2322.010581] raw_sendmsg+0x1ccc/0x23e0 [ 2322.014463] inet_sendmsg+0x202/0x4d0 [ 2322.018260] sock_sendmsg+0xbe/0x110 [ 2322.021966] sock_write_iter+0x235/0x3d0 [ 2322.026025] __vfs_write+0x3c1/0x560 [ 2322.029730] vfs_write+0x185/0x520 [ 2322.033264] SyS_write+0xdc/0x1c0 [ 2322.036704] do_syscall_64+0x1ad/0x570 [ 2322.040580] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 2322.045665] [ 2322.047283] The buggy address belongs to the object at ffff88019ce20500 [ 2322.047283] which belongs to the cache skbuff_head_cache of size 224 [ 2322.060451] The buggy address is located 136 bytes inside of [ 2322.060451] 224-byte region [ffff88019ce20500, ffff88019ce205e0) [ 2322.072326] The buggy address belongs to the page: [ 2322.077252] page:ffffea0006738800 count:1 mapcount:0 mapping: (null) index:0x0 [ 2322.085518] flags: 0x4000000000000080(slab) [ 2322.089822] page dumped because: kasan: bad access detected [ 2322.095531] [ 2322.097158] Memory state around the buggy address: [ 2322.102079] ffff88019ce20480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 2322.109517] ffff88019ce20500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2322.116865] >ffff88019ce20580: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 2322.124209] ^ [ 2322.127826] ffff88019ce20600: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 2322.135187] ffff88019ce20680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2322.142529] ================================================================== [ 2322.149874] Disabling lock debugging due to kernel taint [ 2322.157188] Kernel panic - not syncing: panic_on_warn set ... [ 2322.157188] [ 2322.164565] CPU: 0 PID: 30346 Comm: syz-executor5 Tainted: G B 4.9.154+ #21 [ 2322.172782] ffff88018f917598 ffffffff81b47411 ffff88018f917600 ffffffff82e439da [ 2322.180855] 00000000ffffffff 0000000000000000 ffffffff826028fe ffff88018f917678 [ 2322.188920] ffffffff813f725a 0000000041b58ab3 ffffffff82e35b02 ffffffff813f7081 [ 2322.196962] Call Trace: [ 2322.199544] [] dump_stack+0xc1/0x120 [ 2322.204905] [] ? ipv4_conntrack_defrag+0x2ae/0x2f0 [ 2322.211473] [] panic+0x1d9/0x3bd [ 2322.216497] [] ? add_taint.cold+0x16/0x16 [ 2322.222288] [] ? preempt_schedule_common+0x4f/0xe0 [ 2322.228864] [] ? ipv4_conntrack_defrag+0x2ae/0x2f0 [ 2322.235439] [] ? preempt_schedule+0x26/0x30 [ 2322.241410] [] ? ___preempt_schedule+0x16/0x18 [ 2322.247645] [] kasan_end_report+0x47/0x4f [ 2322.253439] [] kasan_report.cold+0xa9/0x2ba [ 2322.259406] [] ? nf_defrag_ipv4_enable+0x10/0x10 [ 2322.265805] [] __asan_report_store4_noabort+0x17/0x20 [ 2322.272647] [] ipv4_conntrack_defrag+0x2ae/0x2f0 [ 2322.279048] [] nf_iterate+0x12e/0x310 [ 2322.284498] [] nf_hook_slow+0x114/0x1f0 [ 2322.290118] [] ? nf_iterate+0x310/0x310 [ 2322.295736] [] raw_sendmsg+0x1ccc/0x23e0 [ 2322.301437] [] ? raw_sendmsg+0x1851/0x23e0 [ 2322.307327] [] ? avc_has_perm+0x164/0x3a0 [ 2322.313119] [] ? compat_raw_setsockopt+0xd0/0xd0 [ 2322.319514] [] ? __lock_acquire+0x5e5/0x4350 [ 2322.325563] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 2322.332304] [] ? check_preemption_disabled+0x3c/0x200 [ 2322.339141] [] ? trace_hardirqs_on_caller+0x542/0x5a0 [ 2322.345998] [] ? ip4_datagram_release_cb+0x970/0x970 [ 2322.352751] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 2322.360369] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 2322.367119] [] ? check_preemption_disabled+0x3c/0x200 [ 2322.373963] [] ? check_preemption_disabled+0x3c/0x200 [ 2322.380798] [] ? check_preemption_disabled+0x3c/0x200 [ 2322.387638] [] ? inet_sendmsg+0x143/0x4d0 [ 2322.393425] [] inet_sendmsg+0x202/0x4d0 [ 2322.399040] [] ? inet_sendmsg+0x76/0x4d0 [ 2322.404742] [] ? inet_recvmsg+0x4d0/0x4d0 [ 2322.410634] [] sock_sendmsg+0xbe/0x110 [ 2322.416696] [] sock_write_iter+0x235/0x3d0 [ 2322.422570] [] ? sock_sendmsg+0x110/0x110 [ 2322.428361] [] ? iov_iter_init+0xaf/0x1d0 [ 2322.434153] [] __vfs_write+0x3c1/0x560 [ 2322.439682] [] ? bpf_fd_pass+0x270/0x270 [ 2322.445385] [] ? __vfs_read+0x550/0x550 [ 2322.450999] [] ? selinux_file_permission+0x85/0x470 [ 2322.457658] [] ? security_file_permission+0x8f/0x1f0 [ 2322.464493] [] ? rw_verify_area+0xea/0x2b0 [ 2322.470371] [] vfs_write+0x185/0x520 [ 2322.475723] [] SyS_write+0xdc/0x1c0 [ 2322.480989] [] ? SyS_read+0x1c0/0x1c0 [ 2322.486427] [] ? do_syscall_64+0x4a/0x570 [ 2322.492209] [] ? SyS_read+0x1c0/0x1c0 [ 2322.497649] [] do_syscall_64+0x1ad/0x570 [ 2322.503351] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 2322.510730] Kernel Offset: disabled [ 2322.514342] Rebooting in 86400 seconds..